last executing test programs: 1m9.588436622s ago: executing program 0 (id=442): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x24}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x8518}, 0x10c000, 0xe7a, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f00000003c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, 0x0, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000140)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000200)=""/15, 0xf}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000580)=""/207, 0xcf}], 0x5}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) listen(r0, 0xe1d) 1m9.364919804s ago: executing program 0 (id=445): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x24}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x8518}, 0x10c000, 0xe7a, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f00000003c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, 0x0, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000140)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000580)=""/207, 0xcf}], 0x4}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) listen(r0, 0xe1d) 1m8.959915775s ago: executing program 0 (id=448): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000540)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x73, r0, 0x0, 0x0, 0xfffffffffffffffe}]) syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000780)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000e40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x13) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000f40), &(0x7f0000000f80)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000fc0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0x58, &(0x7f0000001080)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x0, 0x0, &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000400)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eef9757a601bee9363f190009c5b350c66a2533051734299c8026b7d7321bd000000003632", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) syz_open_dev$sg(&(0x7f0000000480), 0x6f5e, 0x2) 1m7.994816244s ago: executing program 0 (id=456): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000e80)='./file1\x00', 0x210000, &(0x7f0000000f80)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000001040)="$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") setrlimit(0x1, 0x0) truncate(&(0x7f00000015c0)='./file1\x00', 0x40000000000) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400, 0x8}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001680)={0x1, &(0x7f00000016c0)=[{0x2, 0x5, 0x8, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) creat(&(0x7f0000001700)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x8, 0x0, &(0x7f0000001740)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001780)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001800)='veth0_to_batadv\x00', 0x7, 0x9, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) getrlimit(0xd, &(0x7f0000001840)) perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000001900)='smaps\x00') preadv(r2, &(0x7f0000001940)=[{&(0x7f0000001980)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000001a80)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x14}}, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340300000008014e0004000000050003002f0000000900010073797a3100000000040004809297d68fa43cad1ab6745b3754dd9a375eadc24618a0bb36b6de7449a2baf49064676337f87b10d9b7a3c48c0c16b6680de6e94e11824f73a8fc7a924c17ca7d8f7bde30e92562bb55ff09615e083950a710947f50db1a777707ab5c799f99689516545995b4d2efff5f889315790f1156782824b1b93ed98807d368d30c6eb6fc0b01d089f69e6932c106db9b792933f7225497525979a88791b0ac2eddb0e0331013daa0c37b127aacc9107c"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000000) 1m7.419354202s ago: executing program 0 (id=462): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="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", 0x2bb}, {&(0x7f0000000380)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e3", 0x21}], 0x2}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000540)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000001580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)="ea", 0x1}], 0x1}}], 0x1, 0x400c000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001700)={0x2, 0x0, 0x4ca, 0x4f5, 0x0, 0x4}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000001640)=@assoc_value, &(0x7f0000001680)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3790}, 0x94) perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0xfffffffffffffdbf}, 0xa, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./proc\x00', 0xc) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0xc0104d03, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000001940)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3932", 0xfe8e}], 0x1) 1m6.696300585s ago: executing program 0 (id=464): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe3a7a75c10f3f832}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1m6.696110705s ago: executing program 32 (id=464): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe3a7a75c10f3f832}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 6.768296483s ago: executing program 1 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x400000, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18020020080000000000000003008000850000002700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000100850000008200000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x560b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xf9}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2005d808}, 0x4080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000f80)="080000e1ff000000000000000000", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000b703000000000000b70400000a0000040000007800"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0xa}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x1, 0x1000, 0x9, 0x101, 0x400, 0xa, 0x7, 0x40, {0x1, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x7ff, 0x5, 0x4b4, 0xc}}, &(0x7f00000003c0)=0xb0) socket$inet6_sctp(0xa, 0x1, 0x84) 5.892698832s ago: executing program 1 (id=1216): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)="bd8a1753f7f5948dccf7dd20fe339dd47779d1754943840c9161b855c78bcf3bf56c3c3739899c1283d311e44f5ce36b8715cabf0b94f43ee6b01c1b29676d82f29aaae583dae10a417c1212b9ad39aade8a1a2fabb0b52e7cd62b2ed40506fd8ed0e141a6eed02ce6bc01904e7d03a410886ecc23da5c68ad8eca108aa53717e5afb4fc17879946a9fe2c47f254f5cb3c1d38995dbc0f", 0x97) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)=0x1) r2 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x1000000, 0x10, r3, 0x0) pwrite64(r1, &(0x7f00000001c0)="6ec6fc3c819fc0c2bfd07f538d83ec34798e6402456de857937f79004d8cba927bf4fb64670b44535d1829336e7aa5955e3d029c478a844bb2eb6a9655ffc1fbbb27f02e3ffe2bdc2adf45d36f1bd9df586f7394fe941fad59694b94966790b9539260ecd2bcc29c32cc6876542396a761db314616f9e4627c58fcc763ae84f241802144b6a8c941bdb91f4b936e177cae", 0x91, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @multicast1}, &(0x7f00000002c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@arena={0x21, 0x0, 0x0, 0x1e, 0x400, r3, 0x9, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r7 = fsmount(r3, 0x0, 0x5) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x80000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}, {@nodevmap}, {@fscache}, {@cache_fscache}]}}) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000540)=[0x8, 0x4]) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'system.', 'fscache'}, &(0x7f0000000600), 0x0) recvfrom$inet6(r5, &(0x7f0000000640)=""/247, 0xf7, 0x40002000, &(0x7f0000000740)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000780)=0x35c98c90, 0x4) r8 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x9, 0x5, 0x81, 0x6, 0x0, 0x0, 0x1c888, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000007c0), 0xb}, 0x188a0, 0xffffffff, 0x4, 0x6, 0x7fffffffffffffff, 0x6, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r5, 0xa) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000880)={0x1, 0x1, 0x3, 0xffffffff}, &(0x7f00000008c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000900)={0x4, 0x1, 0xf, 0x80000000, r9}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000000940)={0x80}) r10 = getpgrp(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r11, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8b}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040881) 4.13812105s ago: executing program 1 (id=1225): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x9, 0x2a4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x804000, &(0x7f0000000100), 0xff, 0x54a, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x22, 0x8001}, {0x4, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x4004930) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5500000018007f5f00fe01b2a4a2809302060000fe00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="0203000304000000ff0e000000000400020018"], 0x20}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getsockopt(0xffffffffffffffff, 0x9, 0x2a4, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x804000, &(0x7f0000000100), 0xff, 0x54a, &(0x7f0000000180)="$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") (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x22, 0x8001}, {0x4, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x4004930) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5500000018007f5f00fe01b2a4a2809302060000fe00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4000) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="0203000304000000ff0e000000000400020018"], 0x20}, 0x1, 0x7}, 0x0) (async) 3.635053851s ago: executing program 3 (id=1229): sched_yield() (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x200, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x1) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 3.339849061s ago: executing program 3 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000dc0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4000000) 3.337244061s ago: executing program 3 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000380200000200000008000100", @ANYRES32=r1, @ANYBLOB="4c0d3f5335149afb99"], 0x1c}}, 0x48844) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="500404"], 0x7) 3.271423398s ago: executing program 1 (id=1235): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) openat$zero(0xffffffffffffff9c, 0x0, 0x8602, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') write(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000600)='GPL\x00'}, 0x48) pread64(r2, &(0x7f0000000240)=""/166, 0xa6, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0xe0e9, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, r4, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000300)="8813c7ddc4463a872de91c60b5") ptrace(0x10, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='7\x00\x00\x00\n'], 0x20) 2.483219278s ago: executing program 5 (id=1239): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x224247d4, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000680)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000700), 0x0) unshare(0x2020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) 2.438777512s ago: executing program 5 (id=1240): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009000000000005002000010000000500080000000000"], 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c6176650000000014000580050020000100000008002200", @ANYRES32=r3, @ANYBLOB="140003006251982fd82836bb8e6176657a30c600"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) faccessat(0xffffffffffffff9c, 0x0, 0x2) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x12}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0x1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x18a, 0x1, 0x1, 0x1, 0x4, {0x4, 0x1, 0x8, 0x316, 0xd}, {0x9, 0x0, 0x7, 0x4, 0x7, 0x80}, 0x9, 0x5, 0xa86}}]}]}}]}, 0x74}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r12, &(0x7f0000000780)='1', 0x1) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000007c0)={'veth1_virt_wifi\x00', &(0x7f0000000800)=@ethtool_modinfo={0x42, 0x3, 0x4001}}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file3\x00', 0x105042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9ec80100180000000000005a3c0000003c00000006000000000000000100000d0000000002000000050000001000800001000004ff0f00000900000000000000690d00001000000000000a010200000021000306005f61006100"], &(0x7f0000000940)=""/238, 0x5a, 0xee, 0x0, 0x6ad64ca8, 0x10000, @value=r13}, 0x28) 2.429377874s ago: executing program 2 (id=1241): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_dest={0x18, 0x114, 0x2, {0x86, 0x40}}], 0x18, 0x20008011}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x42101, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='~', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r1, 0x3305) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000140)='./ms\x00', 0xff) mount(0x0, &(0x7f0000000180)='./ms\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) listxattr(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='user', 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20008015) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 2.400565827s ago: executing program 4 (id=1242): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x101, 0x101}, 0x10e4c8, 0x7fffffffffffffff, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000a40)='ext3\x00', &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f0000000ac0)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000000b00)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000940)='.\x00', &(0x7f0000000980), &(0x7f00000009c0)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 2.205995226s ago: executing program 5 (id=1243): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.stat\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000640)='syzkaller\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000680)={r4}, 0x8) close(r5) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0xfffffffffffffffd}, 0x10) (rerun: 64) socket(0x1, 0x803, 0x0) (async, rerun: 32) bind$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x100402a, &(0x7f0000000880)={[], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0xfc, 0x503, &(0x7f00000008c0)="$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") (async, rerun: 32) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000070601"], 0x1c}}, 0x8050) recvmsg(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x10000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f00)={'rose0\x00', 0x112}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c1000003d000701"], 0x101c}}, 0x4010) (async) unshare(0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001000)={'bond0\x00'}) 2.202247356s ago: executing program 2 (id=1244): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) unshare(0x100000) r0 = syz_clone(0x118081100, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0xc0000004, 0x0) quotactl$Q_SETQUOTA(0x0, &(0x7f0000001e00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.100943417s ago: executing program 4 (id=1245): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000dc0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4000000) 2.060063941s ago: executing program 4 (id=1246): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, &(0x7f0000000140)) futex(0x0, 0x3, 0x5, 0x0, 0x0, 0x10400001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x20001f, &(0x7f0000000240)={[{@nomblk_io_submit}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x558, &(0x7f0000000380)="$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") process_vm_readv(0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_create_resource$futex(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4], 0x4c}}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x804c080) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x100, 0x20, 0xfffffffffffff}, &(0x7f0000000340)=0xfffffffffffffd8c) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r6, 0x88c}, &(0x7f0000000080)=0x8) 2.054358182s ago: executing program 2 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.812503306s ago: executing program 2 (id=1248): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, &(0x7f0000000080)=""/220) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc00000000000000", 0x37}], 0x1) unshare(0x20000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') epoll_create(0x1e) setns(0xc9, 0x40000000) socket(0x840000000002, 0x3, 