last executing test programs: 1m39.667625614s ago: executing program 3 (id=10): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) add_key(0x0, 0x0, &(0x7f00000000c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f4365727469666963617465207665", 0x4a, 0xfffffffffffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000006b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006b00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='decodes m'], 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0) write$tun(r0, 0x0, 0x2a) 1m39.402092444s ago: executing program 3 (id=14): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010101, @multicast2, 0x0, "7beb38c70d477344f6f4c8245dc2982336817a0366f7ce622aef8a1828b58306", 0x1, 0x10, 0x1, 0x4ea85437}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) truncate(0x0, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) 1m39.348357249s ago: executing program 3 (id=17): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m39.257967153s ago: executing program 3 (id=20): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000007baff888180800009027fc9ec3738a95afae76fe34bbb232391634980d6dba467019eb07f9af", @ANYRES32, @ANYBLOB="000000000000000018000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) 1m38.328924518s ago: executing program 3 (id=31): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) 1m37.663860274s ago: executing program 3 (id=35): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14008200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x4000840) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 1m37.663737745s ago: executing program 32 (id=35): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14008200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x4000840) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 24.194709277s ago: executing program 4 (id=904): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shmdt(0x0) r0 = io_uring_setup(0x648, &(0x7f0000000340)={0x0, 0x87c62, 0x3201, 0x3, 0x969}) io_uring_enter(r0, 0x0, 0xcb, 0xf, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) 24.092455794s ago: executing program 4 (id=905): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x85) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000003c0)={0x10, 0xfffffffffffffbff, 0x5, 0x9, 0x5f}) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0xb, 0x0, 0xf81b, 0x3, 0x3, 0x2, 0x1ce, 0x40, 0x30e, 0x7b86a350, 0xdbc, 0x38, 0x1, 0x3, 0x6, 0xe6c3}, [{0x1, 0x9, 0x5, 0x2, 0xfffffffffffffffc, 0x200, 0x9e7, 0x100000001}]}, 0x78) 23.979689374s ago: executing program 4 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$eJzs3E1oXNUeAPD/nUyapB+vee/19b3mVU2tYrCY2rTaLgSpKLhQEOtClyEfJTZtpEnBlipTkLqUgntx6daFW3VTiitBcFWXghSKdNNWEEfuzL2TyfTO5Dsh7e8HyZxz750558y55875mLkBPLIG039JPXwzInZHRKn1gMH6w707l8fu37k8FpVq9dTvSe1pd9N4JnuZ2JFFhkoRpU+S+R1NZi9eOjM6PT1xPosfnjv7weHZi5eem+rNtpw4cezokeMvjryw/EIVpJeW6+7AxzP7973+3rU3x8r59jy15nKslcEYLMpKzdNrndgm29UUTspNkW2bkBmWLD3/0+rqrrX/3dEV5Q5HV5ojpfXPHbCeqtVqtaf97kq6v1quzrtSBR4a0bvZOQA2R/5Bn45/87+ijsDDOoy7fbI+AErLfS/7i3iitjEf4HS3jG9za/GeDEbEu5U/vkj/Yp3mIQAAmn13Mu8JtvT/+usrI39euP5y+viPbA2lPyL+GRH/ioh/R8SeiPhPROyNiP9GxP9aXr8rIqod0h9siTfSb8wul26tUVELpf2/l7K1rXs/R9b/W5CB/q5arK/5aRPPZ+/JUHT3TE5NTxzpkMb3r/70Wbt9ef+vN3tM08/7glk+bpVbJujGR+dGV1DUQrevRAyUs/I3+r9JOSJprAQkEbEvIgaan1jp/Lr9TeGpZ7/a34h0Lzyuuf9bXP6aauE6WqeliiWqfhnxTL3+K9EofyxYREwWrE+eHT09cXri3EhjffJwb0z3dUrjhx+vvtVu36Ll/+bXxhpl5rXj357KWtbqpfW/PebrP/L12/ny9ycRSWO9dnb5aVz95dMHxjR51S1e/8Xn/7bknVo4H4N9ODo3d/5IxLbkjQe3j8w/N4+nj+k5nJZ/6GDr+V9Lt3aNy9+J/0dEehI/FhGPR32EmOb9QEQ8GREHO5T/xitPvd9u3xLP/7ruDomsUFr+8VhY/nrNL6j/+fX6doEkuyAU7Oo6c+Dm/YGVlj+t/2O10FC2pfj6lyy4RLTLaf5pl275a9XvHgAAAGwNpYjY2TSXtDNKpeHh+hzQnthemp6ZnTs0OXPh3Hi6L6I/ukuTU9O1+c/6fHB3ks9/9jfFR1riR7N548+7+mrx4bGZ6fFNLTmwo9bmk9JwxI1dTe0/9VvLFHOH7wkDW9UarKMBW1Sn9p924vde28DMABtq6Z//1z9a14wAG66p/bf7Wl9lBd/7ArYA438gs6TLgWsGbH1VbRkeactq/4cW+eUfsKWU4+1GeGl39ez4e1dgC9H/h0fSor/rX1Wg2lO8qzcePDh6O79gV6wsG30FaW1KIO1ZLX5wfi1eTVr5zRuyLX0Fx5zM7pbQ/n4OWT7aphWl5WWspyCtldTp5AreljSr+S1MKudnT+9d85O/mn1Xfq1Pm683pJ0WBTbyKgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+/g4AAP//l8DN3Q==") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 23.523701745s ago: executing program 4 (id=911): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700), 0xfc, 0x4dd, &(0x7f0000001000)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22.586616253s ago: executing program 4 (id=923): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x40, 0x2, 0xfbfffffc, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x600000c4}, 0x40080) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000800)={[{@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@noauto_da_alloc}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47e, &(0x7f0000001340)="$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") ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) socket$inet(0x2, 0x1, 0x0) setns(0xc9, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2a, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 22.430320024s ago: executing program 4 (id=927): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20b0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64', 0xb) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002280)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 22.40736078s ago: executing program 33 (id=927): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20b0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64', 0xb) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002280)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 8.361802967s ago: executing program 0 (id=1085): r0 = socket$inet(0x2, 0xa, 0xf) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet(r0, 0x0, 0x0) 8.240546269s ago: executing program 0 (id=1089): perf_event_open(&(0x7f0000000bc0)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x3d82}, 0x1000, 0x2, 0x1, 0x8, 0x4000000000, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffb}, 0x8, 0x80000000, 0x0, 0x7, 0x6, 0xa6e6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.835793216s ago: executing program 0 (id=1103): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 4.425459259s ago: executing program 0 (id=1114): socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117, 0x0, 0x40000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 3.455287985s ago: executing program 6 (id=1134): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x3) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x9, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) bind$unix(r1, 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 3.365499539s ago: executing program 6 (id=1136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r1, &(0x7f0000000e40)={0x8, {"ace0e6aa42f37706cd5797c96b9364b32a1a7cee34790852c1ad2e4d7cc38bea207cdbfd834f2d3eb9be7c18e7b8a73ad84142bea6df04b7927204ceba2b4b92686b639923868b0d527655fdeb4e2f5dd25231db979a6ead8a29424f9dab295fb76e14a4deb2d66d918ea82f63d9673e6ed7d1b77e1fe501b5717c645785dd4d10f018f354ad9a04840ab7e4019a118a493fd0e5e5a26f3bf6f4f5991007a07dfe5db78c41dcb7509e0a9b907b19890acc0c9e626cadec492382c2020e51ae4be2c941238af607d80c4693ec6d43753c6bf1f95981d89ec7366623e136b18de179d9a25b885e7697647b14939c224a955e39f0d063202d1dcb7d0f664d096bcc8d011fee4d2cad0f6c8a6f94ab72c9ea820c1ef9f50e4d76b7938cc924f392bedb79ef3409bbfe0615be1b6e7ee3ecfa2ebd31e5254b2c7a4d4a39eb7723f2819414765cfacc20cfb79d1fa09a4b9b3571c7a7b00c123093302789b3518e16ff8419dca882edcbbc656bab8184a64509b9c735fdbb63e7330a7b2a577db115f577f68ced730f0f871adaf6e56ea25b020ffc3d8f0103177745ce9c65614a93ad3a2ac26097c0b6077fc472513b476f4a62dd76d1d93f556ac09572ef137ea6c29c93a2b1e5f4fb44af211b49d54cd632463918c19021689a8db27aadff957287c72c011ee7a8144cb80b6e623e6737dd73e962387609fd7ba8949f865e4bfaad09ef5086e5f1443ca058f9beb3b938c9dfe5cdf0cdafa8eb3da0b7d09b986992c2ea0244348602ae2642bef15d820bcbd0cdb7d8a254357d1623d0d73416ee9396ca5dc775b2426e7b29a00d6677db10d3e18e504542560e0bf432699edea748165872e9a48418feebc7f0f446b6414019000711218a408d6994b927450f91668695c5b84ce8a2a1f28793120f24eced36bab433cc77c6a1fa1fa8b010ba34c46e739560158c106aed9acc87b391a865006b0659fb066d4131c11410fc64a627b876815583b0ace7f868c5d5c87abc14996d4b20d0caf5b1b62c8572cfb29ae6235f2d6c6f2b25eca444977b481120bcc69712e7c057e30b41aea57e69dee4353a2a76a3142d5a9b8644251ba0e756c7baa752bd34d23a67be635a080f62051b92200857e7d488b531d08c251311d4d583bb43831dd24d39144923f5a2ea6385a47228403719ec99f82ab76cfa7eab4ccc869ac0e7a3cf0eeb8b8fee16d2436911f2cfdb7df352c2997b88dedb67c82954345268f8f1fbcf92779014e8d8751db9083511cc2091554c8402380b310abf24b87aeb037863f0eb2b720b3601a58001ac17afffed467d3f1abf43fcacefa68b1623a27246204091774d1d16c9912c7edc148946c7c2d3addc4298b7426e60efed743cb86be4b76223c04287de6f340a255bbe30df52108bac11f4142ab5a9e260ee2e7087a26bba40a9f9c6dbbe5ae789f8aaa7775e62d0b3ffe1c6d9294612b1fb4fe36a981a31f833389946aaf25a5d5837b12f17e989d9ad3054e5954b54abe299794f6f1567ac7e8cba86989b0184da2b2b311e064483ac625cdac8d66e07aa9e493495942e98b116b8f42cb53c1d0d80b12cdf7066e54943a74f9b224edfe39c8b25de8f63514b247645f98b14567986eefaa021125069ee97f4a445ea71e1d766029da7781c5c364ef9c5a18a817fef9d46e7de198c39d8821112786190fd5cf255fb527171835d21a4f406fefe00c7268a440b08826c94d4570aaa2d86ee351486542b68660487a748a8f4f5b4a5c0255b0dd63ef636d06673cba5eebf582736f6814d2f345d22af49ef231c78c104bb80f1900587c85d8a6e40bfc6eee2f3b015b98f23e4c4fc466d00e1bd94067f008f519182f6cefcb3565b4360a67d2901a7e0cd160f4c7ce3eeccb8ab821851c49f3b135aff27c69ddb435f33146b9a820f3c60b4ea02154140100201e4abbfcca3cf1bd953b351fd0fbbe65c8fda4153ec949ed3c1ed58a5ac6a2e435636ca7114db1060f0765f364a1a7d4757da96583c33b56a36460cd8fa7949b812b118f1529c96d1308957b5fa469227254267926d54d269a97b50aac57b246b316c7a4f441795cdfa505ec5eacd493a5066f8b9215ad6839997546d4975c3b36297ba56a5dca0b06a9e10b8b207cdad709fa939884bf902b0016cd20cf3cd52056e57147d74c067ef7759ce9fef7a393f1a334adbc0820853a5de261c9abf9bda7729bb72e9666c667c7b3eb4cef0cf31d0bfebe447b3b4433855da238a6669bb65ae0854b76c7a270461a79998af189ab188d9670af65403f8eea25c362ae82bbe1312e0720c13b3cbc8ef6a8723b4fd348e2964bd00140c8c4d98a7011643b5c68c716ad51d7880f2423e3bf8bfd926f0b019e02943bcde7c31e6cfe61b02218206c8774278381698a2e6a1d1e85063b1fa4c86e7cb2e8346424be2af83af35a5f49372ddbbb8b2ec229f46e8c9034ecdf7a02dd37be6191fc6a3bf76e2a0b3d755f259426d27ec872e48118f5f34953afebdf34c55bd0da1ed097d53914e2c5f3df0206764853b89837ee485555d506260ad10cfe532ea4d98fdc3a5ee79390741be8fe7c90474e8793630c6c7458a108bb00f9e51cc71ed24c3e7a9c4a475f2f61bf8ba85aaea139fc8a6c87925c2e29ba48aa1e7a0d74ab3aa96bcb427d99f6d08caf8107d1c60835ce31bfc18cb1f6e29cb6f96f0d8af1135f04b45b7bb7c351d7af540f7e2093fa4f4eb62bcc1dec8335137ec2dc4fcd5310bf3a442f178b54f55f38442e4a51a0c292e192f6ebc051505d7f6633a2cd9e2f7a4d3cdfb227d9e1ca1c01fe2d4445107c90c128a77f8e02710b07ca50b92cf0a742b203a183e0b7b3d336b5c795511be3cbd3a7a4a2f91260fada36df96028c25a4872e6ae2b505a8a1e85476457e750107bb69193f2aa45f3d00d008b3449f909f086c9cbb1a4c5a59de082491383cb0cdf3fe031c06219656b629bc955c3abf47a2add4466308cb04fbc6b81a6d6cbb55634441f2b7f66f1bd36ab56e6abbc731b7f941af718194a08d6173018529a11f6f4410de949c94c006322fb879ff7a2b7d790f5dae01231dbfc6d53eec604e01b76887b6719652eaa842f38e3622e5a551d226fe71cebbdb1133126a36ec9ba0b3ef379511c5a4c48873bd2477742541745ed81cee58711ebaa2f031b436a1a58d001894ce25b1db6ccab2f6dec531e0cc1d916e862b64588316ee84acdc8c94e5110eb321e35bff912e88e6024f8d93edebd8013a7d39f47c33c0fdf01faaaaaab23e1fab13725b8a1cb89b03997d3bfb05c8627658700ab83fa232b7a31c20c3f53c16bdf78408cb6ff49edd2f9adac931635241aa5868d57e9c91266530b291065db025a7de16e5c5d588a24295d038394810f4be6cb77f9bf2fd4cb3012d06ce1f4c708e8ff7df324b02edcf7888a30fc83cc78309251754b9c32b866bfe841e81ca5ea7e64fe4ce99117d66fc88590687e965fd4ead99598ce01892ba8801800bd1471bed25d895de4d13a2b7ee2e5dd61821b156ac965e8be2e2a923f6ce3645cab99551d02c35940390c8fafd2144c36a7c7d89c1499d6ead461d7b5dbce9fa24a3a9aa2734d2d441955c06c0c40c9c53a8712ba01deb7029a89531109ad9bc296187eca0382ef16f2d7a5cd77a6cea17f1753f7449b760fdab702a3e64a2854664f75387d518e8cf335ef5ce2475892cde71dababe930555bab0fb6e727dd46c74b295229fb5149f2d4c19b7d0fbe902c5ce49c67b5c1b440db34a4149516862b543fb7d97884f478ced421989a3793998cae85df003c3733fae8d6c76a62bce5e6de9cf4ed3fa15fdeace1e9c5864f4d329acd2069cd9068e28bc6fcc9af93fefd50912185ec7e7abefd47271432f7d62ebcc6a875ba76376b4b227224f3c7aa4c6816ceec616f5e26cd4a17fdd83e3cbecb301a701648073dedab265a8fb4500cf6832044d1b94c02bc2dd2fd3e86bf35f84cb6a473d1b3e20fccabffba1be294d35b413db0fe79dddd6b57f72e69a71d2a697432850b5a5df2fd9d79301b84db3409c4efcbe3fc2dd50f64c06010b71d94fe69ec39d95abcff3eaef3328ab103a716bd9477907a53854e95a5a8f1ed9beb7116660b304bed7e6b47a1f0b94264819d3d333e71eed8aff455701b3decb354ea3bd49bb06eaa90e161ec5ba37211cd3a3cdf492a0a2da8956adea087d78b6c6cf4deb75107b2e9d5f14fa188a9ca14092a7ec258b4923f8f49904abedfe4c9c78ae1b4c149aad0ceb30909fa00be2d3ab9cd25e8522ef4d6526ea7c040dbdeb98b19899327c5e5b58bff197e28bb22c97d04022d1f7705723b8ed9261324f7cf18b912d34378ab3d45d2ba53f87d0756d51389440bde60f1b289613c36f7ff9dc029fcdf290c1d4a4ebb53da03fc3b2d2dce73bf18e90dc412eab0d7e25d7749a29bda9f45d3e2b1dd0462aa4b52c0084b9730522e1b290b7e78b96d12c4bda8f57596121ace658ffb30673e096c65eef3057cfe08f0bbf51216426fd0955cc639b4431929f07c953e7ec5828c61ecd13bca618fe65e077328ba7f298a8fbc79236c34a5d519e48fbd482468d300de96674527aa26c94e67e5afdfcde58e667cbeeb330333e8375325601776131e9ca33f0fd52d8f1dcc6868ea9ca287ae430d3af60459e23b05bb40b52b8da61f77d3a7cabae872d4a6cf7b124e66b0c38943334b946a0fab3d023beb22d82464b6195404378c9140bfd25278ca9081b544b0cb8f8ac1b05700d315a6510b889e0dcd8a21995a05f756344726f99098cf2d559d43177afc0594331fa19e00e4d9e0988d745526a20201b5ae1c8b22e0439e76adbf69e3343de8d40b38939b02e61ffee6a57310f0f739bc872a9a0f5b33d5d9207911d65bfaee586e4232c64a059f21b504983f47ffffe0559f8e7da0215f55bd74a3bb4be59cb5675a45302c32a67a0d9bfdaff85b68793465391203be71f4fc72767297a4359608d5682231672ca4affd5d21dce2dd8cc3409e03296809d777dbbf44d71fff2e55c48d0eb354e880ec84200e868ad16f99e13c0218128b6bb15e1bc29b5ca9971e1d9bf831c5ccb4c1f6a348fc4f3a879285aa02bded2c40fa09c68137620e72db5b72ca4faeeffe7df178dcefa42d5341bc6691e7675899e713b5c11febace23461a5224cbb98aa599f7136f10277d0c2f9c8b124dca8f851a048989f4d404787696f839fe799738a360375c2952f9a5e6c75ca930183df28e2859d1d0d428877db049d0b976102a8933829c068bf00431e1a1423c24f42bc8fa3de132ab0dde5b84ad9cf6029abedeec7d1d774f11a2e20c857f5e9da9befa3ad177d5dea63aa9ca3427e69ac65fa78707e63529a47ac4a4539b88e2d6559f217861258781b0a89c32b65153a45a1d86ba6a2df9327e8d4ed189e70cd0cec2129f6286a1a8eb8be490f03f6a9f3b0d908418beac38e47feea808798418b9ff5f9d73133a25fe7aafbbd2159916c50d036559f03cb775d77fefa7893bb29f4814a5a18f5606e096d490db05e3a0063a2fc2795c6bb28f582c756e5d5feccf5ee0981e12e04b2bbe4d1ec16daf6fdfd892cdad95e2092bf52f9f138e498650314f7b4ccc3684441af78fe68a1ce0d01c23c8b9474428aaf716b9d6c39edfe46bf0d342e559cdea2e11fffee045bdcb611b646e014df5ef970da2a1d6dd7d76a56d1fc0fbf49fd53c1bbca3d14e8c04163b49d0fb619718e44abff765442cdde0b4fcc7851ab0989de11903e57afe26af1315e851139ceba", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3a, 0x304, &(0x7f0000000080)="$eJzs3M9rGmkYwPFHo8YYoh6Whd1lycvuZfcyJO59QUoCpUJLGkt/QGESx1acqjiSYimNOfXaf6OSY26BNv0DvPTWUy+hl1wKvQTa1KIz1jHVqmmiSf1+ILzP+L7PvDO8Gh4HfA9uPnuQTVtaWi+JN6jEK1KRI5FoI3LziMduAvZx0G4q8u/shzd/KhGJJxJLK0otx1f/iymlwvMvHj7e/muvNHtjJ7w7LbXo3YP3sf2azzmhpTKWyuVLSldr+bclfc00VCpjZTWlrpmGbhkqk7OMot2fLznTSqFQVnouNRcqFA3LUnqurLJGWZXyqlQsK/2enskpTdO25kIyOQ7nm01h2LxkdWVFj7ePg8Mkrw87G87K3nd7i8XWh+dVvbMnWT27awIAAOdV1/r/sLP+9zit113/OypSadT/12/dvjJA/b8b2K/9Wvvt4PPq/UxH/Z/vW/83+9Nm/lj9H+hR/6uJqv978bsPuhT3yepUR/3f08wpXhRGrDgjUt2W9id66872QjOg/gcAAAAAAAAAAAAAAAAAAAAA4CI4rNcj9Xo90mi9YseNv2nnByOt428z/eO4XJwy9/rba+1rrPoA64+fgeuHe0ER8+lGciNpt3Z/PC0ZMcWQBYnIp+b7wWHHy5cTSx7VFJWX5qaTv7mRnOrMX5SIRLvnL9r5qjPfLyF3fkwi8kv3/FjX/ID887crX5OIvF6XvJiSar6v2/lPFpW6dDVxLH9GUkNthwEAAAAAwPmlqa+6fn/XtF79dv4gzwcWun4/98nvvvHeOwAAAAAAk8IqP8rqpmkU+wbPnYy+g985Awc+848G/iHuYrjAc8Ize+XEk7aeifQZ3NqTefgpnMczm6NanQsfNFbE/Uqo5+DwlLMqA08x7ezK3HjlqH5szP87f3w8/dsJDzh4pP+GAAAAAIxAu+gf95UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC5RrGD2rjvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgvvgQAAP//zb0VrQ==") 3.349338244s ago: executing program 0 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a808000000000000000000006001c"], 0x2c}}, 0x20000050) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60056, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40010) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.141388559s ago: executing program 6 (id=1139): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x1000007}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x59c, 0x8000000000000000}, 0x1011, 0xfffffffffffffff9, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) unlink(0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x400000000000000) 3.118586455s ago: executing program 5 (id=1141): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3004000, &(0x7f0000000100), 0x2, 0x7ba, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socketpair(0x29, 0xa, 0x0, 0x0) unshare(0x8040480) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) lseek(r0, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.050671763s ago: executing program 2 (id=1142): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x23, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0xb7}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000540)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='9', 0x1) unshare(0x6a040000) 2.90727237s ago: executing program 5 (id=1144): r0 = socket$inet6_sctp(0xa, 0xa, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r1, &(0x7f0000000000)='3', 0x4e) fsetxattr(r1, 0x0, 0x0, 0x0, 0x7) io_setup(0x1200, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10) 2.752036362s ago: executing program 5 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.550151115s ago: executing program 6 (id=1149): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x1, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x21, 0x7ff, &(0x7f00000001c0)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40086604, &(0x7f0000000440)=ANY=[@ANYBLOB="000000004c9002000000000003000100"/54]) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x58) 2.416669131s ago: executing program 0 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) syz_pidfd_open(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.290182534s ago: executing program 2 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x81}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x25}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x33}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.026799934s ago: executing program 2 (id=1153): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 1.710429057s ago: executing program 1 (id=1154): r0 = socket(0x10, 0x80003, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 1.709649847s ago: executing program 5 (id=1155): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r2}, 0x20) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.395286071s ago: executing program 1 (id=1156): r0 = socket$inet6_sctp(0xa, 0xa, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r1, &(0x7f0000000000)='3', 0x4e) fsetxattr(r1, 0x0, 0x0, 0x0, 0x7) io_setup(0x1200, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10) 1.178928858s ago: executing program 1 (id=1157): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x2, 0x802, 0x9, 0x200000100, 0x3, 0x7, 0x4a, 0x5, 0x100, 0xd, 0xdf, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0x80000001, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0xffffffffffffffe2, 0x5, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0x2, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc8, 0x7, 0x6, 0xb, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4000000000000004, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x1, 0x1, 0x8, 0x50000000000002, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x8080, 0x0, 0x71c, 0x5, 0x7ffffffb, 0x7, 0xffffffff, 0x8]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1.138667169s ago: executing program 6 (id=1158): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) 1.05789086s ago: executing program 2 (id=1159): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x6}, {0x10020002, 0x0, 0x0, 0x2}]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) 995.619707ms ago: executing program 6 (id=1160): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x88, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x4, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 863.636491ms ago: executing program 1 (id=1161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd, 0x1, 0x9, 0x2, 0x400, 0x1, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000480)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0xf9a}], 0x5}, 0x0) 784.544452ms ago: executing program 5 (id=1162): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0x1, 0x9, 0xfb, "ae09d8319a928c5f246601df46985e83af9135", 0x7, 0x7}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002d40), 0x40880, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x2) 533.464399ms ago: executing program 5 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0200006d0007"], 0x28c}, 0x1, 0x0, 0x0, 0x840}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000280)="c7459f55e94f230d61b48b47c8ecac171be29fc9c80b3a6d09afcb1e33bd4c51e0cdab0b60b2aff4fda2fe0b5554", 0x2e) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 217.543002ms ago: executing program 2 (id=1164): setns(0xc9, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 217.079742ms ago: executing program 1 (id=1165): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xa0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0xb) 56.541155ms ago: executing program 2 (id=1166): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x8}], 0x1, 0x0, 0x0) shutdown(r2, 0x0) 0s ago: executing program 1 (id=1167): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) close(0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048812) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044044) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000280)=""/11, 0x101000, 0x800, 0xfffffffe}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x404, &(0x7f0000004800)=ANY=[@ANYBLOB="3d91bb0d52c5c06d6f3aa0346e43ebc8cd9053b01536ee9ff3fcb5aa38d58def4de3d0c51238c6603d29a7ad6bdd852a0466e330b3cbeb374cb2137ef842b134169ea7b808e8791765e060670524e98c88e97760ec00468f48242c8ccbefada1eeff0e311f3c69ac7dc3a7a1552dd5d30de7892cec43d791fc7d0cc51d72d3bae8ff89c0601a2b47a5fd52f958e27b6389f0859d799c3664447a2e85e21c0511b05a0beb168f60ea15e62e83514e69d222b20b8cba23a2ec6edcc1ab6fc19e8ca8b82343fdf1870a646b94042194649f0ca920bb9cb178b7931148e84832e5ba08bd7c842e1540e18bec45687834cf00a463495853ae5ee6c9cf0d38e4516e1445a0129f2f130aa86ca6f207492c1973e3109a74bce7cc5436d26da37b497aac96b8ca1fe6ff82d7d3add05a97d43e9c7709373cac52c5cf50bd753f230dfe55faa1962d2fa13f9d4b14dc17530d25359dfa237392fce9895947e92b7bcdb6fa34dcdc4efdf58a0a4fb33221fb3b6e09037c93a017a349e633b524e7c1f020d173c169dd2872f0fdd52e8bf4bcc91eec87fec4c6da9923c62d748f831aa556fbe5fd36294ff050914703ad0c9643de202305321bcf524d9347898f30165f7e1011e23d648198f848e96f5db0182ec21d59f1d0b95704cea97f2f72463406a0aea835000da9a6998d5c24356d16eb502b57064ef06939ba812c6a91c27cdce7ce8dbad63dffb906d79cda305eaa5e04483e11063b9e8472e6b2bc32371da41a505b9b42417c4bce4381cf55623c7c4f7bc18f4faa6a8c8d6e626d441cc219ed8adf08aab12b58b5bc8ef7aaf7a39b7194ebe22ed8f1457a03282dbf04e34ec662c658087638526a58c3f97b576e6696838b888df185ec957d06045d6bf7882abcecd442a6d9de03860fdb628fc4471a253756f21da913aa3dafe9ad83376efd358a2eb6cdaf53b189a68edc95a80432dee55d5d232a967f98b6738f79fb43e4cc1f3137515838feca56ee2be45deb338cf89a0e2aa75829f5c6f6347a23ebe9ab1de2b131d3834c73a6d229cb28af692a9f2ed27aaadf0add088ba9178a1cfc008562f26480ca24d0685aeee211e5ae098198479160a2a574b35d869f2048eaad006255042d258fd75247c054cc824426fa7c56def2f5036155c9b89d95223658393e137dbfaa6e195ba7d5bc51911a92ee2860fd5f8a3e7f8c9b308f4812afb635fe825eebfcede6aa1b340831fcc2a97260cdc45d05a7a12b319cf7a0e9132c3c55a774f007c3692bd75ff43f3625a2c52410eef89fae5343851b869cc29c14c6ce8422bfe8b1f5518b0001915ca49a30aea148ca98dc0ad08fb957625eff66bbc1ab5b18b4a0ce4be8958ab4694de849b3d24ff4a11e327f7ad5edd57ebda64d6178379c9855fe2351eaf14341d870a9e2a98ccbf64a79e8365544707fab4f27d558226afa7051e0b5973f5a683d1f06b77ec1b7cd5d6b59f78b044290f5c0ebbefdc92959ea8ee4100d9ecee265449ed01bad09fbcf0f06c48df45a6c31ec5cfb89ff858c825f858a36ce88e54d8d5e872f7db77a2c9a84ed6a51993960a74dc56660b76661db59bdfadaed4d5aeec83c3920e25ee39fa2dd5252ad4b4c1e44b4a24a102c4928708093d973ef65d4bb8c0011007e7625d66ff4210e2dc004aa6fd53c47ae5c3c4bee7cbf210d5787f7f4a6756739ecd9231190e44f57be6af33824da9b34f1a0034ce728bef9e28bef48b23047ad32a7d3a9548c13de263abd8b59ab2df8272e0ee20a9a34efa3f4fd407f224b47d505e7d1d522604077639f5faf58df7c7ff107c5ccfd48a25e90ac84f882b8ea9326c5702e92833f355d503d09d6f9b598b35a84dbe8f0751cee5bfae8a421524eb184188a308ab78d83265002ee30556f76e13090b6a4c496d01b2e7533df8f698aea2fa1c1eb85e5d3f050ecaf47db4a94f572cf7b374843e1409456c6025cdb1538df5c1a23d8fb5b511e406646713535e663311fd5f171469a9b939440138d9ef2281e29fbaa489f12cf09c0bc6e97d2cdab2b45b228c0af2d0b6d35c7862de9d87b7dc5d2d1c48d867a539272552096f4581ac1e0120131cbc0fc82e043d51cd1a0438711d1251fe097bca3380b165d7e329e94c23881eb5ece7a524bdb4b6bb42a68a65cd00469c381623e0bfc3d2790e8d2667e04dba71141a879f0bc864f80c01d2f5c4809195257df103658b9df0f5bfbe2fcd1277e10238cfe7818e8182e3071b067ad1c6a4fd431853d775172036f0ace7262283765cfdccde57ace57ad367400355013bda57351e02e4fe14a40826ffc2928a4ec8b6e12a37da447a38b8077120b2c092e9f3d5d7f1fedebbf25467d2bfd891d992c6ccb4a6216803cfa74588b8b06decd41249b1920c373132829f7a60e4937a627414cc03ae8091bbf37fcc57e12d00d74936b249b286186a6d2556b122dbf8cc9c09a35f155f5c37347aac70d2d3146e56d0a0dae2a6b469c657ab77776a6e1abe1a9bd21af31eccc7253acc1833d2b5b330bc200a717975a31e98ab3b458fc5e6af7ca78f7d5603921cd22bd3d6ecedf361c44aee25d8a9c68e8db283ed3f962058827be69008d8863e80ec1230be50a6aceb9f6a047f6fa38caa5a00ba21aaacef67ccd137d3943d8916a0ee9c6c8961427bc49646bd61d7934bda394e1bf429ef509cac176a7bb6e15f33b5e85f52994450c591658a22867696888271b642988e27fd26e9e70d8b07707e28a0c43e92e5bfc9fd28c626d8a2afd5022d7f9fcb7587aa88a4d5e43caeae32bf41c27f713f1949c857cfe8e8eb3330dc1f411a1cb5a6d81763d996503ed78430d8811ab0a26e1a7268adb27a46680b97e73cce179014a203cc85e6eba8e7561bf15b9b0b5a1652cb881ff97f8b806d581326a37c869d2482d90f012d7f6bb5b7841de76b1fc6a1f988dcab853e2ad35be6e3a8edcb8fd8783fe2f2adfeffaad4d5db3901fa8c033d5c77ebf27f7ab47420e69b385bc1a95420cfb2063df2776a575659c0d0d01780a3a0d21163e106ee990d8093f8e1878d0b4ec973aa99005adad331622ae2c6283a08602b65012c463dd9618b593bd24422e87d29918d115a5926a395b0e20f623e0a2dfe27fea6a0bc17113c6fb41766e293998e28b604d63e07c6c4e9786ca8ad58ee0b2c7130bd0e0a79609b76f38e429087f06a1bf6016f0944ffe4a7a5a6c3663e0e32eea0261a7b57d765489f7286385508030f286974cb5f07c92220e944ff18766619dbf99663cfafd76db4d36d4403694be3619a68ea7fea3ed04faa9b336c2684209e91b040b9e10e7edbf145c0011631befdb660454a799e96727f3ca9b94a4976770542f099539ddca7064c193f013d3b92e846e699dbe47bcc1acd9662c0aed92dbcfa1d4cf93d885f84e6b742eef38fc4dddb8700e25833dfad65a50548016d1cfd8a610399f496d95621029e9ebc51135cf48e801e76f895e6c3829bf9c3fb9dcb7bf3c392fd7db33745c247a714c8dd431d358863b8245a5e24547b3cd9f2ef42e22221a62576147413190fcf5a5037291c50a3cdb1511859186516fe96e2ae77b7b1a1c317e1ce9f9dc0e1457eb11740ea491e3d973f45b848ad00f7a7d80145d91496c48f63bad5cf292bc714a8d92dbc15d50ec911261c93562cfeac8cbf80db7307259116e7b37431939afe18616722cb016c5f28f144af083a578e3d46e4f32e5cea9e40aa3ef513956231af926860de0be369e0a83f163598ca819a93b61eea53206908fea529cec3d23c6480a1dae1785ccfdf81e861823c7119c6ebabc17464cc7220bc1f8058530447ac41f2d8c372fe1607d425ce0d050e1960c534339fb6dbd0104cc6a67598c9ec3b65e511d5c4a463150e56e817e3ab982bb776509dc981453fa155acfdc815c5ea5dca2623945c98eb9e5e8c734474c076a675028dec0cf993a53b41858eb88ba83cf79e6b4752a527540ca9bbcf09342561c367fb757df1ae96285bd23b29adacbe3f5dafd9703cfc1c582ead3458385555d72835767085bcaf78ad1b46971a928e2e9a1062fbdd36cdab19b24fc6899e3e7be27aa276a4fe9b778cf4103d56a6a6cbb04236260ccf29ff2e0d89fb7c1da928dc308dd3412eb4057319aee4adf334fca09ed491f0b8a399d885f547f2caf630f284d286dbabd0d7a872a87e20078d4bf10bee0362e4afe8b949a2ac8abea184e3621710dacd0e204f0d1e3249bc490c2add6bab47ac3b1a5d194647a319f850025ecef22cc2a9f50e2b06d73b5d0982fd518021c524ed16fab245c982e2d7d83b29bd98f36241bf612b11f0d5e3d39af3829c52f59f8a68cddd7f52b41973b8fb620e44d0585e99cee162e3d201687ef8f05f2d924c0cca7cc71f052c8cff90618f560ef651702f713e6c8ea86f8e7227cbf337d19e15b7ddc419ed79b90a45d03be38addabd65b7bfaf7be8790ef18c4f0a839a5fab6d4249debb81567fc8fd05716b599c794e91859d4ae94453b654eb14f56f4773b575ba0184b616d84007fa7b465a8e86c27db6c20f3606432190c03e131afccf08fdfd2ca26bb76fc707a5de68c441d2394fc4eabd44c1d271262ef45710172fc1465d7d7afdced6267f68e0dd4a4464154e910eb72ac23cbc3317abb8ed1aeab0b774aac20ae1708caf7622e025271347d6f4dc68d65c4e5a0abbe27d390c7981fbc66293b519b18173aba5e6c73425620ee66a76b9e1a0e858eb0067169eebf46b1b29d0b0f9987b91cc271a46d43a1b9c844ece4ef7a5715c405dbeeea84affc92b5a33d055ed490f003d8fcdb76d9573d6c7ca585a6a0a8a1279e88a221a870174b042bd3e95457143a7e99e83c2302b65fc78964c3a75a2fb9d753b1a61fb3864cb20d03fa1c539ac521c50393efd872a23722edff8c1e20e29391ac669375da1b32aa91aed01483ae7a96204b447d73e01020dd5242acb2a073f34b7e0c51a2864a17f1f545f342e0c2969fc5787f3e04cc85a301ea02f6cb1ffe8d57e029eaee68ee3da264ce581401973ab276437e2fc8dc382b6309d6e56580f6f259edb701ea414c1749c902c2cef2909ee7d72cdaa872e7aaa742e4a665a618ae6cb33a34ae4a85866a00e45db2233403d3cd61b889d858191c851a9cf436c94a5a9c7c0e0e6fc7b752823f719ecf513c341117b4b68910e8e9d8139c66ce8c55ef9734bcbf20bef96fac0aaf7c6ee100bb77517a2ee63d4c585d57636800e5f5069fd9d554e416546418d975c8cda521c580e1f2db6a7c927c442f9e0cf363294bbd9c9c8fa0dbf8356c5a046d613d72b20f60c1d9ba3b70c795153bd81080e72f690b6fa83588d9d222f3d9660dbad06714ab7734de6d2d5a84b49237b70ddb1cd42f46502de3271259aabb30b8e6e98fbb960bd1d9427fbb60c24945b1542b32562648567443249bdd57cd61b9ae1a97562c52e6365e6329acb85833c0659ca34dbf047a85504a02adc0e27b09fc69f345d425a74a7e4149ab7b9fec93c1df0f5b180de937ef60d413f7389f56b7fdb7c9ea329b7434ad67fe3057452f86f95bf08740e0081438f024927208da10e286ddfddc184d4acd8eee6c0110d65da0476d29fe753e7fb4f5651fd917d55487aecee4c6ba446e7d7a281ea564b342552e6846952fe0b951237c57f89ad87a3c70891a193215578c90e693e89d1f92e5e2d94a74fdbd939fd7dbdf93d5c04ca3e9e5b8d2f91cf9202401eccb2d17a3da93ed616d8448d88980f559d6574b5aeda39f7656693e1d7f45333c4e4", @ANYRES32=r0, @ANYRES8], 0x1, 0x1239, &(0x7f0000005840)="$eJzs3M9rI+UfB/BPst1v8+3aH+q6unvQB714CtsePAlSpAvSgLJuhV1BmKVTDR2T0gmFiFj35NWjf4N49KaI/0Cv/gXeehEP0oM4QqZrm3WLtpZG8PW6zId85p1nfoTAhOfJ/quff7i5UbY3skE0G41obkWkgxQpmvHQ86v19u691eVOZ+V2SreW7yy+klKae+G7dz/+6sXvB1fe+Xrum+nYW3hv/6elH/eu7V3f/+3OB90ydcvU6w9Slu73+4PsfpGn9W652U7prSLPyjx1e2W+PdbfKPpbW8OU9dZnZ7a287JMWW+YNvNhGvTTYHuYsvezbi+12+00OxOc6PJf77L25UFVfRtRVZfjf1FVVfX/mIlGPBGzMRefRsST8VQ8HVfjmbgWz8ZzcX2010UcPgAAAAAAAAAAAAAAAAAAAPx3HIxW84+v/79yuP5/Phas/wcAAAAAAAAAAAAAAAAAAIAL8Pbde6vLnc7K7ZRaEcVnO2s7a/W27i9vRDeKyONmzMevMVr9X6vrW290Vm6mkUsRsXuY391ZuzSeXxz9ncBhfmrUe5hfrPMpHhTH8tMxU+dbEZHHUszH1WPjt47yS4/Nt+Lll46N3475ajeiH0VjfTT2Uf6TxZRef7PzSP5GrE/yxgAAAMA5aqc/LIw//9bP7+32Sf06f4rfBx55vp6KG1OTPXciyuFHm1lR5NvjRetPr0ysmP53HMZpiuY/iU/Hia3mWOuLHyLOMMQvk78+51y0Dj/L5/GGjcmfzhmKB1HEOV6EUTG57yQuztFNn/SRAAAAAAAAAAAAcBp/Zz7gz3HmWYRT8ZiZZa9N5lQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmcHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAAA///BlsH7") kernel console output (not intermixed with test programs): eate_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.173040][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.174263][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.178138][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.179643][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.180694][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.181895][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.183214][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.184485][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.185973][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.187320][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.188740][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.189961][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.191416][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.273998][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.435951][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.473989][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 72.640088][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 72.778645][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.000676][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b6ea000: rx timeout, send abort [ 73.019799][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.076224][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.106839][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.111250][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.119765][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.127925][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.132189][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 73.143483][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.145604][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.146122][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.150884][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.158442][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.159325][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.171407][ T4946] hsr_slave_1 (unregistering): left promiscuous mode [ 73.174568][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.180040][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.186461][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.194606][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.195800][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.203286][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.205844][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.210420][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.213529][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.214469][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.219927][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.224192][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.247191][ T4918] 9pnet_fd: p9_fd_create_tcp (4918): problem connecting socket to 127.0.0.1 [ 73.377668][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 73.377687][ T29] audit: type=1400 audit(1790369227.141:1084): avc: denied { create } for pid=4955 comm="syz.5.