last executing test programs: 3.683463356s ago: executing program 2 (id=959): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 3.311342737s ago: executing program 3 (id=965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44956) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) 3.301517719s ago: executing program 4 (id=968): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x82, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x3}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.278659973s ago: executing program 2 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="9a421553328e3804800e0c460afd02b874556bad", 0x14}], 0x1}, 0x24048001) 3.253557748s ago: executing program 4 (id=970): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0xd8) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) socket$kcm(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x81fd, 0x4) 2.7726251s ago: executing program 2 (id=973): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fremovexattr(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='user']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2.451181951s ago: executing program 3 (id=975): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 2.395271252s ago: executing program 1 (id=977): syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mlockall(0x7) write(r0, &(0x7f00000002c0)='0', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) fallocate(r1, 0x0, 0xbf5, 0x2000402) io_setup(0x81, 0x0) 2.350211921s ago: executing program 4 (id=978): openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/netfilter/nf_log_all_netns\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0xd, 0x100000001, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000050000000060a0b0400000000000000000200000a0900010073797a30000000000900020073797a30000000002400048041d10180080001006c6f000800000000000006400000002005000240000000001400000011000100000000000000"], 0xd8}}, 0x0) syz_emit_ethernet(0x102e, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.225770905s ago: executing program 4 (id=979): write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket(0x1e, 0x4, 0x0) symlink(0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x257) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1.817736292s ago: executing program 0 (id=980): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000000034a04000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r0, 0x0, 0x406f413, 0x0) 1.817189392s ago: executing program 4 (id=990): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) close(0x3) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) 1.645980065s ago: executing program 0 (id=981): keyctl$session_to_parent(0x12) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x4) r0 = perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5}, 0x10ecc8, 0x1324, 0x1000fff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x16, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5383, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e26, 0x2000, 0x7d, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0xc8, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x10290, 0xffffffff, 0x0, 0x1, 0x7, 0x2, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, r0, 0x0) 1.577326269s ago: executing program 0 (id=982): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0xda) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 1.417130759s ago: executing program 2 (id=983): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010007001000fedbdf", @ANYRES32=0x0, @ANYBLOB="97000300841c0500200012800f0001b5e41779645f736c61766500000c000580060005000000000014003500626f6e645f736c6176655f30"], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0xc084) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) flistxattr(r3, &(0x7f0000000100)=""/43, 0x2b) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x11, 0x10, 0x3, 0xb, 0x6, 0x80000000, 0x2, 0xa0, 0xffffffffffffffff}) r5 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)='nf 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) 1.416939739s ago: executing program 3 (id=984): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.41597682s ago: executing program 0 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000900007333f75e000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b00000a0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x8, 0xc5, &(0x7f00000005c0)=""/197, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x1, 0x3, 0x9}, 0x10, 0x4615, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x4, 0xb, 0x6}], 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x3, 0x0, 0x0, 0x0, 0x7, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10001, 0xf11}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x22005, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dca6ff", 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) kexec_load(0x20000000, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x14080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x67f, 0x7fffffffffffffff}, 0x20, 0x0, 0xc40, 0x2, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x100000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 1.41542392s ago: executing program 1 (id=986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) 1.324552907s ago: executing program 2 (id=987): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1000, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@auto_da_alloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r1, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000) 1.323179997s ago: executing program 1 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000240)="278ca568de16719bd1", 0x0}, 0x20) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000240)={0x50c6, 0x80, 0x3d2}) socket$inet(0x2, 0x3, 0x6) iopl(0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @private=0xa010101}}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 1.117346637s ago: executing program 1 (id=989): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.087692682s ago: executing program 0 (id=991): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'dummy0\x00', &(0x7f0000000840)=@ethtool_perm_addr={0x20, 0x6, "d6e9a99e0a6a"}}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x42801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x120000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r2, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) 1.038374062s ago: executing program 1 (id=992): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000010) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) mount(0x0, &(0x7f0000000500)='./sys\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 861.744786ms ago: executing program 1 (id=993): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x87, 0x80, 0xfc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x3, 0x5}}}}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000107010300000000594d98c40a000002"], 0x28}, 0x1, 0x0, 0x0, 0x2000090}, 0x24000006) 693.338728ms ago: executing program 4 (id=994): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fremovexattr(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='user']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 530.453958ms ago: executing program 0 (id=995): syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mlockall(0x7) write(r0, &(0x7f00000002c0)='0', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) fallocate(r1, 0x0, 0xbf5, 0x2000402) io_setup(0x81, 0x0) 529.735678ms ago: executing program 3 (id=996): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0xda) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 293.797464ms ago: executing program 3 (id=997): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 85.858934ms ago: executing program 2 (id=998): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) 0s ago: executing program 3 (id=999): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010007001000fedbdf", @ANYRES32=0x0, @ANYBLOB="97000300841c0500200012800f0001b5e41779645f736c61766500000c000580060005000000000014003500626f6e645f736c6176655f30"], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0xc084) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) flistxattr(r3, &(0x7f0000000100)=""/43, 0x2b) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x11, 0x10, 0x3, 0xb, 0x6, 0x80000000, 0x2, 0xa0, 0xffffffffffffffff}) r5 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)='nf 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) kernel console output (not intermixed with test programs): ps until 2038-01-19 (0x7fffffff) [ 62.116473][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.451678][ T4702] loop0: detected capacity change from 0 to 512 [ 62.766669][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.768962][ T4702] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.882905][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.691575][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 64.293100][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 64.293120][ T29] audit: type=1400 audit(1791321230.560:1086): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.452945][ T29] audit: type=1400 audit(1791321230.716:1087): avc: denied { execute } for pid=4771 comm="syz.1.325" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.553289][ T4784] loop0: detected capacity change from 0 to 128 [ 64.559528][ T4784] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 64.559706][ T4784] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.614476][ T29] audit: type=1400 audit(1791321230.873:1088): avc: denied { getopt } for pid=4779 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.691041][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 64.707706][ T29] audit: type=1400 audit(1791321230.961:1089): avc: denied { write } for pid=4782 comm="syz.0.331" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.915444][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.016074][ T4780] loop4: detected capacity change from 0 to 512 [ 65.148470][ T4780] EXT4-fs (loop4): 1 truncate cleaned up [ 65.226738][ T4780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.253848][ T29] audit: type=1400 audit(1791321231.500:1090): avc: denied { read write } for pid=4779 comm="syz.4.329" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.253888][ T29] audit: type=1400 audit(1791321231.500:1091): avc: denied { open } for pid=4779 comm="syz.4.329" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.326113][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.368077][ T4757] loop3: detected capacity change from 0 to 512 [ 65.384419][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 65.708742][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.711538][ T4757] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.013591][ T29] audit: type=1400 audit(1791321232.148:1092): avc: denied { write } for pid=4756 comm="syz.3.321" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.137295][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.617098][ T29] audit: type=1400 audit(1791321232.835:1093): avc: denied { create } for pid=4830 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.644779][ T29] audit: type=1400 audit(1791321232.854:1094): avc: denied { bind } for pid=4830 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.732613][ T29] audit: type=1400 audit(1791321232.952:1095): avc: denied { execute } for pid=4834 comm="syz.0.346" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.491933][ T4833] loop3: detected capacity change from 0 to 512 [ 67.608066][ T4853] loop0: detected capacity change from 0 to 128 [ 67.731313][ T4858] loop4: detected capacity change from 0 to 512 [ 67.766132][ T4858] TC_ACT_REPEAT abuse ? [ 68.146153][ T4833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.345: bg 0: block 385: padding at end of block bitmap is not set [ 68.146662][ T4833] loop3: lost filesystem error report for type 5 error -117 [ 68.151072][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.152322][ C1] EXT4-fs (loop3): initial error at time 1791321234: ext4_validate_block_bitmap:445 [ 68.152995][ C1] EXT4-fs (loop3): last error at time 1791321234: ext4_validate_block_bitmap:445 [ 68.207456][ T4833] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 68.209371][ T4833] loop3: lost filesystem error report for type 5 error -117 [ 68.250139][ T4833] EXT4-fs (loop3): 2 truncates cleaned up [ 68.308272][ T4884] loop2: detected capacity change from 0 to 512 [ 68.339787][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.674306][ T4903] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.714154][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.749430][ T4884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.752275][ T4884] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.212243][ T4913] syzkaller0: entered