0x100) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000cc0), 0x0, 0x20008800) 1.405605497s ago: executing program 5 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, @perf_bp={0x0, 0x8}, 0xb093, 0x7ffffd, 0x2, 0x7, 0x7, 0x2, 0x0, 0x0, 0x800, 0x0, 0x84}, 0x0, 0x6, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000200)=[0x0, 0x2], 0x2) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file2\x00', 0x380801b, &(0x7f0000000880), 0xff, 0x524, &(0x7f00000008c0)="$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") ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6(0xa, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r7, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x280000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) 1.368338771s ago: executing program 4 (id=1250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x224247d4, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000680)) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x2020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) 1.235949955s ago: executing program 1 (id=1251): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0xbc8ddc50c9d0a44d, 0xff, 0x2, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x51, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x405, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0xfff, 0x90001}, 0x100410, 0x200, 0x400000a, 0x1, 0x2ca, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000000010104000000000000000002000006000001801400018008000100e000000108000200e00000010c00028005000100000000000c0010800800014000e74388"], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008854, &(0x7f0000000000), 0x1, 0x284, &(0x7f0000000640)="$eJzs3cFuEmEQAOBpC2Xbiz0bD5t48UTUNyCGJo2bmGA46EmS6sHWmNAL9cRj+Aw+ko/REx7MGligSNEYCyyl35ds/ulON5mfEIbD/OHdo09np58vPuTfv0aSpFGJ6MePg+E6tTNe90bxfszqBwBw17RanUbZNbBEOzdvdbuNTjUiatM7H38Wa/vbGisDAAAAAAAAAABgiRbO/w8ijmJ3NO8fMyNlu7ef/0+WUzUAcBvm/7dft9voHI6/v/3O/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnkGeP8hHV3V8Z/J3cZVcHgCwAoOZXr837P65/g8A224w1+/1fwDYfn/r/0no/wCwjV6/efuykWXNVpomEVf9XrvXLtYivzf+vzRNj66fuur12pN5gaz5LC3M5w8j4vgkaz5fmN+PJ4+L/DD34lU2l6/F6So3DgAAAAAAAAAAAAAAAAAAABuknk7Nne8vTv7X63/KF9HxSdZ8uvB8fyUeVta2DQAAAAAAAAAAAAAAAAAAALjTLi6/nHXOz993BfNBvlO8RJtSzxqDg/iPp5JYkKqN32ebsS/BvwdlfioBAAAAAAAAAAAAAAAAAMD9dH3o92auWkZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCC3Zj8/v/lyoKy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcD78CAAD//3Vof3o=") mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsetxattr(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="757365722e05b5e43e412e99ab075a01996f303f61840e93ce80b824406183fefa59e771bf525d7b54911b12692b93827620972d9b0fbe64e39057b59872df3d9dcd8f84"], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 630.988746ms ago: executing program 1 (id=1252): socket$inet_smc(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000500)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000580)=0x33, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f00000005c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x87) r6 = socket(0xa, 0x3, 0x87) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x1c1342, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000019c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r7, &(0x7f0000001a00)=[{&(0x7f0000001a40)="89e7ee0c7cdad9b4b47380c988ca", 0xffbf}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000640)={@local, 0x40, r8}) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newaddr={0x5c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x3, 0xdc8, 0x7}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x582}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x400, &(0x7f0000000f80), 0x2, 0x786, &(0x7f0000000fc0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = open(&(0x7f0000001780)='.\x00', 0x8000, 0x112) getdents(r9, &(0x7f00000017c0)=""/184, 0xb8) getdents(r9, &(0x7f0000001880)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200810, &(0x7f0000000800)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000880)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000001940)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000e00)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000e80)={'ip6_vti0\x00', 0x0, 0x29, 0x8c, 0x5, 0x4, 0x5, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, 0x10, 0x700, 0x7, 0xfffff17d}}) 606.340429ms ago: executing program 4 (id=1253): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000200)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x5}, 0x1c) (fail_nth: 1) 523.995717ms ago: executing program 4 (id=1254): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = syz_usbip_server_init(0x3) (async) syz_usbip_server_init(0x3) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x2, 0x1, 0x0) write(r0, &(0x7f0000000340)="a605ca72c529fac32f85831d788f153d6a02caa26f7d8d95d3bb381dd9c9fdd0e54928d9d06ab2a6aa5f2a4ed90f4c24cb79278e4c00e5927ffcf701add0b563ffa8208f06847cd35c5aa55d32e440ac3b68fe60c56f17cede576c907edc4bad4110f641a646817568b3d80521287419ca3e658ff8ef13f4264f8a625142bdcffa3e27247ee43b46cf8806d830823582e49b6cf400f6a378a51625e4d884f80eac959ea59f3d0bc6292e841bbe1e8f9628748ba3d5059c065ce94cc0cfb0a1e80505dfd8a09e77c1db78b7feed4c3d4e5a28491c2d630365cd4d87f87f5da50c970b2a23edb94d29b0feda1ea451583c3c57f99d", 0xf4) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000811) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) (async) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000480)={0x26, 0x1e, 0x4, 0x2, 0x3, 0xa9, 0x5, 0x3, 0xffffffffffffffff}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="1a", 0x100000}], 0x1}, 0x0) (async) close(r1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x410, 0x300, 0x240, 0x240, 0x300, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, &(0x7f0000000c40), {[{{@ip={@private=0xa010100, @local, 0xff, 0xffffffff, 'pimreg0\x00', '\x00', {0xff}, {0xff}, 0x67, 0x1, 0x4d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@ip={@loopback, @multicast2, 0xff, 0x0, 'bond_slave_0\x00', 'veth0_to_team\x00', {0xff}, {0x101}, 0x62}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xe, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x2, @multicast1, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000cc0)={0x0, 0x100000001, 0x0, [0x47932049, 0x6, 0x9, 0xfffffffffffffffe, 0x1], [0x0, 0xed2, 0x6b6a, 0x5, 0x862, 0x4, 0x1, 0x5610, 0x3, 0x6, 0xb, 0x7, 0x0, 0x5, 0xc67, 0xb, 0xffff, 0x2, 0x6, 0x870a, 0x8, 0x8, 0x200, 0xfffffffffffffff8, 0x81, 0x76, 0x20000007, 0x7f, 0x4, 0x5, 0x9, 0x23b31d04, 0x6, 0x0, 0x4000080000001, 0x7, 0x0, 0x6, 0xf431, 0x40, 0xc, 0x2, 0x7fffffffffffffff, 0x400, 0x1908ad5, 0x7, 0x8c33, 0x5, 0x8, 0xf000000000000000, 0x5901, 0x8, 0x7, 0x8000000000000001, 0x1, 0x1c00000, 0xffffffffffffff5d, 0x5, 0x1, 0x3, 0x7fff, 0xa, 0x9d89, 0x3, 0x100000000, 0x5, 0x0, 0x0, 0x3, 0x4, 0xd2, 0x9, 0x2, 0x6, 0xffffffffffffffff, 0xb, 0x8001, 0x9, 0x2, 0x4, 0x2, 0x4, 0x7fffffff, 0xf, 0x103, 0x2, 0xc2b, 0xfffffffffffffff9, 0x3, 0x200, 0x7fffffffffffffff, 0x2, 0x200, 0x9, 0x87b7, 0x5, 0x7, 0x5, 0xe, 0x7, 0x7ed43c22, 0x1, 0x3, 0x4, 0x5, 0x2, 0x4, 0x3, 0x4, 0x100000000, 0x71, 0xfffffffffffffffa, 0x24, 0x4, 0x9, 0x101, 0x9, 0x2, 0x7, 0x8001, 0x2]}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r7 = socket$inet_smc(0x2b, 0x1, 0x0) pwrite64(r0, &(0x7f00000002c0)="096d8d8cc4df6b61f698de8c61398ffc6f161226ce08b2bdada26c3751b97e10c313702d1bb0dc1138fb2864c3850c8d74a534b8cfbb77d3ba49bdaa69a772dba7ef33", 0x43, 0xf) (async) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, 0x0) (async) listen(r7, 0x3) (async) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xd, 0x3, &(0x7f0000001240)=@framed, &(0x7f0000001280)='GPL\x00', 0x5, 0x1f6, &(0x7f00000012c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380), 0x1}, 0x6d) 439.914696ms ago: executing program 5 (id=1255): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_dest={0x18, 0x114, 0x2, {0x86, 0x40}}], 0x18, 0x20008011}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x42101, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='~', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r1, 0x3305) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000140)='./ms\x00', 0xff) mount(0x0, &(0x7f0000000180)='./ms\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) listxattr(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='user', 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20008015) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 256.519124ms ago: executing program 3 (id=1256): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000dc0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4000000) 252.604165ms ago: executing program 2 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, 0x48) 165.963663ms ago: executing program 3 (id=1258): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0xd42, 0x15) pwrite64(r0, &(0x7f0000000900)="9c", 0x1, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f00000009c0)={0x80, 0xfffffffffffffffb, 0x0, 0x4, 0x6, 0x0, [{0x6e59, 0x5, 0x4, '\x00', 0x8}, {0x1, 0x7, 0x4, '\x00', 0x3408}, {0x800, 0x89, 0xa461, '\x00', 0x80}, {0x8945, 0x9, 0x0, '\x00', 0xd}, {0x6, 0x3ff, 0x0, '\x00', 0x100}, {0x5, 0x0, 0x6, '\x00', 0x100}]}) 105.74923ms ago: executing program 2 (id=1259): socket$inet_smc(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000580)=0x33, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f00000005c0)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x87) r5 = socket(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000019c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r6, &(0x7f0000001a00)=[{&(0x7f0000001a40)="89e7ee0c7cdad9b4b47380c988ca", 0xffbf}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000640)={@local, 0x40, r7}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newaddr={0x5c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x3, 0xdc8, 0x7}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x582}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x400, &(0x7f0000000f80), 0x2, 0x786, &(0x7f0000000fc0)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000001780)='.\x00', 0x8000, 0x112) getdents(r8, &(0x7f00000017c0)=""/184, 0xb8) getdents(r8, &(0x7f0000001880)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200810, &(0x7f0000000800)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000880)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000001940)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000e00)) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 99.78748ms ago: executing program 5 (id=1260): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, &(0x7f0000000140)) futex(0x0, 0x3, 0x5, 0x0, 0x0, 0x10400001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x20001f, &(0x7f0000000240)={[{@nomblk_io_submit}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x558, &(0x7f0000000380)="$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") process_vm_readv(0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_create_resource$futex(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4], 0x4c}}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x804c080) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x100, 0x20, 0xfffffffffffff}, &(0x7f0000000340)=0xfffffffffffffd8c) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r6, 0x88c}, &(0x7f0000000080)=0x8) 0s ago: executing program 3 (id=1261): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20842, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, &(0x7f0000001480)) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000015c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000016c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001740)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x1f, 0xc, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x48) kernel console output (not intermixed with test programs): ter): interface not active [ 80.720998][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.721086][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.721119][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.759232][ T4887] hsr_slave_0: entered promiscuous mode [ 80.760362][ T4887] hsr_slave_1: entered promiscuous mode [ 80.761091][ T4887] debugfs: 'hsr0' already exists in 'hsr' [ 80.761123][ T4887] Cannot create hsr debugfs directory [ 80.806328][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.848982][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.904471][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 80.904492][ T30] audit: type=1400 audit(1794302798.302:662): avc: denied { write } for pid=4993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.971550][ T30] audit: type=1400 audit(1794302798.372:663): avc: denied { write } for pid=5017 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.001337][ T4887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.003738][ T4887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.004441][ T4887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.006853][ T4887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.007599][ T4887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.015178][ T4887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.015870][ T4887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.021930][ T5020] batman_adv: batadv0: adding TT local entry ba:bb:cc:dd:ee:ff to non-existent VLAN 3893 [ 81.026520][ T4887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.077719][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.116839][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.148434][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.163551][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.163663][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.172215][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.172292][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.197604][ T5035] FAULT_INJECTION: forcing a failure. [ 81.197604][ T5035] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.197631][ T5035] CPU: 1 UID: 0 PID: 5035 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.197665][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 81.197683][ T5035] Call Trace: [ 81.197691][ T5035] [ 81.197700][ T5035] __dump_stack+0x1d/0x30 [ 81.197803][ T5035] dump_stack_lvl+0x95/0xd0 [ 81.197832][ T5035] dump_stack+0x15/0x1b [ 81.197859][ T5035] should_fail_ex+0x259/0x270 [ 81.197894][ T5035] should_fail+0xb/0x20 [ 81.197976][ T5035] get_futex_key+0x12c/0xc40 [ 81.198003][ T5035] ? netif_receive_skb+0xdf/0x4c0 [ 81.198077][ T5035] futex_wait_setup+0x49/0x3e0 [ 81.198197][ T5035] ? __rb_insert_augmented+0x28f/0x2c0 [ 81.198225][ T5035] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 81.198340][ T5035] ? hrtimer_active+0xe7/0x110 [ 81.198391][ T5035] __futex_wait+0xb2/0x2a0 [ 81.198514][ T5035] ? __pfx_futex_wake_mark+0x10/0x10 [ 81.198628][ T5035] futex_wait+0x98/0x1c0 [ 81.198669][ T5035] do_futex+0x391/0x460 [ 81.198701][ T5035] __se_sys_futex+0x2f6/0x370 [ 81.198808][ T5035] __x64_sys_futex+0x78/0x90 [ 81.198842][ T5035] x64_sys_call+0x22e2/0x2550 [ 81.198880][ T5035] do_syscall_64+0x116/0x380 [ 81.198967][ T5035] ? clear_bhb_loop+0x70/0xc0 [ 81.198992][ T5035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.199059][ T5035] RIP: 0033:0x7f763d868f19 [ 81.199081][ T5035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.199107][ T5035] RSP: 002b:00007f763c2b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.199134][ T5035] RAX: ffffffffffffffda RBX: 00007f763dae5fa8 RCX: 00007f763d868f19 [ 81.199205][ T5035] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f763dae5fa8 [ 81.199223][ T5035] RBP: 00007f763dae5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 81.199243][ T5035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.199260][ T5035] R13: 00007f763dae6038 R14: 00007ffcd7a667b0 R15: 00007ffcd7a66898 [ 81.199287][ T5035] [ 81.345126][ T5041] 9pnet_virtio: no channels available for device syz [ 81.351989][ T30] audit: type=1400 audit(1794302798.752:664): avc: denied { create } for pid=5034 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.354184][ T5041] FAULT_INJECTION: forcing a failure. [ 81.354184][ T5041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.354261][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.4.495 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.354339][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 81.354385][ T5041] Call Trace: [ 81.354449][ T5041] [ 81.354476][ T5041] __dump_stack+0x1d/0x30 [ 81.354630][ T5041] dump_stack_lvl+0x95/0xd0 [ 81.354772][ T5041] dump_stack+0x15/0x1b [ 