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.384491][ T29] audit: type=1400 audit(1790369227.141:1085): avc: denied { write } for pid=4954 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.474374][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.500726][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b6ea000: abort rx timeout. Force session deactivation [ 73.510108][ T4963] xt_hashlimit: max too large, truncated to 1048576 [ 75.534916][ T4286] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.534936][ T3658] Bluetooth: hci0: command 0x1003 tx timeout [ 75.577324][ T29] audit: type=1400 audit(1790369229.341:1086): avc: denied { getopt } for pid=4971 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.668665][ T29] audit: type=1400 audit(1790369229.431:1087): avc: denied { create } for pid=4968 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.788628][ T4973] loop2: detected capacity change from 0 to 1024 [ 75.788972][ T4978] loop4: detected capacity change from 0 to 1024 [ 75.789828][ T4978] EXT4-fs: Ignoring removed orlov option [ 75.814591][ T4978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.908114][ T4973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.950658][ T29] audit: type=1400 audit(1790369229.711:1088): avc: denied { write } for pid=4970 comm="syz.2.450" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.247932][ T29] audit: type=1400 audit(1790369230.011:1089): avc: denied { connect } for pid=4993 comm="syz.5.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.248395][ T29] audit: type=1400 audit(1790369230.011:1090): avc: denied { write } for pid=4993 comm="syz.5.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.250080][ T29] audit: type=1400 audit(1790369230.011:1091): avc: denied { read } for pid=4993 comm="syz.5.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.590010][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.671857][ T38] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.671988][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 76.672043][ T38] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.672043][ T38] [ 76.672061][ T38] EXT4-fs (loop2): Total free blocks count 0 [ 76.672140][ T38] EXT4-fs (loop2): Free/Dirty block details [ 76.672157][ T38] EXT4-fs (loop2): free_blocks=20480 [ 76.672177][ T38] EXT4-fs (loop2): dirty_blocks=80 [ 76.672195][ T38] EXT4-fs (loop2): Block reservation details [ 76.672209][ T38] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 76.673137][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 76.673383][ T3297] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 76.849175][ T5005] FAULT_INJECTION: forcing a failure. [ 76.849175][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 76.849264][ T5005] CPU: 1 UID: 0 PID: 5005 Comm: syz.4.463 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.849296][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.849313][ T5005] Call Trace: [ 76.849320][ T5005] [ 76.849328][ T5005] __dump_stack+0x1d/0x30 [ 76.849353][ T5005] dump_stack_lvl+0x95/0xd0 [ 76.849456][ T5005] dump_stack+0x15/0x1b [ 76.849478][ T5005] should_fail_ex+0x262/0x280 [ 76.849503][ T5005] ? tcp_sendmsg_fastopen+0x15b/0x510 [ 76.849525][ T5005] should_failslab+0x8c/0xb0 [ 76.849576][ T5005] __kmalloc_cache_noprof+0x7a/0x400 [ 76.849625][ T5005] ? tcp_sendmsg_fastopen+0x15b/0x510 [ 76.849649][ T5005] ? avc_has_perm+0x101/0x190 [ 76.849679][ T5005] tcp_sendmsg_fastopen+0x15b/0x510 [ 76.849745][ T5005] tcp_sendmsg_locked+0x2775/0x2ad0 [ 76.849813][ T5005] ? tcp_sendmsg_locked+0x221/0x2ad0 [ 76.849859][ T5005] ? selinux_netlbl_socket_connect+0x114/0x130 [ 76.849977][ T5005] ? selinux_socket_sendmsg+0x3d9/0x410 [ 76.850012][ T5005] ? __pfx_tcp_sendmsg+0x10/0x10 [ 76.850034][ T5005] ? __pfx_inet6_sendmsg+0x10/0x10 [ 76.850062][ T5005] tcp_sendmsg+0x2f/0x50 [ 76.850086][ T5005] inet6_sendmsg+0x76/0xd0 [ 76.850192][ T5005] __sys_sendto+0x308/0x470 [ 76.850380][ T5005] __x64_sys_sendto+0x76/0x90 [ 76.850480][ T5005] x64_sys_call+0x200c/0x2550 [ 76.850509][ T5005] do_syscall_64+0x112/0x360 [ 76.850620][ T5005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.850644][ T5005] RIP: 0033:0x7f5f8163e159 [ 76.850661][ T5005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.850681][ T5005] RSP: 002b:00007f5f80097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.850703][ T5005] RAX: ffffffffffffffda RBX: 00007f5f818c5fa0 RCX: 00007f5f8163e159 [ 76.850719][ T5005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 76.850765][ T5005] RBP: 00007f5f816d506b R08: 0000200000000340 R09: 000000000000001c [ 76.850779][ T5005] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 76.850793][ T5005] R13: 00007f5f818c6038 R14: 00007f5f818c5fa0 R15: 00007fff04dc5d38 [ 76.850814][ T5005] [ 76.850949][ T5003] loop2: detected capacity change from 0 to 512 [ 77.002061][ T5007] loop0: detected capacity change from 0 to 512 [ 77.028633][ T5007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 77.028803][ T5007] System zones: 1-12 [ 77.029802][ T5007] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.464: missing EA_INODE flag [ 77.029881][ T5007] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 77.030434][ T5007] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.464: error while reading EA inode 12 err=-117 [ 77.030531][ T5007] loop0: lost filesystem error report for type 5 error -117 [ 77.031144][ T5007] EXT4-fs (loop0): 1 orphan inode deleted [ 77.032289][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.090155][ T29] audit: type=1400 audit(1790369230.851:1092): avc: denied { write } for pid=5006 comm="syz.0.464" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.249965][ T5017] loop1: detected capacity change from 0 to 1024 [ 77.251918][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.252935][ T5014] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 77.286614][ T5017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.314181][ T5019] netlink: 'syz.4.469': attribute type 10 has an invalid length. [ 77.358939][ T5019] team0: Device wg2 is of different type [ 77.415288][ T29] audit: type=1400 audit(1790369231.171:1093): avc: denied { block_suspend } for pid=5022 comm="syz.2.470" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.498963][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.663331][ T5037] loop4: detected capacity change from 0 to 764 [ 77.724060][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.143309][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 78.159308][ T5069] veth0: entered promiscuous mode [ 78.160325][ T5069] veth0: left promiscuous mode [ 78.382175][ T5072] loop4: detected capacity change from 0 to 128 [ 78.511462][ T5082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 78.520096][ T5077] loop1: detected capacity change from 0 to 764 [ 78.729120][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 78.729135][ T29] audit: type=1400 audit(1790369232.492:1100): avc: denied { bind } for pid=5083 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.729335][ T29] audit: type=1400 audit(1790369232.492:1101): avc: denied { node_bind } for pid=5083 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.368219][ T5106] veth0: entered promiscuous mode [ 79.371841][ T5106] veth0: left promiscuous mode [ 79.434730][ T5108] loop4: detected capacity change from 0 to 256 [ 79.556506][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 79.578287][ T5117] netlink: 'syz.5.508': attribute type 5 has an invalid length. [ 79.578306][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 79.786804][ T5112] loop0: detected capacity change from 0 to 1024 [ 79.834130][ T29] audit: type=1400 audit(1790369233.592:1102): avc: denied { read } for pid=5122 comm="syz.5.510" name="event3" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.902571][ T5112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.917667][ T29] audit: type=1400 audit(1790369233.682:1103): avc: denied { write } for pid=5109 comm="syz.0.505" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.958190][ T5127] rock: directory entry would overflow storage [ 79.958198][ T5127] rock: sig=0x5245, size=8, remaining=5 [ 80.173173][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 80.190082][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 80.254925][ T5129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.257085][ T5129] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.304790][ T5138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.305115][ T5138] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 80.309676][ T5138] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.309835][ T5138] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 80.309898][ T5138] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 80.313072][ T5138] EXT4-fs (loop1): 1 truncate cleaned up [ 80.335692][ T29] audit: type=1400 audit(1790369234.092:1104): avc: denied { write } for pid=5128 comm="syz.5.512" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.348229][ T5138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.401605][ T5142] syzkaller0: entered promiscuous mode [ 80.401667][ T5142] syzkaller0: entered allmulticast mode [ 80.434804][ T38] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 80.434923][ T38] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 80.434967][ T38] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.434967][ T38] [ 80.434983][ T38] EXT4-fs (loop0): Total free blocks count 0 [ 80.434999][ T38] EXT4-fs (loop0): Free/Dirty block details [ 80.435013][ T38] EXT4-fs (loop0): free_blocks=20480 [ 80.435102][ T38] EXT4-fs (loop0): dirty_blocks=80 [ 80.435116][ T38] EXT4-fs (loop0): Block reservation details [ 80.435131][ T38] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 80.435807][ T38] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 80.436194][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 80.456190][ T5129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.512'. [ 80.556116][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.581347][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.730368][ T29] audit: type=1326 audit(1790369234.492:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ad0ce159 code=0x7ffc0000 [ 80.730466][ T29] audit: type=1326 audit(1790369234.492:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ad0ce159 code=0x7ffc0000 [ 80.730527][ T29] audit: type=1326 audit(1790369234.492:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ad0ce159 code=0x7ffc0000 [ 80.730554][ T29] audit: type=1326 audit(1790369234.492:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ad0ce159 code=0x7ffc0000 [ 80.730607][ T29] audit: type=1326 audit(1790369234.492:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa5ad0ce159 code=0x7ffc0000 [ 81.056406][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 81.410812][ T5190] xt_hashlimit: max too large, truncated to 1048576 [ 81.631843][ T5194] tipc: Started in network mode [ 81.636055][ T5194] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.636628][ T5194] tipc: New replicast peer: 172.20.20.187 [ 81.641062][ T5194] tipc: Enabled bearer , priority 10 [ 81.907917][ T5205] set_capacity_and_notify: 3 callbacks suppressed [ 81.907942][ T5205] loop5: detected capacity change from 0 to 128 [ 82.012839][ T5196] Set syz1 is full, maxelem 256 reached [ 82.635502][ T5217] FAULT_INJECTION: forcing a failure. [ 82.635502][ T5217] name failslab, interval 1, probability 0, space 0, times 0 [ 82.635538][ T5217] CPU: 1 UID: 0 PID: 5217 Comm: syz.5.545 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.635625][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.635650][ T5217] Call Trace: [ 82.635711][ T5217] [ 82.635719][ T5217] __dump_stack+0x1d/0x30 [ 82.635750][ T5217] dump_stack_lvl+0x95/0xd0 [ 82.635781][ T5217] dump_stack+0x15/0x1b [ 82.635876][ T5217] should_fail_ex+0x262/0x280 [ 82.635910][ T5217] ? mempool_alloc_slab+0x1a/0x30 [ 82.636045][ T5217] should_failslab+0x8c/0xb0 [ 82.636134][ T5217] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.636175][ T5217] ? mempool_alloc_slab+0x1a/0x30 [ 82.636270][ T5217] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 82.636310][ T5217] mempool_alloc_slab+0x1a/0x30 [ 82.636351][ T5217] mempool_init_node+0x139/0x260 [ 82.636463][ T5217] ? __pfx_mempool_free_slab+0x10/0x10 [ 82.636494][ T5217] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 82.636585][ T5217] mempool_init_noprof+0x3a/0x50 [ 82.636691][ T5217] bioset_init+0x177/0x480 [ 82.636719][ T5217] ? __alloc_disk_node+0x3c/0x340 [ 82.636828][ T5217] __alloc_disk_node+0x59/0x340 [ 82.636870][ T5217] __blk_alloc_disk+0x68/0xd0 [ 82.636900][ T5217] dm_create+0x36d/0x850 [ 82.637010][ T5217] dev_create+0x141/0x290 [ 82.637047][ T5217] dm_ctl_ioctl+0x80b/0xad0 [ 82.637075][ T5217] ? __pfx_dev_create+0x10/0x10 [ 82.637166][ T5217] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 82.637230][ T5217] __se_sys_ioctl+0xce/0x140 [ 82.637271][ T5217] __x64_sys_ioctl+0x43/0x50 [ 82.637310][ T5217] x64_sys_call+0x239d/0x2550 [ 82.637343][ T5217] do_syscall_64+0x112/0x360 [ 82.637387][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.637409][ T5217] RIP: 0033:0x7fb11ddfe159 [ 82.637424][ T5217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.637463][ T5217] RSP: 002b:00007fb11c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.637489][ T5217] RAX: ffffffffffffffda RBX: 00007fb11e085fa0 RCX: 00007fb11ddfe159 [ 82.637507][ T5217] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 82.637524][ T5217] RBP: 00007fb11de9506b R08: 0000000000000000 R09: 0000000000000000 [ 82.637541][ T5217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.637642][ T5217] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 82.637742][ T5217] [ 82.644857][ T445] tipc: Node number set to 2886997162 [ 82.877599][ T5222] ./dev/sda1: Can't lookup blockdev [ 82.924184][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.927638][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.928237][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.928790][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.942823][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.946326][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.950333][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.952425][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.957908][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.966890][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.971171][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.979672][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.980254][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.988417][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 82.998792][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.018322][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.033737][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.055671][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.076758][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.082942][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.102011][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.110397][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.117488][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.151069][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.153805][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.172660][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.183156][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.183801][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.208380][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.209146][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.211238][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.211930][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.247500][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.258008][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.263769][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.281976][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.283007][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.283561][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.316755][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.317589][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.318291][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.355417][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.356080][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.384991][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.389697][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.390302][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.399123][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.420737][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.449995][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.450916][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.462122][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.486073][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.490173][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.490922][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.511595][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.523425][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.540372][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.542868][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.554417][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.598287][ T5228] loop5: detected capacity change from 0 to 512 [ 83.606350][ T5228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.609542][ T5228] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 83.615419][ T5228] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.615488][ T5228] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 83.615560][ T5228] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 83.617639][ T5228] EXT4-fs (loop5): 1 truncate cleaned up [ 83.618840][ T5228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.670206][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.671062][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.678497][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.688749][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.700251][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.724744][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.734600][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.766753][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.769222][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.783949][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.801153][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.819235][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.819916][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.823063][ T5230] loop1: detected capacity change from 0 to 512 [ 83.851837][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.852634][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.875192][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.875847][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.894897][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.895575][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.896228][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.896855][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.897596][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.898421][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.899254][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.899972][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.900654][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.901171][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.901893][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.902472][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.903125][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.903775][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.930410][ T5230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.930621][ T5230] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.932554][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 83.933319][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.003746][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 84.003768][ T29] audit: type=1400 audit(1790369237.762:1182): avc: denied { write } for pid=5229 comm="syz.1.552" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.003868][ T29] audit: type=1400 audit(1790369237.762:1183): avc: denied { write } for pid=5229 comm="syz.1.552" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.003907][ T29] audit: type=1400 audit(1790369237.762:1184): avc: denied { open } for pid=5229 comm="syz.1.552" path="/122/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.050213][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.061113][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.071629][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.077249][ T5230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 84.090786][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.112995][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.122437][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.132633][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.141441][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.142337][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.160681][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.172054][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.182563][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.191757][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.192718][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.202428][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.215853][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.227391][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.239845][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.250539][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.256687][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.266260][ T5223] 9pnet_fd: p9_fd_create_tcp (5223): problem connecting socket to 127.0.0.1 [ 84.396322][ T5244] loop1: detected capacity change from 0 to 128 [ 84.422323][ T5244] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.422509][ T5244] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.447341][ T29] audit: type=1400 audit(1790369238.202:1185): avc: denied { write } for pid=5243 comm="syz.1.556" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.472853][ T29] audit: type=1400 audit(1790369238.222:1186): avc: denied { setattr } for pid=5243 comm="syz.1.556" path="/123/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.503848][ T29] audit: type=1400 audit(1790369238.252:1187): avc: denied { execute } for pid=5243 comm="syz.1.556" path="/123/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.619818][ T29] audit: type=1400 audit(1790369238.372:1188): avc: denied { ioctl } for pid=5243 comm="syz.1.556" path="/123/file1/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.745691][ T29] audit: type=1400 audit(1790369238.492:1189): avc: denied { create } for pid=5256 comm="syz.4.561" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.770032][ T5259] netlink: 'syz.5.560': attribute type 10 has an invalid length. [ 84.893938][ T5259] team0: Port device wg2 added [ 85.131206][ T29] audit: type=1400 audit(1790369238.882:1190): avc: denied { map } for pid=5267 comm="syz.5.563" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.131247][ T29] audit: type=1400 audit(1790369238.882:1191): avc: denied { read write } for pid=5267 comm="syz.5.563" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.254244][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.362648][ T5287] bridge_slave_0: left allmulticast mode [ 85.362686][ T5287] bridge_slave_0: left promiscuous mode [ 85.362802][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.370673][ T5287] bridge_slave_1: left allmulticast mode [ 85.370754][ T5287] bridge_slave_1: left promiscuous mode [ 85.370990][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.526482][ T5297] loop5: detected capacity change from 0 to 512 [ 85.564561][ T5293] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 85.581623][ T5297] EXT4-fs (loop5): invalid journal inode [ 85.581742][ T5297] EXT4-fs (loop5): can't get journal size [ 85.598202][ T5297] EXT4-fs (loop5): 1 truncate cleaned up [ 85.600053][ T5297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.816998][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.880754][ T5303] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1562488729/1562488731 [ 85.880791][ T5303] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1562488729/1562488730 [ 85.882736][ T5303] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1562488729/1562488731 [ 85.882767][ T5303] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1562488729/1562488730 [ 85.994722][ T5293] team0: Device wg2 is of different type [ 86.118437][ T5314] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 86.367439][ T5323] loop5: detected capacity change from 0 to 2048 [ 86.399150][ T5323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.399217][ T5323] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.467777][ T5332] bridge_slave_0: left allmulticast mode [ 86.467823][ T5332] bridge_slave_0: left promiscuous mode [ 86.467943][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.473669][ T5332] bridge_slave_1: left allmulticast mode [ 86.473688][ T5332] bridge_slave_1: left promiscuous mode [ 86.473854][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.515654][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.533352][ T5332] bond0: (slave bond_slave_0): Releasing backup interface [ 86.561340][ T5332] bond0: (slave bond_slave_1): Releasing backup interface [ 86.591571][ T5332] team0: Port device team_slave_0 removed [ 86.614413][ T5332] team0: Port device team_slave_1 removed [ 86.615563][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.615580][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.620794][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.620880][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.674627][ T5332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.725297][ T5335] team0: Port device xfrm0 added [ 86.752388][ T5348] loop4: detected capacity change from 0 to 512 [ 86.789554][ T5348] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.789999][ T5348] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.790460][ T5348] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 86.790617][ T5348] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.594: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 86.790683][ T5348] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 86.790858][ T5348] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.594: couldn't read orphan inode 13 (err -117) [ 86.790941][ T5348] loop4: lost filesystem error report for type 5 error -117 [ 86.791510][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.856131][ T5344] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 86.882829][ T5344] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.993936][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.031245][ T5337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.248439][ T5341] tipc: Started in network mode [ 87.248558][ T5341] tipc: Node identity 3a32df2befd3, cluster identity 4711 [ 87.248607][ T5341] tipc: Enabled bearer , priority 0 [ 87.438959][ T5385] loop1: detected capacity change from 0 to 1024 [ 87.451563][ T5385] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 87.683472][ T325] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.683515][ T325] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.683587][ T325] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.683624][ T325] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.683703][ T325] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.683740][ T325] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.683829][ T325] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.683929][ T325] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.683989][ T5359] syz0: Port: 1 Link DOWN [ 88.363493][ T5359] tipc: Node number set to 3588349739 [ 88.665739][ T5436] FAULT_INJECTION: forcing a failure. [ 88.665739][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 88.670375][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.5.620 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.670429][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.670443][ T5436] Call Trace: [ 88.670452][ T5436] [ 88.670463][ T5436] __dump_stack+0x1d/0x30 [ 88.670499][ T5436] dump_stack_lvl+0x95/0xd0 [ 88.670529][ T5436] dump_stack+0x15/0x1b [ 88.670581][ T5436] should_fail_ex+0x262/0x280 [ 88.670686][ T5436] ? tty_open+0x7f/0xb00 [ 88.670709][ T5436] should_failslab+0x8c/0xb0 [ 88.670795][ T5436] __kmalloc_cache_noprof+0x7a/0x400 [ 88.670835][ T5436] ? tty_open+0x7f/0xb00 [ 88.670979][ T5436] tty_open+0x7f/0xb00 [ 88.671004][ T5436] ? chrdev_open+0x5e/0x3a0 [ 88.671028][ T5436] ? kobject_get_unless_zero+0xf5/0x160 [ 88.671188][ T5436] chrdev_open+0x2eb/0x3a0 [ 88.671209][ T5436] do_dentry_open+0x49f/0xa60 [ 88.671232][ T5436] ? __pfx_chrdev_open+0x10/0x10 [ 88.671301][ T5436] vfs_open+0x37/0x1e0 [ 88.671380][ T5436] path_openat+0xc01/0x10d0 [ 88.671493][ T5436] do_file_open+0x16c/0x290 [ 88.671538][ T5436] do_sys_openat2+0xa0/0x130 [ 88.671588][ T5436] __x64_sys_openat+0xf2/0x120 [ 88.671614][ T5436] x64_sys_call+0x1f72/0x2550 [ 88.671702][ T5436] do_syscall_64+0x112/0x360 [ 