promiscuous mode [ 69.212267][ T4913] syzkaller0: entered allmulticast mode [ 69.214619][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.312688][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 69.330768][ T4920] vlan2: entered allmulticast mode [ 69.330791][ T4920] bridge2: entered allmulticast mode [ 69.334751][ T4920] bridge2: port 1(erspan0) entered blocking state [ 69.334786][ T4920] bridge2: port 1(erspan0) entered disabled state [ 69.334918][ T4920] erspan0: entered allmulticast mode [ 69.335567][ T4920] erspan0: entered promiscuous mode [ 69.335902][ T4920] bridge2: port 1(erspan0) entered blocking state [ 69.335932][ T4920] bridge2: port 1(erspan0) entered forwarding state [ 69.495225][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 69.495252][ T29] audit: type=1400 audit(1791321235.667:1107): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="dev" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 69.807526][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 69.807570][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 69.940212][ T29] audit: type=1400 audit(1791321236.111:1108): avc: denied { create } for pid=4939 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.940605][ T29] audit: type=1400 audit(1791321236.111:1109): avc: denied { bind } for pid=4939 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.940783][ T29] audit: type=1400 audit(1791321236.111:1110): avc: denied { listen } for pid=4939 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.941120][ T29] audit: type=1400 audit(1791321236.111:1111): avc: denied { accept } for pid=4939 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.946710][ T29] audit: type=1400 audit(1791321236.111:1112): avc: denied { write } for pid=4941 comm="syz.4.374" name="instances" dev="tracefs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.946743][ T29] audit: type=1400 audit(1791321236.111:1113): avc: denied { add_name } for pid=4941 comm="syz.4.374" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.946769][ T29] audit: type=1400 audit(1791321236.111:1114): avc: denied { create } for pid=4941 comm="syz.4.374" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 70.019575][ T29] audit: type=1326 audit(1791321236.180:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.1.380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 70.019612][ T29] audit: type=1326 audit(1791321236.180:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.1.380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 70.198910][ T4943] IPv6: sit1: Disabled Multicast RS [ 70.199858][ T4943] sit1: entered allmulticast mode [ 70.266070][ T4950] loop0: detected capacity change from 0 to 256 [ 70.458806][ T4962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.717832][ T4968] netlink: 'syz.2.383': attribute type 22 has an invalid length. [ 70.717854][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 70.726678][ T4968] netlink: 'syz.2.383': attribute type 22 has an invalid length. [ 70.726699][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 70.739739][ T38] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.739856][ T38] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.739902][ T38] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.739939][ T38] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.569845][ T4988] FAULT_INJECTION: forcing a failure. [ 71.569845][ T4988] name failslab, interval 1, probability 0, space 0, times 0 [ 71.569877][ T4988] CPU: 0 UID: 0 PID: 4988 Comm: syz.3.387 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.569949][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.569961][ T4988] Call Trace: [ 71.569969][ T4988] [ 71.569978][ T4988] __dump_stack+0x1d/0x30 [ 71.570007][ T4988] dump_stack_lvl+0x95/0xd0 [ 71.570035][ T4988] dump_stack+0x15/0x1b [ 71.570061][ T4988] should_fail_ex+0x262/0x280 [ 71.570143][ T4988] should_failslab+0x8c/0xb0 [ 71.570182][ T4988] __kmalloc_node_noprof+0xdb/0x500 [ 71.570214][ T4988] ? pcpu_alloc_area+0x49c/0x4c0 [ 71.570265][ T4988] ? mempool_init_node+0xb3/0x260 [ 71.570302][ T4988] ? mempool_init_node+0xb3/0x260 [ 71.570413][ T4988] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 71.570444][ T4988] mempool_init_node+0xb3/0x260 [ 71.570535][ T4988] ? __rcu_read_unlock+0x4e/0x70 [ 71.570575][ T4988] ? __pfx_mempool_free_slab+0x10/0x10 [ 71.570682][ T4988] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 71.570712][ T4988] mempool_init_noprof+0x3a/0x50 [ 71.570746][ T4988] bioset_init+0x177/0x480 [ 71.570780][ T4988] ? __alloc_disk_node+0x3c/0x340 [ 71.570828][ T4988] __alloc_disk_node+0x59/0x340 [ 71.570851][ T4988] __blk_alloc_disk+0x68/0xd0 [ 71.570899][ T4988] dm_create+0x36d/0x850 [ 71.570924][ T4988] dev_create+0x141/0x290 [ 71.570953][ T4988] dm_ctl_ioctl+0x80b/0xad0 [ 71.570982][ T4988] ? __pfx_dev_create+0x10/0x10 [ 71.571146][ T4988] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 71.571177][ T4988] __se_sys_ioctl+0xce/0x140 [ 71.571219][ T4988] __x64_sys_ioctl+0x43/0x50 [ 71.571313][ T4988] x64_sys_call+0x239d/0x2550 [ 71.571339][ T4988] do_syscall_64+0x112/0x360 [ 71.571374][ T4988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.571414][ T4988] RIP: 0033:0x7fd294fce159 [ 71.571460][ T4988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.571484][ T4988] RSP: 002b:00007fd293a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.571507][ T4988] RAX: ffffffffffffffda RBX: 00007fd295255fa0 RCX: 00007fd294fce159 [ 71.571522][ T4988] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 71.571610][ T4988] RBP: 00007fd29506506b R08: 0000000000000000 R09: 0000000000000000 [ 71.571626][ T4988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.571641][ T4988] R13: 00007fd295256038 R14: 00007fd295255fa0 R15: 00007ffde45e9368 [ 71.571665][ T4988] [ 71.841739][ T4995] syzkaller0: entered promiscuous mode [ 71.841763][ T4995] syzkaller0: entered allmulticast mode [ 71.880614][ T4992] loop1: detected capacity change from 0 to 128 [ 72.029990][ T5001] netlink: 168 bytes leftover after parsing attributes in process `syz.4.394'. [ 73.190702][ T5016] loop1: detected capacity change from 0 to 512 [ 73.230148][ T5016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.306389][ T5016] EXT4-fs (loop1): too many log groups per flexible block group [ 73.309584][ T5016] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 73.328595][ T5016] EXT4-fs (loop1): mount failed [ 75.145947][ T5030] loop0: detected capacity change from 0 to 512 [ 75.183413][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.183486][ T5030] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.281925][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 75.281946][ T29] audit: type=1326 audit(1791321241.375:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd294fce159 code=0x7ffc0000 [ 75.281989][ T29] audit: type=1326 audit(1791321241.375:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd294fce159 code=0x7ffc0000 [ 75.282978][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.314307][ T29] audit: type=1326 audit(1791321241.395:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd294fce159 code=0x7ffc0000 [ 75.361742][ T29] audit: type=1400 audit(1791321241.464:1176): avc: denied { read append } for pid=5042 comm="syz.1.403" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.361775][ T29] audit: type=1400 audit(1791321241.464:1177): avc: denied { open } for pid=5042 comm="syz.1.403" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.371476][ T29] audit: type=1400 audit(1791321241.474:1178): avc: denied { map } for pid=5042 comm="syz.1.403" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.371578][ T29] audit: type=1400 audit(1791321241.474:1179): avc: denied { execute } for pid=5042 comm="syz.1.403" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.394878][ T5043] FAULT_INJECTION: forcing a failure. [ 75.394878][ T5043] name failslab, interval 1, probability 0, space 0, times 0 [ 75.394911][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.394939][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.395011][ T5043] Call Trace: [ 75.395020][ T5043] [ 75.395029][ T5043] __dump_stack+0x1d/0x30 [ 75.395068][ T5043] dump_stack_lvl+0x95/0xd0 [ 75.395093][ T5043] dump_stack+0x15/0x1b [ 75.395123][ T5043] should_fail_ex+0x262/0x280 [ 75.395231][ T5043] ? snd_timer_instance_new+0x31/0x180 [ 75.395297][ T5043] should_failslab+0x8c/0xb0 [ 75.395331][ T5043] __kmalloc_cache_noprof+0x7a/0x400 [ 75.395410][ T5043] ? should_fail_ex+0xdb/0x280 [ 75.395444][ T5043] ? snd_timer_instance_new+0x31/0x180 [ 75.395524][ T5043] snd_timer_instance_new+0x31/0x180 [ 75.395550][ T5043] snd_seq_timer_open+0x12b/0x340 [ 75.395582][ T5043] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 75.395638][ T5043] snd_seq_queue_alloc+0x23f/0x3f0 [ 75.395667][ T5043] snd_seq_ioctl_create_queue+0x4d/0x1b0 [ 75.395691][ T5043] snd_seq_ioctl+0x17d/0x2d0 [ 75.395720][ T5043] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 75.395767][ T5043] __se_sys_ioctl+0xce/0x140 [ 75.395802][ T5043] __x64_sys_ioctl+0x43/0x50 [ 75.395852][ T5043] x64_sys_call+0x239d/0x2550 [ 75.395881][ T5043] do_syscall_64+0x112/0x360 [ 75.395907][ T5043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.395932][ T5043] RIP: 0033:0x7fdf8b8de159 [ 75.395951][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.395988][ T5043] RSP: 002b:00007fdf8a337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.396012][ T5043] RAX: ffffffffffffffda RBX: 00007fdf8bb65fa0 RCX: 00007fdf8b8de159 [ 75.396028][ T5043] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000005 [ 75.396043][ T5043] RBP: 00007fdf8b97506b R08: 0000000000000000 R09: 0000000000000000 [ 75.396058][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.396072][ T5043] R13: 00007fdf8bb66038 R14: 00007fdf8bb65fa0 R15: 00007ffda39afb58 [ 75.396171][ T5043] [ 75.428547][ T29] audit: type=1400 audit(1791321241.494:1180): avc: denied { bind } for pid=5040 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.558982][ T5046] loop0: detected capacity change from 0 to 128 [ 75.566797][ T5046] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.567080][ T5046] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.757327][ T29] audit: type=1326 audit(1791321241.850:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd294fce159 code=0x7ffc0000 [ 75.771674][ T29] audit: type=1326 audit(1791321241.860:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd294fce159 code=0x7ffc0000 [ 75.859272][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.982902][ T38] IPVS: starting estimator thread 0... [ 76.071874][ T5055] IPVS: using max 2544 ests per chain, 127200 per kthread [ 76.535552][ T5075] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 77.422819][ T5088] syzkaller0: entered promiscuous mode [ 77.422909][ T5088] syzkaller0: entered allmulticast mode [ 77.754767][ T5097] syzkaller0: entered promiscuous mode [ 77.754863][ T5097] syzkaller0: entered allmulticast mode [ 77.998402][ T5108] FAULT_INJECTION: forcing a failure. [ 77.998402][ T5108] name failslab, interval 1, probability 0, space 0, times 0 [ 77.998444][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.998474][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.998490][ T5108] Call Trace: [ 77.998498][ T5108] [ 77.998507][ T5108] __dump_stack+0x1d/0x30 [ 77.998572][ T5108] dump_stack_lvl+0x95/0xd0 [ 77.998601][ T5108] dump_stack+0x15/0x1b [ 77.998655][ T5108] should_fail_ex+0x262/0x280 [ 77.998702][ T5108] ? dup_fd+0x3a/0x530 [ 77.998728][ T5108] should_failslab+0x8c/0xb0 [ 77.998772][ T5108] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 77.998853][ T5108] ? dup_fd+0x3a/0x530 [ 77.998875][ T5108] ? do_futex+0x391/0x460 [ 77.998910][ T5108] dup_fd+0x3a/0x530 [ 77.998934][ T5108] ? __se_sys_futex+0x2f6/0x370 [ 77.998977][ T5108] ? xfd_validate_state+0x45/0xf0 [ 77.999010][ T5108] ksys_unshare+0x36c/0x710 [ 77.999044][ T5108] __x64_sys_unshare+0x1f/0x30 [ 77.999130][ T5108] x64_sys_call+0x1e33/0x2550 [ 77.999160][ T5108] do_syscall_64+0x112/0x360 [ 77.999189][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.999216][ T5108] RIP: 0033:0x7fd294fce159 [ 77.999273][ T5108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.999295][ T5108] RSP: 002b:00007fd293a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.999323][ T5108] RAX: ffffffffffffffda RBX: 00007fd295255fa0 RCX: 00007fd294fce159 [ 77.999482][ T5108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040480 [ 77.999500][ T5108] RBP: 00007fd29506506b R08: 0000000000000000 R09: 0000000000000000 [ 77.999514][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.999530][ T5108] R13: 00007fd295256038 R14: 00007fd295255fa0 R15: 00007ffde45e9368 [ 77.999708][ T5108] [ 78.204485][ T5110] loop0: detected capacity change from 0 to 8192 [ 78.504702][ T5120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 78.786462][ T5125] syz_tun: entered allmulticast mode [ 78.921788][ T5129] loop2: detected capacity change from 0 to 4096 [ 78.970228][ T5129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.094591][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.797253][ T5157] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.970417][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.971564][ T3364] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.112807][ T5162] fido_id[5162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.204075][ T5173] FAULT_INJECTION: forcing a failure. [ 80.204075][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 80.204125][ T5173] CPU: 1 UID: 0 PID: 5173 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.204155][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.204168][ T5173] Call Trace: [ 80.204175][ T5173] [ 80.204184][ T5173] __dump_stack+0x1d/0x30 [ 80.204260][ T5173] dump_stack_lvl+0x95/0xd0 [ 80.204287][ T5173] dump_stack+0x15/0x1b [ 80.204312][ T5173] should_fail_ex+0x262/0x280 [ 80.204341][ T5173] ? loop_add+0x6c/0x580 [ 80.204443][ T5173] should_failslab+0x8c/0xb0 [ 80.204479][ T5173] __kmalloc_cache_noprof+0x7a/0x400 [ 80.204520][ T5173] ? loop_add+0x6c/0x580 [ 80.204601][ T5173] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.204624][ T5173] loop_add+0x6c/0x580 [ 80.204666][ T5173] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.204688][ T5173] loop_control_ioctl+0xd0/0x3f0 [ 80.204710][ T5173] ? __pfx_loop_control_ioctl+0x10/0x10 [ 80.204860][ T5173] __se_sys_ioctl+0xce/0x140 [ 80.204933][ T5173] __x64_sys_ioctl+0x43/0x50 [ 80.204975][ T5173] x64_sys_call+0x239d/0x2550 [ 80.205005][ T5173] do_syscall_64+0x112/0x360 [ 80.205029][ T5173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.205057][ T5173] RIP: 0033:0x7f2afcebe159 [ 80.205080][ T5173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.205178][ T5173] RSP: 002b:00007f2afb917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.205328][ T5173] RAX: ffffffffffffffda RBX: 00007f2afd145fa0 RCX: 00007f2afcebe159 [ 80.205364][ T5173] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 80.205378][ T5173] RBP: 00007f2afcf5506b R08: 0000000000000000 R09: 0000000000000000 [ 80.205393][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.205407][ T5173] R13: 00007f2afd146038 R14: 00007f2afd145fa0 R15: 00007ffd6d6f5378 [ 80.205496][ T5173] [ 80.912349][ T5177] loop1: detected capacity change from 0 to 512 [ 80.988858][ T5177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.140842][ T5177] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 81.142203][ T5177] System zones: 1-12 [ 81.170204][ T5177] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.445: bad orphan inode 131072 [ 81.170655][ T5177] loop1: lost filesystem error report for type 5 error -117 [ 81.216880][ T5177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.301921][ T5190] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 81.303828][ T5190] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 81.411529][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.439768][ T5169] loop4: detected capacity change from 0 to 512 [ 81.490120][ T5169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.727640][ T5169] EXT4-fs (loop4): too many log groups per flexible block group [ 81.727701][ T5169] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 81.727746][ T5169] EXT4-fs (loop4): mount failed [ 83.014994][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 83.015083][ T29] audit: type=1400 audit(1791321249.053:1249): avc: denied { ioctl } for pid=5197 comm="syz.2.451" path="socket:[9629]" dev="sockfs" ino=9629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.065100][ T5202] loop2: detected capacity change from 0 to 512 [ 83.065523][ T5202] EXT4-fs: Ignoring removed nobh option [ 83.079515][ T5202] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.451: corrupted inode contents [ 83.079603][ T5202] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.079828][ T5202] EXT4-fs (loop2): Remounting filesystem read-only [ 83.080183][ T5202] Quota error (device loop2): write_blk: dquota write failed [ 83.080225][ T5202] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 83.081871][ T5202] EXT4-fs (loop2): 1 truncate cleaned up [ 83.082340][ T5202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.082410][ T5202] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.088902][ T5206] loop4: detected capacity change from 0 to 512 [ 83.120733][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.120825][ T5206] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.200205][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.202996][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.249142][ T5217] loop4: detected capacity change from 0 to 512 [ 83.279378][ T5217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.279448][ T5217] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.382309][ T29] audit: type=1400 audit(1791321249.420:1250): avc: denied { create } for pid=5220 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.388023][ T29] audit: type=1400 audit(1791321249.420:1251): avc: denied { write } for pid=5220 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.399839][ T5229] FAULT_INJECTION: forcing a failure. [ 83.399839][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 83.399874][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.1.459 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.399902][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.399915][ T5229] Call Trace: [ 83.399922][ T5229] [ 83.399930][ T5229] __dump_stack+0x1d/0x30 [ 83.400028][ T5229] dump_stack_lvl+0x95/0xd0 [ 83.400053][ T5229] dump_stack+0x15/0x1b [ 83.400076][ T5229] should_fail_ex+0x262/0x280 [ 83.400141][ T5229] ? dup_fd+0x3a/0x530 [ 83.400171][ T5229] should_failslab+0x8c/0xb0 [ 83.400248][ T5229] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 83.400298][ T5229] ? dup_fd+0x3a/0x530 [ 83.400321][ T5229] dup_fd+0x3a/0x530 [ 83.400345][ T5229] __se_sys_close_range+0x10e/0x4e0 [ 83.400370][ T5229] ? xfd_validate_state+0x45/0xf0 [ 83.400447][ T5229] ? restore_fpregs_from_fpstate+0x61/0x110 [ 83.400474][ T5229] __x64_sys_close_range+0x43/0x50 [ 83.400500][ T5229] x64_sys_call+0x2198/0x2550 [ 83.400556][ T5229] do_syscall_64+0x112/0x360 [ 83.400582][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.400607][ T5229] RIP: 0033:0x7fdf8b8de159 [ 83.400626][ T5229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.400746][ T5229] RSP: 002b:00007fdf8a337028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 83.400792][ T5229] RAX: ffffffffffffffda RBX: 00007fdf8bb65fa0 RCX: 00007fdf8b8de159 [ 83.400815][ T5229] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 83.400831][ T5229] RBP: 00007fdf8b97506b R08: 0000000000000000 R09: 0000000000000000 [ 83.400846][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.400860][ T5229] R13: 00007fdf8bb66038 R14: 00007fdf8bb65fa0 R15: 00007ffda39afb58 [ 83.400917][ T5229] [ 83.539950][ T29] audit: type=1326 audit(1791321249.569:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 83.540104][ T29] audit: type=1326 audit(1791321249.569:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 83.575557][ T29] audit: type=1326 audit(1791321249.589:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 83.575597][ T29] audit: type=1326 audit(1791321249.589:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 83.578264][ T29] audit: type=1326 audit(1791321249.609:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.4.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 83.844226][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.883439][ T5237] loop0: detected capacity change from 0 to 1764 [ 84.309869][ T5247] syzkaller0: entered promiscuous mode [ 84.320971][ T5247] syzkaller0: entered allmulticast mode [ 84.561216][ T5225] loop3: detected capacity change from 0 to 1024 [ 84.638974][ T5225] EXT4-fs: Ignoring removed i_version option [ 84.639706][ T5225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.641166][ T5225] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.734245][ T5225] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.734394][ T5225] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.741363][ T5225] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.458: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.741463][ T5225] loop3: lost filesystem error report for type 5 error -117 [ 84.746564][ T5225] EXT4-fs (loop3): Remounting filesystem read-only [ 84.747025][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 84.747056][ C1] EXT4-fs (loop3): initial error at time 1791321250: ext4_free_blocks:6719 [ 84.747177][ C1] EXT4-fs (loop3): last error at time 1791321250: ext4_free_blocks:6719 [ 84.759822][ T5225] EXT4-fs (loop3): 1 orphan inode deleted [ 84.852379][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.994101][ T5268] loop0: detected capacity change from 0 to 512 [ 85.006941][ T5268] EXT4-fs: Ignoring removed nobh option [ 85.040719][ T5268] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #3: comm syz.0.468: corrupted inode contents [ 85.040754][ T5268] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.040899][ T5268] EXT4-fs (loop0): Remounting filesystem read-only [ 85.041459][ T5268] EXT4-fs (loop0): 1 truncate cleaned up [ 85.041932][ T5268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.042056][ T5268] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.106715][ T5225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.129186][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.164973][ T5225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.196990][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.197210][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.241426][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.566143][ T5312] loop1: detected capacity change from 0 to 512 [ 86.604685][ T5312] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 86.604714][ T5312] FAT-fs (loop1): Filesystem has been set read-only [ 86.604871][ T5312] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 86.605068][ T5312] bio_check_eod: 82 callbacks suppressed [ 86.605081][ T5312] syz.1.483: attempt to access beyond end of device [ 86.605081][ T5312] loop1: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 86.811342][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 86.838970][ T5334] veth3: entered allmulticast mode [ 86.840869][ T5334] bond2: (slave veth3): Enslaving as an active interface with an up link [ 86.907060][ T5340] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 86.907142][ T5340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.907194][ T5340] vhci_hcd vhci_hcd.0: Device attached [ 86.948543][ T5341] vhci_hcd: connection closed [ 86.948750][ T79] vhci_hcd vhci_hcd.2: stop threads [ 86.948769][ T79] vhci_hcd vhci_hcd.2: release socket [ 86.948781][ T79] vhci_hcd vhci_hcd.2: disconnect device [ 87.131762][ T5343] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.492 [ 87.448912][ T5352] loop3: detected capacity change from 0 to 4096 [ 87.473388][ T5352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.527737][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.037392][ T11] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0002/input/input5 [ 88.039827][ T11] hid-generic 0005:FFFD057E:0305.