81.354829][ T5041] should_fail_ex+0x259/0x270 [ 81.354860][ T5041] should_fail+0xb/0x20 [ 81.354991][ T5041] should_fail_usercopy+0x1a/0x20 [ 81.355073][ T5041] _copy_from_user+0x1c/0xb0 [ 81.355168][ T5041] __sys_bpf+0x1e2/0xc50 [ 81.355300][ T5041] ? do_futex+0x300/0x460 [ 81.355400][ T5041] __x64_sys_bpf+0x69/0x80 [ 81.355462][ T5041] x64_sys_call+0xf26/0x2550 [ 81.355546][ T5041] do_syscall_64+0x116/0x380 [ 81.355618][ T5041] ? clear_bhb_loop+0x70/0xc0 [ 81.355721][ T5041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.355807][ T5041] RIP: 0033:0x7f763d868f19 [ 81.355874][ T5041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.355994][ T5041] RSP: 002b:00007f763c2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.356078][ T5041] RAX: ffffffffffffffda RBX: 00007f763dae5fa0 RCX: 00007f763d868f19 [ 81.356207][ T5041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000016 [ 81.356249][ T5041] RBP: 00007f763d8f7f6d R08: 0000000000000000 R09: 0000000000000000 [ 81.356359][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.356402][ T5041] R13: 00007f763dae6038 R14: 00007f763dae5fa0 R15: 00007ffcd7a66898 [ 81.356465][ T5041] [ 81.366259][ T30] audit: type=1400 audit(1794302798.752:665): avc: denied { connect } for pid=5034 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.664957][ T30] audit: type=1400 audit(1794302799.062:666): avc: denied { write } for pid=5052 comm="syz.4.496" path="socket:[12893]" dev="sockfs" ino=12893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.752728][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.810196][ T5054] FAULT_INJECTION: forcing a failure. [ 81.810196][ T5054] name failslab, interval 1, probability 0, space 0, times 0 [ 81.810234][ T5054] CPU: 1 UID: 0 PID: 5054 Comm: syz.4.496 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.810269][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 81.810288][ T5054] Call Trace: [ 81.810297][ T5054] [ 81.810307][ T5054] __dump_stack+0x1d/0x30 [ 81.810374][ T5054] dump_stack_lvl+0x95/0xd0 [ 81.810408][ T5054] dump_stack+0x15/0x1b [ 81.810436][ T5054] should_fail_ex+0x259/0x270 [ 81.810478][ T5054] ? sidtab_sid2str_get+0xa0/0x130 [ 81.810519][ T5054] should_failslab+0x8c/0xb0 [ 81.810553][ T5054] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 81.810643][ T5054] ? sidtab_sid2str_get+0xa0/0x130 [ 81.810682][ T5054] kmemdup_noprof+0x2b/0x70 [ 81.810714][ T5054] sidtab_sid2str_get+0xa0/0x130 [ 81.810804][ T5054] security_sid_to_context_core+0x179/0x2d0 [ 81.810844][ T5054] security_sid_to_context+0x27/0x40 [ 81.810878][ T5054] avc_audit_post_callback+0x10f/0x520 [ 81.810910][ T5054] ? audit_log_lsm_data+0xb89/0xbf0 [ 81.810940][ T5054] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.810990][ T5054] common_lsm_audit+0x1ba/0x230 [ 81.811020][ T5054] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.811115][ T5054] ? avc_denied+0xe4/0x100 [ 81.811152][ T5054] slow_avc_audit+0x14c/0x190 [ 81.811192][ T5054] avc_has_perm+0x144/0x190 [ 81.811229][ T5054] selinux_socket_setsockopt+0x1b7/0x220 [ 81.811344][ T5054] security_socket_setsockopt+0x42/0x80 [ 81.811389][ T5054] __sys_setsockopt+0x98/0x200 [ 81.811413][ T5054] __x64_sys_setsockopt+0x64/0x80 [ 81.811510][ T5054] x64_sys_call+0x248f/0x2550 [ 81.811541][ T5054] do_syscall_64+0x116/0x380 [ 81.811603][ T5054] ? clear_bhb_loop+0x70/0xc0 [ 81.811630][ T5054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.811699][ T5054] RIP: 0033:0x7f763d868f19 [ 81.811722][ T5054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.811772][ T5054] RSP: 002b:00007f763c2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.811792][ T5054] RAX: ffffffffffffffda RBX: 00007f763dae5fa0 RCX: 00007f763d868f19 [ 81.811806][ T5054] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 81.811839][ T5054] RBP: 00007f763d8f7f6d R08: 000000000000002e R09: 0000000000000000 [ 81.811857][ T5054] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 81.811903][ T5054] R13: 00007f763dae6038 R14: 00007f763dae5fa0 R15: 00007ffcd7a66898 [ 81.811926][ T5054] [ 81.812098][ T30] audit: type=1400 audit(1794302799.212:667): avc: denied { setopt } for pid=5052 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tsid=137 tclass=tipc_socket permissive=1 [ 82.032630][ T5036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.081835][ T4887] veth0_vlan: entered promiscuous mode [ 82.090389][ T4887] veth1_vlan: entered promiscuous mode [ 82.122764][ T4887] veth0_macvtap: entered promiscuous mode [ 82.124569][ T4887] veth1_macvtap: entered promiscuous mode [ 82.139746][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.149961][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.180599][ T134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181108][ T134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181185][ T134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181227][ T134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.318244][ T5080] loop5: detected capacity change from 0 to 512 [ 82.339339][ T5080] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.465: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 82.339377][ T5080] loop5: lost filesystem error report for type 5 error -117 [ 82.340119][ T5080] EXT4-fs (loop5): 1 orphan inode deleted [ 82.341703][ T5080] EXT4-fs mount: 46 callbacks suppressed [ 82.341791][ T5080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.525792][ T5086] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.699153][ T5088] FAULT_INJECTION: forcing a failure. [ 82.699153][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 82.699185][ T5088] CPU: 0 UID: 0 PID: 5088 Comm: syz.1.508 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.699218][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 82.699235][ T5088] Call Trace: [ 82.699243][ T5088] [ 82.699253][ T5088] __dump_stack+0x1d/0x30 [ 82.699282][ T5088] dump_stack_lvl+0x95/0xd0 [ 82.699413][ T5088] dump_stack+0x15/0x1b [ 82.699437][ T5088] should_fail_ex+0x259/0x270 [ 82.699555][ T5088] ? tipc_nametbl_subscribe+0x1f6/0xa20 [ 82.699599][ T5088] should_failslab+0x8c/0xb0 [ 82.699720][ T5088] __kmalloc_cache_noprof+0x5d/0x3e0 [ 82.699836][ T5088] ? tipc_nametbl_subscribe+0x1f6/0xa20 [ 82.699880][ T5088] tipc_nametbl_subscribe+0x1f6/0xa20 [ 82.700021][ T5088] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 82.700152][ T5088] tipc_sub_subscribe+0x24d/0x330 [ 82.700189][ T5088] ? idr_alloc+0x89/0xd0 [ 82.700242][ T5088] tipc_conn_rcv_sub+0xf4/0x200 [ 82.700273][ T5088] tipc_topsrv_kern_subscr+0x17a/0x1e0 [ 82.700311][ T5088] tipc_group_create+0x234/0x270 [ 82.700388][ T5088] tipc_sk_join+0x110/0x450 [ 82.700413][ T5088] ? lock_sock_nested+0x7f/0x110 [ 82.700453][ T5088] tipc_setsockopt+0x594/0x620 [ 82.700497][ T5088] ? __pfx_tipc_setsockopt+0x10/0x10 [ 82.700588][ T5088] __sys_setsockopt+0x184/0x200 [ 82.700618][ T5088] __x64_sys_setsockopt+0x64/0x80 [ 82.700644][ T5088] x64_sys_call+0x248f/0x2550 [ 82.700727][ T5088] do_syscall_64+0x116/0x380 [ 82.700752][ T5088] ? clear_bhb_loop+0x70/0xc0 [ 82.700782][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.700870][ T5088] RIP: 0033:0x7f74a32f8f19 [ 82.700890][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.700912][ T5088] RSP: 002b:00007f74a1d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.701015][ T5088] RAX: ffffffffffffffda RBX: 00007f74a3575fa0 RCX: 00007f74a32f8f19 [ 82.701032][ T5088] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 82.701046][ T5088] RBP: 00007f74a3387f6d R08: 000000000000002e R09: 0000000000000000 [ 82.701064][ T5088] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 82.701081][ T5088] R13: 00007f74a3576038 R14: 00007f74a3575fa0 R15: 00007ffe197ff478 [ 82.701108][ T5088] [ 82.701177][ T5088] tipc: Service creation failed, no memory [ 82.701186][ T5088] tipc: Failed to subscribe for {66,0,4294967295} [ 83.128812][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.341527][ T5111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.415406][ T5121] PM: suspend entry (s2idle) [ 83.415452][ T5121] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 83.415466][ T5121] PM: suspend exit [ 83.590953][ T5150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 83.612403][ T5154] PM: suspend entry (s2idle) [ 83.612419][ T5154] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 83.612535][ T5154] PM: suspend exit [ 86.726814][ T5174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.815650][ T5211] netlink: 'syz.2.547': attribute type 3 has an invalid length. [ 86.815678][ T5211] netlink: 'syz.2.547': attribute type 3 has an invalid length. [ 86.896752][ T5213] netlink: 'syz.1.548': attribute type 11 has an invalid length. [ 86.950702][ T5213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 89.012906][ T5321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.596'. [ 89.928178][ T5233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.068074][ T5357] random: crng reseeded on system resumption [ 90.120528][ T5361] netlink: 'syz.4.616': attribute type 3 has an invalid length. [ 90.120553][ T5361] netlink: 'syz.4.616': attribute type 3 has an invalid length. [ 90.129632][ T5357] Restarting kernel threads ... [ 90.142312][ T5357] Done restarting kernel threads. [ 90.152909][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 90.194508][ T5364] bridge1: entered promiscuous mode [ 90.194532][ T5364] bridge1: entered allmulticast mode [ 90.907513][ T5405] syz_tun: entered allmulticast mode [ 90.907972][ T5403] syz_tun: left allmulticast mode [ 90.937454][ T5409] random: crng reseeded on system resumption [ 90.949326][ T5409] Restarting kernel threads ... [ 90.949555][ T5409] Done restarting kernel threads. [ 91.459661][ T30] audit: type=1400 audit(1794302808.862:668): avc: denied { write } for pid=5425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.482988][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.486202][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.538322][ T30] audit: type=1400 audit(1794302808.932:669): avc: denied { write } for pid=5443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.590496][ T5450] syz_tun: entered allmulticast mode [ 91.591121][ T5449] syz_tun: left allmulticast mode [ 91.616980][ T5452] random: crng reseeded on system resumption [ 91.625528][ T5452] Restarting kernel threads ... [ 91.625633][ T5452] Done restarting kernel threads. [ 91.653641][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 91.863832][ T5473] syz_tun: entered allmulticast mode [ 91.864301][ T5472] syz_tun: left allmulticast mode [ 91.894748][ T5479] random: crng reseeded on system resumption [ 91.905420][ T5479] Restarting kernel threads ... [ 91.905586][ T5479] Done restarting kernel threads. [ 91.951321][ T30] audit: type=1400 audit(1794302809.352:670): avc: denied { write } for pid=5474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.994819][ T30] audit: type=1400 audit(1794302809.392:671): avc: denied { write } for pid=5494 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.557873][ T30] audit: type=1400 audit(1794302809.952:672): avc: denied { write } for pid=5500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.591323][ T30] audit: type=1400 audit(1794302809.992:673): avc: denied { write } for pid=5511 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.258193][ T5369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.384560][ T30] audit: type=1400 audit(1794302810.782:674): avc: denied { write } for pid=5514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.420432][ T5542] random: crng reseeded on system resumption [ 93.441882][ T5542] Restarting kernel threads ... [ 93.441991][ T5542] Done restarting kernel threads. [ 93.468496][ T30] audit: type=1400 audit(1794302810.862:675): avc: denied { write } for pid=5545 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.522030][ T5551] netlink: 'syz.4.673': attribute type 3 has an invalid length. [ 93.846436][ T5606] loop3: detected capacity change from 0 to 512 [ 93.850274][ T5606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.872422][ T5606] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.872613][ T5606] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 93.872730][ T5606] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 93.872831][ T5606] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.698: bad orphan inode 768 [ 93.872859][ T5606] loop3: lost filesystem error report for type 5 error -117 [ 93.875159][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.978365][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.131521][ T5625] FAULT_INJECTION: forcing a failure. [ 94.131521][ T5625] name failslab, interval 1, probability 0, space 0, times 0 [ 94.131546][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.131568][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.131655][ T5625] Call Trace: [ 94.131661][ T5625] [ 94.131667][ T5625] __dump_stack+0x1d/0x30 [ 94.131715][ T5625] dump_stack_lvl+0x95/0xd0 [ 94.131745][ T5625] dump_stack+0x15/0x1b [ 94.131780][ T5625] should_fail_ex+0x259/0x270 [ 94.131815][ T5625] ? sctp_add_bind_addr+0x71/0x1e0 [ 94.131841][ T5625] should_failslab+0x8c/0xb0 [ 94.131902][ T5625] __kmalloc_cache_noprof+0x5d/0x3e0 [ 94.131935][ T5625] ? sctp_add_bind_addr+0x71/0x1e0 [ 94.131960][ T5625] sctp_add_bind_addr+0x71/0x1e0 [ 94.132053][ T5625] sctp_copy_local_addr_list+0x1b4/0x250 [ 94.132078][ T5625] sctp_copy_one_addr+0x7f/0x280 [ 94.132116][ T5625] sctp_bind_addr_copy+0x79/0x290 [ 94.132202][ T5625] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 94.132300][ T5625] sctp_connect_new_asoc+0x1c3/0x3a0 [ 94.132352][ T5625] __sctp_connect+0x428/0x7a0 [ 94.132392][ T5625] __sctp_setsockopt_connectx+0xab/0xd0 [ 94.132463][ T5625] sctp_setsockopt+0x41c/0xea0 [ 94.132490][ T5625] sock_common_setsockopt+0x69/0x80 [ 94.132520][ T5625] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.132680][ T5625] __sys_setsockopt+0x184/0x200 [ 94.132701][ T5625] __x64_sys_setsockopt+0x64/0x80 [ 94.132721][ T5625] x64_sys_call+0x248f/0x2550 [ 94.132809][ T5625] do_syscall_64+0x116/0x380 [ 94.132860][ T5625] ? clear_bhb_loop+0x70/0xc0 [ 94.132966][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.132986][ T5625] RIP: 0033:0x7ff69e9f8f19 [ 94.133000][ T5625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.133017][ T5625] RSP: 002b:00007ff69d447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.133035][ T5625] RAX: ffffffffffffffda RBX: 00007ff69ec75fa0 RCX: 00007ff69e9f8f19 [ 94.133047][ T5625] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 94.133068][ T5625] RBP: 00007ff69ea87f6d R08: 0000000000000010 R09: 0000000000000000 [ 94.133080][ T5625] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 94.133091][ T5625] R13: 00007ff69ec76038 R14: 00007ff69ec75fa0 R15: 00007ffe8e275758 [ 94.133108][ T5625] [ 94.317054][ T5633] loop3: detected capacity change from 0 to 512 [ 94.320053][ T5633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.354728][ T5633] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.358164][ T5633] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 94.358420][ T5633] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 94.358559][ T5633] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.711: bad orphan inode 768 [ 94.358621][ T5633] loop3: lost filesystem error report for type 5 error -117 [ 94.366674][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.504458][ T5639] syz_tun: entered allmulticast mode [ 94.515249][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.588153][ T5653] FAULT_INJECTION: forcing a failure. [ 94.588153][ T5653] name failslab, interval 1, probability 0, space 0, times 0 [ 94.588190][ T5653] CPU: 1 UID: 0 PID: 5653 Comm: syz.3.720 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.588281][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.588303][ T5653] Call Trace: [ 94.588311][ T5653] [ 94.588397][ T5653] __dump_stack+0x1d/0x30 [ 94.588428][ T5653] dump_stack_lvl+0x95/0xd0 [ 94.588458][ T5653] dump_stack+0x15/0x1b [ 94.588486][ T5653] should_fail_ex+0x259/0x270 [ 94.588593][ T5653] ? sctp_add_bind_addr+0x71/0x1e0 [ 94.588617][ T5653] should_failslab+0x8c/0xb0 [ 94.588666][ T5653] __kmalloc_cache_noprof+0x5d/0x3e0 [ 94.588710][ T5653] ? sctp_add_bind_addr+0x71/0x1e0 [ 94.588734][ T5653] sctp_add_bind_addr+0x71/0x1e0 [ 94.588825][ T5653] sctp_copy_local_addr_list+0x1b4/0x250 [ 94.588933][ T5653] sctp_copy_one_addr+0x7f/0x280 [ 94.588964][ T5653] sctp_bind_addr_copy+0x79/0x290 [ 94.589065][ T5653] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 94.589113][ T5653] sctp_connect_new_asoc+0x1c3/0x3a0 [ 94.589156][ T5653] __sctp_connect+0x428/0x7a0 [ 94.589211][ T5653] __sctp_setsockopt_connectx+0xab/0xd0 [ 94.589234][ T5653] sctp_setsockopt+0x41c/0xea0 [ 94.589277][ T5653] sock_common_setsockopt+0x69/0x80 [ 94.589358][ T5653] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.589399][ T5653] __sys_setsockopt+0x184/0x200 [ 94.589423][ T5653] __x64_sys_setsockopt+0x64/0x80 [ 94.589507][ T5653] x64_sys_call+0x248f/0x2550 [ 94.589533][ T5653] do_syscall_64+0x116/0x380 [ 94.589556][ T5653] ? clear_bhb_loop+0x70/0xc0 [ 94.589633][ T5653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.589662][ T5653] RIP: 0033:0x7ff69e9f8f19 [ 94.589683][ T5653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.589724][ T5653] RSP: 002b:00007ff69d447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.589765][ T5653] RAX: ffffffffffffffda RBX: 00007ff69ec75fa0 RCX: 00007ff69e9f8f19 [ 94.589785][ T5653] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 94.589803][ T5653] RBP: 00007ff69ea87f6d R08: 0000000000000010 R09: 0000000000000000 [ 94.589821][ T5653] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 94.589889][ T5653] R13: 00007ff69ec76038 R14: 00007ff69ec75fa0 R15: 00007ffe8e275758 [ 94.589913][ T5653] [ 95.013716][ T5672] loop2: detected capacity change from 0 to 512 [ 95.016554][ T5672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.034352][ T5672] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.034621][ T5672] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 95.034672][ T5672] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 95.034822][ T5672] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.728: bad orphan inode 768 [ 95.034849][ T5672] loop2: lost filesystem error report for type 5 error -117 [ 95.036810][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.147761][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.181390][ T30] audit: type=1326 audit(1794302812.582:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.730" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cf28f19 code=0x7ffc0000 [ 95.181433][ T30] audit: type=1326 audit(1794302812.582:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.2.730" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cf28f19 code=0x7ffc0000 [ 96.469427][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 96.469455][ T30] audit: type=1326 audit(1794302813.872:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.470755][ T30] audit: type=1326 audit(1794302813.872:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.472034][ T30] audit: type=1326 audit(1794302813.872:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.473381][ T30] audit: type=1326 audit(1794302813.872:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.474835][ T30] audit: type=1326 audit(1794302813.872:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.476031][ T30] audit: type=1326 audit(1794302813.872:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.477287][ T30] audit: type=1326 audit(1794302813.872:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.478752][ T30] audit: type=1326 audit(1794302813.872:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.485276][ T30] audit: type=1326 audit(1794302813.882:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.511068][ T30] audit: type=1326 audit(1794302813.912:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.3.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69e9b974e code=0x7ffc0000 [ 96.566967][ T5560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.267758][ T5731] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.749'. [ 97.308436][ T5742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.749'. [ 97.368353][ T5745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.757'. [ 97.386056][ T5745] bridge1: entered promiscuous mode [ 97.386082][ T5745] bridge1: entered allmulticast mode [ 97.549583][ T5756] netlink: 'syz.4.762': attribute type 3 has an invalid length. [ 97.742819][ T5762] ip_tables: iptables: counters copy to user failed while replacing table [ 98.104581][ T5778] netlink: 'syz.4.773': attribute type 3 has an invalid length. [ 98.298997][ T5789] loop4: detected capacity change from 0 to 512 [ 98.301410][ T5789] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.315818][ T5789] EXT4-fs (loop4): 1 truncate cleaned up [ 98.323195][ T5789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.370942][ T5777] loop1: detected capacity change from 0 to 512 [ 98.415694][ T5777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.514992][ T5777] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.516591][ T5777] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 98.516672][ T5777] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 98.516755][ T5777] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.772: bad orphan inode 768 [ 98.516956][ T5777] loop1: lost filesystem error report for type 5 error -117 [ 98.571695][ T5777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.836555][ T5797] loop3: detected capacity change from 0 to 512 [ 98.883293][ T5797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.915331][ T5797] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.916332][ T5797] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 98.916437][ T5797] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 98.916568][ T5797] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.779: bad orphan inode 768 [ 98.916833][ T5797] loop3: lost filesystem error report for type 5 error -117 [ 98.967537][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.085176][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.182462][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.212805][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.419048][ T5840] loop5: detected capacity change from 0 to 512 [ 99.422337][ T5840] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 99.431219][ T5840] EXT4-fs (loop5): 1 truncate cleaned up [ 99.432206][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.453496][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 99.453752][ T5842] FAULT_INJECTION: forcing a failure. [ 99.453752][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 99.453779][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.453815][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.453855][ T5842] Call Trace: [ 99.453862][ T5842] [ 99.453870][ T5842] __dump_stack+0x1d/0x30 [ 99.453899][ T5842] dump_stack_lvl+0x95/0xd0 [ 99.453993][ T5842] dump_stack+0x15/0x1b [ 99.454020][ T5842] should_fail_ex+0x259/0x270 [ 99.454126][ T5842] should_failslab+0x8c/0xb0 [ 99.454159][ T5842] __kvmalloc_node_noprof+0x14f/0x5b0 [ 99.454260][ T5842] ? __rhashtable_init_noprof+0x320/0x490 [ 99.454299][ T5842] ? __rhashtable_init_noprof+0x320/0x490 [ 99.454340][ T5842] __rhashtable_init_noprof+0x320/0x490 [ 99.454380][ T5842] br_vlan_init+0x52/0x120 [ 99.454447][ T5842] br_dev_init+0x5d/0xf0 [ 99.454491][ T5842] register_netdevice+0x234/0x13f0 [ 99.454521][ T5842] br_dev_newlink+0x42/0x100 [ 99.454553][ T5842] ? __pfx_br_dev_newlink+0x10/0x10 [ 99.454606][ T5842] rtnl_newlink_create+0x1e4/0x4a0 [ 99.454676][ T5842] ? security_capable+0x7b/0x90 [ 99.454711][ T5842] ? netlink_ns_capable+0x86/0xa0 [ 99.454735][ T5842] rtnl_newlink+0x1255/0x1510 [ 99.454819][ T5842] ? __memcg_slab_free_hook+0x154/0x340 [ 99.454857][ T5842] ? __rcu_read_unlock+0x4e/0x70 [ 99.454962][ T5842] ? avc_has_perm_noaudit+0xac/0x160 [ 99.455000][ T5842] ? cred_has_capability+0x224/0x2a0 [ 99.455035][ T5842] ? selinux_capable+0x31/0x40 [ 99.455071][ T5842] ? security_capable+0x7b/0x90 [ 99.455132][ T5842] ? ns_capable+0x80/0xb0 [ 99.455163][ T5842] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.455219][ T5842] rtnetlink_rcv_msg+0x64b/0x720 [ 99.455263][ T5842] ? __copy_skb_header+0x22f/0x2b0 [ 99.455355][ T5842] netlink_rcv_skb+0x11e/0x220 [ 99.455379][ T5842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.455415][ T5842] rtnetlink_rcv+0x1c/0x30 [ 99.455449][ T5842] netlink_unicast+0x665/0x740 [ 99.455476][ T5842] netlink_sendmsg+0x5ef/0x740 [ 99.455502][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.455594][ T5842] ____sys_sendmsg+0x54a/0x590 [ 99.455619][ T5842] ___sys_sendmsg+0x195/0x1e0 [ 99.455657][ T5842] __x64_sys_sendmsg+0xd4/0x160 [ 99.455765][ T5842] x64_sys_call+0x22ab/0x2550 [ 99.455809][ T5842] do_syscall_64+0x116/0x380 [ 99.455837][ T5842] ? clear_bhb_loop+0x70/0xc0 [ 99.455868][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.455895][ T5842] RIP: 0033:0x7ff69e9f8f19 [ 99.455981][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.455999][ T5842] RSP: 002b:00007ff69d447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.456020][ T5842] RAX: ffffffffffffffda RBX: 00007ff69ec75fa0 RCX: 00007ff69e9f8f19 [ 99.456034][ T5842] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 99.456047][ T5842] RBP: 00007ff69ea87f6d R08: 0000000000000000 R09: 0000000000000000 [ 99.456065][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.456123][ T5842] R13: 00007ff69ec76038 R14: 00007ff69ec75fa0 R15: 00007ffe8e275758 [ 99.456148][ T5842] [ 99.666810][ T5827] loop2: detected capacity change from 0 to 512 [ 99.672403][ T5827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.701317][ T5827] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.701511][ T5827] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 99.704306][ T5827] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 99.704363][ T5827] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.794: bad orphan inode 768 [ 99.704605][ T5827] loop2: lost filesystem error report for type 5 error -117 [ 99.708221][ T5842] bridge2: entered promiscuous mode [ 99.710068][ T5842] bridge2: entered allmulticast mode [ 99.712505][ T5827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.148352][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.802'. [ 100.149259][ T5854] FAULT_INJECTION: forcing a failure. [ 100.149259][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 100.149474][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.3.802 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.149509][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.149561][ T5854] Call Trace: [ 100.149569][ T5854] [ 100.149619][ T5854] __dump_stack+0x1d/0x30 [ 100.149654][ T5854] dump_stack_lvl+0x95/0xd0 [ 100.149698][ T5854] dump_stack+0x15/0x1b [ 100.149720][ T5854] should_fail_ex+0x259/0x270 [ 100.149766][ T5854] ? br_vlan_init+0x34/0x120 [ 100.149788][ T5854] should_failslab+0x8c/0xb0 [ 100.149867][ T5854] __kmalloc_cache_noprof+0x5d/0x3e0 [ 100.149965][ T5854] ? br_vlan_init+0x34/0x120 [ 100.149989][ T5854] br_vlan_init+0x34/0x120 [ 100.150013][ T5854] br_dev_init+0x5d/0xf0 [ 100.150056][ T5854] register_netdevice+0x234/0x13f0 [ 100.150087][ T5854] br_dev_newlink+0x42/0x100 [ 100.150116][ T5854] ? __pfx_br_dev_newlink+0x10/0x10 [ 100.150221][ T5854] rtnl_newlink_create+0x1e4/0x4a0 [ 100.150266][ T5854] ? security_capable+0x7b/0x90 [ 100.150293][ T5854] ? netlink_ns_capable+0x86/0xa0 [ 100.150313][ T5854] rtnl_newlink+0x1255/0x1510 [ 100.150405][ T5854] ? __rcu_read_unlock+0x4e/0x70 [ 100.150430][ T5854] ? __memcg_slab_free_hook+0x154/0x340 [ 100.150462][ T5854] ? __rcu_read_unlock+0x4e/0x70 [ 100.150555][ T5854] ? avc_has_perm_noaudit+0xac/0x160 [ 100.150594][ T5854] ? cred_has_capability+0x224/0x2a0 [ 100.150639][ T5854] ? selinux_capable+0x31/0x40 [ 100.150669][ T5854] ? security_capable+0x7b/0x90 [ 100.150693][ T5854] ? ns_capable+0x80/0xb0 [ 100.150724][ T5854] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.150795][ T5854] rtnetlink_rcv_msg+0x64b/0x720 [ 100.150905][ T5854] ? __copy_skb_header+0x22f/0x2b0 [ 100.150930][ T5854] netlink_rcv_skb+0x11e/0x220 [ 100.150960][ T5854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.151002][ T5854] rtnetlink_rcv+0x1c/0x30 [ 100.151068][ T5854] netlink_unicast+0x665/0x740 [ 100.151091][ T5854] netlink_sendmsg+0x5ef/0x740 [ 100.151118][ T5854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.151189][ T5854] ____sys_sendmsg+0x54a/0x590 [ 100.151288][ T5854] ___sys_sendmsg+0x195/0x1e0 [ 100.151329][ T5854] __x64_sys_sendmsg+0xd4/0x160 [ 100.151356][ T5854] x64_sys_call+0x22ab/0x2550 [ 100.151382][ T5854] do_syscall_64+0x116/0x380 [ 100.151467][ T5854] ? clear_bhb_loop+0x70/0xc0 [ 100.151498][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.151526][ T5854] RIP: 0033:0x7ff69e9f8f19 [ 100.151545][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.151570][ T5854] RSP: 002b:00007ff69d447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.151639][ T5854] RAX: ffffffffffffffda RBX: 00007ff69ec75fa0 RCX: 00007ff69e9f8f19 [ 100.151654][ T5854] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 100.151766][ T5854] RBP: 00007ff69ea87f6d R08: 0000000000000000 R09: 0000000000000000 [ 100.151779][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.151793][ T5854] R13: 00007ff69ec76038 R14: 00007ff69ec75fa0 R15: 00007ffe8e275758 [ 100.151813][ T5854] [ 100.327107][ T5857] random: crng reseeded on system resumption [ 100.343048][ T5858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'. [ 100.350224][ T5857] Restarting kernel threads ... [ 100.352007][ T5857] Done restarting kernel threads. [ 100.357663][ T5858] bridge2: entered promiscuous mode [ 100.357715][ T5858] bridge2: entered allmulticast mode [ 100.495222][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.559071][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.666611][ T5880] syz_tun: entered allmulticast mode [ 100.681649][ T5878] syz_tun: left allmulticast mode [ 100.682097][ T5884] loop2: detected capacity change from 0 to 512 [ 100.697583][ T5884] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.708368][ T5884] EXT4-fs (loop2): 1 truncate cleaned up [ 100.708774][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.874712][ T5890] loop4: detected capacity change from 0 to 512 [ 100.894951][ T5890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.960567][ T5890] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.961894][ T5890] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 100.962106][ T5890] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 100.962270][ T5890] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.816: bad orphan inode 768 [ 100.962301][ T5890] loop4: lost filesystem error report for type 5 error -117 [ 101.012997][ T5890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.188216][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.210837][ T5907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 101.211370][ T5907] FAULT_INJECTION: forcing a failure. [ 101.211370][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 101.211412][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.1.820 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.211441][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.211454][ T5907] Call Trace: [ 101.211461][ T5907] [ 101.211475][ T5907] __dump_stack+0x1d/0x30 [ 101.211525][ T5907] dump_stack_lvl+0x95/0xd0 [ 101.211554][ T5907] dump_stack+0x15/0x1b [ 101.211577][ T5907] should_fail_ex+0x259/0x270 [ 101.211620][ T5907] should_failslab+0x8c/0xb0 [ 101.211665][ T5907] __kvmalloc_node_noprof+0x14f/0x5b0 [ 101.211685][ T5907] ? __rhashtable_init_noprof+0x320/0x490 [ 101.211763][ T5907] ? __rhashtable_init_noprof+0x320/0x490 [ 101.211803][ T5907] __rhashtable_init_noprof+0x320/0x490 [ 101.211883][ T5907] br_vlan_init+0x52/0x120 [ 101.211913][ T5907] br_dev_init+0x5d/0xf0 [ 101.211951][ T5907] register_netdevice+0x234/0x13f0 [ 101.212021][ T5907] br_dev_newlink+0x42/0x100 [ 101.212091][ T5907] ? __pfx_br_dev_newlink+0x10/0x10 [ 101.212135][ T5907] rtnl_newlink_create+0x1e4/0x4a0 [ 101.212249][ T5907] rtnl_newlink+0x1255/0x1510 [ 101.212353][ T5907] ? __memcg_slab_free_hook+0x154/0x340 [ 101.212383][ T5907] ? __rcu_read_unlock+0x4e/0x70 [ 101.212407][ T5907] ? avc_has_perm_noaudit+0xac/0x160 [ 101.212476][ T5907] ? cred_has_capability+0x224/0x2a0 [ 101.212549][ T5907] ? selinux_capable+0x31/0x40 [ 101.212588][ T5907] ? security_capable+0x7b/0x90 [ 101.212668][ T5907] ? ns_capable+0x80/0xb0 [ 101.212770][ T5907] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.212821][ T5907] rtnetlink_rcv_msg+0x64b/0x720 [ 101.212856][ T5907] ? __copy_skb_header+0x22f/0x2b0 [ 101.212887][ T5907] netlink_rcv_skb+0x11e/0x220 [ 101.212964][ T5907] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.213004][ T5907] rtnetlink_rcv+0x1c/0x30 [ 101.213060][ T5907] netlink_unicast+0x665/0x740 [ 101.213086][ T5907] netlink_sendmsg+0x5ef/0x740 [ 101.213113][ T5907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.213139][ T5907] ____sys_sendmsg+0x54a/0x590 [ 101.213221][ T5907] ___sys_sendmsg+0x195/0x1e0 [ 101.213256][ T5907] __x64_sys_sendmsg+0xd4/0x160 [ 101.213283][ T5907] x64_sys_call+0x22ab/0x2550 [ 101.213311][ T5907] do_syscall_64+0x116/0x380 [ 101.213343][ T5907] ? clear_bhb_loop+0x70/0xc0 [ 101.213439][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.213469][ T5907] RIP: 0033:0x7f74a32f8f19 [ 101.213485][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.213503][ T5907] RSP: 002b:00007f74a1d3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.213523][ T5907] RAX: ffffffffffffffda RBX: 00007f74a3575fa0 RCX: 00007f74a32f8f19 [ 101.213559][ T5907] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 101.213627][ T5907] RBP: 00007f74a3387f6d R08: 0000000000000000 R09: 0000000000000000 [ 101.213647][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.213661][ T5907] R13: 00007f74a3576038 R14: 00007f74a3575fa0 R15: 00007ffe197ff478 [ 101.213770][ T5907] [ 101.448769][ T5907] bridge2: entered promiscuous mode [ 101.448837][ T5907] bridge2: entered allmulticast mode [ 101.646911][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.664989][ T5915] random: crng reseeded on system resumption [ 101.680990][ T5915] Restarting kernel threads ... [ 101.681293][ T5915] Done restarting kernel threads. [ 101.740588][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.830'. [ 101.747776][ T5922] netlink: 'syz.4.826': attribute type 11 has an invalid length. [ 101.753210][ T5937] bridge1: entered promiscuous mode [ 101.753285][ T5937] bridge1: entered allmulticast mode [ 101.862011][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 102.074356][ T5966] loop1: detected capacity change from 0 to 512 [ 102.095118][ T5966] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 102.106830][ T5966] EXT4-fs (loop1): 1 truncate cleaned up [ 102.107858][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.457514][ T5980] random: crng reseeded on system resumption [ 102.596094][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 102.614465][ T5984] bridge1: entered promiscuous mode [ 102.614486][ T5984] bridge1: entered allmulticast mode [ 103.006428][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.074770][ T6008] loop1: detected capacity change from 0 to 512 [ 103.087332][ T6008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.095239][ T6008] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.095695][ T6008] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 103.096050][ T6008] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 103.096105][ T6008] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.851: bad orphan inode 768 [ 103.096166][ T6008] loop1: lost filesystem error report for type 5 error -117 [ 103.100305][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.178094][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.270212][ T6014] loop1: detected capacity change from 0 to 2048 [ 103.280359][ T6014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.284204][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 103.284278][ T30] audit: type=1400 audit(1794302820.682:965): avc: denied { write } for pid=6013 comm="syz.1.853" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.552551][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.856'. [ 104.555666][ T6029] bridge2: entered promiscuous mode [ 104.555708][ T6029] bridge2: entered allmulticast mode [ 104.616076][ T6033] FAULT_INJECTION: forcing a failure. [ 104.616076][ T6033] name failslab, interval 1, probability 0, space 0, times 0 [ 104.616114][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.2.858 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.616211][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.616229][ T6033] Call Trace: [ 104.616237][ T6033] [ 104.616247][ T6033] __dump_stack+0x1d/0x30 [ 104.616350][ T6033] dump_stack_lvl+0x95/0xd0 [ 104.616441][ T6033] dump_stack+0x15/0x1b [ 104.616469][ T6033] should_fail_ex+0x259/0x270 [ 104.616511][ T6033] ? sctp_add_bind_addr+0x71/0x1e0 [ 104.616541][ T6033] should_failslab+0x8c/0xb0 [ 104.616628][ T6033] __kmalloc_cache_noprof+0x5d/0x3e0 [ 104.616792][ T6033] ? sctp_add_bind_addr+0x71/0x1e0 [ 104.616821][ T6033] sctp_add_bind_addr+0x71/0x1e0 [ 104.616853][ T6033] sctp_copy_local_addr_list+0x1b4/0x250 [ 104.616912][ T6033] sctp_copy_one_addr+0x7f/0x280 [ 104.616943][ T6033] sctp_bind_addr_copy+0x79/0x290 [ 104.617017][ T6033] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 104.617108][ T6033] sctp_connect_new_asoc+0x1c3/0x3a0 [ 104.617152][ T6033] __sctp_connect+0x428/0x7a0 [ 104.617195][ T6033] __sctp_setsockopt_connectx+0xab/0xd0 [ 104.617225][ T6033] sctp_setsockopt+0x41c/0xea0 [ 104.617336][ T6033] sock_common_setsockopt+0x69/0x80 [ 104.617451][ T6033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.617491][ T6033] __sys_setsockopt+0x184/0x200 [ 104.617522][ T6033] __x64_sys_setsockopt+0x64/0x80 [ 104.617595][ T6033] x64_sys_call+0x248f/0x2550 [ 104.617625][ T6033] do_syscall_64+0x116/0x380 [ 104.617696][ T6033] ? clear_bhb_loop+0x70/0xc0 [ 104.617775][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.617796][ T6033] RIP: 0033:0x7fc06cf28f19 [ 104.617812][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.617835][ T6033] RSP: 002b:00007fc06b977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.617943][ T6033] RAX: ffffffffffffffda RBX: 00007fc06d1a5fa0 RCX: 00007fc06cf28f19 [ 104.617964][ T6033] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 104.617977][ T6033] RBP: 00007fc06cfb7f6d R08: 0000000000000010 R09: 0000000000000000 [ 104.618080][ T6033] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 104.618099][ T6033] R13: 00007fc06d1a6038 R14: 00007fc06d1a5fa0 R15: 00007ffd3ffce868 [ 104.618121][ T6033] [ 105.038336][ T5961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.159507][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.606317][ T6053] loop4: detected capacity change from 0 to 512 [ 105.702439][ T6053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.740435][ T6079] netlink: 'syz.5.878': attribute type 11 has an invalid length. [ 105.815904][ T6053] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.821728][ T6053] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 105.821920][ T6053] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 105.822158][ T6053] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.867: bad orphan inode 768 [ 105.822277][ T6053] loop4: lost filesystem error report for type 5 error -117 [ 105.840565][ T6053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.854925][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 106.067032][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.205566][ T6108] random: crng reseeded on system resumption [ 106.229617][ T6108] Restarting kernel threads ... [ 106.231162][ T6108] Done restarting kernel threads. [ 106.316373][ T6122] netlink: 'syz.4.889': attribute type 11 has an invalid length. [ 106.468973][ T6130] loop1: detected capacity change from 0 to 512 [ 106.487458][ T6130] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.499858][ T6130] EXT4-fs (loop1): 1 truncate cleaned up [ 106.500295][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.073267][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.905'. [ 107.221494][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 107.226716][ T6162] bridge3: entered promiscuous mode [ 107.226741][ T6162] bridge3: entered allmulticast mode [ 107.391278][ T6177] loop4: detected capacity change from 0 to 512 [ 107.402901][ T6177] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.413590][ T6177] EXT4-fs (loop4): 1 truncate cleaned up [ 107.414404][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.492348][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.546936][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.914'. [ 107.546973][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.914'. [ 107.604730][ T6187] loop1: detected capacity change from 0 to 512 [ 107.606612][ T6187] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.615290][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 107.618137][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.637151][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'. [ 108.271225][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.5.922'. [ 108.278190][ T6201] bridge2: entered promiscuous mode [ 108.278217][ T6201] bridge2: entered allmulticast mode [ 108.318577][ T30] audit: type=1400 audit(1794302825.702:966): avc: denied { mount } for pid=6195 comm="syz.3.920" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.361810][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.575200][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.603492][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.930'. [ 108.691973][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.934'. [ 108.709993][ T6230] bridge3: entered promiscuous mode [ 108.710016][ T6230] bridge3: entered allmulticast mode [ 108.807928][ T6235] netlink: 'syz.1.935': attribute type 11 has an invalid length. [ 108.925724][ T6255] syz_tun: entered allmulticast mode [ 108.926402][ T6254] syz_tun: left allmulticast mode [ 108.974186][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.943'. [ 109.025728][ T6261] netlink: 'syz.5.944': attribute type 11 has an invalid length. [ 109.095668][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 109.106594][ T6267] bridge3: entered promiscuous mode [ 109.106654][ T6267] bridge3: entered allmulticast mode [ 109.199698][ T6271] loop2: detected capacity change from 0 to 2048 [ 109.212150][ T6271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.236130][ T30] audit: type=1400 audit(1794302826.632:967): avc: denied { write } for pid=6270 comm="syz.2.948" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.267252][ T6265] loop5: detected capacity change from 0 to 512 [ 109.275501][ T30] audit: type=1400 audit(1794302826.672:968): avc: denied { mounton } for pid=6264 comm="syz.5.945" path="/77/file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.276901][ T6265] EXT4-fs: Ignoring removed bh option [ 109.423930][ T6265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.427263][ T6265] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.447455][ T6265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.641064][ T5791] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.900067][ T6265] ip6erspan0: entered allmulticast mode [ 110.295368][ T6323] loop4: detected capacity change from 0 to 128 [ 110.314480][ T6323] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.316160][ T6323] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.512242][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 110.549895][ T6327] syz.4.967 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.930339][ T30] audit: type=1400 audit(1794302828.332:969): avc: denied { create } for pid=6339 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.955432][ T30] audit: type=1400 audit(1794302828.332:970): avc: denied { write } for pid=6339 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.080765][ T30] audit: type=1400 audit(1794302828.472:971): avc: denied { create } for pid=6348 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.084496][ T30] audit: type=1400 audit(1794302828.482:972): avc: denied { getopt } for pid=6348 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.114624][ T30] audit: type=1400 audit(1794302828.512:973): avc: denied { allowed } for pid=6348 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.158914][ T3291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.374590][ T30] audit: type=1400 audit(1794302828.772:974): avc: denied { read } for pid=6371 comm="syz.1.985" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.377799][ T30] audit: type=1326 audit(1794302828.772:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.1.985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74a32f8f19 code=0x0 [ 111.462547][ T6374] cgroup: fork rejected by pids controller in /syz1 [ 111.760681][ T6426] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.839250][ T6426] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.940345][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.980675][ T6426] syz.4.987 (6426): drop_caches: 2 [ 112.045282][ T6448] loop5: detected capacity change from 0 to 512 [ 112.056786][ T6448] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 112.072474][ T6448] EXT4-fs (loop5): 1 truncate cleaned up [ 112.073019][ T6448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.189412][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 112.407662][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'. [ 112.424373][ T6476] loop4: detected capacity change from 0 to 512 [ 112.462183][ T6476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.873164][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.877492][ T6477] bridge4: entered promiscuous mode [ 112.877513][ T6477] bridge4: entered allmulticast mode [ 112.949912][ T6494] loop2: detected capacity change from 0 to 2048 [ 112.995499][ T6499] loop3: detected capacity change from 0 to 2048 [ 113.019620][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.036072][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.056065][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.052857][ T6541] netlink: 'syz.5.1003': attribute type 11 has an invalid length. [ 114.543655][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 114.543674][ T30] audit: type=1400 audit(1794302831.942:980): avc: denied { execute } for pid=6548 comm="syz.4.1007" name="file1" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.555009][ T30] audit: type=1400 audit(1794302831.952:981): avc: denied { execute_no_trans } for pid=6548 comm="syz.4.1007" path="/179/file1" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.647347][ T6553] batman_adv: batadv0: Adding interface: syzkaller0 [ 114.647367][ T6553] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.647582][ T6553] batman_adv: batadv0: Interface activated: syzkaller0 [ 114.710466][ T6325] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.849952][ T6543] loop5: detected capacity change from 0 to 512 [ 114.862615][ T6543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.897173][ T6543] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.902058][ T6543] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 114.902258][ T6543] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 114.902437][ T6543] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1004: bad orphan inode 768 [ 114.902506][ T6543] loop5: lost filesystem error report for type 5 error -117 [ 114.906057][ T6543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.918956][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1004'. [ 114.919229][ T30] audit: type=1400 audit(1794302832.312:982): avc: denied { ioctl } for pid=6542 comm="syz.5.1004" path="socket:[17194]" dev="sockfs" ino=17194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.996672][ T6551] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 115.105722][ T6551] batman_adv: batadv0: Removing interface: syzkaller0 [ 115.188554][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.214217][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'. [ 115.237249][ T30] audit: type=1400 audit(1794302832.632:983): avc: denied { mount } for pid=6561 comm="syz.1.1011" name="/" dev="hugetlbfs" ino=17216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 115.239310][ T30] audit: type=1400 audit(1794302832.642:984): avc: denied { setopt } for pid=6563 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.242817][ T6560] bridge3: entered promiscuous mode [ 115.243266][ T30] audit: type=1400 audit(1794302832.642:985): avc: denied { getopt } for pid=6563 comm="syz.5.