88.671779][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.671808][ T5436] RIP: 0033:0x7fb11ddbe98e [ 88.671830][ T5436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.671868][ T5436] RSP: 002b:00007fb11c856b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.671891][ T5436] RAX: ffffffffffffffda RBX: 00007fb11c8576c0 RCX: 00007fb11ddbe98e [ 88.671983][ T5436] RDX: 0000000000000002 RSI: 00007fb11c856c00 RDI: ffffffffffffff9c [ 88.671997][ T5436] RBP: 00007fb11de9506b R08: 0000000000000000 R09: 0000000000000000 [ 88.672010][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.672024][ T5436] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 88.672051][ T5436] [ 88.902063][ T5439] loop5: detected capacity change from 0 to 512 [ 88.921918][ T5439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.925225][ T5439] EXT4-fs (loop5): 1 truncate cleaned up [ 88.926267][ T5439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.986970][ T5439] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.065324][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.294007][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 89.384431][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 89.384450][ T29] audit: type=1326 audit(1790369243.143:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.384781][ T29] audit: type=1326 audit(1790369243.143:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.384815][ T29] audit: type=1326 audit(1790369243.143:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.385128][ T29] audit: type=1326 audit(1790369243.143:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.387073][ T29] audit: type=1326 audit(1790369243.143:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.387540][ T29] audit: type=1326 audit(1790369243.143:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.387569][ T29] audit: type=1326 audit(1790369243.143:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 89.503654][ T29] audit: type=1400 audit(1790369243.243:1255): avc: denied { create } for pid=5470 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.530792][ T29] audit: type=1400 audit(1790369243.273:1256): avc: denied { kexec_image_load } for pid=5470 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 89.675962][ T5482] loop4: detected capacity change from 0 to 128 [ 89.676584][ T5482] vfat: Unknown parameter 'ÿÿ' [ 89.793926][ T5484] loop5: detected capacity change from 0 to 512 [ 89.796659][ T5484] EXT4-fs: Ignoring removed oldalloc option [ 89.800190][ T5484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.816366][ T5484] EXT4-fs (loop5): 1 truncate cleaned up [ 89.820918][ T5484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.843179][ T29] audit: type=1400 audit(1790369243.603:1257): avc: denied { write } for pid=5483 comm="syz.5.640" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.934317][ T5491] bridge_slave_0: left allmulticast mode [ 89.934342][ T5491] bridge_slave_0: left promiscuous mode [ 89.934457][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.946232][ T5491] bridge_slave_1: left allmulticast mode [ 89.946610][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.976012][ T5491] bond0: (slave bond_slave_0): Releasing backup interface [ 89.978750][ T5491] bond0: (slave bond_slave_1): Releasing backup interface [ 89.990953][ T5491] team0: Port device team_slave_0 removed [ 89.994010][ T5493] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 90.006574][ T5491] team0: Port device team_slave_1 removed [ 90.006957][ T5491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.012532][ T5491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.022765][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.051479][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.082477][ T5494] team0: Port device xfrm0 added [ 90.131886][ T5496] bond1: (slave veth3): Enslaving as an active interface with a down link [ 90.133307][ T5491] tipc: Started in network mode [ 90.133378][ T5491] tipc: Node identity 6a342f7c02ab, cluster identity 4711 [ 90.133551][ T5491] tipc: Enabled bearer , priority 0 [ 90.179876][ T5496] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 90.179896][ T5496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.642'. [ 90.179953][ T5493] bond1: (slave dummy0): making interface the new active one [ 90.186015][ T5493] dummy0: entered promiscuous mode [ 90.209995][ T5498] FAULT_INJECTION: forcing a failure. [ 90.209995][ T5498] name failslab, interval 1, probability 0, space 0, times 0 [ 90.210110][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.5.643 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.210198][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.210240][ T5498] Call Trace: [ 90.210260][ T5498] [ 90.210299][ T5498] __dump_stack+0x1d/0x30 [ 90.210399][ T5498] dump_stack_lvl+0x95/0xd0 [ 90.210483][ T5498] dump_stack+0x15/0x1b [ 90.210554][ T5498] should_fail_ex+0x262/0x280 [ 90.210642][ T5498] should_failslab+0x8c/0xb0 [ 90.210742][ T5498] __kvmalloc_node_noprof+0x168/0x5c0 [ 90.210854][ T5498] ? io_rsrc_data_alloc+0x2d/0x70 [ 90.210957][ T5498] ? io_rsrc_data_alloc+0x2d/0x70 [ 90.211068][ T5498] io_rsrc_data_alloc+0x2d/0x70 [ 90.211219][ T5498] io_alloc_file_tables+0x21/0x90 [ 90.211318][ T5498] io_sqe_files_register+0x12e/0x4e0 [ 90.211453][ T5498] __se_sys_io_uring_register+0xe7e/0x1330 [ 90.211527][ T5498] ? __se_sys_futex+0x2f6/0x370 [ 90.211622][ T5498] ? restore_fpregs_from_fpstate+0x61/0x110 [ 90.211727][ T5498] __x64_sys_io_uring_register+0x55/0x70 [ 90.211806][ T5498] x64_sys_call+0x1ff6/0x2550 [ 90.211944][ T5498] do_syscall_64+0x112/0x360 [ 90.212015][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.212093][ T5498] RIP: 0033:0x7fb11ddfe159 [ 90.212192][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.212254][ T5498] RSP: 002b:00007fb11c857028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 90.212325][ T5498] RAX: ffffffffffffffda RBX: 00007fb11e085fa0 RCX: 00007fb11ddfe159 [ 90.212369][ T5498] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000004 [ 90.212419][ T5498] RBP: 00007fb11de9506b R08: 0000000000000000 R09: 0000000000000000 [ 90.212479][ T5498] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 90.212598][ T5498] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 90.212636][ T5498] [ 90.212812][ T5493] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 90.266456][ T5496] bond1: (slave dummy0): Releasing active interface [ 90.915873][ T5500] loop1: detected capacity change from 0 to 512 [ 90.930182][ T5514] netlink: 'syz.2.650': attribute type 7 has an invalid length. [ 90.985884][ T5500] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 91.103646][ T5474] kexec: Could not allocate control_code_buffer [ 91.144351][ T3412] tipc: Node number set to 1755262844 [ 92.861192][ T5580] loop1: detected capacity change from 0 to 512 [ 92.940230][ T5580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.945556][ T5580] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 92.946448][ T5580] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 92.947134][ T5580] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.666: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 92.947260][ T5580] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.948085][ T5580] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.666: couldn't read orphan inode 13 (err -117) [ 92.948166][ T5580] loop1: lost filesystem error report for type 5 error -117 [ 92.950081][ T5580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.016185][ T5580] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 93.039727][ T5580] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 93.105070][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.208782][ T5553] kexec: Could not allocate control_code_buffer [ 93.770672][ T5625] loop1: detected capacity change from 0 to 8192 [ 94.453341][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 94.453357][ T29] audit: type=1400 audit(1790369248.214:1351): avc: denied { write } for pid=5722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.503732][ T29] audit: type=1400 audit(1790369248.264:1352): avc: denied { write } for pid=5757 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.564654][ T5764] 9pnet_fd: p9_fd_create_tcp (5764): problem connecting socket to 127.0.0.1 [ 94.709611][ T5776] tipc: Failed to remove unknown binding: 66,0,0/0:1819461950/1819461951 [ 94.710710][ T5776] tipc: Failed to remove unknown binding: 66,0,0/0:1819461950/1819461951 [ 94.711804][ T5778] loop5: detected capacity change from 0 to 128 [ 94.719452][ T5778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 94.719542][ T5778] System zones: 1-3, 19-19, 35-36 [ 94.756875][ T5778] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.758161][ T5778] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.806990][ T29] audit: type=1400 audit(1790369248.544:1353): avc: denied { write } for pid=5777 comm="syz.5.696" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.174468][ T3623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.399863][ T5796] loop5: detected capacity change from 0 to 512 [ 95.670571][ T5796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.728615][ T5796] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.045723][ T29] audit: type=1400 audit(1790369249.794:1354): avc: denied { setattr } for pid=5795 comm="syz.5.702" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.108042][ T5820] dummy0: left promiscuous mode [ 96.125231][ T5820] batman_adv: batadv0: Adding interface: dummy0 [ 96.125246][ T5820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.125393][ T5820] batman_adv: batadv0: Interface activated: dummy0 [ 96.155831][ T5820] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 96.155893][ T5820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.710'. [ 96.155958][ T5820] batadv0: entered promiscuous mode [ 96.156008][ T5820] batadv0: entered allmulticast mode [ 96.161122][ T5820] bridge0: port 1(batadv0) entered blocking state [ 96.166254][ T5820] bridge0: port 1(batadv0) entered disabled state [ 96.170446][ T5820] bridge0: port 1(batadv0) entered blocking state [ 96.170608][ T5820] bridge0: port 1(batadv0) entered forwarding state [ 96.311851][ T29] audit: type=1400 audit(1790369250.064:1355): avc: denied { write } for pid=5795 comm="syz.5.702" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.580616][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.592788][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.592804][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 96.673677][ T5830] netlink: 'syz.5.712': attribute type 1 has an invalid length. [ 96.690615][ T5830] bond1: entered promiscuous mode [ 96.692856][ T5830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.743755][ T5830] macvtap1: entered allmulticast mode [ 96.751843][ T5830] bond1: (slave bridge2): making interface the new active one [ 96.751869][ T5830] bridge2: entered promiscuous mode [ 96.758578][ T5830] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 96.917613][ T5835] loop4: detected capacity change from 0 to 1024 [ 96.941837][ T5835] EXT4-fs: Ignoring removed i_version option [ 96.955733][ T5835] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.956302][ T5835] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 96.992393][ T29] audit: type=1400 audit(1790369250.744:1356): avc: denied { map } for pid=5843 comm="syz.1.720" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.145453][ T5856] loop4: detected capacity change from 0 to 256 [ 97.156547][ T5856] vfat: Bad value for 'time_offset' [ 97.355116][ T29] audit: type=1400 audit(1790369251.114:1357): avc: denied { connect } for pid=5863 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.770593][ T5875] sctp: [Deprecated]: syz.5.732 (pid 5875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.770593][ T5875] Use struct sctp_sack_info instead [ 97.815694][ T5875] loop5: detected capacity change from 0 to 512 [ 97.832336][ T5875] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 97.941246][ T5886] loop5: detected capacity change from 0 to 8192 [ 97.990281][ T5888] loop5: detected capacity change from 0 to 164 [ 98.067343][ T5891] loop5: detected capacity change from 0 to 128 [ 98.068244][ T5891] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.071309][ T29] audit: type=1400 audit(1790369251.824:1358): avc: denied { mounton } for pid=5890 comm="syz.5.739" path="/143/bus/sys" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 98.131736][ T3623] FAT-fs (loop5): error, invalid access to FAT (entry 0xffff0000) [ 98.131765][ T3623] FAT-fs (loop5): Filesystem has been set read-only [ 98.148671][ T3623] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.227954][ T5899] TC_ACT_REPEAT abuse ? [ 98.321460][ T5905] netlink: 'syz.4.744': attribute type 12 has an invalid length. [ 98.400417][ T29] audit: type=1400 audit(1790369252.154:1359): avc: denied { open } for pid=5914 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.400454][ T29] audit: type=1400 audit(1790369252.154:1360): avc: denied { kernel } for pid=5914 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.900262][ T5932] netlink: 'syz.0.753': attribute type 2 has an invalid length. [ 98.911221][ T5932] 0: entered promiscuous mode [ 99.261636][ T5941] Cannot find del_set index 4 as target [ 99.403113][ T5907] loop5: detected capacity change from 0 to 32768 [ 99.574908][ T5907] loop5: p1 p3 < > [ 99.597058][ T5949] ./dev/sda1: Can't lookup blockdev [ 99.868829][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 99.868848][ T29] audit: type=1400 audit(1790369253.624:1362): avc: denied { tracepoint } for pid=5957 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 99.949359][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 99.964240][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.295076][ T5986] loop4: detected capacity change from 0 to 128 [ 100.323770][ T5990] xt_hashlimit: size too large, truncated to 1048576 [ 100.339494][ T5986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 100.339933][ T5986] System zones: 1-3, 19-19, 35-36 [ 100.374930][ T29] audit: type=1400 audit(1790369254.134:1363): avc: denied { append } for pid=5992 comm="syz.5.779" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.376493][ T5986] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.379172][ T5986] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.405647][ T29] audit: type=1400 audit(1790369254.144:1364): avc: denied { write } for pid=5985 comm="syz.4.777" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.466928][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 100.492367][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.568241][ T6001] loop4: detected capacity change from 0 to 2048 [ 100.596456][ T6001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.613965][ T29] audit: type=1400 audit(1790369254.364:1365): avc: denied { write } for pid=6000 comm="syz.4.781" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.636916][ T6001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.636992][ T6001] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 100.637089][ T6001] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.637089][ T6001] [ 100.637104][ T6001] EXT4-fs (loop4): Total free blocks count 0 [ 100.637121][ T6001] EXT4-fs (loop4): Free/Dirty block details [ 100.637137][ T6001] EXT4-fs (loop4): free_blocks=2415919104 [ 100.637154][ T6001] EXT4-fs (loop4): dirty_blocks=16 [ 100.637170][ T6001] EXT4-fs (loop4): Block reservation details [ 100.637186][ T6001] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 100.639239][ T6001] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 100.639745][ T29] audit: type=1400 audit(1790369254.404:1366): avc: denied { write } for pid=6000 comm="syz.4.781" path="socket:[14967]" dev="sockfs" ino=14967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.667000][ T6010] netlink: 'syz.2.785': attribute type 39 has an invalid length. [ 100.814883][ T5999] loop5: detected capacity change from 0 to 512 [ 100.877650][ T5999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.894660][ T5999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 100.895049][ T5999] System zones: 1-12 [ 100.900727][ T5999] EXT4-fs (loop5): 1 truncate cleaned up [ 100.953756][ T6019] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 100.960533][ T5999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.969762][ T6019] syz_tun: entered promiscuous mode [ 101.001778][ T6019] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.010722][ T12] bond0: no route to arp_ip_target 24.0.0.0 and arp_validate is set [ 101.034952][ T5719] bond0: (slave syz_tun): interface is now down [ 101.035265][ T5719] bond0: now running without any active interface! [ 101.087975][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.125215][ T6032] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 101.147557][ T6035] netlink: 'syz.5.794': attribute type 2 has an invalid length. [ 101.156823][ T6035] FAULT_INJECTION: forcing a failure. [ 101.156823][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 101.156918][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.5.794 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.157087][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.157143][ T6035] Call Trace: [ 101.157172][ T6035] [ 101.157195][ T6035] __dump_stack+0x1d/0x30 [ 101.157276][ T6035] dump_stack_lvl+0x95/0xd0 [ 101.157356][ T6035] dump_stack+0x15/0x1b [ 101.157454][ T6035] should_fail_ex+0x262/0x280 [ 101.157532][ T6035] ? security_inode_alloc+0x37/0x100 [ 101.157618][ T6035] should_failslab+0x8c/0xb0 [ 101.157768][ T6035] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 101.157860][ T6035] ? security_inode_alloc+0x37/0x100 [ 101.157978][ T6035] security_inode_alloc+0x37/0x100 [ 101.158076][ T6035] inode_init_always_gfp+0x495/0x4e0 [ 101.158192][ T6035] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 101.158284][ T6035] alloc_inode+0x58/0x170 [ 101.158412][ T6035] new_inode+0x1d/0xe0 [ 101.158487][ T6035] hugetlbfs_get_inode+0x7b/0x330 [ 101.158579][ T6035] ? xfd_validate_state+0x45/0xf0 [ 101.158679][ T6035] hugetlb_file_setup+0x192/0x3d0 [ 101.158774][ T6035] ksys_mmap_pgoff+0x13f/0x310 [ 101.158891][ T6035] x64_sys_call+0x23b3/0x2550 [ 101.159058][ T6035] do_syscall_64+0x112/0x360 [ 101.159156][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.159228][ T6035] RIP: 0033:0x7fb11ddfe159 [ 101.159281][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.159343][ T6035] RSP: 002b:00007fb11c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.159494][ T6035] RAX: ffffffffffffffda RBX: 00007fb11e085fa0 RCX: 00007fb11ddfe159 [ 101.159533][ T6035] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 101.159581][ T6035] RBP: 00007fb11de9506b R08: ffffffffffffffff R09: 0000000000000000 [ 101.159631][ T6035] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 101.159645][ T6035] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 101.159665][ T6035] [ 101.334722][ T6046] ip_tables: iptables: counters copy to user failed while replacing table [ 102.028049][ T29] audit: type=1400 audit(1790369255.784:1367): avc: denied { execute } for pid=6067 comm="syz.1.807" path="/file1" dev="ramfs" ino=15137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 102.229914][ T29] audit: type=1326 audit(1790369255.985:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.4.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 102.230031][ T29] audit: type=1326 audit(1790369255.985:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.4.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 102.231631][ T29] audit: type=1326 audit(1790369255.985:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.4.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 102.231736][ T29] audit: type=1326 audit(1790369255.985:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.4.813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 102.246875][ T6077] loop5: detected capacity change from 0 to 128 [ 102.275637][ T6077] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.298679][ T6077] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.299390][ T6077] ext2 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.410970][ T3623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.170609][ T6106] syz_tun: left promiscuous mode [ 103.212942][ T6106] bridge0: port 1(batadv0) entered disabled state [ 103.278300][ T6106] tipc: Resetting bearer [ 103.308675][ T6106] batman_adv: batadv0: Interface deactivated: dummy0 [ 103.431475][ T6106] veth0_vlan: left allmulticast mode [ 103.524447][ T6127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.524706][ T6127] batman_adv: batadv0: Adding interface: gretap1 [ 103.524722][ T6127] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.524878][ T6127] batman_adv: batadv0: Interface activated: gretap1 [ 103.616645][ T6146] syzkaller0: entered promiscuous mode [ 103.616673][ T6146] syzkaller0: entered allmulticast mode [ 103.661777][ T5721] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.661848][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.662025][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.662178][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.702273][ T6157] loop1: detected capacity change from 0 to 512 [ 103.721099][ T6157] tmpfs: Bad value for 'mpol' [ 103.863867][ T6129] Direct I/O collision with buffered writes! File: /file1 Comm: syz.5.831 [ 103.956940][ T6176] loop1: detected capacity change from 0 to 512 [ 103.977649][ T6176] FAT-fs (loop1): data area starts beyond volume (199892 > 45184) [ 103.977724][ T6176] FAT-fs (loop1): Can't find a valid FAT filesystem [ 104.155096][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 104.155562][ T6180] netlink: 'syz.0.845': attribute type 15 has an invalid length. [ 104.826711][ T6201] loop4: detected capacity change from 0 to 512 [ 104.827064][ T6201] EXT4-fs: Ignoring removed i_version option [ 104.827644][ T6201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.858379][ T6201] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 104.858480][ T6201] loop4: lost filesystem error report for type 5 error -117 [ 104.860797][ T6201] EXT4-fs (loop4): 2 truncates cleaned up [ 104.861312][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.974714][ T6206] tipc: Enabled bearer , priority 0 [ 104.979134][ T6205] tipc: Resetting bearer [ 104.999602][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.013062][ T6205] tipc: Disabling bearer [ 105.144825][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 105.144844][ T29] audit: type=1400 audit(1790369258.905:1432): avc: denied { create } for pid=6217 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 105.147667][ T29] audit: type=1400 audit(1790369258.905:1433): avc: denied { getattr } for pid=6217 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 105.210786][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.861'. [ 105.256778][ T6224] FAULT_INJECTION: forcing a failure. [ 105.256778][ T6224] name failslab, interval 1, probability 0, space 0, times 0 [ 105.256850][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.256991][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.257010][ T6224] Call Trace: [ 105.257018][ T6224] [ 105.257029][ T6224] __dump_stack+0x1d/0x30 [ 105.257064][ T6224] dump_stack_lvl+0x95/0xd0 [ 105.257153][ T6224] dump_stack+0x15/0x1b [ 105.257240][ T6224] should_fail_ex+0x262/0x280 [ 105.257276][ T6224] ? security_inode_alloc+0x37/0x100 [ 105.257371][ T6224] should_failslab+0x8c/0xb0 [ 105.257408][ T6224] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 105.257438][ T6224] ? security_inode_alloc+0x37/0x100 [ 105.257565][ T6224] security_inode_alloc+0x37/0x100 [ 105.257602][ T6224] inode_init_always_gfp+0x495/0x4e0 [ 105.257634][ T6224] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 105.257661][ T6224] alloc_inode+0x58/0x170 [ 105.257688][ T6224] new_inode+0x1d/0xe0 [ 105.257732][ T6224] bdev_alloc+0x2e/0x1f0 [ 105.257765][ T6224] __alloc_disk_node+0xbe/0x340 [ 105.257795][ T6224] __blk_alloc_disk+0x68/0xd0 [ 105.257900][ T6224] dm_create+0x36d/0x850 [ 105.257947][ T6224] dev_create+0x141/0x290 [ 105.258061][ T6224] dm_ctl_ioctl+0x80b/0xad0 [ 105.258096][ T6224] ? __pfx_dev_create+0x10/0x10 [ 105.258144][ T6224] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 105.258176][ T6224] __se_sys_ioctl+0xce/0x140 [ 105.258233][ T6224] __x64_sys_ioctl+0x43/0x50 [ 105.258274][ T6224] x64_sys_call+0x239d/0x2550 [ 105.258363][ T6224] do_syscall_64+0x112/0x360 [ 105.258452][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.258484][ T6224] RIP: 0033:0x7fa5ad0ce159 [ 105.258512][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.258542][ T6224] RSP: 002b:00007fa5abb27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.258570][ T6224] RAX: ffffffffffffffda RBX: 00007fa5ad355fa0 RCX: 00007fa5ad0ce159 [ 105.258601][ T6224] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 105.258620][ T6224] RBP: 00007fa5ad16506b R08: 0000000000000000 R09: 0000000000000000 [ 105.258638][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.258724][ T6224] R13: 00007fa5ad356038 R14: 00007fa5ad355fa0 R15: 00007ffd135c0638 [ 105.258753][ T6224] [ 105.377537][ T6231] syz_tun: entered allmulticast mode [ 105.422498][ T6231] dvmrp6: entered allmulticast mode [ 105.439174][ T6230] syz_tun: left allmulticast mode [ 105.778437][ T29] audit: type=1400 audit(1790369259.535:1434): avc: denied { getopt } for pid=6239 comm="syz.2.867" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.319345][ T6254] syzkaller0: entered promiscuous mode [ 108.319446][ T6254] syzkaller0: entered allmulticast mode [ 108.445567][ T6260] loop4: detected capacity change from 0 to 2048 [ 108.457731][ T6264] netlink: 'syz.5.878': attribute type 1 has an invalid length. [ 108.472779][ T6260] loop4: p1 p3 < > p4 < p5 > [ 108.472792][ T6260] loop4: partition table partially beyond EOD, truncated [ 108.472935][ T6260] loop4: p1 size 196608 extends beyond EOD, truncated [ 108.473622][ T6260] loop4: p3 start 614273 is beyond EOD, truncated [ 108.474453][ T6260] loop4: p5 size 196608 extends beyond EOD, truncated [ 108.490005][ T6264] bond2: entered promiscuous mode [ 108.490291][ T6264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.531299][ T6264] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.531324][ T6264] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.531351][ T6264] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 108.578531][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.579867][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 108.589758][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.619393][ T6264] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.619416][ T6264] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.683944][ T29] audit: type=1326 audit(1790369262.445:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 108.688678][ T29] audit: type=1326 audit(1790369262.445:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 108.689522][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 108.689539][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 108.809071][ T6278] ./dev/sda1: Can't lookup blockdev [ 108.834518][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.883'. [ 108.834559][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.883'. [ 108.836270][ T29] audit: type=1326 audit(1790369262.595:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 108.836468][ T29] audit: type=1326 audit(1790369262.595:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8163e159 code=0x7ffc0000 [ 108.953805][ T6275] loop1: detected capacity change from 0 to 512 [ 108.971007][ T6275] EXT4-fs: Ignoring removed nobh option [ 109.044643][ T6275] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.881: corrupted inode contents [ 109.044924][ T6275] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.049626][ T6275] EXT4-fs (loop1): Remounting filesystem read-only [ 109.051115][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.051592][ C1] EXT4-fs (loop1): initial error at time 1790369262: ext4_do_update_inode:5801: inode 3 [ 109.051986][ C1] EXT4-fs (loop1): last error at time 1790369262: ext4_do_update_inode:5801: inode 3 [ 109.113161][ T6275] Quota error (device loop1): write_blk: dquota write failed [ 109.113371][ T6275] Quota error (device loop1): qtree_write_dquot: Error -30 occurred while creating quota [ 109.143349][ T6275] EXT4-fs (loop1): 1 truncate cleaned up [ 109.188000][ T6275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.189411][ T6275] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.305919][ T6296] tipc: Enabling of bearer rejected, failed to enable media [ 109.381094][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.577377][ T6311] netlink: 188 bytes leftover after parsing attributes in process `syz.5.892'. [ 110.202251][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'. [ 111.924763][ T29] audit: type=1326 audit(1790369265.686:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.924808][ T29] audit: type=1326 audit(1790369265.686:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.925817][ T29] audit: type=1326 audit(1790369265.686:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.926229][ T29] audit: type=1326 audit(1790369265.686:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.927215][ T29] audit: type=1326 audit(1790369265.686:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.927255][ T29] audit: type=1326 audit(1790369265.686:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.927358][ T29] audit: type=1326 audit(1790369265.686:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.927766][ T29] audit: type=1326 audit(1790369265.686:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.928357][ T29] audit: type=1326 audit(1790369265.686:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.928396][ T29] audit: type=1326 audit(1790369265.686:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1573e2e159 code=0x7ffc0000 [ 111.957624][ T6351] loop4: detected capacity change from 0 to 512 [ 111.962053][ T6351] EXT4-fs: Ignoring removed oldalloc option [ 111.962162][ T6351] EXT4-fs: Ignoring removed i_version option [ 111.983057][ T6351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.012526][ T6351] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 112.012604][ T6351] loop4: lost filesystem error report for type 5 error -117 [ 112.019075][ T6351] EXT4-fs (loop4): 2 truncates cleaned up [ 112.027909][ T6351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.199463][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.274573][ T6361] ./dev/sda1: Can't lookup blockdev [ 112.391481][ T6365] loop1: detected capacity change from 0 to 1024 [ 112.407018][ T6365] EXT4-fs: Ignoring removed bh option [ 112.410885][ T6365] EXT4-fs: Mount option(s) incompatible with ext2 [ 112.553870][ T6369] bridge0: port 1(dummy0) entered blocking state [ 112.553989][ T6369] bridge0: port 1(dummy0) entered disabled state [ 112.554090][ T6369] dummy0: entered allmulticast mode [ 112.554685][ T6369] dummy0: entered promiscuous mode [ 112.583319][ T6363] loop4: detected capacity change from 0 to 512 [ 112.804233][ T6363] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.911: bg 0: block 385: padding at end of block bitmap is not set [ 112.804686][ T6363] loop4: lost filesystem error report for type 5 error -117 [ 112.807301][ T6363] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 112.807330][ T6363] loop4: lost filesystem error report for type 5 error -117 [ 112.820392][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 112.820454][ C0] EXT4-fs (loop4): initial error at time 1790369266: ext4_validate_block_bitmap:445 [ 112.820547][ C0] EXT4-fs (loop4): last error at time 1790369266: ext4_mb_clear_bb:6680 [ 112.832955][ T6363] EXT4-fs (loop4): 2 truncates cleaned up [ 112.834154][ T6363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.895207][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 113.042955][ T6384] syzkaller0: entered promiscuous mode [ 113.042976][ T6384] syzkaller0: entered