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 88.110920][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.111169][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.176202][ T5360] loop4: detected capacity change from 0 to 512 [ 88.238910][ T5360] EXT4-fs: Ignoring removed nobh option [ 88.308084][ T5357] loop2: detected capacity change from 0 to 1024 [ 88.349645][ T5357] EXT4-fs: Ignoring removed i_version option [ 88.366241][ T5357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.392335][ T5357] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.443840][ T5360] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.499: corrupted inode contents [ 88.443900][ T5360] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.455048][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 88.455070][ C0] EXT4-fs (loop4): initial error at time 1791321254: ext4_do_update_inode:5801: inode 3 [ 88.455127][ C0] EXT4-fs (loop4): last error at time 1791321254: ext4_do_update_inode:5801: inode 3 [ 88.478575][ T5360] EXT4-fs (loop4): Remounting filesystem read-only [ 88.486223][ T5357] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.489936][ T5357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.498613][ T5357] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.498: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.498655][ T5357] loop2: lost filesystem error report for type 5 error -117 [ 88.501067][ T5357] EXT4-fs (loop2): Remounting filesystem read-only [ 88.502328][ T5357] EXT4-fs (loop2): 1 orphan inode deleted [ 88.513128][ T5360] __quota_error: 67 callbacks suppressed [ 88.513154][ T5360] Quota error (device loop4): write_blk: dquota write failed [ 88.514027][ T5360] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 88.525170][ T5360] EXT4-fs (loop4): 1 truncate cleaned up [ 88.563311][ T5357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.600023][ T5360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.604319][ T5360] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.823192][ T29] audit: type=1400 audit(1791321254.832:1322): avc: denied { getopt } for pid=5379 comm="syz.0.513" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.878875][ T5360] syz.4.499 (5360) used greatest stack depth: 9736 bytes left [ 88.881243][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.074908][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.095041][ T5395] sd 0:0:1:0: PR command failed: 1026 [ 89.095066][ T5395] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 89.095089][ T5395] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 89.320995][ T29] audit: type=1400 audit(1791321255.330:1323): avc: denied { ioctl } for pid=5396 comm="syz.2.508" path="socket:[9110]" dev="sockfs" ino=9110 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.327028][ T5382] loop1: detected capacity change from 0 to 128 [ 89.888822][ T5382] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.897574][ T5382] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.980221][ T29] audit: type=1400 audit(1791321255.978:1324): avc: denied { read write } for pid=5414 comm="syz.2.516" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.980318][ T29] audit: type=1400 audit(1791321255.978:1325): avc: denied { open } for pid=5414 comm="syz.2.516" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.035479][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 90.036218][ T5416] netlink: 'syz.3.515': attribute type 15 has an invalid length. [ 90.139432][ T5418] loop0: detected capacity change from 0 to 1764 [ 90.144722][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.177612][ T5420] loop4: detected capacity change from 0 to 4096 [ 90.223970][ T5420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.362184][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.996369][ T5446] loop3: detected capacity change from 0 to 128 [ 91.019248][ T5446] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.029802][ T29] audit: type=1400 audit(1791321257.033:1326): avc: denied { mounton } for pid=5445 comm="syz.3.527" path="/114/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc" dev="loop3" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 91.034757][ T5446] FAULT_INJECTION: forcing a failure. [ 91.034757][ T5446] name failslab, interval 1, probability 0, space 0, times 0 [ 91.034800][ T5446] CPU: 0 UID: 0 PID: 5446 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.034831][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.034846][ T5446] Call Trace: [ 91.034854][ T5446] [ 91.034864][ T5446] __dump_stack+0x1d/0x30 [ 91.034896][ T5446] dump_stack_lvl+0x95/0xd0 [ 91.034986][ T5446] dump_stack+0x15/0x1b [ 91.035012][ T5446] should_fail_ex+0x262/0x280 [ 91.035044][ T5446] ? tcf_police_init+0x735/0xdc0 [ 91.035074][ T5446] should_failslab+0x8c/0xb0 [ 91.035118][ T5446] __kmalloc_cache_noprof+0x7a/0x400 [ 91.035263][ T5446] ? tcf_police_init+0x735/0xdc0 [ 91.035289][ T5446] ? qdisc_get_rtab+0x2aa/0x300 [ 91.035330][ T5446] tcf_police_init+0x735/0xdc0 [ 91.035487][ T5446] ? should_fail_ex+0xdb/0x280 [ 91.035520][ T5446] ? __pfx_tcf_police_init+0x10/0x10 [ 91.035547][ T5446] tcf_action_init_1+0x395/0x4d0 [ 91.035656][ T5446] tcf_action_init+0x29d/0x700 [ 91.035680][ T5446] ? __list_del_entry_valid_or_report+0x65/0x130 [ 91.035732][ T5446] ? __css_rstat_updated+0xbb/0x280 [ 91.035758][ T5446] ? sbitmap_find_bit+0x397/0x3d0 [ 91.035808][ T5446] tc_ctl_action+0x29e/0x860 [ 91.035946][ T5446] ? __pfx_tc_ctl_action+0x10/0x10 [ 91.035972][ T5446] rtnetlink_rcv_msg+0x6a7/0x720 [ 91.036084][ T5446] netlink_rcv_skb+0x11e/0x220 [ 91.036122][ T5446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.036156][ T5446] rtnetlink_rcv+0x1c/0x30 [ 91.036241][ T5446] netlink_unicast+0x5a9/0x680 [ 91.036274][ T5446] netlink_sendmsg+0x5be/0x6f0 [ 91.036298][ T5446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.036321][ T5446] ____sys_sendmsg+0x532/0x580 [ 91.036357][ T5446] ___sys_sendmsg+0x195/0x1e0 [ 91.036391][ T5446] __x64_sys_sendmsg+0xd4/0x160 [ 91.036420][ T5446] x64_sys_call+0x22ab/0x2550 [ 91.036482][ T5446] do_syscall_64+0x112/0x360 [ 91.036508][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.036556][ T5446] RIP: 0033:0x7fd294fce159 [ 91.036575][ T5446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.036606][ T5446] RSP: 002b:00007fd293a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.036630][ T5446] RAX: ffffffffffffffda RBX: 00007fd295255fa0 RCX: 00007fd294fce159 [ 91.036647][ T5446] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 91.036662][ T5446] RBP: 00007fd29506506b R08: 0000000000000000 R09: 0000000000000000 [ 91.036738][ T5446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.036752][ T5446] R13: 00007fd295256038 R14: 00007fd295255fa0 R15: 00007ffde45e9368 [ 91.036773][ T5446] [ 91.062438][ T3302] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 91.062465][ T3302] FAT-fs (loop3): Filesystem has been set read-only [ 91.113152][ T3302] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.140490][ T29] audit: type=1400 audit(1791321257.143:1327): avc: denied { bind } for pid=5448 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.467255][ T5450] loop3: detected capacity change from 0 to 2048 [ 91.861299][ T5450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.888635][ T29] audit: type=1400 audit(1791321257.880:1328): avc: denied { write } for pid=5448 comm="syz.3.528" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.888750][ T29] audit: type=1400 audit(1791321257.880:1329): avc: denied { read } for pid=5448 comm="syz.3.528" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 91.995185][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.064381][ T5459] loop1: detected capacity change from 0 to 512 [ 92.065060][ T5459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.067329][ T5459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 92.067363][ T5459] System zones: 1-12 [ 92.067454][ T5459] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.533: bad orphan inode 131072 [ 92.067497][ T5459] loop1: lost filesystem error report for type 5 error -117 [ 92.069174][ T5459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.220280][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.838010][ T5465] loop3: detected capacity change from 0 to 512 [ 92.887023][ T5465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.926947][ T5465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 92.929707][ T5465] System zones: 1-12 [ 92.954983][ T5465] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.532: bad orphan inode 131072 [ 92.955017][ T5465] loop3: lost filesystem error report for type 5 error -117 [ 92.995233][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.220575][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.295551][ T5479] FAULT_INJECTION: forcing a failure. [ 93.295551][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.295671][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.1.539 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.295700][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.295715][ T5479] Call Trace: [ 93.295781][ T5479] [ 93.295789][ T5479] __dump_stack+0x1d/0x30 [ 93.295819][ T5479] dump_stack_lvl+0x95/0xd0 [ 93.295918][ T5479] dump_stack+0x15/0x1b [ 93.295952][ T5479] should_fail_ex+0x262/0x280 [ 93.296037][ T5479] should_fail+0xb/0x20 [ 93.296064][ T5479] should_fail_usercopy+0x1a/0x20 [ 93.296096][ T5479] _copy_from_user+0x1c/0xb0 [ 93.296182][ T5479] kstrtouint_from_user+0x69/0xf0 [ 93.296210][ T5479] ? avc_policy_seqno+0x15/0x30 [ 93.296276][ T5479] proc_fail_nth_write+0x50/0x160 [ 93.296320][ T5479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.296348][ T5479] vfs_write+0x254/0x9a0 [ 93.296384][ T5479] ? __fget_files+0x184/0x1c0 [ 93.296411][ T5479] ? mutex_lock+0x57/0x90 [ 93.296477][ T5479] ksys_write+0xdc/0x1a0 [ 93.296510][ T5479] __x64_sys_write+0x40/0x50 [ 93.296545][ T5479] x64_sys_call+0x154e/0x2550 [ 93.296637][ T5479] do_syscall_64+0x112/0x360 [ 93.296665][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.296737][ T5479] RIP: 0033:0x7fdf8b8de159 [ 93.296758][ T5479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.296779][ T5479] RSP: 002b:00007fdf8a337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.296829][ T5479] RAX: ffffffffffffffda RBX: 00007fdf8bb65fa0 RCX: 00007fdf8b8de159 [ 93.296847][ T5479] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 93.296862][ T5479] RBP: 00007fdf8b97506b R08: 0000000000000000 R09: 0000000000000000 [ 93.297076][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.297158][ T5479] R13: 00007fdf8bb66038 R14: 00007fdf8bb65fa0 R15: 00007ffda39afb58 [ 93.297210][ T5479] [ 93.714206][ T5491] FAULT_INJECTION: forcing a failure. [ 93.714206][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 93.714241][ T5491] CPU: 1 UID: 0 PID: 5491 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.714268][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.714362][ T5491] Call Trace: [ 93.714371][ T5491] [ 93.714380][ T5491] __dump_stack+0x1d/0x30 [ 93.714449][ T5491] dump_stack_lvl+0x95/0xd0 [ 93.714476][ T5491] dump_stack+0x15/0x1b [ 93.714501][ T5491] should_fail_ex+0x262/0x280 [ 93.714532][ T5491] ? dup_fd+0x3a/0x530 [ 93.714666][ T5491] should_failslab+0x8c/0xb0 [ 93.714702][ T5491] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 93.714745][ T5491] ? dup_fd+0x3a/0x530 [ 93.714783][ T5491] dup_fd+0x3a/0x530 [ 93.714809][ T5491] __se_sys_close_range+0x10e/0x4e0 [ 93.714840][ T5491] ? xfd_validate_state+0x45/0xf0 [ 93.714873][ T5491] ? restore_fpregs_from_fpstate+0x61/0x110 [ 93.714944][ T5491] __x64_sys_close_range+0x43/0x50 [ 93.714972][ T5491] x64_sys_call+0x2198/0x2550 [ 93.715050][ T5491] do_syscall_64+0x112/0x360 [ 93.715130][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.715183][ T5491] RIP: 0033:0x7f2afcebe159 [ 93.715203][ T5491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.715225][ T5491] RSP: 002b:00007f2afb917028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 93.715252][ T5491] RAX: ffffffffffffffda RBX: 00007f2afd145fa0 RCX: 00007f2afcebe159 [ 93.715269][ T5491] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 93.715304][ T5491] RBP: 00007f2afcf5506b R08: 0000000000000000 R09: 0000000000000000 [ 93.715320][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.715336][ T5491] R13: 00007f2afd146038 R14: 00007f2afd145fa0 R15: 00007ffd6d6f5378 [ 93.715357][ T5491] [ 94.092768][ T29] audit: type=1400 audit(1791321260.083:1330): avc: denied { mounton } for pid=5503 comm="syz.1.548" path="/103/bus" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.120166][ T29] audit: type=1400 audit(1791321260.093:1331): avc: denied { shutdown } for pid=5505 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.203097][ T29] audit: type=1400 audit(1791321260.193:1332): avc: denied { write } for pid=5505 comm="syz.2.559" lport=53305 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.204506][ T29] audit: type=1400 audit(1791321260.193:1333): avc: denied { setopt } for pid=5505 comm="syz.2.559" lport=53305 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.234873][ T5511] syzkaller0: entered promiscuous mode [ 94.234895][ T5511] syzkaller0: entered allmulticast mode [ 94.498508][ T29] audit: type=1400 audit(1791321260.492:1334): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.531348][ T29] audit: type=1400 audit(1791321260.502:1335): avc: denied { write } for pid=5530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.606051][ T29] audit: type=1400 audit(1791321260.592:1336): avc: denied { write } for pid=5532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.655920][ T5551] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 94.776747][ T29] audit: type=1400 audit(1791321260.761:1337): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.811653][ T5554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.814084][ T5554] bond3: (slave bond4): making interface the new active one [ 94.814351][ T5554] bond3: (slave bond4): Enslaving as an active interface with an up link [ 94.882155][ T5557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.900170][ T5557] bond3: (slave bond5): Enslaving as a backup interface with an up link [ 95.422356][ T29] audit: type=1400 audit(1791321261.399:1338): avc: denied { create } for pid=5564 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.568174][ T5567] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 95.581704][ T5568] FAULT_INJECTION: forcing a failure. [ 95.581704][ T5568] name failslab, interval 1, probability 0, space 0, times 0 [ 95.581762][ T5568] CPU: 0 UID: 0 PID: 5568 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.581818][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.581831][ T5568] Call Trace: [ 95.581888][ T5568] [ 95.581898][ T5568] __dump_stack+0x1d/0x30 [ 95.582002][ T5568] dump_stack_lvl+0x95/0xd0 [ 95.582029][ T5568] dump_stack+0x15/0x1b [ 95.582053][ T5568] should_fail_ex+0x262/0x280 [ 95.582085][ T5568] should_failslab+0x8c/0xb0 [ 95.582121][ T5568] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 95.582172][ T5568] ? __d_alloc+0x34/0x320 [ 95.582202][ T5568] ? __d_alloc+0x34/0x320 [ 95.582233][ T5568] __d_alloc+0x34/0x320 [ 95.582298][ T5568] ? d_alloc_pseudo+0x13/0x80 [ 95.582330][ T5568] d_alloc_pseudo+0x1e/0x80 [ 95.582361][ T5568] alloc_path_pseudo+0xa4/0x140 [ 95.582391][ T5568] alloc_file_pseudo+0x55/0x120 [ 95.582494][ T5568] sock_alloc_file+0x9c/0x1e0 [ 95.582581][ T5568] __sys_socket+0x118/0x180 [ 95.582617][ T5568] __x64_sys_socket+0x3f/0x50 [ 95.582652][ T5568] x64_sys_call+0x246e/0x2550 [ 95.582709][ T5568] do_syscall_64+0x112/0x360 [ 95.582754][ T5568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.582805][ T5568] RIP: 0033:0x7fcb9b79e159 [ 95.582825][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.582847][ T5568] RSP: 002b:00007fcb9a1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.582871][ T5568] RAX: ffffffffffffffda RBX: 00007fcb9ba25fa0 RCX: 00007fcb9b79e159 [ 95.582889][ T5568] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 95.582903][ T5568] RBP: 00007fcb9b83506b R08: 0000000000000000 R09: 0000000000000000 [ 95.582949][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.582964][ T5568] R13: 00007fcb9ba26038 R14: 00007fcb9ba25fa0 R15: 00007ffcea49a8c8 [ 95.582986][ T5568] [ 95.693767][ T5567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.725184][ T5571] bond1: (slave dummy0): making interface the new active one [ 95.739049][ T5571] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 95.763573][ T5574] : renamed from dummy0 (while UP) [ 95.805370][ T5579] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 95.899524][ T5579] bond1: entered promiscuous mode [ 95.901694][ T5579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.930734][ T5580] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.930767][ T5580] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 95.934335][ T5580] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 96.010532][ T5579] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.010560][ T5579] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 96.040781][ T5582] syzkaller0: entered promiscuous mode [ 96.040859][ T5582] syzkaller0: entered allmulticast mode [ 96.058536][ T5582] tipc: Started in network mode [ 96.058601][ T5582] tipc: Node identity 629dfbd681e2, cluster identity 4711 [ 96.058718][ T5582] tipc: Enabled bearer , priority 0 [ 96.060774][ T5581] tipc: Resetting bearer [ 96.089033][ T5581] tipc: Disabling bearer [ 96.180180][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 96.292361][ T5603] loop2: detected capacity change from 0 to 512 [ 96.292779][ T5603] EXT4-fs: Ignoring removed nobh option [ 96.311960][ T5603] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 96.314668][ T5603] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.572: attempt to clear invalid blocks 1 len 1 [ 96.314702][ T5603] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 96.314942][ T5603] EXT4-fs (loop2): Remounting filesystem read-only [ 96.315226][ T5603] EXT4-fs (loop2): 1 truncate cleaned up [ 96.395209][ T5603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.412467][ T29] audit: type=1400 audit(1791321262.377:1339): avc: denied { write } for pid=5602 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.180171][ T5623] Illegal XDP return value 4294967274 on prog (id 91) dev syz_tun, expect packet loss! [ 97.277676][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.328780][ T5628] netlink: 'syz.0.578': attribute type 29 has an invalid length. [ 97.352808][ T5627] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.580'. [ 97.451234][ T5636] loop4: detected capacity change from 0 to 2048 [ 97.451662][ T5636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.484045][ T5636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.659132][ T5636] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.582: bg 0: block 2: invalid block bitmap [ 97.791310][ T5636] EXT4-fs (loop4): Remounting filesystem read-only [ 97.854671][ T5657] FAULT_INJECTION: forcing a failure. [ 97.854671][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 97.854787][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz.1.589 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.854817][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.854832][ T5657] Call Trace: [ 97.854845][ T5657] [ 97.854862][ T5657] __dump_stack+0x1d/0x30 [ 97.854903][ T5657] dump_stack_lvl+0x95/0xd0 [ 97.855000][ T5657] dump_stack+0x15/0x1b [ 97.855025][ T5657] should_fail_ex+0x262/0x280 [ 97.855109][ T5657] should_failslab+0x8c/0xb0 [ 97.855241][ T5657] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 97.855282][ T5657] ? sidtab_sid2str_get+0xa0/0x130 [ 97.855309][ T5657] ? sidtab_sid2str_get+0xa0/0x130 [ 97.855338][ T5657] kmemdup_noprof+0x2b/0x70 [ 97.855443][ T5657] sidtab_sid2str_get+0xa0/0x130 [ 97.855472][ T5657] security_sid_to_context_core+0x179/0x2d0 [ 97.855500][ T5657] security_sid_to_context+0x27/0x40 [ 97.855577][ T5657] selinux_lsmprop_to_secctx+0x67/0xf0 [ 97.855606][ T5657] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 97.855697][ T5657] audit_log_subj_ctx+0xa4/0x3e0 [ 97.855727][ T5657] audit_log_task_context+0x48/0x70 [ 97.855828][ T5657] audit_log_task+0xf3/0x240 [ 97.855853][ T5657] audit_seccomp+0x6a/0x110 [ 97.855878][ T5657] __seccomp_filter+0x909/0x1360 [ 97.855929][ T5657] __seccomp_permit_syscall+0x7d/0x150 [ 97.855987][ T5657] do_syscall_64+0xca/0x360 [ 97.856050][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.856090][ T5657] RIP: 0033:0x7fdf8b8de159 [ 97.856110][ T5657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.856132][ T5657] RSP: 002b:00007fdf8a3370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.856158][ T5657] RAX: ffffffffffffffda RBX: 00007fdf8bb65fa8 RCX: 00007fdf8b8de159 [ 97.856176][ T5657] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf8bb65fac [ 97.856193][ T5657] RBP: 00007fdf8bb65fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 97.856210][ T5657] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 97.856349][ T5657] R13: 00007fdf8bb66038 R14: 00007ffda39afa70 R15: 00007ffda39afb58 [ 97.856372][ T5657] [ 98.163389][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.211246][ T5661] loop1: detected capacity change from 0 to 128 [ 98.238818][ T5661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.239029][ T5661] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.398933][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.109186][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 99.109207][ T29] audit: type=1326 audit(1791321265.090:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.110655][ T29] audit: type=1326 audit(1791321265.090:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.113626][ T29] audit: type=1326 audit(1791321265.090:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.115078][ T29] audit: type=1326 audit(1791321265.090:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.116568][ T29] audit: type=1326 audit(1791321265.090:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.118153][ T29] audit: type=1326 audit(1791321265.090:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.121372][ T29] audit: type=1326 audit(1791321265.100:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.125350][ T29] audit: type=1326 audit(1791321265.100:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.155457][ T29] audit: type=1326 audit(1791321265.130:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.178125][ T29] audit: type=1326 audit(1791321265.160:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf8b89e98e code=0x7ffc0000 [ 99.475535][ T5688] syzkaller0: entered promiscuous mode [ 99.475559][ T5688] syzkaller0: entered allmulticast mode [ 99.880247][ T5694] SELinux: syz.4.602 (5694) wrote to user. This is no longer supported. [ 99.924363][ T5696] netlink: 6 bytes leftover after parsing attributes in process `syz.1.603'. [ 99.928138][ T5696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.018009][ T5698] loop0: detected capacity change from 0 to 8192 [ 100.079918][ T5703] syzkaller0: entered promiscuous mode [ 100.080007][ T5703] syzkaller0: entered allmulticast mode [ 100.374052][ T5701] loop1: detected capacity change from 0 to 512 [ 100.494112][ T5701] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.605: iget: bad i_size value: 38620345925642 [ 100.494750][ T5701] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.502607][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 100.503576][ C1] EXT4-fs (loop1): initial error at time 1791321266: ext4_orphan_get:1403: inode 15 [ 100.504269][ C1] EXT4-fs (loop1): last error at time 1791321266: ext4_orphan_get:1403: inode 15 [ 100.557971][ T5701] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.605: couldn't read orphan inode 15 (err -117) [ 100.560989][ T5701] loop1: lost filesystem error report for type 5 error -117 [ 100.613761][ T5701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.179802][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.242131][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 101.260246][ T5719] FAULT_INJECTION: forcing a failure. [ 101.260246][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 101.260334][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: syz.3.610 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.260359][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.260372][ T5719] Call Trace: [ 101.260380][ T5719] [ 101.260390][ T5719] __dump_stack+0x1d/0x30 [ 101.260463][ T5719] dump_stack_lvl+0x95/0xd0 [ 101.260547][ T5719] dump_stack+0x15/0x1b [ 101.260568][ T5719] should_fail_ex+0x262/0x280 [ 101.260601][ T5719] ? dup_fd+0x3a/0x530 [ 101.260649][ T5719] should_failslab+0x8c/0xb0 [ 101.260686][ T5719] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 101.260720][ T5719] ? dup_fd+0x3a/0x530 [ 101.260741][ T5719] dup_fd+0x3a/0x530 [ 101.260840][ T5719] __se_sys_close_range+0x10e/0x4e0 [ 101.260920][ T5719] ? xfd_validate_state+0x45/0xf0 [ 101.260949][ T5719] ? restore_fpregs_from_fpstate+0x61/0x110 [ 101.260977][ T5719] __x64_sys_close_range+0x43/0x50 [ 101.261044][ T5719] x64_sys_call+0x2198/0x2550 [ 101.261069][ T5719] do_syscall_64+0x112/0x360 [ 101.261128][ T5719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.261156][ T5719] RIP: 0033:0x7fd294fce159 [ 101.261213][ T5719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.261231][ T5719] RSP: 002b:00007fd293a27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.261258][ T5719] RAX: ffffffffffffffda RBX: 00007fd295255fa0 RCX: 00007fd294fce159 [ 101.261274][ T5719] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 101.261333][ T5719] RBP: 00007fd29506506b R08: 0000000000000000 R09: 0000000000000000 [ 101.261346][ T5719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.261359][ T5719] R13: 00007fd295256038 R14: 00007fd295255fa0 R15: 00007ffde45e9368 [ 101.261427][ T5719] [ 101.354020][ T5716] macvlan2: entered promiscuous mode [ 101.354043][ T5716] macvlan2: entered allmulticast mode [ 101.358172][ T5716] bond2: entered promiscuous mode [ 101.358478][ T5716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.476495][ T5716] bond2: left promiscuous mode [ 101.492854][ T5725] loop0: detected capacity change from 0 to 164 [ 101.941533][ T5740] loop0: detected capacity change from 0 to 1024 [ 101.942355][ T5740] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 101.952193][ T5740] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.619: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.952238][ T5740] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.955937][ T5740] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.619: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.955996][ T5740] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.958038][ T5740] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.619: Failed to acquire dquot type 0 [ 101.958083][ T5740] loop0: lost filesystem error report for type 5 error -117 [ 101.958281][ T5740] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 101.958371][ T5740] loop0: lost filesystem error report for type 5 error -117 [ 101.960316][ T5740] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.619: mark_inode_dirty error [ 101.960361][ T5740] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.960585][ T5740] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 101.960635][ T5740] EXT4-fs (loop0): 1 orphan inode deleted [ 101.961101][ T5740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.977745][ T3704] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.977921][ T3704] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 0 [ 102.042048][ T5740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.619'. [ 102.131715][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.137008][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.220352][ T5722] loop4: detected capacity change from 0 to 1024 [ 102.344260][ T5722] EXT4-fs: Ignoring removed i_version option [ 102.620290][ T5722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.701889][ T5722] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.889022][ T5722] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 102.892113][ T5722] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.922047][ T5722] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.612: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.922139][ T5722] loop4: lost filesystem error report for type 5 error -117 [ 102.922707][ T5722] EXT4-fs (loop4): Remounting filesystem read-only [ 102.925450][ T5722] EXT4-fs (loop4): 1 orphan inode deleted [ 102.926394][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 102.926413][ C1] EXT4-fs (loop4): initial error at time 1791321268: ext4_free_blocks:6719 [ 102.926440][ C1] EXT4-fs (loop4): last error at time 1791321268: ext4_free_blocks:6719 [ 103.014367][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.015819][ T3700] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.015867][ T3700] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.016516][ T3700] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 103.016553][ T3700] loop0: lost filesystem error report for type 5 error -117 [ 103.057974][ T3297] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.058009][ T3297] loop0: lost filesystem error report for type 5 error -117 [ 103.058148][ T3297] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 103.058168][ T3297] loop0: lost filesystem error report for type 5 error -117 [ 103.058227][ T3297] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 103.058296][ T3297] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.058394][ T3297] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.058422][ T3297] loop0: lost filesystem error report for type 5 error -117 [ 103.086926][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.167937][ T5755] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 103.502081][ T5769] syzkaller0: entered promiscuous mode [ 103.502105][ T5769] syzkaller0: entered allmulticast mode [ 103.506355][ T5771] FAULT_INJECTION: forcing a failure. [ 103.506355][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 103.506387][ T5771] CPU: 1 UID: 0 PID: 5771 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.506438][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.506452][ T5771] Call Trace: [ 103.506459][ T5771] [ 103.506470][ T5771] __dump_stack+0x1d/0x30 [ 103.506504][ T5771] dump_stack_lvl+0x95/0xd0 [ 103.506532][ T5771] dump_stack+0x15/0x1b [ 103.506575][ T5771] should_fail_ex+0x262/0x280 [ 103.506606][ T5771] ? dup_fd+0x3a/0x530 [ 103.506629][ T5771] should_failslab+0x8c/0xb0 [ 103.506665][ T5771] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 103.506781][ T5771] ? dup_fd+0x3a/0x530 [ 103.506819][ T5771] dup_fd+0x3a/0x530 [ 103.506844][ T5771] __se_sys_close_range+0x10e/0x4e0 [ 103.506869][ T5771] ? xfd_validate_state+0x45/0xf0 [ 103.506965][ T5771] ? restore_fpregs_from_fpstate+0x61/0x110 [ 103.506994][ T5771] __x64_sys_close_range+0x43/0x50 [ 103.507021][ T5771] x64_sys_call+0x2198/0x2550 [ 103.507052][ T5771] do_syscall_64+0x112/0x360 [ 103.507154][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.507235][ T5771] RIP: 0033:0x7fcb9b79e159 [ 103.507255][ T5771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.507319][ T5771] RSP: 002b:00007fcb9a1f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 103.507345][ T5771] RAX: ffffffffffffffda RBX: 00007fcb9ba25fa0 RCX: 00007fcb9b79e159 [ 103.507427][ T5771] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 103.507523][ T5771] RBP: 00007fcb9b83506b R08: 0000000000000000 R09: 0000000000000000 [ 103.507540][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.507553][ T5771] R13: 00007fcb9ba26038 R14: 00007fcb9ba25fa0 R15: 00007ffcea49a8c8 [ 103.507575][ T5771] [ 103.909460][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.116014][ T5791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.637'. [ 104.453864][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 104.453883][ T29] audit: type=1400 audit(1791321270.420:1462): avc: denied { unmount } for pid=5808 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.457072][ T29] audit: type=1400 audit(1791321270.420:1463): avc: denied { remount } for pid=5808 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.790221][ T5768] loop1: detected capacity change from 0 to 1024 [ 105.283762][ T5768] EXT4-fs: Ignoring removed oldalloc option [ 105.513167][ T5768] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 105.962465][ T29] audit: type=1400 audit(1791321271.898:1464): avc: denied { create } for pid=5823 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 106.017099][ T5828] loop3: detected capacity change from 0 to 256 [ 106.158337][ T29] audit: type=1400 audit(1791321272.118:1465): avc: denied { bind } for pid=5818 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.210544][ T29] audit: type=1400 audit(1791321272.158:1466): avc: denied { write } for pid=5818 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.342519][ T5820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.500343][ T5828] FAT-fs (loop3): bogus number of FAT sectors [ 106.500365][ T5828] FAT-fs (loop3): Can't find a valid FAT filesystem [ 106.523550][ T5768] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1. [ 106.564568][ T5828] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.323105][ T5821] loop0: detected capacity change from 0 to 1024 [ 107.374849][ T5834] loop4: detected capacity change from 0 to 512 [ 107.458747][ T5856] blk-mq: reduced tag depth (128 -> 64) [ 107.507053][ T5821] EXT4-fs: Ignoring removed i_version option [ 107.572871][ T5859] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 107.613209][ T5821] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.662676][ T5821] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.749345][ T5834] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.651: bg 0: block 385: padding at end of block bitmap is not set [ 107.750069][ T5834] loop4: lost filesystem error report for type 5 error -117 [ 107.750688][ T5821] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.804860][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 107.805060][ C1] EXT4-fs (loop4): initial error at time 1791321273: ext4_validate_block_bitmap:445 [ 107.806791][ C1] EXT4-fs (loop4): last error at time 1791321273: ext4_validate_block_bitmap:445 [ 107.822413][ T5821] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.837035][ T5821] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.647: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.839297][ T5821] loop0: lost filesystem error report for type 5 error -117 [ 107.843772][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 107.843953][ C0] EXT4-fs (loop0): initial error at time 1791321273: ext4_free_blocks:6719 [ 107.844093][ C0] EXT4-fs (loop0): last error at time 1791321273: ext4_free_blocks:6719 [ 107.855441][ T5821] EXT4-fs (loop0): Remounting filesystem read-only [ 107.857237][ T5821] EXT4-fs (loop0): 1 orphan inode deleted [ 107.928214][ T5834] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 107.928503][ T5834] loop4: lost filesystem error report for type 5 error -117 [ 107.945657][ T5821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.989984][ T5834] EXT4-fs (loop4): 2 truncates cleaned up [ 108.119035][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.247475][ T29] audit: type=1326 audit(1791321274.145:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 108.247557][ T29] audit: type=1326 audit(1791321274.145:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 108.249076][ T29] audit: type=1326 audit(1791321274.205:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 108.250933][ T29] audit: type=1326 audit(1791321274.205:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 108.252391][ T29] audit: type=1326 audit(1791321274.205:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 108.334767][ T5834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.848470][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.103995][ T5913] loop2: detected capacity change from 0 to 512 [ 109.124918][ T5913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.125151][ T5913] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.158697][ T5913] EXT4-fs (loop2): shut down requested (1) [ 109.414089][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.414244][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.437053][ T5921] loop4: detected capacity change from 0 to 164 [ 110.035428][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.045571][ T5917] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.237093][ T5937] syzkaller0: entered promiscuous mode [ 110.237118][ T5937] syzkaller0: entered allmulticast mode [ 110.263868][ T5939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5939 comm=syz.1.686 [ 110.408256][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 110.408278][ T29] audit: type=1400 audit(1791321276.372:1623): avc: denied { kexec_image_load } for pid=5944 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 110.706439][ T5954] loop2: detected capacity change from 0 to 512 [ 110.717014][ T5954] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.717040][ T5954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c01c, mo2=0002] [ 110.717171][ T5954] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.717351][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.692: iget: bad i_size value: 12154761577498 [ 110.717441][ T5954] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 110.717598][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.692: couldn't read orphan inode 13 (err -117) [ 110.717628][ T5954] loop2: lost filesystem error report for type 5 error -117 [ 110.718144][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.720419][ T5954] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.692: dx entry: limit 65535 != root limit 120 [ 110.720457][ T5954] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.692: Corrupt directory, running e2fsck is recommended [ 110.722148][ T5954] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 111.591534][ T5972] lo speed is unknown, defaulting to 1000 [ 111.592168][ T5972] lo speed is unknown, defaulting to 1000 [ 111.592392][ T5972] lo speed is unknown, defaulting to 1000 [ 111.642269][ T29] audit: type=1400 audit(1791321277.601:1624): avc: denied { bind } for pid=5971 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.642707][ T29] audit: type=1400 audit(1791321277.601:1625): avc: denied { listen } for pid=5971 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.696887][ T29] audit: type=1400 audit(1791321277.651:1626): avc: denied { accept } for pid=5971 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.710031][ T5972] infiniband syz0: set active [ 111.710053][ T5972] infiniband syz0: added lo [ 111.710380][ T3402] lo speed is unknown, defaulting to 1000 [ 111.730999][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.763440][ T5972] RDS/IB: syz0: added [ 111.763463][ T5972] smc: adding ib device syz0 with port count 1 [ 111.763478][ T5972] smc: ib device syz0 port 1 has no pnetid [ 111.763683][ T5972] lo speed is unknown, defaulting to 1000 [ 111.764278][ T3394] lo speed is unknown, defaulting to 1000 [ 111.838804][ T5972] lo speed is unknown, defaulting to 1000 [ 111.878179][ T5972] lo speed is unknown, defaulting to 1000 [ 111.916104][ T5972] lo speed is unknown, defaulting to 1000 [ 111.954175][ T5972] lo speed is unknown, defaulting to 1000 [ 111.993010][ T5976] smc: removing ib device syz0 [ 112.108442][ T5986] syzkaller0: entered promiscuous mode [ 112.108467][ T5986] syzkaller0: entered allmulticast mode [ 112.178323][ T5988] TC_ACT_REPEAT abuse ? [ 112.265562][ T5992] syzkaller0: entered promiscuous mode [ 112.265586][ T5992] syzkaller0: entered allmulticast mode [ 112.889034][ T29] audit: type=1400 audit(1791321278.760:1627): avc: denied { listen } for pid=6005 comm="syz.4.708" laddr=172.20.20.17 lport=37105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.889079][ T29] audit: type=1400 audit(1791321278.760:1628): avc: denied { accept } for pid=6005 comm="syz.4.708" laddr=172.20.20.17 lport=37105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.890395][ T29] audit: type=1400 audit(1791321279.829:1629): avc: denied { read } for pid=6028 comm="syz.3.714" name="trace" dev="tracefs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 113.894303][ T6031] loop2: detected capacity change from 0 to 512 [ 114.587130][ T6048] loop2: detected capacity change from 0 to 512 [ 114.599133][ T6048] EXT4-fs: test_dummy_encryption option not supported [ 114.708125][ T6048] bridge2: port 1(erspan0) entered disabled state [ 114.888038][ T29] audit: type=1400 audit(1791321280.838:1630): avc: denied { create } for pid=6049 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.892338][ T6048] bridge0: port 3(syz_tun) entered disabled state [ 114.904594][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.904773][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.973121][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.976537][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.051125][ T3711] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.051175][ T3711] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.051235][ T3711] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.051347][ T3711] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.183896][ T29] audit: type=1400 audit(1791321281.138:1631): avc: denied { create } for pid=6069 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.186234][ T29] audit: type=1400 audit(1791321281.138:1632): avc: denied { ioctl } for pid=6069 comm="syz.3.724" path="socket:[12976]" dev="sockfs" ino=12976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.248637][ T6062] syzkaller0: entered promiscuous mode [ 115.248663][ T6062] syzkaller0: entered allmulticast mode [ 115.291084][ T79] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.291128][ T79] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.292545][ T3709] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.292583][ T3709] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.380088][ T6074] syzkaller0: entered promiscuous mode [ 115.380158][ T6074] syzkaller0: entered allmulticast mode [ 115.420541][ T6091] IPVS: set_ctl: invalid protocol: 22 100.1.1.5:20000 [ 115.554863][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 115.554881][ T29] audit: type=1400 audit(1791321281.508:1637): avc: denied { write } for pid=6092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.623302][ T29] audit: type=1400 audit(1791321281.578:1638): avc: denied { write } for pid=6107 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.729466][ T6114] loop1: detected capacity change from 0 to 256 [ 115.880130][ T29] audit: type=1400 audit(1791321281.828:1639): avc: denied { write } for pid=6113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.938585][ T6131] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 115.956822][ T6131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.958375][ T29] audit: type=1400 audit(1791321281.907:1640): avc: denied { write } for pid=6132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.974037][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 116.005555][ T6131] bond3: (slave bridge1): making interface the new active one [ 116.008376][ T6131] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 116.136664][ T6108] loop0: detected capacity change from 0 to 164 [ 116.313715][ T29] audit: type=1400 audit(1791321282.267:1641): avc: denied { mounton } for pid=6141 comm="syz.3.736" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.316956][ T6108] Unsupported NM flag settings (240) [ 116.355907][ T6143] Unsupported NM flag settings (240) [ 116.355984][ T6143] Unsupported NM flag settings (240) [ 116.454569][ T29] audit: type=1400 audit(1791321282.397:1642): avc: denied { read } for pid=6128 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.511436][ T6145] syzkaller0: entered promiscuous mode [ 116.511515][ T6145] syzkaller0: entered allmulticast mode [ 116.514611][ T6149] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 116.516530][ T29] audit: type=1400 audit(1791321282.457:1643): avc: denied { write } for pid=6128 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.584235][ T6149] bridge2: entered promiscuous mode [ 116.584257][ T6149] bridge2: entered allmulticast mode [ 116.587561][ T6149] bond1: (slave bridge2): making interface the new active one [ 116.589669][ T6149] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 116.653242][ T29] audit: type=1326 audit(1791321282.577:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.1.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 116.653277][ T29] audit: type=1326 audit(1791321282.577:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.1.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 116.653430][ T29] audit: type=1326 audit(1791321282.587:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.1.740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 118.868103][ T6185] loop3: detected capacity change from 0 to 512 [ 119.079943][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.080018][ T6185] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.137588][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.316630][ T6208] loop2: detected capacity change from 0 to 512 [ 119.321918][ T6208] EXT4-fs: Ignoring removed i_version option [ 119.343927][ T6208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.355855][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.356030][ T6208] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.449946][ T6176] loop1: detected capacity change from 0 to 512 [ 119.540414][ T6176] EXT4-fs: Ignoring removed nobh option [ 119.580860][ T6216] loop3: detected capacity change from 0 to 128 [ 119.711213][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.869538][ T6176] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.745: corrupted inode contents [ 119.869575][ T6176] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 119.870717][ T6176] EXT4-fs (loop1): Remounting filesystem read-only [ 119.875702][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 119.876051][ C1] EXT4-fs (loop1): initial error at time 1791321285: ext4_do_update_inode:5801: inode 3 [ 119.876223][ C1] EXT4-fs (loop1): last error at time 1791321285: ext4_do_update_inode:5801: inode 3 [ 119.897051][ T6176] EXT4-fs (loop1): 1 truncate cleaned up [ 119.923616][ T6176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.929044][ T6176] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.107712][ T6238] syz_tun: entered allmulticast mode [ 120.220820][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.309967][ T6241] loop3: detected capacity change from 0 to 128 [ 121.031988][ T6258] syzkaller0: entered promiscuous mode [ 121.032013][ T6258] syzkaller0: entered allmulticast mode [ 121.388068][ T6270] Cannot find set identified by id 0 to match [ 121.389115][ T6270] 9p: Bad value for 'rfdno' [ 121.406901][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 121.406919][ T29] audit: type=1400 audit(1791321287.364:2252): avc: denied { setopt } for pid=6266 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.542707][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 121.553694][ T6276] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.707117][ T29] audit: type=1326 audit(1791321287.664:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 121.707535][ T29] audit: type=1326 audit(1791321287.664:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 121.707665][ T29] audit: type=1326 audit(1791321287.664:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 121.709095][ T29] audit: type=1326 audit(1791321287.664:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f460250e159 code=0x7ffc0000 [ 121.718808][ T6248] loop0: detected capacity change from 0 to 512 [ 121.792338][ T29] audit: type=1326 audit(1791321287.724:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 121.792448][ T29] audit: type=1326 audit(1791321287.724:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 121.792477][ T29] audit: type=1326 audit(1791321287.724:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 121.792556][ T29] audit: type=1326 audit(1791321287.724:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 121.792585][ T29] audit: type=1326 audit(1791321287.724:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.4.777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46024ce98e code=0x7ffc0000 [ 121.857132][ T6288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6288 comm=syz.1.780 [ 122.073217][ T6290] loop3: detected capacity change from 0 to 2048 [ 122.166521][ T6248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.185298][ T6248] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.876084][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.892453][ T6290] loop3: p1 < > p4 [ 122.900469][ T6290] loop3: p4 size 8388608 extends beyond EOD, truncated [ 122.996762][ T2984] loop3: p1 < > p4 [ 122.997448][ T2984] loop3: p4 size 8388608 extends beyond EOD, truncated [ 123.036122][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 123.340662][ T6317] ÿ: renamed from bond_slave_0 [ 123.367456][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 123.451684][ T6331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.913631][ T6334] bridge0: port 1(syz_tun) entered blocking state [ 123.913672][ T6334] bridge0: port 1(syz_tun) entered disabled state [ 123.914299][ T6334] syz_tun: entered promiscuous mode [ 123.914551][ T6334] bridge0: port 1(syz_tun) entered blocking state [ 123.914608][ T6334] bridge0: port 1(syz_tun) entered forwarding state [ 126.576574][ T6380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.722937][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 126.723520][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 126.723537][ T29] audit: type=1400 audit(1791321292.672:2379): avc: denied { ioctl } for pid=6389 comm="syz.1.816" path="socket:[14500]" dev="sockfs" ino=14500 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.729242][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 126.729264][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 126.760095][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.818'. [ 126.834525][ T6395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6395 comm=syz.4.818 [ 126.955614][ T29] audit: type=1326 audit(1791321292.902:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 126.955674][ T29] audit: type=1326 audit(1791321292.902:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 126.955806][ T29] audit: type=1326 audit(1791321292.902:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 126.960009][ T29] audit: type=1326 audit(1791321292.912:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 126.961468][ T29] audit: type=1326 audit(1791321292.912:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 126.961665][ T29] audit: type=1326 audit(1791321292.912:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 127.022007][ T29] audit: type=1326 audit(1791321292.972:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 127.030592][ T29] audit: type=1326 audit(1791321292.982:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 127.047763][ T29] audit: type=1326 audit(1791321293.002:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 127.230850][ T6404] loop2: detected capacity change from 0 to 764 [ 127.253124][ T6404] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 128.126765][ T6425] sch_fq: defrate 1 ignored. [ 128.474911][ T6416] loop2: detected capacity change from 0 to 512 [ 129.327984][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.328065][ T6416] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.184320][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.379257][ T6495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.585668][ T6496] md: could not open device unknown-block(1,0). [ 130.620791][ T6499] md: could not open device unknown-block(1,1). [ 130.783536][ T6509] syz_tun (unregistering): left allmulticast mode [ 131.208657][ T6523] syzkaller0: entered promiscuous mode [ 131.208727][ T6523] syzkaller0: entered allmulticast mode [ 131.213536][ T6523] tipc: Started in network mode [ 131.213609][ T6523] tipc: Node identity 5eab91b4323d, cluster identity 4711 [ 131.213651][ T6523] tipc: Enabled bearer , priority 0 [ 131.224441][ T6522] tipc: Resetting bearer [ 131.262807][ T6522] tipc: Disabling bearer [ 131.520611][ T6530] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.220396][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 132.220416][ T29] audit: type=1400 audit(1791321298.170:2415): avc: denied { bind } for pid=6548 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.275572][ T29] audit: type=1400 audit(1791321298.220:2416): avc: denied { ioctl } for pid=6548 comm="syz.3.866" path="socket:[14299]" dev="sockfs" ino=14299 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.736128][ T6562] bridge0: port 3(syz_tun) entered disabled state [ 132.747478][ T6562] syz_tun (unregistering): left allmulticast mode [ 132.747501][ T6562] syz_tun (unregistering): left promiscuous mode [ 132.747558][ T6562] bridge0: port 3(syz_tun) entered disabled state [ 133.325828][ T29] audit: type=1326 audit(1791321299.270:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 133.325867][ T29] audit: type=1326 audit(1791321299.270:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 133.325898][ T29] audit: type=1326 audit(1791321299.270:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 133.325929][ T29] audit: type=1326 audit(1791321299.270:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 133.325964][ T29] audit: type=1326 audit(1791321299.270:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2afcebe159 code=0x7ffc0000 [ 133.389325][ T29] audit: type=1326 audit(1791321299.330:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2afce7e98e code=0x7ffc0000 [ 133.389443][ T29] audit: type=1326 audit(1791321299.330:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2afce7e98e code=0x7ffc0000 [ 133.392034][ T29] audit: type=1326 audit(1791321299.330:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.871" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2afce7e98e code=0x7ffc0000 [ 133.820880][ T6568] io-wq is not configured for unbound workers [ 135.104273][ T6629] tmpfs: Bad value for 'size' [ 136.186922][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 136.187534][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 137.071694][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.071735][ T6686] bridge0: port 2(bridge_slave_1) entered listening state [ 137.071808][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.071886][ T6686] bridge0: port 1(bridge_slave_0) entered listening state [ 137.088879][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'. [ 137.239838][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 137.239856][ T29] audit: type=1326 audit(1791321303.179:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.241363][ T29] audit: type=1326 audit(1791321303.189:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.244646][ T29] audit: type=1326 audit(1791321303.189:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.248107][ T29] audit: type=1326 audit(1791321303.189:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.250980][ T29] audit: type=1326 audit(1791321303.199:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.257913][ T29] audit: type=1326 audit(1791321303.199:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.259586][ T29] audit: type=1326 audit(1791321303.199:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.261197][ T29] audit: type=1326 audit(1791321303.209:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.269654][ T29] audit: type=1326 audit(1791321303.209:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.271511][ T29] audit: type=1326 audit(1791321303.219:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 137.332877][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 137.522641][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.536110][ T6686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.546986][ T6686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.785543][ T6696] syzkaller0: entered promiscuous mode [ 137.785568][ T6696] syzkaller0: entered allmulticast mode [ 140.935164][ T6719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.935190][ T6719] nci: nci_start_poll: failed to set local general bytes [ 140.938326][ T6710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.265829][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 142.265856][ T29] audit: type=1326 audit(1791321308.208:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.408260][ T29] audit: type=1326 audit(1791321308.348:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.410426][ T29] audit: type=1326 audit(1791321308.348:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.498916][ T29] audit: type=1326 audit(1791321308.438:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.531504][ T29] audit: type=1326 audit(1791321308.478:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.532706][ T29] audit: type=1326 audit(1791321308.478:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.533487][ T29] audit: type=1326 audit(1791321308.478:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.538109][ T29] audit: type=1326 audit(1791321308.478:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb9b75e98e code=0x7ffc0000 [ 142.539027][ T29] audit: type=1326 audit(1791321308.478:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 142.539787][ T29] audit: type=1326 audit(1791321308.478:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb9b79e159 code=0x7ffc0000 [ 143.962507][ T6782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 144.048192][ T6786] xt_REDIRECT: bad MAP_IPS. [ 145.644178][ T6820] ./dev/sda1: Can't lookup blockdev [ 145.734810][ T6552] syz.3.866 (6552) used greatest stack depth: 9112 bytes left [ 146.252692][ T6832] netlink: 52 bytes leftover after parsing attributes in process `syz.1.950'. [ 147.591820][ T6830] loop2: detected capacity change from 0 to 512 [ 147.765722][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 147.765743][ T29] audit: type=1400 audit(1791321313.707:2877): avc: denied { write } for pid=6847 comm="syz.1.966" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.867063][ T6830] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.949: iget: bad i_size value: 38620345925642 [ 147.868033][ T6830] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.871537][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 147.871561][ C1] EXT4-fs (loop2): initial error at time 1791321313: ext4_orphan_get:1403: inode 15 [ 147.871607][ C1] EXT4-fs (loop2): last error at time 1791321313: ext4_orphan_get:1403: inode 15 [ 147.927636][ T6830] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.949: couldn't read orphan inode 15 (err -117) [ 147.927933][ T6830] loop2: lost filesystem error report for type 5 error -117 [ 147.951947][ T6830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.042195][ T29] audit: type=1400 audit(1791321313.987:2878): avc: denied { write } for pid=6829 comm="syz.2.949" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.182271][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.632805][ T6875] netlink: 68 bytes leftover after parsing attributes in process `syz.4.962'. [ 148.636686][ T29] audit: type=1400 audit(1791321314.577:2879): avc: denied { name_bind } for pid=6874 comm="syz.4.962" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.677093][ T6878] loop1: detected capacity change from 0 to 512 [ 148.697191][ T6878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.697305][ T6878] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.787678][ T6888] netlink: 52 bytes leftover after parsing attributes in process `syz.0.964'. [ 148.851428][ T6890] syzkaller0: entered promiscuous mode [ 148.851451][ T6890] syzkaller0: entered allmulticast mode [ 149.234850][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.4.970'. [ 149.239815][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.4.970'. [ 149.364552][ T29] audit: type=1400 audit(1791321315.307:2880): avc: denied { setattr } for pid=6876 comm="syz.1.963" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.549511][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.787162][ T6913] loop1: detected capacity change from 0 to 512 [ 149.832089][ T6913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.832183][ T6913] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.836905][ T29] audit: type=1400 audit(1791321315.777:2881): avc: denied { write } for pid=6906 comm="syz.1.977" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.856029][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.856096][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.887127][ T6919] EXT4-fs (loop1): shut down requested (1) [ 149.953873][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.956285][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.081819][ T79] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.081876][ T79] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.081992][ T79] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.082058][ T79] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.269911][ T6925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.980'. [ 150.443554][ T6929] IPVS: set_ctl: invalid protocol: 22 100.1.1.5:20000 [ 150.601138][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.665985][ T6940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.983'. [ 150.805788][ T6941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.073882][ T6944] loop2: detected capacity change from 0 to 1024 [ 151.161820][ T6944] EXT4-fs: Ignoring removed oldalloc option [ 151.162299][ T6944] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 151.341399][ T29] audit: type=1326 audit(1791321317.277:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.1.993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 151.342103][ T29] audit: type=1326 audit(1791321317.277:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.1.993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 151.342153][ T29] audit: type=1326 audit(1791321317.287:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.1.993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8b8de159 code=0x7ffc0000 [ 151.425144][ T29] audit: type=1326 audit(1791321317.367:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.1.993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf8b8ddec2 code=0x7ffc0000 [ 151.425182][ T29] audit: type=1326 audit(1791321317.367:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.1.993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf8b8ddec2 code=0x7ffc0000 [ 151.497249][ T6958] tipc: Resetting bearer [ 151.567833][ T6944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.619773][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 151.692185][ T6958] 8021q: adding VLAN 0 to HW filter on device eth0 [ 151.710837][ T6958] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.724722][ T6958] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.737211][ T6958] 8021q: adding VLAN 0 to HW filter on device eth3 [ 151.780001][ T6958] bond1: entered allmulticast mode [ 151.802293][ T6958] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 151.822749][ T6958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.989522][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.046916][ T6966] ================================================================== [ 152.046950][ T6966] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 152.046983][ T6966] [ 152.046990][ T6966] write to 0xffffc90000f83e20 of 8 bytes by task 6971 on cpu 1: [ 152.047007][ T6966] shmem_fallocate+0x72e/0x8d0 [ 152.047027][ T6966] vfs_fallocate+0x3ac/0x400 [ 152.047062][ T6966] __x64_sys_fallocate+0x7a/0xd0 [ 152.047093][ T6966] x64_sys_call+0x1e1d/0x2550 [ 152.047117][ T6966] do_syscall_64+0x112/0x360 [ 152.047138][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.047158][ T6966] [ 152.047164][ T6966] read to 0xffffc90000f83e20 of 8 bytes by task 6966 on cpu 0: [ 152.047181][ T6966] shmem_writeout+0x2b6/0x8f0 [ 152.047208][ T6966] shrink_folio_list+0x1a81/0x26f0 [ 152.047237][ T6966] shrink_lruvec+0x1293/0x1d40 [ 152.047267][ T6966] shrink_node+0x67c/0x2000 [ 152.047289][ T6966] do_try_to_free_pages+0x408/0xca0 [ 152.047321][ T6966] try_to_free_mem_cgroup_pages+0x201/0x420 [ 152.047354][ T6966] mem_cgroup_force_empty_write+0x77/0x100 [ 152.047381][ T6966] cgroup_file_write+0x197/0x350 [ 152.047411][ T6966] kernfs_fop_write_iter+0x1d2/0x2e0 [ 152.047435][ T6966] vfs_write+0x57f/0x9a0 [ 152.047462][ T6966] ksys_write+0xdc/0x1a0 [ 152.047492][ T6966] __x64_sys_write+0x40/0x50 [ 152.047520][ T6966] x64_sys_call+0x154e/0x2550 [ 152.047544][ T6966] do_syscall_64+0x112/0x360 [ 152.047563][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.047584][ T6966] [ 152.047588][ T6966] value changed: 0x0000000000001d5b -> 0x0000000000001d5c [ 152.047600][ T6966] [ 152.047604][ T6966] Reported by Kernel Concurrency Sanitizer on: [ 152.047615][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.0.995 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.047640][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.047652][ T6966] ================================================================== [ 152.133810][ T6978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.999'.