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.244552][ T30] audit: type=1400 audit(1794302832.642:986): avc: denied { lock } for pid=6563 comm="syz.5.1010" path="socket:[17214]" dev="sockfs" ino=17214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.245590][ T30] audit: type=1400 audit(1794302832.642:987): avc: denied { read } for pid=6563 comm="syz.5.1010" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.245673][ T30] audit: type=1400 audit(1794302832.642:988): avc: denied { open } for pid=6563 comm="syz.5.1010" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.246537][ T6560] bridge3: entered allmulticast mode [ 115.257597][ T30] audit: type=1400 audit(1794302832.642:989): avc: denied { ioctl } for pid=6563 comm="syz.5.1010" path="socket:[17217]" dev="sockfs" ino=17217 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.521268][ T6577] netlink: 'syz.4.1014': attribute type 11 has an invalid length. [ 115.537573][ T6575] loop5: detected capacity change from 0 to 2048 [ 115.562901][ T6575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.665705][ T6584] loop4: detected capacity change from 0 to 2048 [ 115.676548][ T6587] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 115.693207][ T6584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.188743][ T6325] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.189014][ T6325] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.828243][ T6325] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 117.473682][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.558050][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.573338][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.574114][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.707334][ T6614] loop1: detected capacity change from 0 to 512 [ 117.756386][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.756467][ T6614] ext4 filesystem being mounted at /208/dev supports timestamps until 2038-01-19 (0x7fffffff) [ 117.785868][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'. [ 117.796930][ T6608] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #2: comm syz.1.1021: corrupted inode contents [ 117.797857][ T6608] EXT4-fs error (device loop1): ext4_dirty_inode:7679: inode #2: comm syz.1.1021: mark_inode_dirty error [ 117.799029][ T6608] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #2: comm syz.1.1021: corrupted inode contents [ 117.800178][ T6608] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1021: mark_inode_dirty error [ 117.824144][ T6608] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.1021: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 117.824144][ T6608] [ 117.825314][ T6608] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #2: comm syz.1.1021: corrupted inode contents [ 117.827680][ T6608] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.1021: mark_inode_dirty error [ 117.828373][ T6608] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 117.842103][ T6608] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #2: comm syz.1.1021: corrupted inode contents [ 117.844390][ T6608] EXT4-fs error (device loop1): add_dirent_to_buf:2153: inode #2: comm syz.1.1021: mark_inode_dirty error [ 117.860787][ T6621] loop3: detected capacity change from 0 to 128 [ 117.867848][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop3 [ 117.939665][ T6620] bridge4: entered promiscuous mode [ 117.939688][ T6620] bridge4: entered allmulticast mode [ 118.062590][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1024'. [ 118.184404][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.237032][ T6628] netlink: 'syz.3.1027': attribute type 11 has an invalid length. [ 118.294975][ T6640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1031'. [ 118.548083][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.603629][ T6653] FAULT_INJECTION: forcing a failure. [ 118.603629][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 118.603684][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.1.1033 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.603715][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.603742][ T6653] Call Trace: [ 118.603757][ T6653] [ 118.603769][ T6653] __dump_stack+0x1d/0x30 [ 118.603850][ T6653] dump_stack_lvl+0x95/0xd0 [ 118.603873][ T6653] dump_stack+0x15/0x1b [ 118.603897][ T6653] should_fail_ex+0x259/0x270 [ 118.604004][ T6653] ? alloc_bprm+0x5b/0x430 [ 118.604047][ T6653] should_failslab+0x8c/0xb0 [ 118.604088][ T6653] __kmalloc_cache_noprof+0x5d/0x3e0 [ 118.604188][ T6653] ? alloc_bprm+0x5b/0x430 [ 118.604227][ T6653] alloc_bprm+0x5b/0x430 [ 118.604304][ T6653] do_execveat_common+0x110/0x8b0 [ 118.604354][ T6653] __x64_sys_execve+0x5f/0x80 [ 118.604413][ T6653] x64_sys_call+0x1cd2/0x2550 [ 118.604467][ T6653] do_syscall_64+0x116/0x380 [ 118.604530][ T6653] ? clear_bhb_loop+0x70/0xc0 [ 118.604561][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.604592][ T6653] RIP: 0033:0x7f74a32f8f19 [ 118.604633][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.604660][ T6653] RSP: 002b:00007f74a1d3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 118.604688][ T6653] RAX: ffffffffffffffda RBX: 00007f74a3575fa0 RCX: 00007f74a32f8f19 [ 118.604750][ T6653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002dc0 [ 118.604769][ T6653] RBP: 00007f74a3387f6d R08: 0000000000000000 R09: 0000000000000000 [ 118.604788][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.604805][ T6653] R13: 00007f74a3576038 R14: 00007f74a3575fa0 R15: 00007ffe197ff478 [ 118.604833][ T6653] [ 118.800376][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'. [ 118.803993][ T6658] bridge3: entered promiscuous mode [ 118.804028][ T6658] bridge3: entered allmulticast mode [ 118.877328][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 118.884970][ T6661] bridge4: entered promiscuous mode [ 118.885024][ T6661] bridge4: entered allmulticast mode [ 118.969779][ T6665] loop1: detected capacity change from 0 to 512 [ 119.004818][ T6665] loop1: detected capacity change from 0 to 512 [ 119.006997][ T6665] EXT4-fs: Ignoring removed bh option [ 119.007146][ T6665] EXT4-fs: quotafile must be on filesystem root [ 119.060712][ T6670] random: crng reseeded on system resumption [ 119.101291][ T6670] Restarting kernel threads ... [ 119.101451][ T6670] Done restarting kernel threads. [ 119.255797][ T6682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1038'. [ 119.400239][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1045'. [ 119.404391][ T6694] bridge5: entered promiscuous mode [ 119.404414][ T6694] bridge5: entered allmulticast mode [ 119.450945][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1047'. [ 119.454067][ T6698] bridge6: entered promiscuous mode [ 119.454117][ T6698] bridge6: entered allmulticast mode [ 119.500211][ T6701] loop5: detected capacity change from 0 to 512 [ 119.502811][ T6701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.524740][ T6689] loop3: detected capacity change from 0 to 512 [ 119.549633][ T6701] __quota_error: 205 callbacks suppressed [ 119.549693][ T6701] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 119.549735][ T6701] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 119.549831][ T6701] EXT4-fs (loop5): mount failed [ 119.550840][ T30] audit: type=1326 audit(1794302836.952:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74a32f8f19 code=0x7ffc0000 [ 119.550959][ T30] audit: type=1326 audit(1794302836.952:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a32f8f19 code=0x7ffc0000 [ 119.551076][ T30] audit: type=1326 audit(1794302836.952:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a32f8f19 code=0x7ffc0000 [ 119.563446][ T6689] EXT4-fs: Ignoring removed bh option [ 119.563666][ T30] audit: type=1400 audit(1794302836.962:1198): avc: denied { mounton } for pid=6687 comm="syz.3.1043" path="/234/file0" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.661134][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.667568][ T6689] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.698496][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.761404][ T30] audit: type=1326 audit(1794302837.162:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74a32f8f19 code=0x7ffc0000 [ 119.897158][ T6718] random: crng reseeded on system resumption [ 119.916336][ T6718] Restarting kernel threads ... [ 119.925744][ T6718] Done restarting kernel threads. [ 120.150120][ T6727] __nla_validate_parse: 2 callbacks suppressed [ 120.150224][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.157067][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.161916][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.170974][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.201665][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.258050][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.320850][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.342889][ T6734] loop1: detected capacity change from 0 to 512 [ 120.388332][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.398108][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.439710][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 120.863046][ T6741] loop1: detected capacity change from 0 to 512 [ 120.878022][ T6741] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.878094][ T6741] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 120.903290][ T30] audit: type=1400 audit(1794302838.302:1200): avc: denied { listen } for pid=6740 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.904024][ T30] audit: type=1400 audit(1794302838.302:1201): avc: denied { accept } for pid=6740 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.966896][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.010641][ T6741] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 121.016564][ T6744] bridge5: entered promiscuous mode [ 121.016588][ T6744] bridge5: entered allmulticast mode [ 121.075460][ T6751] loop2: detected capacity change from 0 to 512 [ 121.077288][ T6751] EXT4-fs: dax option not supported [ 121.194344][ T6758] capability: warning: `syz.2.1061' uses deprecated v2 capabilities in a way that may be insecure [ 121.277356][ T6762] pimreg: entered allmulticast mode [ 121.316414][ T6742] loop1: detected capacity change from 0 to 512 [ 121.357456][ T6742] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.357566][ T6742] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.357721][ T6742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.362305][ T6764] pimreg: left allmulticast mode [ 121.383693][ T6742] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1057: bad orphan inode 131083 [ 121.383773][ T6742] loop1: lost filesystem error report for type 5 error -117 [ 121.396374][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.404595][ T30] audit: type=1400 audit(1794302838.802:1202): avc: denied { write } for pid=6740 comm="syz.1.1057" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.405338][ T30] audit: type=1400 audit(1794302838.802:1203): avc: denied { append } for pid=6740 comm="syz.1.1057" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.501451][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.659193][ T6774] bridge7: entered promiscuous mode [ 121.659239][ T6774] bridge7: entered allmulticast mode [ 121.802127][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.802775][ T6778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.856967][ T6771] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.859480][ T6771] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 121.859795][ T6771] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 121.860292][ T6771] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1067: bad orphan inode 768 [ 121.860355][ T6771] loop1: lost filesystem error report for type 5 error -117 [ 121.864091][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.963814][ T6788] bridge4: entered promiscuous mode [ 121.963832][ T6788] bridge4: entered allmulticast mode [ 122.152286][ T6798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.185705][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.300346][ T6807] bridge5: entered promiscuous mode [ 122.300372][ T6807] bridge5: entered allmulticast mode [ 122.303015][ T6808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.303142][ T6808] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.795542][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.836349][ T6834] set_capacity_and_notify: 3 callbacks suppressed [ 122.836372][ T6834] loop5: detected capacity change from 0 to 512 [ 122.841163][ T6834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.849844][ T6834] EXT4-fs (loop5): orphan cleanup on readonly fs [ 122.849962][ T6834] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 122.850044][ T6834] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 122.850165][ T6834] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1089: bad orphan inode 768 [ 122.850229][ T6834] loop5: lost filesystem error report for type 5 error -117 [ 122.854385][ T6834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.958084][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.974395][ T6837] netlink: 'syz.5.1090': attribute type 3 has an invalid length. [ 123.032085][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.070928][ T6845] netlink: 'syz.5.1095': attribute type 10 has an invalid length. [ 123.072950][ T6845] veth1_macvtap: left promiscuous mode [ 123.308089][ T6861] netlink: 'syz.3.1101': attribute type 3 has an invalid length. [ 123.330336][ T6863] syz.4.1102 uses obsolete (PF_INET,SOCK_PACKET) [ 123.451492][ T6859] loop5: detected capacity change from 0 to 512 [ 123.490612][ T6868] loop2: detected capacity change from 0 to 512 [ 123.495970][ T6859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.500955][ T6868] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 123.500997][ T6868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.533741][ T6868] EXT4-fs (loop2): 1 truncate cleaned up [ 123.534151][ T6868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.616375][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.637467][ T6881] loop1: detected capacity change from 0 to 2048 [ 123.647573][ T6859] EXT4-fs (loop5): orphan cleanup on readonly fs [ 123.648722][ T6859] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 123.648812][ T6859] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 123.651268][ T6859] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1100: bad orphan inode 768 [ 123.651352][ T6859] loop5: lost filesystem error report for type 5 error -117 [ 123.658353][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 123.658405][ C1] EXT4-fs (loop5): initial error at time 1794302841: ext4_orphan_get:1430 [ 123.658506][ C1] EXT4-fs (loop5): last error at time 1794302841: ext4_orphan_get:1430 [ 123.662893][ T6859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.671837][ T6881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.791854][ T6891] netlink: 'syz.3.1112': attribute type 22 has an invalid length. [ 123.795303][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.920115][ T6899] loop4: detected capacity change from 0 to 2048 [ 123.958536][ T6899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.969874][ T6891] syzkaller0: entered promiscuous mode [ 123.969928][ T6891] syzkaller0: entered allmulticast mode [ 124.226330][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.260360][ T6913] xt_MASQUERADE: bad MAP_IPS. [ 124.297443][ T6914] loop5: detected capacity change from 0 to 512 [ 124.309680][ T6914] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 124.337744][ T6914] EXT4-fs (loop5): 1 truncate cleaned up [ 124.338217][ T6914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.466689][ T6889] loop2: detected capacity change from 0 to 512 [ 124.755461][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 124.755481][ T30] audit: type=1400 audit(1794302842.142:1216): avc: denied { map } for pid=6888 comm="syz.2.1110" path="socket:[17986]" dev="sockfs" ino=17986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.794191][ T30] audit: type=1400 audit(1794302842.152:1217): avc: denied { read } for pid=6888 comm="syz.2.1110" path="socket:[17986]" dev="sockfs" ino=17986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.153033][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.191366][ T6930] __nla_validate_parse: 74 callbacks suppressed [ 125.191383][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 125.218005][ T6930] bridge4: entered promiscuous mode [ 125.218027][ T6930] bridge4: entered allmulticast mode [ 125.317200][ T6942] ip_tables: iptables: counters copy to user failed while replacing table [ 125.365072][ T30] audit: type=1400 audit(1794302842.762:1218): avc: denied { bind } for pid=6944 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.701422][ T6943] loop5: detected capacity change from 0 to 512 [ 125.723814][ T6943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.802622][ T6943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 125.805776][ T6943] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 125.806025][ T6943] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 125.806185][ T6943] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1123: bad orphan inode 768 [ 125.806303][ T6943] loop5: lost filesystem error report for type 5 error -117 [ 