allmulticast mode [ 113.227165][ T6385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.701065][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.701104][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.701168][ T6400] bridge_slave_0: entered allmulticast mode [ 113.701916][ T6400] bridge_slave_0: entered promiscuous mode [ 113.740583][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.740626][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.740751][ T6400] bridge_slave_1: entered allmulticast mode [ 113.741557][ T6400] bridge_slave_1: entered promiscuous mode [ 113.781708][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.783043][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.818505][ T6400] team0: Port device team_slave_0 added [ 113.826492][ T6400] team0: Port device team_slave_1 added [ 113.847118][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.847136][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.847174][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.847804][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.847834][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.847948][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.857517][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 114.208215][ T6400] hsr_slave_0: entered promiscuous mode [ 114.209007][ T6400] hsr_slave_1: entered promiscuous mode [ 114.209424][ T6400] debugfs: 'hsr0' already exists in 'hsr' [ 114.209440][ T6400] Cannot create hsr debugfs directory [ 114.227133][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 114.260906][ T6436] netlink: 168 bytes leftover after parsing attributes in process `syz.5.937'. [ 114.286872][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 114.324386][ T6439] FAULT_INJECTION: forcing a failure. [ 114.324386][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 114.324423][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.5.938 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.324458][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.324555][ T6439] Call Trace: [ 114.324562][ T6439] [ 114.324570][ T6439] __dump_stack+0x1d/0x30 [ 114.324681][ T6439] dump_stack_lvl+0x95/0xd0 [ 114.324712][ T6439] dump_stack+0x15/0x1b [ 114.324813][ T6439] should_fail_ex+0x262/0x280 [ 114.324873][ T6439] ? alloc_pipe_info+0xad/0x340 [ 114.324917][ T6439] should_failslab+0x8c/0xb0 [ 114.324997][ T6439] __kmalloc_cache_noprof+0x7a/0x400 [ 114.325078][ T6439] ? alloc_pipe_info+0xad/0x340 [ 114.325119][ T6439] alloc_pipe_info+0xad/0x340 [ 114.325165][ T6439] fifo_open+0x9c/0x5b0 [ 114.325258][ T6439] do_dentry_open+0x49f/0xa60 [ 114.325344][ T6439] ? __pfx_fifo_open+0x10/0x10 [ 114.325391][ T6439] vfs_open+0x37/0x1e0 [ 114.325435][ T6439] path_openat+0xc01/0x10d0 [ 114.325508][ T6439] do_file_open+0x16c/0x290 [ 114.325548][ T6439] do_sys_openat2+0xa0/0x130 [ 114.325576][ T6439] __x64_sys_openat+0xf2/0x120 [ 114.325615][ T6439] x64_sys_call+0x1f72/0x2550 [ 114.325645][ T6439] do_syscall_64+0x112/0x360 [ 114.325676][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.325715][ T6439] RIP: 0033:0x7fb11ddfe159 [ 114.325738][ T6439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.325765][ T6439] RSP: 002b:00007fb11c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.325802][ T6439] RAX: ffffffffffffffda RBX: 00007fb11e085fa0 RCX: 00007fb11ddfe159 [ 114.325845][ T6439] RDX: 0000000000020d42 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 114.325860][ T6439] RBP: 00007fb11de9506b R08: 0000000000000000 R09: 0000000000000000 [ 114.325878][ T6439] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 114.325890][ T6439] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 114.325913][ T6439] [ 114.643172][ T6449] loop1: detected capacity change from 0 to 128 [ 114.663678][ T6449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.666448][ T6449] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.721954][ T6400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.727900][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.746631][ T6400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.752819][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.754377][ T6400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.769072][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.796850][ T6400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.823460][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.945922][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.992708][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.996593][ T5715] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.996622][ T5715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.002931][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.003045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.116758][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.261464][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.372667][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 115.566546][ T6498] loop1: detected capacity change from 0 to 164 [ 115.703685][ T6400] veth0_vlan: entered promiscuous mode [ 115.706879][ T6400] veth1_vlan: entered promiscuous mode [ 115.740468][ T6400] veth0_macvtap: entered promiscuous mode [ 115.743680][ T6400] veth1_macvtap: entered promiscuous mode [ 115.766140][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.782396][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.800889][ T5721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.801097][ T5721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.801200][ T5721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.801302][ T5721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.970944][ T6504] loop5: detected capacity change from 0 to 512 [ 116.199845][ T6504] EXT4-fs (loop5): 1 orphan inode deleted [ 116.214059][ T5726] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:15: Failed to release dquot type 1 [ 116.214096][ T5726] loop5: lost filesystem error report for type 5 error -117 [ 116.277615][ T6522] ./dev/sda1: Can't lookup blockdev [ 116.312726][ T6504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.318732][ T6504] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.495596][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.679349][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 116.716180][ T6536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.717472][ T6536] bond1: (slave bond2): Enslaving as an active interface with an up link [ 116.865827][ T6541] syzkaller0: entered promiscuous mode [ 116.865904][ T6541] syzkaller0: entered allmulticast mode [ 116.897082][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 117.017443][ T6544] loop6: detected capacity change from 0 to 512 [ 117.124706][ T6544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.124822][ T6544] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.263717][ T6400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.342065][ T6548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.480685][ T6553] loop1: detected capacity change from 0 to 512 [ 117.483028][ T6553] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.485877][ T6553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.521682][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.521843][ T6553] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.523971][ T6553] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.966: invalid fast symlink length 10 [ 117.566125][ T6560] syzkaller0: entered promiscuous mode [ 117.566142][ T6560] syzkaller0: entered allmulticast mode [ 117.580706][ T6553] EXT4-fs (loop1): Remounting filesystem read-only [ 117.753790][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.818586][ T6577] capability: warning: `syz.0.976' uses deprecated v2 capabilities in a way that may be insecure [ 117.826437][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 117.826539][ T29] audit: type=1400 audit(1790369271.586:1630): avc: denied { getopt } for pid=6567 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.890225][ T6579] FAULT_INJECTION: forcing a failure. [ 117.890225][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.890374][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.6.977 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.890413][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.890504][ T6579] Call Trace: [ 117.890512][ T6579] [ 117.890520][ T6579] __dump_stack+0x1d/0x30 [ 117.890548][ T6579] dump_stack_lvl+0x95/0xd0 [ 117.890572][ T6579] dump_stack+0x15/0x1b [ 117.890611][ T6579] should_fail_ex+0x262/0x280 [ 117.890639][ T6579] should_fail+0xb/0x20 [ 117.890663][ T6579] should_fail_usercopy+0x1a/0x20 [ 117.890691][ T6579] _copy_to_user+0x20/0xa0 [ 117.890797][ T6579] copy_siginfo_to_user+0x22/0xb0 [ 117.890879][ T6579] x64_setup_rt_frame+0x2b4/0x4e0 [ 117.890913][ T6579] arch_do_signal_or_restart+0x27c/0x480 [ 117.890951][ T6579] exit_to_user_mode_loop+0x15d/0x8c0 [ 117.891006][ T6579] do_syscall_64+0x212/0x360 [ 117.891030][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.891080][ T6579] RIP: 0033:0x7fcced51e159 [ 117.891102][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.891172][ T6579] RSP: 002b:00007fccebf77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 117.891195][ T6579] RAX: 0000000000000000 RBX: 00007fcced7a5fa0 RCX: 00007fcced51e159 [ 117.891210][ T6579] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 117.891224][ T6579] RBP: 00007fcced5b506b R08: 0000000000000000 R09: 0000000000000000 [ 117.891239][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.891319][ T6579] R13: 00007fcced7a6038 R14: 00007fcced7a5fa0 R15: 00007fff3ad791f8 [ 117.891343][ T6579] [ 118.088028][ T29] audit: type=1400 audit(1790369271.846:1631): avc: denied { read } for pid=6583 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.389266][ T6595] netlink: 'syz.1.983': attribute type 39 has an invalid length. [ 120.789231][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.978'. [ 121.191705][ T29] audit: type=1326 audit(1790369274.957:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 121.191749][ T29] audit: type=1326 audit(1790369274.957:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 121.246136][ T29] audit: type=1326 audit(1790369274.957:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 121.246241][ T29] audit: type=1326 audit(1790369274.957:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 121.246346][ T29] audit: type=1326 audit(1790369274.957:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11ddfe159 code=0x7ffc0000 [ 121.246449][ T29] audit: type=1400 audit(1790369274.967:1637): avc: denied { read } for pid=2967 comm="acpid" name="event#" dev="devtmpfs" ino=973 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.246535][ T29] audit: type=1400 audit(1790369274.967:1638): avc: denied { open } for pid=2967 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=973 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.246630][ T29] audit: type=1400 audit(1790369274.967:1639): avc: denied { ioctl } for pid=2967 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=973 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 121.408554][ T6619] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 121.436317][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.464827][ T6619] bond1: (slave veth0_to_bond): making interface the new active one [ 121.466609][ T6619] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.497830][ T6619] bond1: entered promiscuous mode [ 121.497892][ T6619] veth0_to_bond: entered promiscuous mode [ 121.498001][ T6619] bond1: entered allmulticast mode [ 121.498019][ T6619] veth0_to_bond: entered allmulticast mode [ 122.695573][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1015'. [ 122.844283][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 122.844300][ T29] audit: type=1400 audit(1790369276.607:1673): avc: denied { remount } for pid=6680 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.880849][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6687 comm=syz.0.1027 [ 122.883712][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 123.146514][ T6695] loop5: detected capacity change from 0 to 512 [ 123.156542][ T6695] EXT4-fs: Ignoring removed oldalloc option [ 123.171625][ T6695] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1019: bg 0: block 5: invalid block bitmap [ 123.171658][ T6695] loop5: lost filesystem error report for type 5 error -117 [ 123.171796][ T6695] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 123.171815][ T6695] loop5: lost filesystem error report for type 5 error -117 [ 123.171919][ T6695] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1019: invalid indirect mapped block 3 (level 2) [ 123.172044][ T6695] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.172247][ T6695] EXT4-fs (loop5): 1 orphan inode deleted [ 123.172271][ T6695] EXT4-fs (loop5): 1 truncate cleaned up [ 123.172895][ T6695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.202455][ T29] audit: type=1400 audit(1790369276.967:1674): avc: denied { write } for pid=6694 comm="syz.5.1019" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.202485][ T29] audit: type=1400 audit(1790369276.967:1675): avc: denied { create } for pid=6694 comm="syz.5.1019" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 123.317547][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.508155][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 123.835781][ T29] audit: type=1400 audit(1790369277.587:1676): avc: denied { getopt } for pid=6714 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.121154][ T6720] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 124.121712][ T6720] bond2 (unregistering): Released all slaves [ 124.171345][ T6730] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 124.174538][ T6730] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 124.474388][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1039'. [ 124.489195][ T6740] unsupported nlmsg_type 40 [ 124.660959][ T29] audit: type=1400 audit(1790369278.427:1677): avc: denied { getopt } for pid=6748 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.266213][ T6767] loop6: detected capacity change from 0 to 512 [ 125.304161][ T6767] EXT4-fs (loop6): orphan cleanup on readonly fs [ 125.307806][ T6767] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1049: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 125.308018][ T6767] loop6: lost filesystem error report for type 5 error -117 [ 125.308873][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 125.309120][ C1] EXT4-fs (loop6): initial error at time 1790369279: ext4_xattr_inode_iget:473 [ 125.309270][ C1] EXT4-fs (loop6): last error at time 1790369279: ext4_xattr_inode_iget:473 [ 125.309436][ T6767] EXT4-fs (loop6): 1 orphan inode deleted [ 125.310878][ T6767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.326298][ T29] audit: type=1400 audit(1790369279.087:1678): avc: denied { write } for pid=6766 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.473703][ T6772] loop5: detected capacity change from 0 to 164 [ 125.640212][ T6400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.712504][ T29] audit: type=1400 audit(1790369279.467:1679): avc: denied { mount } for pid=6776 comm="syz.6.1054" name="/" dev="rpc_pipefs" ino=18102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 125.751660][ T6777] loop1: detected capacity change from 0 to 256 [ 125.821029][ T29] audit: type=1400 audit(1790369279.567:1680): avc: denied { unmount } for pid=6400 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 125.901629][ T29] audit: type=1326 audit(1790369279.627:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.6.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced51e159 code=0x7ffc0000 [ 125.901673][ T29] audit: type=1326 audit(1790369279.627:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.6.