125.808410][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.808501][ C0] EXT4-fs (loop5): initial error at time 1794302843: ext4_orphan_get:1430 [ 125.808561][ C0] EXT4-fs (loop5): last error at time 1794302843: ext4_orphan_get:1430 [ 125.906186][ T6943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.981392][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 126.064403][ T6968] loop2: detected capacity change from 0 to 2048 [ 126.089948][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.094060][ T30] audit: type=1400 audit(1794302843.492:1219): avc: denied { write } for pid=6967 comm="syz.2.1133" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.123455][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.219620][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.300149][ T6978] loop5: detected capacity change from 0 to 128 [ 126.312325][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop5 [ 126.341685][ T6979] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 126.341769][ T6979] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 126.341842][ T6979] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.341842][ T6979] [ 126.341860][ T6979] EXT4-fs (loop2): Total free blocks count 0 [ 126.341877][ T6979] EXT4-fs (loop2): Free/Dirty block details [ 126.341893][ T6979] EXT4-fs (loop2): free_blocks=2415919504 [ 126.341906][ T6979] EXT4-fs (loop2): dirty_blocks=32 [ 126.341921][ T6979] EXT4-fs (loop2): Block reservation details [ 126.341936][ T6979] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 126.347118][ T6979] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 126.461853][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1137'. [ 126.464753][ T6984] bridge8: entered promiscuous mode [ 126.464769][ T6984] bridge8: entered allmulticast mode [ 126.513538][ T6988] ip_tables: iptables: counters copy to user failed while replacing table [ 126.653041][ T6992] vlan2: entered promiscuous mode [ 126.653115][ T6992] bond0: entered promiscuous mode [ 126.653128][ T6992] bond_slave_0: entered promiscuous mode [ 126.653185][ T6992] bond_slave_1: entered promiscuous mode [ 128.677242][ T6954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.806236][ T30] audit: type=1400 audit(1794302846.162:1220): avc: denied { ioctl } for pid=6993 comm="syz.3.1142" path="socket:[18082]" dev="sockfs" ino=18082 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.896808][ T7005] loop4: detected capacity change from 0 to 512 [ 128.923973][ T7008] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1142'. [ 128.924148][ T7008] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1142'. [ 128.931113][ T7000] netlink: 'syz.5.1144': attribute type 10 has an invalid length. [ 128.959139][ T7005] loop4: detected capacity change from 0 to 512 [ 128.962298][ T7005] EXT4-fs: Ignoring removed bh option [ 128.972797][ T7005] EXT4-fs: quotafile must be on filesystem root [ 129.010569][ T30] audit: type=1326 audit(1794302846.412:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d868f19 code=0x7ffc0000 [ 129.010663][ T30] audit: type=1326 audit(1794302846.412:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d868f19 code=0x7ffc0000 [ 129.013473][ T30] audit: type=1326 audit(1794302846.412:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d868f19 code=0x7ffc0000 [ 129.013782][ T30] audit: type=1326 audit(1794302846.412:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d868f19 code=0x7ffc0000 [ 129.017656][ T30] audit: type=1326 audit(1794302846.412:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.4.1146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f763d868f19 code=0x7ffc0000 [ 129.024402][ T7002] loop2: detected capacity change from 0 to 512 [ 129.037302][ T7002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.078472][ T7002] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.078840][ T7002] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 129.079000][ T7002] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 129.079088][ T7002] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1145: bad orphan inode 768 [ 129.079224][ T7002] loop2: lost filesystem error report for type 5 error -117 [ 129.099224][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.134909][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 129.158230][ T7012] bridge6: entered promiscuous mode [ 129.161910][ T7012] bridge6: entered allmulticast mode [ 129.189246][ T7015] syzkaller0: entered promiscuous mode [ 129.189324][ T7015] syzkaller0: entered allmulticast mode [ 129.247955][ T7015] tipc: Enabled bearer , priority 0 [ 129.258156][ T7015] syzkaller0: mtu greater than device maximum [ 129.262169][ T7010] tipc: Resetting bearer [ 129.273645][ T7010] tipc: Disabling bearer [ 129.291767][ T7014] loop5: detected capacity change from 0 to 512 [ 129.306594][ T7020] ip_tables: iptables: counters copy to user failed while replacing table [ 129.405367][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 129.405457][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 129.508858][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1161'. [ 129.514801][ T7038] bridge7: entered promiscuous mode [ 129.514826][ T7038] bridge7: entered allmulticast mode [ 129.523148][ T7036] netlink: 'syz.4.1160': attribute type 10 has an invalid length. [ 129.602360][ T7040] loop3: detected capacity change from 0 to 8192 [ 130.192230][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.282816][ T7053] program syz.3.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.285144][ T7048] loop5: detected capacity change from 0 to 2048 [ 130.314475][ T7045] loop1: detected capacity change from 0 to 512 [ 130.324749][ T7045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.341312][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 130.341331][ T30] audit: type=1400 audit(1794302847.742:1297): avc: denied { read } for pid=7046 comm="syz.5.1155" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.341367][ T30] audit: type=1400 audit(1794302847.742:1298): avc: denied { open } for pid=7046 comm="syz.5.1155" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.342969][ T30] audit: type=1400 audit(1794302847.742:1299): avc: denied { ioctl } for pid=7046 comm="syz.5.1155" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0xc0189373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.358241][ T7045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.358747][ T7045] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 130.358929][ T7045] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 130.366559][ T7045] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1165: bad orphan inode 768 [ 130.366631][ T7045] loop1: lost filesystem error report for type 5 error -117 [ 130.379517][ T7045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.399404][ T30] audit: type=1400 audit(1794302847.802:1300): avc: denied { append } for pid=7056 comm="syz.3.1166" name="uprobe_events" dev="tracefs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 130.399531][ T30] audit: type=1400 audit(1794302847.802:1301): avc: denied { open } for pid=7056 comm="syz.3.1166" path="/267/tracing/uprobe_events" dev="tracefs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 130.563677][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.660402][ T30] audit: type=1400 audit(1794302848.052:1302): avc: denied { connect } for pid=7070 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.672662][ T30] audit: type=1400 audit(1794302848.072:1303): avc: denied { write } for pid=7070 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.687837][ T7071] 8021q: VLANs not supported on gre0 [ 130.746513][ T7076] program syz.4.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.766921][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'. [ 130.779197][ T7078] bridge5: entered promiscuous mode [ 130.779218][ T7078] bridge5: entered allmulticast mode [ 130.850770][ T7082] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 133.244097][ T7047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.330796][ T7096] loop2: detected capacity change from 0 to 2048 [ 133.375659][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.396602][ T7100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.396618][ T7100] IPv6: NLM_F_CREATE should be set when creating new route [ 133.408041][ T7095] loop1: detected capacity change from 0 to 512 [ 133.410336][ T7095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.427287][ T30] audit: type=1400 audit(1794302850.822:1304): avc: denied { write } for pid=7091 comm="syz.2.1175" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.428054][ T7095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.428194][ T7095] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 133.428555][ T7095] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 133.428689][ T7095] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1178: bad orphan inode 768 [ 133.428772][ T7095] loop1: lost filesystem error report for type 5 error -117 [ 133.438737][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.485647][ T7098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.487314][ T30] audit: type=1400 audit(1794302850.882:1305): avc: denied { getopt } for pid=7093 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.491557][ T7105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.901649][ T7130] netlink: 'syz.5.1184': attribute type 10 has an invalid length. [ 133.952308][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.196062][ T7136] loop5: detected capacity change from 0 to 128 [ 134.251520][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop5 [ 134.271458][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop5 [ 134.317273][ T7153] loop4: detected capacity change from 0 to 512 [ 134.324072][ T7153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.341475][ T7153] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1190: iget: bad i_size value: 38620345925642 [ 134.341513][ T7153] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.343419][ T7153] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1190: couldn't read orphan inode 15 (err -117) [ 134.343444][ T7153] loop4: lost filesystem error report for type 5 error -117 [ 134.343938][ T7153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.410038][ T30] audit: type=1400 audit(1794302851.812:1306): avc: denied { write } for pid=7152 comm="syz.4.1190" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.473567][ T7153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1190: bg 0: block 5: invalid block bitmap [ 134.473884][ T7153] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 134.473908][ T7153] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.473908][ T7153] [ 134.473920][ T7153] EXT4-fs (loop4): Total free blocks count 0 [ 134.474014][ T7153] EXT4-fs (loop4): Free/Dirty block details [ 134.474030][ T7153] EXT4-fs (loop4): free_blocks=0 [ 134.474043][ T7153] EXT4-fs (loop4): dirty_blocks=1 [ 134.474054][ T7153] EXT4-fs (loop4): Block reservation details [ 134.474069][ T7153] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 134.516503][ T7156] loop5: detected capacity change from 0 to 2048 [ 134.581521][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.584376][ T7156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.650653][ T7160] loop4: detected capacity change from 0 to 2048 [ 134.682417][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.790073][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.901380][ T7170] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 134.901528][ T7170] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 134.901632][ T7170] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.901632][ T7170] [ 134.901649][ T7170] EXT4-fs (loop5): Total free blocks count 0 [ 134.901661][ T7170] EXT4-fs (loop5): Free/Dirty block details [ 134.906278][ T7170] EXT4-fs (loop5): free_blocks=2415919504 [ 134.906300][ T7170] EXT4-fs (loop5): dirty_blocks=32 [ 134.906318][ T7170] EXT4-fs (loop5): Block reservation details [ 134.906333][ T7170] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 134.925822][ T7170] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 135.031499][ T7174] loop2: detected capacity change from 0 to 256 [ 135.093407][ T7169] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 135.093552][ T7169] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 135.093586][ T7169] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.093586][ T7169] [ 135.093604][ T7169] EXT4-fs (loop4): Total free blocks count 0 [ 135.093622][ T7169] EXT4-fs (loop4): Free/Dirty block details [ 135.093635][ T7169] EXT4-fs (loop4): free_blocks=2415919504 [ 135.093647][ T7169] EXT4-fs (loop4): dirty_blocks=32 [ 135.093719][ T7169] EXT4-fs (loop4): Block reservation details [ 135.093734][ T7169] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 135.122934][ T7169] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 137.009255][ T7140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.096103][ T7182] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 137.203141][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 137.203172][ T30] audit: type=1400 audit(1794302854.602:1311): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.297920][ T7193] loop1: detected capacity change from 0 to 2048 [ 137.373524][ T7193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.385596][ T7196] serio: Serial port ptm0 [ 137.430569][ T7184] loop2: detected capacity change from 0 to 512 [ 137.445740][ T7184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.477757][ T7184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.492641][ T7184] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 137.492682][ T7184] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 137.492697][ T7184] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1197: bad orphan inode 768 [ 137.492721][ T7184] loop2: lost filesystem error report for type 5 error -117 [ 137.501939][ T7184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.515107][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.803900][ T7209] loop4: detected capacity change from 0 to 512 [ 137.807445][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.957781][ T7220] random: crng reseeded on system resumption [ 137.965589][ T7220] Restarting kernel threads ... [ 137.967282][ T7220] Done restarting kernel threads. [ 137.973696][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.974860][ T7209] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.126676][ T30] audit: type=1400 audit(1794302855.502:1312): avc: denied { write } for pid=7208 comm="syz.4.1206" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.150225][ T30] audit: type=1400 audit(1794302855.522:1313): avc: denied { write } for pid=7208 comm="syz.4.1206" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.150267][ T30] audit: type=1400 audit(1794302855.532:1314): avc: denied { rename } for pid=7208 comm="syz.4.1206" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.150300][ T30] audit: type=1400 audit(1794302855.532:1315): avc: denied { write } for pid=7208 comm="syz.4.1206" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.173619][ T7210] loop1: detected capacity change from 0 to 512 [ 138.216824][ T30] audit: type=1400 audit(1794302855.602:1316): avc: denied { mounton } for pid=7208 comm="syz.4.1206" path="/216/file1/sys" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.323248][ T7245] loop2: detected capacity change from 0 to 2048 [ 138.344599][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.356040][ T7247] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 138.360650][ T30] audit: type=1400 audit(1794302855.752:1317): avc: denied { write } for pid=7244 comm="syz.2.1210" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.861609][ T7260] ip6gretap1: entered allmulticast mode [ 138.907906][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 139.857153][ T7270] loop3: detected capacity change from 0 to 512 [ 139.860005][ T7270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.927874][ T7270] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.930294][ T7270] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 139.930514][ T7270] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 139.930565][ T7270] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1217: bad orphan inode 768 [ 139.930634][ T7270] loop3: lost filesystem error report for type 5 error -117 [ 139.940815][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.042830][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.403132][ T7282] loop3: detected capacity change from 0 to 2048 [ 140.419917][ T7282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.486187][ T7275] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 140.486297][ T7275] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 140.486328][ T7275] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.486328][ T7275] [ 140.486372][ T7275] EXT4-fs (loop2): Total free blocks count 0 [ 140.486389][ T7275] EXT4-fs (loop2): Free/Dirty block details [ 140.486405][ T7275] EXT4-fs (loop2): free_blocks=2415919504 [ 140.486423][ T7275] EXT4-fs (loop2): dirty_blocks=32 [ 140.486440][ T7275] EXT4-fs (loop2): Block reservation details [ 140.486456][ T7275] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 140.489101][ T7275] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 140.663872][ T7287] loop3: detected capacity change from 0 to 128 [ 140.673343][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop3 [ 140.696779][ T3281] udevd[3281]: Failed to create symlink /run/udev/watch/519: File exists [ 140.758643][ T30] audit: type=1400 audit(1794302858.162:1318): avc: denied { write } for pid=7291 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.121903][ T7237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.161521][ T7297] random: crng reseeded on system resumption [ 141.196222][ T7297] Restarting kernel threads ... [ 141.197947][ T7297] Done restarting kernel threads. [ 141.433792][ T30] audit: type=1400 audit(1794302858.832:1319): avc: denied { create } for pid=7298 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.453605][ T30] audit: type=1400 audit(1794302858.842:1320): avc: denied { bind } for pid=7298 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.596970][ T7301] loop1: detected capacity change from 0 to 512 [ 141.665810][ T7301] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.691055][ T7301] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 141.714299][ T7301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1225: bg 0: block 248: padding at end of block bitmap is not set [ 141.714779][ T7301] loop1: lost filesystem error report for type 5 error -117 [ 141.716293][ T7323] netlink: 'syz.5.1230': attribute type 7 has an invalid length. [ 141.716368][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1230'. [ 141.718590][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 141.719082][ C1] EXT4-fs (loop1): last error at time 1794302859: ext4_validate_block_bitmap:445 [ 141.722378][ T7301] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.1225: Failed to acquire dquot type 1 [ 141.722629][ T7301] loop1: lost filesystem error report for type 5 error -28 [ 141.733205][ T7314] loop2: detected capacity change from 0 to 512 [ 141.749318][ T7301] EXT4-fs (loop1): 1 truncate cleaned up [ 141.756442][ T7314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.779960][ T7314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.780413][ T7314] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 141.780647][ T7314] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 141.780689][ T7314] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1228: bad orphan inode 768 [ 141.780759][ T7314] loop2: lost filesystem error report for type 5 error -117 [ 141.840709][ T7326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7326 comm=syz.1.1225 [ 141.843888][ T7326] netlink: 'syz.1.1225': attribute type 7 has an invalid length. [ 141.843947][ T7326] netlink: 'syz.1.1225': attribute type 5 has an invalid length. [ 141.843980][ T7326] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1225'. [ 141.887912][ T7329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7329 comm=syz.1.1225 [ 141.893575][ T7333] netlink: 'syz.1.1225': attribute type 7 has an invalid length. [ 141.893598][ T7333] netlink: 'syz.1.1225': attribute type 5 has an invalid length. [ 141.893614][ T7333] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1225'. [ 141.985543][ T7301] syz.1.1225 (7301) used greatest stack depth: 8648 bytes left [ 142.229043][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 142.229059][ T30] audit: type=1400 audit(1794302859.632:1324): avc: denied { create } for pid=7353 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.231202][ T30] audit: type=1400 audit(1794302859.632:1325): avc: denied { bind } for pid=7353 comm="syz.2.1236" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.231237][ T30] audit: type=1400 audit(1794302859.632:1326): avc: denied { name_bind } for pid=7353 comm="syz.2.1236" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 142.231316][ T30] audit: type=1400 audit(1794302859.632:1327): avc: denied { node_bind } for pid=7353 comm="syz.2.1236" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 142.237742][ T30] audit: type=1400 audit(1794302859.632:1328): avc: denied { bind } for pid=7340 comm="syz.5.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.237777][ T30] audit: type=1400 audit(1794302859.632:1329): avc: denied { listen } for pid=7340 comm="syz.5.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.372477][ T7361] loop5: detected capacity change from 0 to 512 [ 142.611394][ T7365] loop2: detected capacity change from 0 to 128 [ 142.634288][ T3281] udevd[3281]: incorrect ext4dev checksum on /dev/loop2 [ 142.805882][ T30] audit: type=1400 audit(1794302860.202:1330): avc: denied { create } for pid=7364 comm="syz.2.1238" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.913362][ T7374] random: crng reseeded on system resumption [ 142.934070][ T7374] Restarting kernel threads ... [ 142.935943][ T7372] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1240'. [ 142.937144][ T7374] Done restarting kernel threads. [ 142.966569][ T7377] loop4: detected capacity change from 0 to 2048 [ 142.983425][ T7377] EXT4-fs: Mount option(s) incompatible with ext3 [ 142.983974][ T30] audit: type=1326 audit(1794302860.382:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c8e8f19 code=0x7ffc0000 [ 142.984105][ T30] audit: type=1326 audit(1794302860.382:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c8e8f19 code=0x7ffc0000 [ 142.985751][ T30] audit: type=1326 audit(1794302860.382:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c8e8f19 code=0x7ffc0000 [ 142.995529][ T7372] syzkaller1: entered promiscuous mode [ 142.995588][ T7372] syzkaller1: entered allmulticast mode [ 143.043768][ T7377] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 143.189006][ T7385] loop5: detected capacity change from 0 to 512 [ 143.213570][ T7385] loop5: detected capacity change from 0 to 512 [ 143.258527][ T7394] FAULT_INJECTION: forcing a failure. [ 143.258527][ T7394] name failslab, interval 1, probability 0, space 0, times 0 [ 143.258564][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.4.1245 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.258597][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 143.258615][ T7394] Call Trace: [ 143.258624][ T7394] [ 143.258635][ T7394] __dump_stack+0x1d/0x30 [ 143.258722][ T7394] dump_stack_lvl+0x95/0xd0 [ 143.258745][ T7394] dump_stack+0x15/0x1b [ 143.258844][ T7394] should_fail_ex+0x259/0x270 [ 143.258937][ T7394] ? __send_signal_locked+0x1ca/0x7a0 [ 143.258980][ T7394] should_failslab+0x8c/0xb0 [ 143.259037][ T7394] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 143.259080][ T7394] ? __send_signal_locked+0x1ca/0x7a0 [ 143.259140][ T7394] __send_signal_locked+0x1ca/0x7a0 [ 143.259184][ T7394] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 143.259221][ T7394] do_notify_parent+0x55f/0x600 [ 143.259247][ T7394] release_task+0x9af/0xb80 [ 143.259360][ T7394] do_exit+0xd51/0x14f0 [ 143.259407][ T7394] do_group_exit+0xfe/0x140 [ 143.259516][ T7394] ? get_signal+0xe03/0xf10 [ 143.259545][ T7394] get_signal+0xe0a/0xf10 [ 143.259625][ T7394] arch_do_signal_or_restart+0x96/0x480 [ 143.259673][ T7394] exit_to_user_mode_loop+0x15d/0x8c0 [ 143.259719][ T7394] do_syscall_64+0x216/0x380 [ 143.259747][ T7394] ? clear_bhb_loop+0x70/0xc0 [ 143.259802][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.259832][ T7394] RIP: 0033:0x7f763d868f19 [ 143.259917][ T7394] Code: Unable to access opcode bytes at 0x7f763d868eef. [ 143.259932][ T7394] RSP: 002b:00007f763c2b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.259960][ T7394] RAX: fffffffffffffe00 RBX: 00007f763dae5fa8 RCX: 00007f763d868f19 [ 143.259987][ T7394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f763dae5fa8 [ 143.260000][ T7394] RBP: 00007f763dae5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 143.260013][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.260026][ T7394] R13: 00007f763dae6038 R14: 00007ffcd7a667b0 R15: 00007ffcd7a66898 [ 143.260047][ T7394] [ 143.480537][ T7398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.604517][ T7398] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.616848][ T7398] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 143.617076][ T7398] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 143.617217][ T7398] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1246: bad orphan inode 768 [ 143.617256][ T7398] loop4: lost filesystem error report for type 5 error -117 [ 143.618562][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.618642][ C0] EXT4-fs (loop4): initial error at time 1794302861: ext4_orphan_get:1430 [ 143.618700][ C0] EXT4-fs (loop4): last error at time 1794302861: ext4_orphan_get:1430 [ 143.667060][ T7398] EXT4-fs mount: 7 callbacks suppressed [ 143.667109][ T7398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.087157][ T3291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.119245][ T7413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'. [ 144.379121][ T7418] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 144.380456][ T7418] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.386651][ T7418] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.430257][ T7418] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 144.470273][ T7418] EXT4-fs error (device loop5): __ext4_iget:6490: inode #16: block 127754: comm syz.5.1249: invalid block [ 144.470715][ T7418] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.476247][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 144.478317][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 144.478437][ C0] EXT4-fs (loop5): initial error at time 1794302861: __ext4_iget:6490: inode 16: block 127754 [ 144.478657][ C0] EXT4-fs (loop5): last error at time 1794302861: __ext4_iget:6490: inode 16: block 127754 [ 144.546611][ T7418] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1249: couldn't read orphan inode 16 (err -117) [ 144.546756][ T7418] loop5: lost filesystem error report for type 5 error -117 [ 144.576626][ T7418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.607434][ T7418] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1249'. [ 144.728227][ T7426] FAULT_INJECTION: forcing a failure. [ 144.728227][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.728254][ T7426] CPU: 1 UID: 0 PID: 7426 Comm: syz.4.1253 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.728285][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 144.728302][ T7426] Call Trace: [ 144.728310][ T7426] [ 144.728375][ T7426] __dump_stack+0x1d/0x30 [ 144.728413][ T7426] dump_stack_lvl+0x95/0xd0 [ 144.728440][ T7426] dump_stack+0x15/0x1b [ 144.728462][ T7426] should_fail_ex+0x259/0x270 [ 144.728537][ T7426] should_fail+0xb/0x20 [ 144.728568][ T7426] should_fail_usercopy+0x1a/0x20 [ 144.728607][ T7426] _copy_from_user+0x1c/0xb0 [ 144.728723][ T7426] __sys_bind+0x106/0x290 [ 144.728769][ T7426] __x64_sys_bind+0x3f/0x50 [ 144.728833][ T7426] x64_sys_call+0x1ac7/0x2550 [ 144.728862][ T7426] do_syscall_64+0x116/0x380 [ 144.728883][ T7426] ? clear_bhb_loop+0x70/0xc0 [ 144.728966][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.728994][ T7426] RIP: 0033:0x7f763d868f19 [ 144.729009][ T7426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.729029][ T7426] RSP: 002b:00007f763c2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 144.729103][ T7426] RAX: ffffffffffffffda RBX: 00007f763dae5fa0 RCX: 00007f763d868f19 [ 144.729185][ T7426] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 144.729203][ T7426] RBP: 00007f763c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.729219][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.729296][ T7426] R13: 00007f763dae6038 R14: 00007f763dae5fa0 R15: 00007ffcd7a66898 [ 144.729318][ T7426] [ 144.861621][ T7429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 144.861661][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.861701][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 144.867190][ T7430] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 144.867223][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.867281][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 144.879763][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.880634][ T7433] usbip_core: unknown command [ 144.880670][ T7433] vhci_hcd: unknown pdu 2785397362 [ 144.880706][ T7433] usbip_core: unknown command [ 144.880894][ T72] vhci_hcd vhci_hcd.4: stop threads [ 144.880910][ T72] vhci_hcd vhci_hcd.4: release socket [ 144.880939][ T72] vhci_hcd vhci_hcd.4: disconnect device [ 145.005668][ T7345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.062214][ T7440] random: crng reseeded on system resumption [ 145.097785][ T7440] Restarting kernel threads ... [ 145.097910][ T7440] Done restarting kernel threads. [ 145.293868][ T2978] ================================================================== [ 145.293917][ T2978] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 145.293975][ T2978] [ 145.293981][ T2978] write to 0xffff8881058779f0 of 8 bytes by task 3281 on cpu 0: [ 145.293997][ T2978] dentry_unlink_inode+0x65/0x290 [ 145.294038][ T2978] d_delete+0x164/0x180 [ 145.294077][ T2978] d_delete_notify+0x32/0x100 [ 145.294102][ T2978] vfs_unlink+0x287/0x4a0 [ 145.294127][ T2978] filename_unlinkat+0x1db/0x400 [ 145.294151][ T2978] __se_sys_unlink+0x2b/0xe0 [ 145.294177][ T2978] __x64_sys_unlink+0x1f/0x30 [ 145.294204][ T2978] x64_sys_call+0x18ee/0x2550 [ 145.294238][ T2978] do_syscall_64+0x116/0x380 [ 145.294265][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.294285][ T2978] [ 145.294290][ T2978] read to 0xffff8881058779f0 of 8 bytes by task 2978 on cpu 1: [ 145.294306][ T2978] step_into_slowpath+0x12c/0x4c0 [ 145.294340][ T2978] path_lookupat+0x2eb/0x4c0 [ 145.294372][ T2978] filename_lookup+0x18f/0x390 [ 145.294404][ T2978] do_readlinkat+0x74/0x2f0 [ 145.294434][ T2978] __x64_sys_readlink+0x47/0x60 [ 145.294466][ T2978] x64_sys_call+0x1d41/0x2550 [ 145.294501][ T2978] do_syscall_64+0x116/0x380 [ 145.294520][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.294548][ T2978] [ 145.294553][ T2978] value changed: 0xffff88812a393998 -> 0x0000000000000000 [ 145.294565][ T2978] [ 145.294569][ T2978] Reported by Kernel Concurrency Sanitizer on: [ 145.294580][ T2978] CPU: 1 UID: 0 PID: 2978 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 145.294604][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.294621][ T2978] ================================================================== [ 145.328176][ T7452] set_capacity_and_notify: 24 callbacks suppressed [ 145.328797][ T7452] loop5: detected capacity change from 0 to 512 [ 145.330125][ T7452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.344780][ T7452] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.345011][ T7452] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 145.345066][ T7452] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 145.345324][ T7452] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1260: bad orphan inode 768 [ 145.345395][ T7452] loop5: lost filesystem error report for type 5 error -117 [ 145.347836][ T7452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.608619][ T7434] vhci_hcd: connection closed [ 145.638500][ T53] vhci_hcd vhci_hcd.4: stop threads [ 145.638559][ T53] vhci_hcd vhci_hcd.4: release socket [ 145.638722][ T53] vhci_hcd vhci_hcd.4: disconnect device [ 145.722030][ T7463] loop2: detected capacity change from 0 to 2048 [ 145.773527][ T7463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.960255][ T7424] loop1: detected capacity change from 0 to 2048 [ 145.968192][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 146.025236][ T4887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.053520][ T7424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.094453][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.168472][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.