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced51e159 code=0x7ffc0000 [ 126.035095][ T6800] ./dev/sda1: Can't lookup blockdev [ 126.098639][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6807 comm=syz.1.1061 [ 126.098929][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 126.427744][ T6822] netlink: 'syz.5.1070': attribute type 4 has an invalid length. [ 126.427827][ T6822] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1070'. [ 126.563089][ T6820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.589274][ T6822] .`: renamed from bond0 (while UP) [ 126.634653][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1073'. [ 126.651169][ T6825] netlink: 'syz.6.1072': attribute type 10 has an invalid length. [ 126.670027][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.670568][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.694300][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.694490][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.694916][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.694995][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.729671][ T6825] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.736904][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 127.297087][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1084'. [ 127.335846][ T6864] veth3: entered allmulticast mode [ 127.421483][ T6868] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1085'. [ 127.689158][ T6870] loop6: detected capacity change from 0 to 1024 [ 127.711539][ T6870] EXT4-fs: Ignoring removed i_version option [ 127.728574][ T6870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.728738][ T6870] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.763056][ T6870] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 127.765629][ T6870] EXT4-fs (loop6): orphan cleanup on readonly fs [ 127.765953][ T6870] EXT4-fs error (device loop6): ext4_free_blocks:6719: comm syz.6.1086: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.766537][ T6870] loop6: lost filesystem error report for type 5 error -117 [ 127.769534][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 127.770022][ C0] EXT4-fs (loop6): initial error at time 1790369281: ext4_free_blocks:6719 [ 127.770242][ C0] EXT4-fs (loop6): last error at time 1790369281: ext4_free_blocks:6719 [ 127.831927][ T6870] EXT4-fs (loop6): Remounting filesystem read-only [ 127.832828][ T6870] EXT4-fs (loop6): 1 orphan inode deleted [ 127.899849][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 127.911958][ T6870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.915278][ T6885] vlan0: entered allmulticast mode [ 127.915299][ T6885] bridge1: entered allmulticast mode [ 128.869190][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 128.869210][ T29] audit: type=1326 audit(1790369282.638:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8213de159 code=0x7ffc0000 [ 128.869412][ T29] audit: type=1326 audit(1790369282.638:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8213de159 code=0x7ffc0000 [ 128.869572][ T29] audit: type=1326 audit(1790369282.638:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8213de159 code=0x7ffc0000 [ 128.871029][ T29] audit: type=1326 audit(1790369282.638:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff8213de159 code=0x7ffc0000 [ 128.935820][ T29] audit: type=1326 audit(1790369282.698:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 128.961448][ T29] audit: type=1326 audit(1790369282.728:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 128.987129][ T29] audit: type=1326 audit(1790369282.748:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 129.012762][ T29] audit: type=1326 audit(1790369282.778:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 129.038603][ T29] audit: type=1326 audit(1790369282.808:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 129.064227][ T29] audit: type=1326 audit(1790369282.828:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.2.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff82139e98e code=0x7ffc0000 [ 129.189668][ T6907] batadv_slave_1: entered promiscuous mode [ 129.189989][ T6906] batadv_slave_1: left promiscuous mode [ 129.749058][ T6400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.853881][ T6916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6916 comm=syz.6.1093 [ 129.855599][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1093'. [ 130.153476][ T6919] loop5: detected capacity change from 0 to 1024 [ 130.185554][ T6929] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 130.199456][ T6929] bond1 (unregistering): Released all slaves [ 130.260577][ T6919] EXT4-fs: Ignoring removed i_version option [ 130.284741][ T6919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.301018][ T6919] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.336581][ T6919] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 130.347882][ T6919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 130.361354][ T6919] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.1104: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.361503][ T6919] loop5: lost filesystem error report for type 5 error -117 [ 130.364511][ T6919] EXT4-fs (loop5): Remounting filesystem read-only [ 130.365389][ T6919] EXT4-fs (loop5): 1 orphan inode deleted [ 130.470534][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.800260][ T6947] FAULT_INJECTION: forcing a failure. [ 130.800260][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 130.800299][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.6.1111 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.800339][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.800358][ T6947] Call Trace: [ 130.800379][ T6947] [ 130.800397][ T6947] __dump_stack+0x1d/0x30 [ 130.800433][ T6947] dump_stack_lvl+0x95/0xd0 [ 130.800460][ T6947] dump_stack+0x15/0x1b [ 130.800488][ T6947] should_fail_ex+0x262/0x280 [ 130.800574][ T6947] ? alloc_workqueue_va+0x133/0x1630 [ 130.800610][ T6947] should_failslab+0x8c/0xb0 [ 130.800654][ T6947] __kmalloc_cache_noprof+0x7a/0x400 [ 130.800769][ T6947] ? alloc_workqueue_va+0x133/0x1630 [ 130.800801][ T6947] alloc_workqueue_va+0x133/0x1630 [ 130.800840][ T6947] alloc_workqueue_noprof+0x84/0xb0 [ 130.800938][ T6947] dm_create+0x6d3/0x850 [ 130.801002][ T6947] dev_create+0x141/0x290 [ 130.801032][ T6947] dm_ctl_ioctl+0x80b/0xad0 [ 130.801133][ T6947] ? __pfx_dev_create+0x10/0x10 [ 130.801179][ T6947] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 130.801211][ T6947] __se_sys_ioctl+0xce/0x140 [ 130.801296][ T6947] __x64_sys_ioctl+0x43/0x50 [ 130.801342][ T6947] x64_sys_call+0x239d/0x2550 [ 130.801372][ T6947] do_syscall_64+0x112/0x360 [ 130.801406][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.801479][ T6947] RIP: 0033:0x7fcced51e159 [ 130.801495][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.801519][ T6947] RSP: 002b:00007fccebf77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.801555][ T6947] RAX: ffffffffffffffda RBX: 00007fcced7a5fa0 RCX: 00007fcced51e159 [ 130.801573][ T6947] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 130.801591][ T6947] RBP: 00007fcced5b506b R08: 0000000000000000 R09: 0000000000000000 [ 130.801610][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.801703][ T6947] R13: 00007fcced7a6038 R14: 00007fcced7a5fa0 R15: 00007fff3ad791f8 [ 130.801733][ T6947] [ 131.041804][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.355027][ T6956] syzkaller0: entered promiscuous mode [ 131.355047][ T6956] syzkaller0: entered allmulticast mode [ 131.363385][ T6951] loop5: detected capacity change from 0 to 512 [ 131.402399][ T6951] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1113: bg 0: block 385: padding at end of block bitmap is not set [ 131.402717][ T6951] loop5: lost filesystem error report for type 5 error -117 [ 131.405039][ T6951] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 131.405326][ T6951] loop5: lost filesystem error report for type 5 error -117 [ 131.408048][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 131.408071][ C1] EXT4-fs (loop5): initial error at time 1790369285: ext4_validate_block_bitmap:445 [ 131.408097][ C1] EXT4-fs (loop5): last error at time 1790369285: ext4_mb_clear_bb:6680 [ 131.425216][ T6951] EXT4-fs (loop5): 2 truncates cleaned up [ 131.426698][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.503962][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.563145][ T6966] ip_tables: iptables: counters copy to user failed while replacing table [ 131.659907][ T6967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6967 comm=syz.5.1117 [ 131.660487][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'. [ 132.291838][ T7003] pimreg: entered allmulticast mode [ 132.301781][ T7003] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.448980][ T7010] loop6: detected capacity change from 0 to 128 [ 132.471383][ T7011] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.471741][ T7010] FAT-fs (loop6): bogus number of FAT sectors [ 132.471805][ T7010] FAT-fs (loop6): Can't find a valid FAT filesystem [ 132.476509][ T7011] bond2: (slave lo): Enslaving as an active interface with an up link [ 132.522200][ T7011] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 132.621729][ T7019] loop1: detected capacity change from 0 to 8192 [ 132.668282][ T7021] loop5: detected capacity change from 0 to 2048 [ 132.695408][ T7021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.802287][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.872678][ T7029] FAULT_INJECTION: forcing a failure. [ 132.872678][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 132.872718][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.5.1144 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.872751][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.872818][ T7029] Call Trace: [ 132.872892][ T7029] [ 132.872902][ T7029] __dump_stack+0x1d/0x30 [ 132.872938][ T7029] dump_stack_lvl+0x95/0xd0 [ 132.872968][ T7029] dump_stack+0x15/0x1b [ 132.873074][ T7029] should_fail_ex+0x262/0x280 [ 132.873119][ T7029] ? tipc_conn_alloc+0x37/0x240 [ 132.873152][ T7029] should_failslab+0x8c/0xb0 [ 132.873183][ T7029] __kmalloc_cache_noprof+0x7a/0x400 [ 132.873230][ T7029] ? tipc_conn_alloc+0x37/0x240 [ 132.873267][ T7029] tipc_conn_alloc+0x37/0x240 [ 132.873296][ T7029] tipc_topsrv_kern_subscr+0xef/0x1e0 [ 132.873357][ T7029] tipc_group_create+0x234/0x270 [ 132.873385][ T7029] tipc_sk_join+0x110/0x450 [ 132.873470][ T7029] ? lock_sock_nested+0x84/0x110 [ 132.873535][ T7029] tipc_setsockopt+0x594/0x620 [ 132.873569][ T7029] ? __pfx_tipc_setsockopt+0x10/0x10 [ 132.873635][ T7029] __sys_setsockopt+0x184/0x200 [ 132.873667][ T7029] __x64_sys_setsockopt+0x64/0x80 [ 132.873696][ T7029] x64_sys_call+0x248f/0x2550 [ 132.873733][ T7029] do_syscall_64+0x112/0x360 [ 132.873764][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.873787][ T7029] RIP: 0033:0x7fb11ddfe159 [ 132.873804][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.873878][ T7029] RSP: 002b:00007fb11c857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.873900][ T7029] RAX: ffffffffffffffda RBX: 00007fb11e085fa0 RCX: 00007fb11ddfe159 [ 132.873915][ T7029] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 132.873931][ T7029] RBP: 00007fb11de9506b R08: 0000000000000010 R09: 0000000000000000 [ 132.873963][ T7029] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 132.873977][ T7029] R13: 00007fb11e086038 R14: 00007fb11e085fa0 R15: 00007fffa738ed98 [ 132.873999][ T7029] [ 133.169320][ T7040] syzkaller0: entered promiscuous mode [ 133.169403][ T7040] syzkaller0: entered allmulticast mode [ 133.695347][ T7050] loop1: detected capacity change from 0 to 512 [ 133.729510][ T7050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.729599][ T7050] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.007311][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.125700][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 134.125720][ T29] audit: type=1400 audit(1790369287.888:1770): avc: denied { create } for pid=7065 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.134878][ T29] audit: type=1400 audit(1790369287.888:1771): avc: denied { bind } for pid=7065 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.134919][ T29] audit: type=1400 audit(1790369287.898:1772): avc: denied { listen } for pid=7065 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.214203][ T7042] loop6: detected capacity change from 0 to 764 [ 134.332170][ T29] audit: type=1400 audit(1790369288.098:1773): avc: denied { write } for pid=7074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.399572][ T29] audit: type=1400 audit(1790369288.168:1774): avc: denied { write } for pid=7095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.657807][ T29] audit: type=1400 audit(1790369288.418:1775): avc: denied { write } for pid=7103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.727130][ T29] audit: type=1400 audit(1790369288.488:1776): avc: denied { write } for pid=7135 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.773572][ T29] audit: type=1400 audit(1790369288.538:1777): avc: denied { read } for pid=7136 comm="syz.6.1160" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.773611][ T29] audit: type=1400 audit(1790369288.538:1778): avc: denied { open } for pid=7136 comm="syz.6.1160" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.852045][ T29] audit: type=1400 audit(1790369288.618:1779): avc: denied { create } for pid=7136 comm="syz.6.1160" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.939895][ T7144] syzkaller0: entered promiscuous mode [ 134.939921][ T7144] syzkaller0: entered allmulticast mode [ 135.118262][ T7153] loop5: detected capacity change from 0 to 8192 [ 135.489425][ T7212] netlink: 620 bytes leftover after parsing attributes in process `syz.5.1163'. [ 135.513763][ T7212] loop5: detected capacity change from 0 to 256 [ 135.536807][ T5724] IPVS: starting estimator thread 0... [ 135.627923][ T7219] IPVS: using max 1872 ests per chain, 93600 per kthread [ 135.987032][ T7223] ================================================================== [ 135.987076][ T7223] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 135.987117][ T7223] [ 135.987123][ T7223] read to 0xffff888126329800 of 2048 bytes by task 5715 on cpu 1: [ 135.987142][ T7223] copy_folio_from_iter_atomic+0x728/0x10a0 [ 135.987181][ T7223] generic_perform_write+0x2c4/0x490 [ 135.987214][ T7223] shmem_file_write_iter+0xc5/0xf0 [ 135.987236][ T7223] lo_rw_aio+0x6ab/0x760 [ 135.987257][ T7223] loop_process_work+0x569/0xad0 [ 135.987279][ T7223] loop_workfn+0x31/0x40 [ 135.987308][ T7223] process_scheduled_works+0x56a/0xa50 [ 135.987343][ T7223] worker_thread+0x569/0x750 [ 135.987376][ T7223] kthread+0x223/0x270 [ 135.987398][ T7223] ret_from_fork+0x146/0x330 [ 135.987431][ T7223] ret_from_fork_asm+0x1a/0x30 [ 135.987460][ T7223] [ 135.987467][ T7223] write to 0xffff888126329a04 of 46 bytes by task 7223 on cpu 0: [ 135.987490][ T7223] copy_folio_from_iter_atomic+0x728/0x10a0 [ 135.987522][ T7223] generic_perform_write+0x2c4/0x490 [ 135.987552][ T7223] __generic_file_write_iter+0x9e/0x120 [ 135.987581][ T7223] generic_file_write_iter+0x77/0x1f0 [ 135.987611][ T7223] iter_file_splice_write+0x6a0/0xa60 [ 135.987632][ T7223] direct_splice_actor+0x158/0x280 [ 135.987664][ T7223] splice_direct_to_actor+0x2f9/0x680 [ 135.987685][ T7223] do_splice_direct+0x119/0x1a0 [ 135.987705][ T7223] do_sendfile+0x37d/0x640 [ 135.987726][ T7223] __x64_sys_sendfile64+0x105/0x150 [ 135.987745][ T7223] x64_sys_call+0x1015/0x2550 [ 135.987771][ T7223] do_syscall_64+0x112/0x360 [ 135.987793][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.987816][ T7223] [ 135.987821][ T7223] Reported by Kernel Concurrency Sanitizer on: [ 135.987832][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.5.1163 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.987859][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.987872][ T7223] ================================================================== [ 136.615054][ T7237] loop1: detected capacity change from 0 to 8192 [ 136.650258][ T7237] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.686664][ T5360] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec