last executing test programs: 1m51.123230063s ago: executing program 3 (id=148): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000000)='/proc/snet/ipv5\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m50.864668138s ago: executing program 3 (id=155): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000540)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r2}) close(r2) 1m50.80251656s ago: executing program 3 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$loop(0x0, 0x6, 0x14f882) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f00000011c0)="$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") 1m50.282431873s ago: executing program 3 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m50.180948045s ago: executing program 3 (id=169): link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x383900, 0x0) 1m49.929439751s ago: executing program 3 (id=177): io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0xf}]) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 1m49.871225283s ago: executing program 32 (id=177): io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0xf}]) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 1m26.047586509s ago: executing program 5 (id=523): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r1, 0x7, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) 1m25.909095142s ago: executing program 5 (id=529): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1m25.701405497s ago: executing program 5 (id=538): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x1, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0xf}, @multicast1, 0x4, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1, 0x3, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m25.461851713s ago: executing program 5 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m25.345759396s ago: executing program 5 (id=542): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x100000000}, 0x3}, 0x20, 0x0, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m25.064547202s ago: executing program 5 (id=545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x40f00, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000240)='m', 0x1) 1m25.003092854s ago: executing program 33 (id=545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x40f00, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000240)='m', 0x1) 49.797364106s ago: executing program 0 (id=1374): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000040)) 49.740976847s ago: executing program 0 (id=1376): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) 49.719448148s ago: executing program 0 (id=1377): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1c1040, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/144, 0x90}], 0x1, 0xca, 0x1) 49.63128757s ago: executing program 0 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x135) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 49.539890572s ago: executing program 0 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x4) 49.245535829s ago: executing program 0 (id=1391): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x2, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000000)=""/89, 0x59}], 0x1) 49.239220109s ago: executing program 34 (id=1391): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x2, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000000)=""/89, 0x59}], 0x1) 13.827951796s ago: executing program 1 (id=1972): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @a_listen={0x8, 0x1, 0x0, 0x80, 0x67, 0x8, 0x5, "", 0x8, 0xb, 0xf, 0x2}}, 0xf) 13.058260874s ago: executing program 4 (id=1979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000440)='\f', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)=""/212, 0xd4}, 0x7}], 0x1, 0x40012021, 0x0) 12.997624716s ago: executing program 4 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12.938948667s ago: executing program 4 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 12.903541088s ago: executing program 4 (id=1985): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 12.737960922s ago: executing program 4 (id=1989): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 12.172939486s ago: executing program 4 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x32}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, "2104"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) 12.150626597s ago: executing program 35 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21}, {@in=@dev, 0x4d6, 0x32}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, "2104"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) 10.73388012s ago: executing program 1 (id=2006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x0) 10.537243016s ago: executing program 1 (id=2009): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$inet6(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x30040000) close(r0) 10.517390036s ago: executing program 1 (id=2010): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 10.191860144s ago: executing program 1 (id=2012): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.438654682s ago: executing program 1 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x25d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000840) 9.438527132s ago: executing program 36 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x25d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000840) 3.703720001s ago: executing program 8 (id=2109): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x3}, 0x400, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x4, r1, 0xb, 0x80000}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208150f0100810401a80016ea1f150840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.565820884s ago: executing program 8 (id=2113): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a1d804, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3.504871995s ago: executing program 8 (id=2117): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 3.388070408s ago: executing program 8 (id=2118): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.474165541s ago: executing program 6 (id=2141): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x8, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) 1.65293345s ago: executing program 2 (id=2152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x7, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.632313421s ago: executing program 2 (id=2153): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000a0}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) 1.533239603s ago: executing program 6 (id=2157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) readv(r0, &(0x7f0000000c80)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.507842324s ago: executing program 6 (id=2159): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) 1.305976939s ago: executing program 6 (id=2161): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) 1.216029261s ago: executing program 6 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.185461272s ago: executing program 6 (id=2164): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 1.051043075s ago: executing program 7 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000024c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4d, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x1000}, {"17bb2ba27b5db4180be2a24df9f50feb5eed9cc0c1b22182f9f39173139337cf9a15675f44ea4404fd8db866a1c24738ddff6f0fc551e509b6"}}}}}}}, 0x0) 1.035488386s ago: executing program 7 (id=2170): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x372}]}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 985.259537ms ago: executing program 7 (id=2171): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2814000, &(0x7f0000000740)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@sysvgroups}, {@jqfmt_vfsold}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}]}, 0x1, 0x5b1, &(0x7f0000000880)="$eJzs3U1oHGUfAPD/zGabfuR90xfeF16lh6JChdJN0g+tntqrWCj0IHjRsN2Gkk23ZDfahIDpvYg9iEov9aYHj4oHD+LFo1cvfpyFYoOFpgdd2exsmqabuEmzWc3+fjDJ88zM7v//7Mzz7MwwwwbQtw43/qQRT0XE+SRieNWygcgWHm6ut7Q4X3ywOF9Mol6/8GsSSUTcX5wvttZPsv8HImIhIv4fEd/kI46mK2+5p1Wozs5NjpfLpemsPlKbujpSnZ07dnlqfKI0Ubpy4sWXTp0+eWrs+NjqdB/UV9fym2vrjR9vvnvju1du3/z0s0MLxffHkzgTQ9my1e3YTs3PJB9n1sw/2Y1gPZT0OgG2JJf180ZX+l8MRy7r9e3UVw8OgzuSHtBF9cGI+opVRaAPJDo99KnWcUDj/Lc17eTxx52zzROQRtylxfniO9GKP9C8NhF7l89N9v+WPHJm0jjfPLiTibIrLVyPiNGBgcf3/yTb/7ZudDsSpKu+PtvcUI9v/3Rl/Ik2489Q69rpE2qNf0vZ+LfUJn5unfHvfIcxfn/954/WjX99MJ5uGz9ZiZ+0iZ9GxJsdxr/12pen11tW/zjiSLSP35JsfH145NLlcmm0+bdtjK+OHHp5/fZH7F8nfvOa7d7lRFa3f0+WU9ph+7/49vNnFjaI//yzG2//dp//voh4r8P4/7n/yavrLbtzPbnbOArY7PZPIh+3O4z/wpnDP2RFVw0BAAAAAAAAAGAbpcv3siVpYaWcpoVC8xne/8b+tFyp1o5eqszksnveDkY+bd1pNdysJ436WHY/bqt+fE39RC4LmNu3XC8UK+WLPW47AAAAAAAAAAAAAAAAAAAA/F0cWPP8/73c8vP/a3+uGtit1v/Jb2C30/+hfz3a/5Oe5QHsPN//0LfqG/d/xwOwm/n+h/6l/0P/0v+hf7Xt//t2Pg9g5/n+h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAQFecP3euMdUfLM4XG/WLA7Mzk5W3jl0sVScLUzPFQrEyfbUwUalMlEuFYmXqr94vqVSujsaVmWsjtVK1NlKdnXtjqjJzpfUbYqV811sEAAAAAAAAAAAAAAAAAAAA/zxDy1OSFiLyzXqaFgoR/4qIg0kkly6XS6MR8e+I+D6XH2zUx3qdNAAAAAAAAAAAAAAAAAAAAOwy1dm5yfFyuTTdvcJAFqqzV/1U62o+A5tZOSIWNlwnnzWt4zQa77jpnFtRuruZnqhwbyd2pG0p5DrcD/u+0KMBCQAAAAAAAAAAAAAAAAAA+tjDh347fcUf3U0IAAAAAAAAAAAAAAAAAAAA+lL6SxIRjenI8HNDa5fuSZZyy/8j4u1bFz64Nl6rTY815t9dmV/7MJt/vBf5A51q9dM0Ihr9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHioOjs3OV4ul6a3WBjsYJ1etxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgK/4MAAD//4oTyqc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) write$cgroup_int(r0, &(0x7f0000000080)=0xa, 0x12) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) 964.259317ms ago: executing program 9 (id=2172): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000400)=""/69, 0x45}, {0x0}], 0x2}, 0x4}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="b6e43256cacc10e9792dde563c525be8dd1e57ac89de5f02b565de19cc01f92f21a9051ed35524e6b556771357f252a0feb7f6afc4412b3e93418492541f47ae0a1f1171", 0x44}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 886.251389ms ago: executing program 7 (id=2173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x5821c98b097a09f2) 715.688483ms ago: executing program 2 (id=2174): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) 649.157035ms ago: executing program 7 (id=2175): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 534.993057ms ago: executing program 8 (id=2176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 375.752281ms ago: executing program 2 (id=2177): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 358.268022ms ago: executing program 8 (id=2178): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, 0x0) 352.175552ms ago: executing program 9 (id=2179): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xb, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x5}, 0x10e848, 0x1, 0x9, 0x5, 0x2, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 311.080673ms ago: executing program 9 (id=2180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000024c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4d, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x1000}, {"17bb2ba27b5db4180be2a24df9f50feb5eed9cc0c1b22182f9f39173139337cf9a15675f44ea4404fd8db866a1c24738ddff6f0fc551e509b6"}}}}}}}, 0x0) 310.998863ms ago: executing program 2 (id=2181): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket(0x1, 0x5, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) close_range(r0, 0xffffffffffffffff, 0x0) 310.309913ms ago: executing program 7 (id=2190): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 290.711053ms ago: executing program 9 (id=2182): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 145.721167ms ago: executing program 2 (id=2183): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000280)="c7459f55e94f230d61b48b47c8ecac171be29fc9c80b3a6d09afcb1e33bd4c51e0cdab0b60b2aff4fda2fe0b5554", 0x2e) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 144.137867ms ago: executing program 9 (id=2194): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000012}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000580)={0xa0002008}) 0s ago: executing program 9 (id=2184): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200020, 0x4, @perf_config_ext={0x8, 0x4}, 0x100, 0x2, 0x8001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 0 ip=0x7fbcf316e1d9 code=0x7ffc0000 [ 112.645761][ T30] audit: type=1326 audit(1791570156.779:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.2.1488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf316e1d9 code=0x7ffc0000 [ 112.995756][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1492'. [ 112.995784][ T7803] netlink: 'syz.6.1492': attribute type 10 has an invalid length. [ 112.995798][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1492'. [ 112.999806][ T7803] geneve2: entered promiscuous mode [ 112.999874][ T7803] geneve2: entered allmulticast mode [ 114.103254][ T7838] loop2: detected capacity change from 0 to 764 [ 114.200362][ T7849] sg_write: data in/out 221148/136 bytes for SCSI command 0x0-- guessing data in; [ 114.200362][ T7849] program syz.4.1512 not setting count and/or reply_len properly [ 114.446980][ T7863] loop1: detected capacity change from 0 to 512 [ 114.471543][ T7863] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 114.471574][ T7863] FAT-fs (loop1): Filesystem has been set read-only [ 114.471731][ T7863] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 114.743345][ T7883] 9p: Bad value for 'rfdno' [ 114.753028][ T7882] FAULT_INJECTION: forcing a failure. [ 114.753028][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 114.753191][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.4.1524 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.753225][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.753243][ T7882] Call Trace: [ 114.753253][ T7882] [ 114.753264][ T7882] __dump_stack+0x1d/0x30 [ 114.753299][ T7882] dump_stack_lvl+0x95/0xd0 [ 114.753373][ T7882] dump_stack+0x15/0x1b [ 114.753398][ T7882] should_fail_ex+0x262/0x280 [ 114.753438][ T7882] ? __kernfs_new_node+0x70/0x440 [ 114.753546][ T7882] should_failslab+0x8c/0xb0 [ 114.753588][ T7882] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 114.753704][ T7882] ? __kernfs_new_node+0x70/0x440 [ 114.753738][ T7882] __kernfs_new_node+0x70/0x440 [ 114.753769][ T7882] ? rb_insert_color+0x26f/0x2a0 [ 114.753856][ T7882] ? __rcu_read_unlock+0x4e/0x70 [ 114.753917][ T7882] ? __rcu_read_unlock+0x4e/0x70 [ 114.753962][ T7882] ? kernfs_activate_one+0x10c/0x140 [ 114.754070][ T7882] ? __rcu_read_unlock+0x4e/0x70 [ 114.754110][ T7882] ? up_write+0x19/0x60 [ 114.754156][ T7882] kernfs_new_node+0xcf/0xf0 [ 114.754231][ T7882] __kernfs_create_file+0x4b/0x180 [ 114.754261][ T7882] ? __pfx_dev_attr_show+0x10/0x10 [ 114.754360][ T7882] ? __pfx_dev_attr_store+0x10/0x10 [ 114.754386][ T7882] sysfs_add_file_mode_ns+0x132/0x1b0 [ 114.754449][ T7882] sysfs_merge_group+0xed/0x1c0 [ 114.754495][ T7882] dpm_sysfs_add+0xaf/0x1e0 [ 114.754539][ T7882] device_add+0x3bc/0x790 [ 114.754567][ T7882] netdev_register_kobject+0x127/0x240 [ 114.754595][ T7882] register_netdevice+0xaf7/0x11a0 [ 114.754621][ T7882] tun_set_iff+0x5fe/0x870 [ 114.754771][ T7882] __tun_chr_ioctl+0x682/0x1550 [ 114.754873][ T7882] ? selinux_file_ioctl+0x33c/0x3c0 [ 114.754911][ T7882] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 114.754960][ T7882] tun_chr_ioctl+0x27/0x40 [ 114.755032][ T7882] __se_sys_ioctl+0xce/0x140 [ 114.755075][ T7882] __x64_sys_ioctl+0x43/0x50 [ 114.755121][ T7882] x64_sys_call+0x239d/0x2550 [ 114.755212][ T7882] do_syscall_64+0x112/0x360 [ 114.755251][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.755283][ T7882] RIP: 0033:0x7f4982f0e1d9 [ 114.755306][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.755337][ T7882] RSP: 002b:00007f4981967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.755363][ T7882] RAX: ffffffffffffffda RBX: 00007f4983195fa0 RCX: 00007f4982f0e1d9 [ 114.755439][ T7882] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 114.755459][ T7882] RBP: 00007f4982fa5888 R08: 0000000000000000 R09: 0000000000000000 [ 114.755478][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.755496][ T7882] R13: 00007f4983196038 R14: 00007f4983195fa0 R15: 00007ffdaf9ce958 [ 114.755521][ T7882] [ 115.561508][ T7918] FAULT_INJECTION: forcing a failure. [ 115.561508][ T7918] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.561547][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.7.1550 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.561572][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.561585][ T7918] Call Trace: [ 115.561593][ T7918] [ 115.561601][ T7918] __dump_stack+0x1d/0x30 [ 115.561650][ T7918] dump_stack_lvl+0x95/0xd0 [ 115.561683][ T7918] dump_stack+0x15/0x1b [ 115.561713][ T7918] should_fail_ex+0x262/0x280 [ 115.561753][ T7918] should_fail+0xb/0x20 [ 115.561832][ T7918] get_futex_key+0x12d/0xb10 [ 115.561877][ T7918] futex_wait_setup+0x49/0x3e0 [ 115.561910][ T7918] ? __rcu_read_unlock+0x4e/0x70 [ 115.562002][ T7918] __futex_wait+0xa9/0x260 [ 115.562034][ T7918] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.562110][ T7918] futex_wait+0x98/0x1c0 [ 115.562210][ T7918] do_futex+0x391/0x460 [ 115.562258][ T7918] __se_sys_futex+0x2f6/0x370 [ 115.562302][ T7918] ? xfd_validate_state+0x45/0xf0 [ 115.562394][ T7918] __x64_sys_futex+0x78/0x90 [ 115.562433][ T7918] x64_sys_call+0x22e2/0x2550 [ 115.562520][ T7918] do_syscall_64+0x112/0x360 [ 115.562550][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.562575][ T7918] RIP: 0033:0x7f32f6dce1d9 [ 115.562592][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.562694][ T7918] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.562720][ T7918] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 115.562740][ T7918] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 115.562754][ T7918] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000002 [ 115.562768][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.562784][ T7918] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 115.562838][ T7918] [ 115.641371][ T7923] FAULT_INJECTION: forcing a failure. [ 115.641371][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.641469][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.7.1541 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.641506][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.641574][ T7923] Call Trace: [ 115.641584][ T7923] [ 115.641682][ T7923] __dump_stack+0x1d/0x30 [ 115.641718][ T7923] dump_stack_lvl+0x95/0xd0 [ 115.641806][ T7923] dump_stack+0x15/0x1b [ 115.641838][ T7923] should_fail_ex+0x262/0x280 [ 115.641895][ T7923] should_fail+0xb/0x20 [ 115.641929][ T7923] should_fail_usercopy+0x1a/0x20 [ 115.642057][ T7923] _copy_from_user+0x1c/0xb0 [ 115.642226][ T7923] bpf_vlog_reverse_ubuf+0xed/0x360 [ 115.642321][ T7923] bpf_vlog_finalize+0x147/0x200 [ 115.642478][ T7923] bpf_log_attr_finalize+0x33/0x100 [ 115.642649][ T7923] btf_new_fd+0x34a/0x6a0 [ 115.642752][ T7923] bpf_btf_load+0x116/0x130 [ 115.642925][ T7923] __sys_bpf+0xbce/0xc30 [ 115.643034][ T7923] ? do_futex+0x380/0x460 [ 115.643258][ T7923] __x64_sys_bpf+0x69/0x80 [ 115.643344][ T7923] x64_sys_call+0xf26/0x2550 [ 115.643549][ T7923] do_syscall_64+0x112/0x360 [ 115.643715][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.643802][ T7923] RIP: 0033:0x7f32f6dce1d9 [ 115.643862][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.643931][ T7923] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.644010][ T7923] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 115.644079][ T7923] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 115.644126][ T7923] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 115.644172][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.644204][ T7923] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 115.644307][ T7923] [ 115.960065][ T7930] netlink: 'syz.6.1543': attribute type 4 has an invalid length. [ 116.196803][ T7948] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1549'. [ 116.259152][ T7954] loop6: detected capacity change from 0 to 512 [ 116.289292][ T7954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.289424][ T7954] ext4 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.334617][ T7956] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 116.419497][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.455596][ T7968] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1559'. [ 116.605403][ T7979] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.946837][ T8003] loop4: detected capacity change from 0 to 512 [ 116.971292][ T8003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.971388][ T8003] ext4 filesystem being mounted at /320/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.012139][ T8003] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz.4.1585: directory missing '.' [ 117.084118][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.404585][ T8031] sd 0:0:1:0: PR command failed: 1026 [ 117.404678][ T8031] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 117.404715][ T8031] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.531854][ T8044] FAULT_INJECTION: forcing a failure. [ 117.531854][ T8044] name failslab, interval 1, probability 0, space 0, times 0 [ 117.531905][ T8044] CPU: 0 UID: 0 PID: 8044 Comm: syz.6.1593 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.531992][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.532006][ T8044] Call Trace: [ 117.532012][ T8044] [ 117.532019][ T8044] __dump_stack+0x1d/0x30 [ 117.532098][ T8044] dump_stack_lvl+0x95/0xd0 [ 117.532127][ T8044] dump_stack+0x15/0x1b [ 117.532158][ T8044] should_fail_ex+0x262/0x280 [ 117.532198][ T8044] ? sctp_association_new+0x6d/0x1160 [ 117.532267][ T8044] should_failslab+0x8c/0xb0 [ 117.532301][ T8044] __kmalloc_cache_noprof+0x7a/0x400 [ 117.532444][ T8044] ? sctp_association_new+0x6d/0x1160 [ 117.532470][ T8044] sctp_association_new+0x6d/0x1160 [ 117.532492][ T8044] ? sctp_v4_scope+0x140/0x150 [ 117.532586][ T8044] sctp_connect_new_asoc+0x1a8/0x3a0 [ 117.532615][ T8044] __sctp_connect+0x428/0x7a0 [ 117.532691][ T8044] ? release_sock+0x10c/0x180 [ 117.532719][ T8044] ? lock_sock_nested+0x84/0x110 [ 117.532784][ T8044] sctp_inet_connect+0xe7/0x110 [ 117.532888][ T8044] __sys_connect+0x1ef/0x2a0 [ 117.532925][ T8044] __x64_sys_connect+0x3f/0x50 [ 117.532954][ T8044] x64_sys_call+0x1c0b/0x2550 [ 117.533062][ T8044] do_syscall_64+0x112/0x360 [ 117.533095][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.533202][ T8044] RIP: 0033:0x7f5cee17e1d9 [ 117.533241][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.533267][ T8044] RSP: 002b:00007f5cecbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 117.533332][ T8044] RAX: ffffffffffffffda RBX: 00007f5cee405fa0 RCX: 00007f5cee17e1d9 [ 117.533347][ T8044] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 0000000000000003 [ 117.533360][ T8044] RBP: 00007f5cee215888 R08: 0000000000000000 R09: 0000000000000000 [ 117.533373][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.533387][ T8044] R13: 00007f5cee406038 R14: 00007f5cee405fa0 R15: 00007ffd431c4ca8 [ 117.533443][ T8044] [ 118.328264][ T30] kauditd_printk_skb: 559 callbacks suppressed [ 118.328284][ T30] audit: type=1400 audit(1791570162.469:5042): avc: denied { write } for pid=8048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.366152][ T30] audit: type=1400 audit(1791570162.479:5043): avc: denied { write } for pid=8059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.702812][ T8073] loop2: detected capacity change from 0 to 256 [ 118.714447][ T8073] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.716187][ T8073] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.818602][ T8064] FAULT_INJECTION: forcing a failure. [ 118.818602][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.818661][ T8064] CPU: 1 UID: 0 PID: 8064 Comm: syz.6.1595 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.818695][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.818767][ T8064] Call Trace: [ 118.818776][ T8064] [ 118.818787][ T8064] __dump_stack+0x1d/0x30 [ 118.818821][ T8064] dump_stack_lvl+0x95/0xd0 [ 118.818852][ T8064] dump_stack+0x15/0x1b [ 118.818882][ T8064] should_fail_ex+0x262/0x280 [ 118.818981][ T8064] should_fail+0xb/0x20 [ 118.819015][ T8064] should_fail_usercopy+0x1a/0x20 [ 118.819056][ T8064] _copy_from_user+0x1c/0xb0 [ 118.819115][ T8064] restore_altstack+0x4b/0x300 [ 118.819151][ T8064] ? __set_current_blocked+0x284/0x2e0 [ 118.819184][ T8064] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 118.819258][ T8064] ? arch_do_signal_or_restart+0x2f3/0x480 [ 118.819307][ T8064] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 118.819354][ T8064] ? __se_sys_clock_nanosleep+0x223/0x260 [ 118.819458][ T8064] x64_sys_call+0x1532/0x2550 [ 118.819495][ T8064] do_syscall_64+0x112/0x360 [ 118.819556][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.819587][ T8064] RIP: 0033:0x7f5cee11f559 [ 118.819609][ T8064] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 118.819635][ T8064] RSP: 002b:00007f5cecbd6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 118.819813][ T8064] RAX: ffffffffffffffda RBX: 00007f5cee405fa0 RCX: 00007f5cee11f559 [ 118.819833][ T8064] RDX: 00007f5cecbd6a80 RSI: 00007f5cecbd6bb0 RDI: 0000000000000011 [ 118.819895][ T8064] RBP: 00007f5cee215888 R08: 0000000000000000 R09: 0000000000000000 [ 118.819914][ T8064] R10: 00002000000021c0 R11: 0000000000000246 R12: 0000000000000000 [ 118.819933][ T8064] R13: 00007f5cee406038 R14: 00007f5cee405fa0 R15: 00007ffd431c4ca8 [ 118.819985][ T8064] [ 118.845763][ T8084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.845806][ T8084] IPv6: NLM_F_CREATE should be set when creating new route [ 118.852943][ T8084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.095447][ T8095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.114155][ T8093] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 119.142978][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 119.341370][ T8112] loop6: detected capacity change from 0 to 2048 [ 119.389726][ T8112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.431349][ T30] audit: type=1326 audit(1791570163.559:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431414][ T30] audit: type=1326 audit(1791570163.559:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431451][ T30] audit: type=1326 audit(1791570163.559:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431537][ T30] audit: type=1326 audit(1791570163.559:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431574][ T30] audit: type=1326 audit(1791570163.559:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431674][ T30] audit: type=1326 audit(1791570163.559:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431704][ T30] audit: type=1326 audit(1791570163.559:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.431739][ T30] audit: type=1326 audit(1791570163.559:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.6.1615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee17e1d9 code=0x7ffc0000 [ 119.839452][ T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 119.839884][ T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 119.840293][ T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 119.840603][ T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 119.840618][ T11] rtc rtc0: __rtc_set_alarm: err=-22 [ 120.100874][ T8129] loop1: detected capacity change from 0 to 512 [ 120.104249][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.146998][ T8129] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 120.235884][ T8129] loop1: detected capacity change from 0 to 4096 [ 120.246857][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.294309][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.384842][ T8150] syzkaller1: entered promiscuous mode [ 120.384929][ T8150] syzkaller1: entered allmulticast mode [ 120.478385][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b643000: rx timeout, send abort [ 120.978456][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b643000: abort rx timeout. Force session deactivation [ 123.231726][ T8201] loop6: detected capacity change from 0 to 764 [ 124.250134][ T8242] loop7: detected capacity change from 0 to 764 [ 124.516043][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1655'. [ 124.549323][ T8252] FAULT_INJECTION: forcing a failure. [ 124.549323][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 124.549353][ T8252] CPU: 1 UID: 0 PID: 8252 Comm: syz.1.1652 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.549381][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.549399][ T8252] Call Trace: [ 124.549457][ T8252] [ 124.549464][ T8252] __dump_stack+0x1d/0x30 [ 124.549497][ T8252] dump_stack_lvl+0x95/0xd0 [ 124.549561][ T8252] dump_stack+0x15/0x1b [ 124.549604][ T8252] should_fail_ex+0x262/0x280 [ 124.549637][ T8252] ? __request_module+0x1c4/0x3c0 [ 124.549660][ T8252] should_failslab+0x8c/0xb0 [ 124.549743][ T8252] __kmalloc_cache_noprof+0x7a/0x400 [ 124.549778][ T8252] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 124.549816][ T8252] ? __request_module+0x1c4/0x3c0 [ 124.549900][ T8252] ? dev_load+0xa3/0xc0 [ 124.549986][ T8252] __request_module+0x1c4/0x3c0 [ 124.550017][ T8252] dev_load+0xa3/0xc0 [ 124.550066][ T8252] devinet_ioctl+0x8c/0xfa0 [ 124.550100][ T8252] inet_ioctl+0x2f8/0x3a0 [ 124.550148][ T8252] packet_ioctl+0x248/0x280 [ 124.550206][ T8252] sock_do_ioctl+0x73/0x230 [ 124.550257][ T8252] sock_ioctl+0x439/0x610 [ 124.550293][ T8252] ? __pfx_sock_ioctl+0x10/0x10 [ 124.550380][ T8252] __se_sys_ioctl+0xce/0x140 [ 124.550420][ T8252] __x64_sys_ioctl+0x43/0x50 [ 124.550452][ T8252] x64_sys_call+0x239d/0x2550 [ 124.550525][ T8252] do_syscall_64+0x112/0x360 [ 124.550585][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.550610][ T8252] RIP: 0033:0x7fb54c1ce1d9 [ 124.550627][ T8252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.550645][ T8252] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.550677][ T8252] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 124.550765][ T8252] RDX: 0000200000000180 RSI: 000000000000891a RDI: 0000000000000003 [ 124.550778][ T8252] RBP: 00007fb54c265888 R08: 0000000000000000 R09: 0000000000000000 [ 124.550796][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.550849][ T8252] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 124.550877][ T8252] [ 124.931604][ T8275] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.673508][ T8282] loop1: detected capacity change from 0 to 764 [ 125.770120][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.830084][ T6773] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.830564][ T6773] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.831135][ T6773] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.831711][ T6773] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.831771][ T6773] rtc rtc0: __rtc_set_alarm: err=-22 [ 126.766199][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 126.766289][ T30] audit: type=1326 audit(1791570170.899:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1678" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf316e1d9 code=0x7fc00000 [ 126.933623][ T8319] loop4: detected capacity change from 0 to 1024 [ 126.950727][ T8319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.956480][ T30] audit: type=1400 audit(1791570171.089:5071): avc: denied { write } for pid=8317 comm="syz.4.1686" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.956520][ T30] audit: type=1400 audit(1791570171.089:5072): avc: denied { write } for pid=8317 comm="syz.4.1686" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.021199][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.075516][ T8325] FAULT_INJECTION: forcing a failure. [ 127.075516][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 127.075567][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.4.1687 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.075619][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.075641][ T8325] Call Trace: [ 127.075650][ T8325] [ 127.075709][ T8325] __dump_stack+0x1d/0x30 [ 127.075753][ T8325] dump_stack_lvl+0x95/0xd0 [ 127.075784][ T8325] dump_stack+0x15/0x1b [ 127.075812][ T8325] should_fail_ex+0x262/0x280 [ 127.075858][ T8325] ? dst_alloc+0xbd/0x100 [ 127.075954][ T8325] should_failslab+0x8c/0xb0 [ 127.076001][ T8325] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 127.076095][ T8325] ? dst_alloc+0xbd/0x100 [ 127.076138][ T8325] dst_alloc+0xbd/0x100 [ 127.076170][ T8325] ip_route_input_rcu+0x1463/0x1b80 [ 127.076213][ T8325] ip_route_input_noref+0x5f/0x90 [ 127.076246][ T8325] ip_rcv_finish_core+0x308/0xb50 [ 127.076463][ T8325] ? nf_nat_ipv4_pre_routing+0xb1/0x210 [ 127.076508][ T8325] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 127.076553][ T8325] ip_rcv_finish+0x100/0x1a0 [ 127.076646][ T8325] ip_rcv+0x62/0x160 [ 127.076696][ T8325] ? __pfx_ip_rcv_finish+0x10/0x10 [ 127.076743][ T8325] ? __pfx_ip_rcv+0x10/0x10 [ 127.076846][ T8325] netif_receive_skb+0x137/0x4c0 [ 127.076895][ T8325] ? tun_rx_batched+0xca/0x430 [ 127.077011][ T8325] tun_rx_batched+0x101/0x430 [ 127.077062][ T8325] tun_get_user+0x2059/0x28e0 [ 127.077200][ T8325] ? ref_tracker_alloc+0x1eb/0x2f0 [ 127.077260][ T8325] tun_chr_write_iter+0x15a/0x210 [ 127.077301][ T8325] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 127.077380][ T8325] vfs_write+0x57f/0x9a0 [ 127.077505][ T8325] ksys_write+0xdc/0x1a0 [ 127.077548][ T8325] __x64_sys_write+0x40/0x50 [ 127.077631][ T8325] x64_sys_call+0x154e/0x2550 [ 127.077724][ T8325] do_syscall_64+0x112/0x360 [ 127.077761][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.077791][ T8325] RIP: 0033:0x7f4982ecea0e [ 127.077813][ T8325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.077838][ T8325] RSP: 002b:00007f4981966fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.077864][ T8325] RAX: ffffffffffffffda RBX: 00007f49819676c0 RCX: 00007f4982ecea0e [ 127.077962][ T8325] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 127.077979][ T8325] RBP: 00007f4982fa5888 R08: 0000000000000000 R09: 0000000000000000 [ 127.077996][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.078012][ T8325] R13: 00007f4983196038 R14: 00007f4983195fa0 R15: 00007ffdaf9ce958 [ 127.078041][ T8325] [ 127.388184][ T8333] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 127.441813][ T8336] loop4: detected capacity change from 0 to 764 [ 127.457139][ T30] audit: type=1400 audit(1791570171.589:5073): avc: denied { watch } for pid=8338 comm="syz.1.1693" path="/proc/790/task/791/fd" dev="proc" ino=20564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 127.619975][ T8350] FAULT_INJECTION: forcing a failure. [ 127.619975][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 127.620019][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.4.1697 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.620063][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.620083][ T8350] Call Trace: [ 127.620093][ T8350] [ 127.620104][ T8350] __dump_stack+0x1d/0x30 [ 127.620144][ T8350] dump_stack_lvl+0x95/0xd0 [ 127.620231][ T8350] dump_stack+0x15/0x1b [ 127.620261][ T8350] should_fail_ex+0x262/0x280 [ 127.620304][ T8350] ? security_sk_alloc+0x52/0x120 [ 127.620415][ T8350] should_failslab+0x8c/0xb0 [ 127.620492][ T8350] __kmalloc_noprof+0xd0/0x4d0 [ 127.620531][ T8350] ? security_sk_alloc+0x52/0x120 [ 127.620573][ T8350] ? __kmalloc_noprof+0x1f1/0x4d0 [ 127.620635][ T8350] security_sk_alloc+0x52/0x120 [ 127.620692][ T8350] sk_prot_alloc+0xc2/0x180 [ 127.620756][ T8350] sk_alloc+0x34/0x3e0 [ 127.620790][ T8350] can_create+0x1d0/0x410 [ 127.620833][ T8350] __sock_create+0x2e5/0x580 [ 127.620956][ T8350] __sys_socket+0xaf/0x180 [ 127.621007][ T8350] __x64_sys_socket+0x3f/0x50 [ 127.621058][ T8350] x64_sys_call+0x246e/0x2550 [ 127.621154][ T8350] do_syscall_64+0x112/0x360 [ 127.621201][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.621311][ T8350] RIP: 0033:0x7f4982f0e1d9 [ 127.621337][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.621364][ T8350] RSP: 002b:00007f4981967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.621429][ T8350] RAX: ffffffffffffffda RBX: 00007f4983195fa0 RCX: 00007f4982f0e1d9 [ 127.621450][ T8350] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 127.621469][ T8350] RBP: 00007f4982fa5888 R08: 0000000000000000 R09: 0000000000000000 [ 127.621488][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.621506][ T8350] R13: 00007f4983196038 R14: 00007f4983195fa0 R15: 00007ffdaf9ce958 [ 127.621533][ T8350] [ 127.847235][ T8358] xt_hashlimit: size too large, truncated to 1048576 [ 127.849191][ T3965] Bluetooth: hci0: command 0x1003 tx timeout [ 127.851477][ T4641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.245286][ T8382] loop1: detected capacity change from 0 to 764 [ 128.621344][ T30] audit: type=1400 audit(1791570172.759:5074): avc: denied { watch_reads } for pid=8398 comm="syz.2.1728" path="/346" dev="tmpfs" ino=1831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.758231][ T8408] loop2: detected capacity change from 0 to 512 [ 128.768455][ T8408] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 128.805288][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1724'. [ 128.806274][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 128.851259][ T8408] loop2: detected capacity change from 0 to 4096 [ 128.867097][ T8408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.889936][ T30] audit: type=1400 audit(1791570173.029:5075): avc: denied { write } for pid=8407 comm="syz.2.1722" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.956429][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.516865][ T30] audit: type=1326 audit(1791570173.649:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.7.1738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f6dce1d9 code=0x7ffc0000 [ 129.521822][ T30] audit: type=1326 audit(1791570173.659:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.7.1738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f6dce1d9 code=0x7ffc0000 [ 129.522244][ T30] audit: type=1326 audit(1791570173.659:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.7.1738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f6dce1d9 code=0x7ffc0000 [ 129.523923][ T30] audit: type=1326 audit(1791570173.659:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.7.1738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f32f6dce1d9 code=0x7ffc0000 [ 129.594453][ T8445] loop2: detected capacity change from 0 to 512 [ 129.685742][ T8462] FAULT_INJECTION: forcing a failure. [ 129.685742][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 129.685840][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.1.1740 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.685877][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.685897][ T8462] Call Trace: [ 129.685905][ T8462] [ 129.685987][ T8462] __dump_stack+0x1d/0x30 [ 129.686077][ T8462] dump_stack_lvl+0x95/0xd0 [ 129.686157][ T8462] dump_stack+0x15/0x1b [ 129.686183][ T8462] should_fail_ex+0x262/0x280 [ 129.686224][ T8462] ? alloc_empty_file+0x70/0x1e0 [ 129.686326][ T8462] should_failslab+0x8c/0xb0 [ 129.686377][ T8462] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 129.686488][ T8462] ? alloc_empty_file+0x70/0x1e0 [ 129.686526][ T8462] alloc_empty_file+0x70/0x1e0 [ 129.686565][ T8462] alloc_file_pseudo+0x92/0x120 [ 129.686619][ T8462] sock_alloc_file+0x9c/0x1e0 [ 129.686664][ T8462] __sys_socket+0x118/0x180 [ 129.686702][ T8462] __x64_sys_socket+0x3f/0x50 [ 129.686776][ T8462] x64_sys_call+0x246e/0x2550 [ 129.686815][ T8462] do_syscall_64+0x112/0x360 [ 129.686864][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.686898][ T8462] RIP: 0033:0x7fb54c1ce1d9 [ 129.686942][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.686962][ T8462] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 129.686984][ T8462] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 129.687004][ T8462] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 129.687042][ T8462] RBP: 00007fb54c265888 R08: 0000000000000000 R09: 0000000000000000 [ 129.687062][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.687080][ T8462] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 129.687111][ T8462] [ 129.815305][ T8445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.815623][ T8445] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.957194][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1743'. [ 130.051977][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.145848][ T8481] loop6: detected capacity change from 0 to 764 [ 130.365850][ T8494] loop4: detected capacity change from 0 to 512 [ 130.366420][ T8494] EXT4-fs: Ignoring removed oldalloc option [ 130.382115][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.382244][ T8494] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.442534][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.490323][ T8502] FAULT_INJECTION: forcing a failure. [ 130.490323][ T8502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.490398][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.4.1768 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.490461][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.490480][ T8502] Call Trace: [ 130.490489][ T8502] [ 130.490534][ T8502] __dump_stack+0x1d/0x30 [ 130.490569][ T8502] dump_stack_lvl+0x95/0xd0 [ 130.490741][ T8502] dump_stack+0x15/0x1b [ 130.490826][ T8502] should_fail_ex+0x262/0x280 [ 130.490864][ T8502] should_fail+0xb/0x20 [ 130.490909][ T8502] should_fail_usercopy+0x1a/0x20 [ 130.490951][ T8502] _copy_from_iter+0xcc/0xe70 [ 130.490991][ T8502] ? skb_set_owner_w+0x19b/0x200 [ 130.491061][ T8502] ? sock_alloc_send_pskb+0x469/0x500 [ 130.491178][ T8502] skb_copy_datagram_from_iter+0xad/0x480 [ 130.491259][ T8502] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 130.491305][ T8502] ? skb_put+0xa9/0xf0 [ 130.491333][ T8502] tun_get_user+0x110b/0x28e0 [ 130.491410][ T8502] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 130.491444][ T8502] ? probe_sched_wakeup+0x84/0xa0 [ 130.491514][ T8502] ? ref_tracker_alloc+0x1eb/0x2f0 [ 130.491557][ T8502] tun_chr_write_iter+0x15a/0x210 [ 130.491660][ T8502] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 130.491786][ T8502] vfs_write+0x57f/0x9a0 [ 130.491834][ T8502] ksys_write+0xdc/0x1a0 [ 130.491987][ T8502] __x64_sys_write+0x40/0x50 [ 130.492029][ T8502] x64_sys_call+0x154e/0x2550 [ 130.492080][ T8502] do_syscall_64+0x112/0x360 [ 130.492115][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.492151][ T8502] RIP: 0033:0x7f4982ecea0e [ 130.492175][ T8502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.492200][ T8502] RSP: 002b:00007f4981966fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.492280][ T8502] RAX: ffffffffffffffda RBX: 00007f49819676c0 RCX: 00007f4982ecea0e [ 130.492297][ T8502] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 130.492316][ T8502] RBP: 00007f4982fa5888 R08: 0000000000000000 R09: 0000000000000000 [ 130.492410][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.492428][ T8502] R13: 00007f4983196038 R14: 00007f4983195fa0 R15: 00007ffdaf9ce958 [ 130.492453][ T8502] [ 130.493767][ T8504] loop1: detected capacity change from 0 to 512 [ 130.495884][ T8504] EXT4-fs: Ignoring removed oldalloc option [ 130.555721][ T8504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.561211][ T8504] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.682717][ T8508] FAULT_INJECTION: forcing a failure. [ 130.682717][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 130.682841][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.7.1758 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.683008][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.683058][ T8508] Call Trace: [ 130.683074][ T8508] [ 130.683119][ T8508] __dump_stack+0x1d/0x30 [ 130.683213][ T8508] dump_stack_lvl+0x95/0xd0 [ 130.683300][ T8508] dump_stack+0x15/0x1b [ 130.683416][ T8508] should_fail_ex+0x262/0x280 [ 130.683522][ T8508] ? alloc_empty_file+0x70/0x1e0 [ 130.683632][ T8508] should_failslab+0x8c/0xb0 [ 130.683832][ T8508] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 130.683956][ T8508] ? alloc_empty_file+0x70/0x1e0 [ 130.684062][ T8508] alloc_empty_file+0x70/0x1e0 [ 130.684352][ T8508] alloc_file_pseudo+0x92/0x120 [ 130.684474][ T8508] sock_alloc_file+0x9c/0x1e0 [ 130.684654][ T8508] __sys_socket+0x118/0x180 [ 130.684830][ T8508] __x64_sys_socket+0x3f/0x50 [ 130.684976][ T8508] x64_sys_call+0x246e/0x2550 [ 130.685155][ T8508] do_syscall_64+0x112/0x360 [ 130.685285][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.685340][ T8508] RIP: 0033:0x7f32f6dce1d9 [ 130.685445][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.685520][ T8508] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.685613][ T8508] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 130.685754][ T8508] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 130.685828][ T8508] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 130.685876][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.685933][ T8508] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 130.686007][ T8508] [ 130.910987][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.495928][ T8538] FAULT_INJECTION: forcing a failure. [ 131.495928][ T8538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.495967][ T8538] CPU: 1 UID: 0 PID: 8538 Comm: syz.6.1772 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.495999][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.496066][ T8538] Call Trace: [ 131.496076][ T8538] [ 131.496103][ T8538] __dump_stack+0x1d/0x30 [ 131.496135][ T8538] dump_stack_lvl+0x95/0xd0 [ 131.496163][ T8538] dump_stack+0x15/0x1b [ 131.496188][ T8538] should_fail_ex+0x262/0x280 [ 131.496244][ T8538] should_fail_alloc_page+0xf2/0x100 [ 131.496299][ T8538] __alloc_frozen_pages_noprof+0x157/0x400 [ 131.496376][ T8538] alloc_pages_mpol+0xaf/0x1d0 [ 131.496408][ T8538] alloc_pages_noprof+0x94/0x140 [ 131.496441][ T8538] alloc_skb_with_frags+0x1c9/0x3d0 [ 131.496474][ T8538] sock_alloc_send_pskb+0x44d/0x500 [ 131.496515][ T8538] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 131.496673][ T8538] tun_get_user+0x987/0x28e0 [ 131.496745][ T8538] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 131.496797][ T8538] ? probe_sched_wakeup+0x84/0xa0 [ 131.496833][ T8538] ? ref_tracker_alloc+0x1eb/0x2f0 [ 131.496906][ T8538] tun_chr_write_iter+0x15a/0x210 [ 131.496956][ T8538] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.497046][ T8538] vfs_write+0x57f/0x9a0 [ 131.497133][ T8538] ksys_write+0xdc/0x1a0 [ 131.497180][ T8538] __x64_sys_write+0x40/0x50 [ 131.497218][ T8538] x64_sys_call+0x154e/0x2550 [ 131.497295][ T8538] do_syscall_64+0x112/0x360 [ 131.497372][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.497403][ T8538] RIP: 0033:0x7f5cee13ea0e [ 131.497425][ T8538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.497528][ T8538] RSP: 002b:00007f5cecbd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.497551][ T8538] RAX: ffffffffffffffda RBX: 00007f5cecbd76c0 RCX: 00007f5cee13ea0e [ 131.497571][ T8538] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 131.497639][ T8538] RBP: 00007f5cee215888 R08: 0000000000000000 R09: 0000000000000000 [ 131.497653][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.497667][ T8538] R13: 00007f5cee406038 R14: 00007f5cee405fa0 R15: 00007ffd431c4ca8 [ 131.497691][ T8538] [ 131.766063][ T8550] loop4: detected capacity change from 0 to 512 [ 131.824965][ T8552] loop4: detected capacity change from 0 to 256 [ 131.852125][ T8552] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 131.852153][ T8552] FAT-fs (loop4): Can't find a valid FAT filesystem [ 131.901505][ T8561] loop7: detected capacity change from 0 to 256 [ 131.907736][ T8561] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.046725][ T8561] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 132.046773][ T8561] FAT-fs (loop7): Filesystem has been set read-only [ 132.046796][ T8561] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 132.320085][ T30] kauditd_printk_skb: 324 callbacks suppressed [ 132.320104][ T30] audit: type=1400 audit(1791570176.459:5404): avc: denied { setopt } for pid=8585 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.505029][ T8590] loop1: detected capacity change from 0 to 512 [ 132.506725][ T8590] EXT4-fs: Ignoring removed bh option [ 132.507059][ T8590] EXT4-fs: Mount option(s) incompatible with ext2 [ 132.521477][ T30] audit: type=1400 audit(1791570176.649:5405): avc: denied { remount } for pid=8589 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.678595][ T3372] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 132.691127][ T8595] udevd[8595]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 132.788176][ T8592] loop1: detected capacity change from 0 to 1024 [ 132.828906][ T8592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.829397][ T8592] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 133.036255][ T30] audit: type=1326 audit(1791570177.169:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.036397][ T30] audit: type=1326 audit(1791570177.169:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.036797][ T30] audit: type=1326 audit(1791570177.169:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.036989][ T30] audit: type=1326 audit(1791570177.169:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.037177][ T30] audit: type=1326 audit(1791570177.169:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.037383][ T30] audit: type=1326 audit(1791570177.169:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.037532][ T30] audit: type=1326 audit(1791570177.169:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.037879][ T30] audit: type=1326 audit(1791570177.169:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8619 comm="syz.4.1804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4982f0e1d9 code=0x7ffc0000 [ 133.356616][ T8639] FAULT_INJECTION: forcing a failure. [ 133.356616][ T8639] name failslab, interval 1, probability 0, space 0, times 0 [ 133.356724][ T8639] CPU: 1 UID: 0 PID: 8639 Comm: syz.1.1825 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.356757][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.356776][ T8639] Call Trace: [ 133.356787][ T8639] [ 133.356797][ T8639] __dump_stack+0x1d/0x30 [ 133.356886][ T8639] dump_stack_lvl+0x95/0xd0 [ 133.356936][ T8639] dump_stack+0x15/0x1b [ 133.356956][ T8639] should_fail_ex+0x262/0x280 [ 133.357032][ T8639] ? __list_lru_init+0x72/0x2f0 [ 133.357059][ T8639] should_failslab+0x8c/0xb0 [ 133.357092][ T8639] __kmalloc_noprof+0xd0/0x4d0 [ 133.357180][ T8639] ? __list_lru_init+0x72/0x2f0 [ 133.357203][ T8639] __list_lru_init+0x72/0x2f0 [ 133.357245][ T8639] sget_fc+0x92b/0xfa0 [ 133.357272][ T8639] ? __pfx_kernfs_set_super+0x10/0x10 [ 133.357404][ T8639] ? __pfx_kernfs_test_super+0x10/0x10 [ 133.357476][ T8639] ? __kmalloc_cache_noprof+0x19b/0x400 [ 133.357517][ T8639] ? kernfs_get_tree+0x56/0x4a0 [ 133.357588][ T8639] kernfs_get_tree+0xdf/0x4a0 [ 133.357632][ T8639] ? security_capable+0x7b/0x90 [ 133.357738][ T8639] vfs_get_tree+0x57/0x1d0 [ 133.357806][ T8639] do_new_mount+0x288/0x8d0 [ 133.357828][ T8639] ? security_capable+0x7b/0x90 [ 133.357894][ T8639] path_mount+0x4ad/0xb90 [ 133.357920][ T8639] __se_sys_mount+0x28c/0x2e0 [ 133.357951][ T8639] __x64_sys_mount+0x67/0x80 [ 133.358095][ T8639] x64_sys_call+0xc3b/0x2550 [ 133.358127][ T8639] do_syscall_64+0x112/0x360 [ 133.358171][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.358201][ T8639] RIP: 0033:0x7fb54c1ce1d9 [ 133.358222][ T8639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.358245][ T8639] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 133.358302][ T8639] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 133.358322][ T8639] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 133.358341][ T8639] RBP: 00007fb54c265888 R08: 0000000000000000 R09: 0000000000000000 [ 133.358433][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.358459][ T8639] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 133.358486][ T8639] [ 133.977545][ T8658] loop1: detected capacity change from 0 to 512 [ 134.021150][ T8663] vcan0: tx address claim with broadcast sa [ 134.051924][ T8667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.054525][ T8667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 134.054571][ T8667] System zones: 0-1, 3-36 [ 134.057201][ T8667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.125123][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.167127][ T8677] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.231001][ T8682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.231140][ T8682] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.299011][ T8685] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.1835: Freeing blocks not in datazone - block = 0, count = 16 [ 134.302454][ T8677] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 134.302494][ T8677] FAT-fs (loop2): Filesystem has been set read-only [ 134.302518][ T8677] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 134.336241][ T827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 134.337139][ T827] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.337255][ T827] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.337255][ T827] [ 134.337303][ T827] EXT4-fs (loop1): Total free blocks count 0 [ 134.337384][ T827] EXT4-fs (loop1): Free/Dirty block details [ 134.337443][ T827] EXT4-fs (loop1): free_blocks=16 [ 134.337493][ T827] EXT4-fs (loop1): dirty_blocks=16 [ 134.337647][ T827] EXT4-fs (loop1): Block reservation details [ 134.337694][ T827] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 134.345024][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.602188][ T8698] FAULT_INJECTION: forcing a failure. [ 134.602188][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 134.602297][ T8698] CPU: 1 UID: 0 PID: 8698 Comm: syz.1.1840 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.602382][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.602395][ T8698] Call Trace: [ 134.602402][ T8698] [ 134.602411][ T8698] __dump_stack+0x1d/0x30 [ 134.602438][ T8698] dump_stack_lvl+0x95/0xd0 [ 134.602461][ T8698] dump_stack+0x15/0x1b [ 134.602541][ T8698] should_fail_ex+0x262/0x280 [ 134.602570][ T8698] ? __kernfs_new_node+0x70/0x440 [ 134.602596][ T8698] should_failslab+0x8c/0xb0 [ 134.602700][ T8698] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.602736][ T8698] ? __kernfs_new_node+0x70/0x440 [ 134.602769][ T8698] __kernfs_new_node+0x70/0x440 [ 134.602802][ T8698] ? net_ns_get_ownership+0xb3/0xd0 [ 134.602909][ T8698] ? __pfx_net_get_ownership+0x10/0x10 [ 134.602955][ T8698] kernfs_create_dir_ns+0xd0/0x170 [ 134.602997][ T8698] sysfs_create_dir_ns+0xd4/0x1d0 [ 134.603037][ T8698] kobject_add_internal+0x470/0x770 [ 134.603140][ T8698] kobject_add+0xdb/0x150 [ 134.603171][ T8698] ? device_add+0x2e8/0x790 [ 134.603201][ T8698] device_add+0x2f6/0x790 [ 134.603299][ T8698] netdev_register_kobject+0x127/0x240 [ 134.603325][ T8698] register_netdevice+0xaf7/0x11a0 [ 134.603352][ T8698] ppp_dev_configure+0x580/0x630 [ 134.603388][ T8698] ppp_ioctl+0x82e/0x12d0 [ 134.603435][ T8698] ? __pfx_ppp_ioctl+0x10/0x10 [ 134.603492][ T8698] __se_sys_ioctl+0xce/0x140 [ 134.603624][ T8698] __x64_sys_ioctl+0x43/0x50 [ 134.603678][ T8698] x64_sys_call+0x239d/0x2550 [ 134.603705][ T8698] do_syscall_64+0x112/0x360 [ 134.603733][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.603838][ T8698] RIP: 0033:0x7fb54c1ce1d9 [ 134.603885][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.603905][ T8698] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.604022][ T8698] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 134.604038][ T8698] RDX: 0000200000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 134.604053][ T8698] RBP: 00007fb54c265888 R08: 0000000000000000 R09: 0000000000000000 [ 134.604067][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.604110][ T8698] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 134.604141][ T8698] [ 134.604178][ T8698] kobject: kobject_add_internal failed for ppp3 (error: -12 parent: net) [ 134.998677][ T8570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.175850][ T8715] smc: net device vlan1 applied user defined pnetid SYZ2 [ 135.177612][ T8715] smc: net device vlan1 erased user defined pnetid SYZ2 [ 135.248754][ T3422] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 135.256857][ T8721] udevd[8721]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 135.298237][ T8705] set_capacity_and_notify: 3 callbacks suppressed [ 135.298258][ T8705] loop4: detected capacity change from 0 to 512 [ 135.321522][ T8725] sd 0:0:1:0: PR command failed: 1026 [ 135.321658][ T8725] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 135.321773][ T8725] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 135.399202][ T8727] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.518896][ T8705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.523780][ T8705] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.872630][ T8763] loop1: detected capacity change from 0 to 1024 [ 135.885106][ T8759] loop7: detected capacity change from 0 to 512 [ 135.902733][ T8759] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1866: iget: bad i_size value: 38620345925642 [ 135.902764][ T8759] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.902951][ T8759] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1866: couldn't read orphan inode 15 (err -117) [ 135.903039][ T8759] loop7: lost filesystem error report for type 5 error -117 [ 135.903601][ T8759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.954225][ T7327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.983092][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.002455][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.399452][ T8779] loop6: detected capacity change from 0 to 8192 [ 136.814911][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.974903][ T8794] FAULT_INJECTION: forcing a failure. [ 136.974903][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.974943][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.1.1881 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.975027][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.975170][ T8794] Call Trace: [ 136.975180][ T8794] [ 136.975191][ T8794] __dump_stack+0x1d/0x30 [ 136.975227][ T8794] dump_stack_lvl+0x95/0xd0 [ 136.975259][ T8794] dump_stack+0x15/0x1b [ 136.975288][ T8794] should_fail_ex+0x262/0x280 [ 136.975354][ T8794] should_fail+0xb/0x20 [ 136.975389][ T8794] should_fail_usercopy+0x1a/0x20 [ 136.975472][ T8794] _copy_to_user+0x20/0xa0 [ 136.975588][ T8794] bpf_verifier_vlog+0x36e/0x5a0 [ 136.975630][ T8794] __btf_verifier_log+0x7f/0xb0 [ 136.975676][ T8794] __btf_verifier_log_type+0x302/0x330 [ 136.975754][ T8794] btf_datasec_check_meta+0x2a6/0x640 [ 136.975784][ T8794] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 136.975815][ T8794] ? sort+0x6c/0xa0 [ 136.975857][ T8794] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 136.975892][ T8794] btf_parse_type_sec+0x291/0x1520 [ 136.975941][ T8794] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 136.975974][ T8794] ? btf_parse_hdr+0x43a/0x440 [ 136.976051][ T8794] ? btf_parse_str_sec+0x1ae/0x1b0 [ 136.976079][ T8794] btf_new_fd+0x2ec/0x6a0 [ 136.976114][ T8794] bpf_btf_load+0x116/0x130 [ 136.976157][ T8794] __sys_bpf+0xbce/0xc30 [ 136.976253][ T8794] ? do_futex+0x380/0x460 [ 136.976331][ T8794] __x64_sys_bpf+0x69/0x80 [ 136.976404][ T8794] x64_sys_call+0xf26/0x2550 [ 136.976449][ T8794] do_syscall_64+0x112/0x360 [ 136.976484][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.976514][ T8794] RIP: 0033:0x7fb54c1ce1d9 [ 136.976537][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.976601][ T8794] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.976697][ T8794] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 136.976720][ T8794] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 136.976747][ T8794] RBP: 00007fb54c265888 R08: 0000000000000000 R09: 0000000000000000 [ 136.976766][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.976784][ T8794] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 136.976828][ T8794] [ 137.004679][ T8773] loop4: detected capacity change from 0 to 1024 [ 137.066880][ T8773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.066947][ T8773] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 137.282762][ T8804] hsr0: entered promiscuous mode [ 137.286453][ T8804] hsr_slave_0: left promiscuous mode [ 137.287012][ T8804] hsr_slave_1: left promiscuous mode [ 137.374066][ T8804] hsr0 (unregistering): left promiscuous mode [ 137.385760][ T30] kauditd_printk_skb: 533 callbacks suppressed [ 137.385806][ T30] audit: type=1326 audit(1791570181.519:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.385850][ T30] audit: type=1326 audit(1791570181.519:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.385893][ T30] audit: type=1326 audit(1791570181.519:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.385933][ T30] audit: type=1326 audit(1791570181.519:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.385973][ T30] audit: type=1326 audit(1791570181.519:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.386017][ T30] audit: type=1326 audit(1791570181.519:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.386058][ T30] audit: type=1326 audit(1791570181.519:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.386151][ T30] audit: type=1326 audit(1791570181.519:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 137.616650][ T8811] loop6: detected capacity change from 0 to 256 [ 137.786384][ T30] audit: type=1326 audit(1791570181.919:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.1887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb54c1ce1d9 code=0x7ffc0000 [ 138.103898][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.104072][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.359726][ T8837] loop7: detected capacity change from 0 to 128 [ 138.396986][ T30] audit: type=1400 audit(1791570182.529:5956): avc: denied { bind } for pid=8838 comm="syz.4.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.397590][ T3372] kernel read not supported for file /907/oom_score_adj (pid: 3372 comm: kworker/1:2) [ 138.473032][ T8849] hsr0: entered promiscuous mode [ 138.473785][ T8849] hsr_slave_0: left promiscuous mode [ 138.474329][ T8849] hsr_slave_1: left promiscuous mode [ 138.480386][ T8849] hsr0 (unregistering): left promiscuous mode [ 138.551094][ T8856] loop6: detected capacity change from 0 to 512 [ 138.574179][ T8856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.574300][ T8856] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.622700][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.855240][ T8891] loop1: detected capacity change from 0 to 512 [ 138.906106][ T8891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.971403][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.052132][ T8905] loop4: detected capacity change from 0 to 512 [ 139.068898][ T8905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.069001][ T8905] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.143119][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.317348][ T8930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.328081][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.328455][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.381110][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.549377][ T8943] xt_hashlimit: size too large, truncated to 1048576 [ 139.729746][ T8958] FAULT_INJECTION: forcing a failure. [ 139.729746][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 139.729848][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.1.1946 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.729885][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.729904][ T8958] Call Trace: [ 139.729914][ T8958] [ 139.729967][ T8958] __dump_stack+0x1d/0x30 [ 139.730000][ T8958] dump_stack_lvl+0x95/0xd0 [ 139.730082][ T8958] dump_stack+0x15/0x1b [ 139.730109][ T8958] should_fail_ex+0x262/0x280 [ 139.730162][ T8958] should_failslab+0x8c/0xb0 [ 139.730296][ T8958] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 139.730346][ T8958] ? key_alloc+0x2b2/0x940 [ 139.730432][ T8958] ? key_alloc+0x2b2/0x940 [ 139.730506][ T8958] kmemdup_noprof+0x2b/0x70 [ 139.730625][ T8958] key_alloc+0x2b2/0x940 [ 139.730715][ T8958] keyring_alloc+0x45/0xb0 [ 139.730744][ T8958] lookup_user_key+0x362/0xd60 [ 139.730868][ T8958] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 139.730985][ T8958] __se_sys_add_key+0x272/0x360 [ 139.731021][ T8958] __x64_sys_add_key+0x67/0x80 [ 139.731135][ T8958] x64_sys_call+0x1fa9/0x2550 [ 139.731172][ T8958] do_syscall_64+0x112/0x360 [ 139.731209][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.731287][ T8958] RIP: 0033:0x7fb54c1ce1d9 [ 139.731306][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.731332][ T8958] RSP: 002b:00007fb54ac27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 139.731436][ T8958] RAX: ffffffffffffffda RBX: 00007fb54c455fa0 RCX: 00007fb54c1ce1d9 [ 139.731455][ T8958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 139.731469][ T8958] RBP: 00007fb54c265888 R08: fffffffffffffffe R09: 0000000000000000 [ 139.731489][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.731506][ T8958] R13: 00007fb54c456038 R14: 00007fb54c455fa0 R15: 00007ffd591ea208 [ 139.731534][ T8958] [ 140.250014][ T8997] ip_tables: iptables: counters copy to user failed while replacing table [ 140.286007][ T8999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.303340][ T8999] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1964: corrupted xattr block 8: invalid header [ 140.303507][ T8999] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 140.303588][ T8999] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1964: corrupted xattr block 8: invalid header [ 140.303795][ T8999] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 140.303928][ T8999] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1964: corrupted xattr block 8: invalid header [ 140.305106][ T8999] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1964: corrupted xattr block 8: invalid header [ 140.305423][ T8999] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 140.347076][ T7327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.428144][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.428451][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.063900][ T9011] set_capacity_and_notify: 2 callbacks suppressed [ 141.063922][ T9011] loop4: detected capacity change from 0 to 512 [ 141.066120][ T9011] EXT4-fs: Ignoring removed nobh option [ 141.084046][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.084274][ T9011] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.107498][ T9011] EXT4-fs (loop4): shut down requested (2) [ 141.109739][ T9011] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 141.109813][ T9011] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 141.110219][ T9011] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 141.154608][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.190306][ T9016] loop6: detected capacity change from 0 to 1024 [ 141.207641][ T9016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.214425][ T9015] pim6reg1: entered promiscuous mode [ 141.214546][ T9015] pim6reg1: entered allmulticast mode [ 141.750506][ T9035] FAULT_INJECTION: forcing a failure. [ 141.750506][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 141.750548][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.7.1975 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.750622][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.750640][ T9035] Call Trace: [ 141.750650][ T9035] [ 141.750662][ T9035] __dump_stack+0x1d/0x30 [ 141.750726][ T9035] dump_stack_lvl+0x95/0xd0 [ 141.750836][ T9035] dump_stack+0x15/0x1b [ 141.750870][ T9035] should_fail_ex+0x262/0x280 [ 141.750911][ T9035] ? alloc_vfsmnt+0x2d/0x2f0 [ 141.750955][ T9035] should_failslab+0x8c/0xb0 [ 141.751002][ T9035] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 141.751055][ T9035] ? alloc_vfsmnt+0x140/0x2f0 [ 141.751138][ T9035] ? alloc_vfsmnt+0x2d/0x2f0 [ 141.751185][ T9035] alloc_vfsmnt+0x2d/0x2f0 [ 141.751224][ T9035] clone_mnt+0x30/0x5d0 [ 141.751337][ T9035] copy_tree+0x2dc/0x890 [ 141.751446][ T9035] copy_mnt_ns+0x1d2/0x720 [ 141.751471][ T9035] create_new_namespaces+0x7f/0x420 [ 141.751511][ T9035] unshare_nsproxy_namespaces+0x115/0x150 [ 141.751571][ T9035] ksys_unshare+0x42b/0x710 [ 141.751677][ T9035] __x64_sys_unshare+0x1f/0x30 [ 141.751729][ T9035] x64_sys_call+0x1e33/0x2550 [ 141.751766][ T9035] do_syscall_64+0x112/0x360 [ 141.751805][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.751910][ T9035] RIP: 0033:0x7f32f6dce1d9 [ 141.751934][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.751956][ T9035] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.752052][ T9035] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 141.752074][ T9035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 141.752135][ T9035] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 141.752154][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.752207][ T9035] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 141.752233][ T9035] [ 142.084194][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.270316][ T9056] loop4: detected capacity change from 0 to 512 [ 142.289466][ T9056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.289639][ T9056] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.353878][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.354002][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.366081][ T9056] loop4: detected capacity change from 512 to 64 [ 142.385654][ T9056] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Out of memory [ 142.385954][ T9056] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Out of memory [ 142.386145][ T9056] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #19: comm syz.4.1985: mark_inode_dirty error [ 142.386171][ T9056] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -12 [ 142.386423][ T9056] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -12) [ 142.425473][ T3305] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 4: comm syz-executor: path /421/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 142.426525][ T3305] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Out of memory [ 142.427062][ T3305] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error [ 142.735907][ T4649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.872092][ T9082] loop2: detected capacity change from 0 to 512 [ 142.885399][ T9082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.910567][ T9082] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.1997: corrupted xattr block 8: invalid header [ 142.910806][ T9082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 142.910920][ T9082] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.1997: corrupted xattr block 8: invalid header [ 142.911289][ T9082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 142.911359][ T9082] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.1997: corrupted xattr block 8: invalid header [ 142.913268][ T9082] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.1997: corrupted xattr block 8: invalid header [ 142.915207][ T9082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 142.941365][ T9085] loop7: detected capacity change from 0 to 512 [ 142.947341][ T9085] EXT4-fs: Ignoring removed nobh option [ 143.035052][ T9085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.035164][ T9085] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.077486][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.086853][ T9085] EXT4-fs (loop7): shut down requested (2) [ 143.088952][ T9085] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 143.089047][ T9085] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 143.089116][ T9085] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 143.142663][ T7327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.365042][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.365071][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.365166][ T9089] bridge_slave_0: entered allmulticast mode [ 143.365681][ T9089] bridge_slave_0: entered promiscuous mode [ 143.367781][ T9089] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.368165][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.368506][ T9089] bridge_slave_1: entered allmulticast mode [ 143.370095][ T9089] bridge_slave_1: entered promiscuous mode [ 143.403227][ T9089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.406721][ T9089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.440558][ T9089] team0: Port device team_slave_0 added [ 143.441519][ T9089] team0: Port device team_slave_1 added [ 143.459421][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.459436][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.459541][ T9089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.460228][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.460248][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.460275][ T9089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.497212][ T9089] hsr_slave_0: entered promiscuous mode [ 143.499302][ T9089] hsr_slave_1: entered promiscuous mode [ 143.500344][ T9089] debugfs: 'hsr0' already exists in 'hsr' [ 143.500403][ T9089] Cannot create hsr debugfs directory [ 144.356068][ T9024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.367423][ T9089] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 144.381763][ T9089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.383944][ T9089] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 144.405647][ T9089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.406245][ T9089] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 144.424529][ T9089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.425254][ T9089] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 144.441888][ T9089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.542424][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.571679][ T9089] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.590908][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.590954][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.612746][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.612930][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.651387][ T30] kauditd_printk_skb: 459 callbacks suppressed [ 144.651404][ T30] audit: type=1400 audit(1791570188.789:6416): avc: denied { write } for pid=9116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.709894][ T9154] loop1: detected capacity change from 0 to 512 [ 144.727778][ T9154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.734332][ T9154] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.771896][ T30] audit: type=1400 audit(1791570188.909:6417): avc: denied { write } for pid=9153 comm="syz.1.2010" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.814811][ T30] audit: type=1400 audit(1791570188.949:6418): avc: denied { write } for pid=9158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.860868][ T9154] loop1: detected capacity change from 512 to 64 [ 144.861431][ T30] audit: type=1400 audit(1791570188.999:6419): avc: denied { write } for pid=9153 comm="syz.1.2010" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.868976][ T9164] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Out of memory [ 144.869274][ T9164] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Out of memory [ 144.869427][ T9164] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #19: comm syz.1.2010: mark_inode_dirty error [ 144.869508][ T9164] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -12 [ 144.869748][ T9164] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -12) [ 144.967599][ T3311] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 4: comm syz-executor: path /432/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 144.968076][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Out of memory [ 144.969740][ T3311] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error [ 145.165058][ T30] audit: type=1400 audit(1791570189.299:6420): avc: denied { write } for pid=9165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.198289][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.207407][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.260428][ T30] audit: type=1400 audit(1791570189.399:6421): avc: denied { write } for pid=9186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.449977][ T4047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.500990][ T9089] veth0_vlan: entered promiscuous mode [ 145.514148][ T9089] veth1_vlan: entered promiscuous mode [ 145.534581][ T9089] veth0_macvtap: entered promiscuous mode [ 145.536672][ T9089] veth1_macvtap: entered promiscuous mode [ 145.553766][ T9210] loop6: detected capacity change from 0 to 512 [ 145.554500][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.557404][ T9210] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 145.557450][ T9210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.564622][ T9210] EXT4-fs (loop6): 1 truncate cleaned up [ 145.565668][ T9210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.612962][ T9210] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 145.614158][ T30] audit: type=1400 audit(1791570189.749:6422): avc: denied { mac_admin } for pid=9209 comm="syz.6.2021" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.614256][ T30] audit: type=1400 audit(1791570189.749:6423): avc: denied { relabelto } for pid=9209 comm="syz.6.2021" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 145.615417][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.716989][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.719002][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.720209][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.720325][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.720490][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.804483][ T30] audit: type=1400 audit(1791570189.939:6424): avc: denied { create } for pid=9217 comm="syz.6.2024" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.886011][ T9226] FAULT_INJECTION: forcing a failure. [ 145.886011][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 145.886099][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.6.2026 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.886135][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.886234][ T9226] Call Trace: [ 145.886252][ T9226] [ 145.886263][ T9226] __dump_stack+0x1d/0x30 [ 145.886298][ T9226] dump_stack_lvl+0x95/0xd0 [ 145.886331][ T9226] dump_stack+0x15/0x1b [ 145.886382][ T9226] should_fail_ex+0x262/0x280 [ 145.886453][ T9226] ? ops_init+0x4b/0x2e0 [ 145.886548][ T9226] should_failslab+0x8c/0xb0 [ 145.886596][ T9226] __kmalloc_noprof+0xd0/0x4d0 [ 145.886643][ T9226] ? ops_init+0x4b/0x2e0 [ 145.886731][ T9226] ops_init+0x4b/0x2e0 [ 145.886781][ T9226] setup_net+0x9f/0x230 [ 145.886826][ T9226] copy_net_ns+0x333/0x490 [ 145.886899][ T9226] create_new_namespaces+0x1f6/0x420 [ 145.886985][ T9226] unshare_nsproxy_namespaces+0x115/0x150 [ 145.887035][ T9226] ksys_unshare+0x42b/0x710 [ 145.887078][ T9226] __x64_sys_unshare+0x1f/0x30 [ 145.887175][ T9226] x64_sys_call+0x1e33/0x2550 [ 145.887228][ T9226] do_syscall_64+0x112/0x360 [ 145.887275][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.887308][ T9226] RIP: 0033:0x7f5cee17e1d9 [ 145.887352][ T9226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.887379][ T9226] RSP: 002b:00007f5cecbd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.887468][ T9226] RAX: ffffffffffffffda RBX: 00007f5cee405fa0 RCX: 00007f5cee17e1d9 [ 145.887490][ T9226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 145.887508][ T9226] RBP: 00007f5cee215888 R08: 0000000000000000 R09: 0000000000000000 [ 145.887527][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.887545][ T9226] R13: 00007f5cee406038 R14: 00007f5cee405fa0 R15: 00007ffd431c4ca8 [ 145.887575][ T9226] [ 146.328984][ T9255] loop6: detected capacity change from 0 to 128 [ 146.333233][ T9255] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 146.333493][ T9255] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.371478][ T30] audit: type=1400 audit(1791570190.509:6425): avc: denied { write } for pid=9254 comm="syz.6.2031" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.374332][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.374375][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.374513][ T9220] bridge_slave_0: entered allmulticast mode [ 146.380029][ T9220] bridge_slave_0: entered promiscuous mode [ 146.394401][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.394565][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.399978][ T9220] bridge_slave_1: entered allmulticast mode [ 146.406046][ T9220] bridge_slave_1: entered promiscuous mode [ 146.483263][ T9220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.486364][ T9220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.530496][ T9220] team0: Port device team_slave_0 added [ 146.531019][ T5002] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.531632][ T9220] team0: Port device team_slave_1 added [ 146.587738][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.587753][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.587783][ T9220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.590577][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.590625][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.595214][ T9220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.667102][ T9261] loop6: detected capacity change from 0 to 1024 [ 146.701046][ T9261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.730334][ T9261] EXT4-fs warning (device loop6): ext4_rmdir:3194: inode #11: comm syz.6.2033: empty directory 'file0' has too many links (111) [ 146.730672][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2034'. [ 146.731700][ T9220] hsr_slave_0: entered promiscuous mode [ 146.734194][ T9220] hsr_slave_1: entered promiscuous mode [ 146.734523][ T9220] debugfs: 'hsr0' already exists in 'hsr' [ 146.734536][ T9220] Cannot create hsr debugfs directory [ 146.764086][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.945269][ T9220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 146.956143][ T9274] FAULT_INJECTION: forcing a failure. [ 146.956143][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 146.956183][ T9274] CPU: 0 UID: 0 PID: 9274 Comm: syz.7.2040 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.956218][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.956237][ T9274] Call Trace: [ 146.956245][ T9274] [ 146.956254][ T9274] __dump_stack+0x1d/0x30 [ 146.956359][ T9274] dump_stack_lvl+0x95/0xd0 [ 146.956390][ T9274] dump_stack+0x15/0x1b [ 146.956419][ T9274] should_fail_ex+0x262/0x280 [ 146.956488][ T9274] ? skb_clone+0x151/0x1f0 [ 146.956636][ T9274] should_failslab+0x8c/0xb0 [ 146.956771][ T9274] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 146.956813][ T9274] ? skb_clone+0x151/0x1f0 [ 146.956922][ T9274] skb_clone+0x151/0x1f0 [ 146.956956][ T9274] bpf_clone_redirect+0xed/0x280 [ 146.956998][ T9274] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 146.957063][ T9274] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 146.957148][ T9274] ? hrtimer_start_range_ns+0x108/0x120 [ 146.957180][ T9274] ? _raw_spin_unlock+0x9/0x30 [ 146.957217][ T9274] ? finish_task_switch+0x121/0x340 [ 146.957285][ T9274] ? __schedule+0x79e/0xd20 [ 146.957362][ T9274] ? bpf_test_timer_continue+0x28/0x350 [ 146.957398][ T9274] ? preempt_schedule_common+0x12/0x40 [ 146.957439][ T9274] ? preempt_schedule_thunk+0x16/0x40 [ 146.957508][ T9274] ? bpf_test_timer_continue+0xac/0x350 [ 146.957540][ T9274] bpf_test_run+0x29b/0x620 [ 146.957568][ T9274] ? __list_add_valid_or_report+0x38/0xe0 [ 146.957663][ T9274] ? bpf_test_run+0x198/0x620 [ 146.957699][ T9274] bpf_prog_test_run_skb+0xe67/0x11b0 [ 146.957773][ T9274] ? __rcu_read_unlock+0x4e/0x70 [ 146.957917][ T9274] ? __fget_files+0x184/0x1c0 [ 146.958023][ T9274] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.958083][ T9274] bpf_prog_test_run+0x208/0x340 [ 146.958126][ T9274] __sys_bpf+0x8da/0xc30 [ 146.958166][ T9274] ? do_futex+0x380/0x460 [ 146.958251][ T9274] __x64_sys_bpf+0x69/0x80 [ 146.958326][ T9274] x64_sys_call+0xf26/0x2550 [ 146.958364][ T9274] do_syscall_64+0x112/0x360 [ 146.958505][ T9274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.958537][ T9274] RIP: 0033:0x7f32f6dce1d9 [ 146.958559][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.958583][ T9274] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.958611][ T9274] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 146.958631][ T9274] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 146.958727][ T9274] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 146.958744][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.958761][ T9274] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 146.958796][ T9274] [ 147.215687][ T3965] Bluetooth: hci0: command 0x1003 tx timeout [ 147.222776][ T4641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.740781][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.793617][ T9220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 147.797381][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.812488][ T9220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 147.816252][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.833732][ T9220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 147.837222][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.930578][ T9220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.944562][ T9220] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.954949][ T827] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.955014][ T827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.964157][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.964270][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.037063][ T9301] loop7: detected capacity change from 0 to 256 [ 148.094721][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'. [ 148.170593][ T9311] pim6reg1: entered promiscuous mode [ 148.170671][ T9311] pim6reg1: entered allmulticast mode [ 148.273366][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.490710][ T9220] veth0_vlan: entered promiscuous mode [ 148.493300][ T9220] veth1_vlan: entered promiscuous mode [ 148.513426][ T9220] veth0_macvtap: entered promiscuous mode [ 148.515352][ T9220] veth1_macvtap: entered promiscuous mode [ 148.529140][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.534111][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.568024][ T70] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.568308][ T70] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.568379][ T70] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.568471][ T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.627974][ T9351] capability: warning: `syz.9.2023' uses 32-bit capabilities (legacy support in use) [ 148.660612][ T9350] loop6: detected capacity change from 0 to 4096 [ 148.667544][ T9350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.698110][ T9350] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2068: corrupted inode contents [ 148.698201][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.698805][ T9350] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #15: comm syz.6.2068: mark_inode_dirty error [ 148.698836][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.699093][ T9350] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2068: corrupted inode contents [ 148.699135][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.699366][ T9350] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2068: mark_inode_dirty error [ 148.699400][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.699588][ T9350] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2068: corrupted inode contents [ 148.699620][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.699896][ T9350] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2068: mark_inode_dirty error [ 148.699928][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.700143][ T9350] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2068: corrupted inode contents [ 148.700169][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.700305][ T9350] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.2068: mark_inode_dirty error [ 148.700345][ T9350] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.700463][ T9350] EXT4-fs error (device loop6): ext4_evict_inode:280: comm syz.6.2068: couldn't truncate inode 15 (err -117) [ 148.904236][ T5002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.194392][ T9370] FAULT_INJECTION: forcing a failure. [ 149.194392][ T9370] name failslab, interval 1, probability 0, space 0, times 0 [ 149.194431][ T9370] CPU: 1 UID: 0 PID: 9370 Comm: syz.9.2064 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.194460][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.194476][ T9370] Call Trace: [ 149.194520][ T9370] [ 149.194531][ T9370] __dump_stack+0x1d/0x30 [ 149.194565][ T9370] dump_stack_lvl+0x95/0xd0 [ 149.194596][ T9370] dump_stack+0x15/0x1b [ 149.194624][ T9370] should_fail_ex+0x262/0x280 [ 149.194695][ T9370] should_failslab+0x8c/0xb0 [ 149.194785][ T9370] __kvmalloc_node_noprof+0x168/0x5c0 [ 149.194814][ T9370] ? nf_hook_entries_grow+0x1cb/0x460 [ 149.194839][ T9370] ? nf_hook_entries_grow+0x1cb/0x460 [ 149.194940][ T9370] nf_hook_entries_grow+0x1cb/0x460 [ 149.194976][ T9370] ? call_rcu+0x2be/0x440 [ 149.195007][ T9370] __nf_register_net_hook+0x187/0x480 [ 149.195102][ T9370] nf_register_net_hook+0x88/0x130 [ 149.195145][ T9370] nf_register_net_hooks+0x44/0x150 [ 149.195181][ T9370] nf_ct_netns_do_get+0x2b1/0x3a0 [ 149.195254][ T9370] nf_ct_netns_get+0xf1/0x2c0 [ 149.195287][ T9370] connmark_tg_check+0x35/0xa0 [ 149.195354][ T9370] xt_check_target+0x3c2/0x5d0 [ 149.195389][ T9370] ? mutex_unlock+0x4e/0x90 [ 149.195437][ T9370] ? xt_find_target+0x204/0x240 [ 149.195503][ T9370] translate_table+0xd32/0x1120 [ 149.195548][ T9370] do_ipt_set_ctl+0x735/0x970 [ 149.195651][ T9370] nf_setsockopt+0x199/0x1b0 [ 149.195694][ T9370] ip_setsockopt+0x102/0x110 [ 149.195795][ T9370] udp_setsockopt+0x89/0xa0 [ 149.195822][ T9370] sock_common_setsockopt+0x69/0x80 [ 149.195858][ T9370] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.195907][ T9370] __sys_setsockopt+0x184/0x200 [ 149.195941][ T9370] __x64_sys_setsockopt+0x64/0x80 [ 149.195972][ T9370] x64_sys_call+0x248f/0x2550 [ 149.196052][ T9370] do_syscall_64+0x112/0x360 [ 149.196090][ T9370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.196186][ T9370] RIP: 0033:0x7f4795a5e1d9 [ 149.196208][ T9370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.196234][ T9370] RSP: 002b:00007f47944b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.196256][ T9370] RAX: ffffffffffffffda RBX: 00007f4795ce5fa0 RCX: 00007f4795a5e1d9 [ 149.196272][ T9370] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 149.196343][ T9370] RBP: 00007f4795af5888 R08: 0000000000000230 R09: 0000000000000000 [ 149.196362][ T9370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.196380][ T9370] R13: 00007f4795ce6038 R14: 00007f4795ce5fa0 R15: 00007ffd8c3fa8b8 [ 149.196466][ T9370] [ 149.196494][ T9370] cannot load conntrack support for proto=2 [ 149.664491][ T30] kauditd_printk_skb: 411 callbacks suppressed [ 149.664513][ T30] audit: type=1326 audit(1791570193.799:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.664620][ T30] audit: type=1326 audit(1791570193.799:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.666196][ T30] audit: type=1326 audit(1791570193.799:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.666239][ T30] audit: type=1326 audit(1791570193.799:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.666801][ T30] audit: type=1326 audit(1791570193.799:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.666863][ T30] audit: type=1326 audit(1791570193.799:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.666984][ T30] audit: type=1326 audit(1791570193.799:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.674215][ T30] audit: type=1326 audit(1791570193.809:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.674286][ T30] audit: type=1326 audit(1791570193.809:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 149.699960][ T30] audit: type=1326 audit(1791570193.809:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.9.2078" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795a5e1d9 code=0x7ffc0000 [ 150.082425][ T9391] netlink: 'syz.8.2074': attribute type 2 has an invalid length. [ 150.086603][ T9389] loop2: detected capacity change from 0 to 2048 [ 150.122763][ T9389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.160236][ T9398] netlink: 'syz.6.2075': attribute type 19 has an invalid length. [ 150.160254][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2075'. [ 150.186568][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.199950][ T9398] netlink: 'syz.6.2075': attribute type 19 has an invalid length. [ 150.199998][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2075'. [ 150.200469][ T51] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.201436][ T97] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.201630][ T97] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.201735][ T97] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.739449][ T9448] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2094'. [ 150.861979][ T9460] FAULT_INJECTION: forcing a failure. [ 150.861979][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 150.862011][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.7.2100 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.862041][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.862056][ T9460] Call Trace: [ 150.862137][ T9460] [ 150.862149][ T9460] __dump_stack+0x1d/0x30 [ 150.862217][ T9460] dump_stack_lvl+0x95/0xd0 [ 150.862246][ T9460] dump_stack+0x15/0x1b [ 150.862296][ T9460] should_fail_ex+0x262/0x280 [ 150.862404][ T9460] should_failslab+0x8c/0xb0 [ 150.862448][ T9460] __kvmalloc_node_noprof+0x168/0x5c0 [ 150.862525][ T9460] ? nf_hook_entries_grow+0x1cb/0x460 [ 150.862561][ T9460] ? nf_hook_entries_grow+0x1cb/0x460 [ 150.862603][ T9460] nf_hook_entries_grow+0x1cb/0x460 [ 150.862645][ T9460] ? call_rcu+0x2be/0x440 [ 150.862675][ T9460] __nf_register_net_hook+0x187/0x480 [ 150.862770][ T9460] nf_register_net_hook+0x88/0x130 [ 150.862805][ T9460] nf_register_net_hooks+0x44/0x150 [ 150.862842][ T9460] nf_ct_netns_do_get+0x2b1/0x3a0 [ 150.862881][ T9460] nf_ct_netns_get+0xf1/0x2c0 [ 150.862922][ T9460] connmark_tg_check+0x35/0xa0 [ 150.862957][ T9460] xt_check_target+0x3c2/0x5d0 [ 150.862981][ T9460] ? mutex_unlock+0x4e/0x90 [ 150.863071][ T9460] ? xt_find_target+0x204/0x240 [ 150.863097][ T9460] translate_table+0xd32/0x1120 [ 150.863160][ T9460] do_ipt_set_ctl+0x735/0x970 [ 150.863209][ T9460] nf_setsockopt+0x199/0x1b0 [ 150.863325][ T9460] ip_setsockopt+0x102/0x110 [ 150.863394][ T9460] udp_setsockopt+0x89/0xa0 [ 150.863430][ T9460] sock_common_setsockopt+0x69/0x80 [ 150.863473][ T9460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 150.863604][ T9460] __sys_setsockopt+0x184/0x200 [ 150.863665][ T9460] __x64_sys_setsockopt+0x64/0x80 [ 150.863690][ T9460] x64_sys_call+0x248f/0x2550 [ 150.863732][ T9460] do_syscall_64+0x112/0x360 [ 150.863762][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.863862][ T9460] RIP: 0033:0x7f32f6dce1d9 [ 150.863890][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.863915][ T9460] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.863940][ T9460] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 150.864001][ T9460] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 150.864019][ T9460] RBP: 00007f32f6e65888 R08: 0000000000000230 R09: 0000000000000000 [ 150.864038][ T9460] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.864073][ T9460] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 150.864095][ T9460] [ 150.869399][ T9460] cannot load conntrack support for proto=2 [ 151.233204][ T9467] loop7: detected capacity change from 0 to 4096 [ 151.249362][ T9467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.282811][ T9467] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2102: corrupted inode contents [ 151.282852][ T9467] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.283052][ T9467] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #15: comm syz.7.2102: mark_inode_dirty error [ 151.283099][ T9467] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.283331][ T9467] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2102: corrupted inode contents [ 151.283460][ T9467] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2102: mark_inode_dirty error [ 151.283616][ T9467] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2102: corrupted inode contents [ 151.283852][ T9467] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2102: mark_inode_dirty error [ 151.284203][ T9467] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2102: corrupted inode contents [ 151.328545][ T9467] EXT4-fs error (device loop7): ext4_truncate:4721: inode #15: comm syz.7.2102: mark_inode_dirty error [ 151.330763][ T9467] EXT4-fs error (device loop7): ext4_evict_inode:280: comm syz.7.2102: couldn't truncate inode 15 (err -117) [ 151.444803][ T7327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.486587][ T9487] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2109'. [ 151.664429][ T9506] FAULT_INJECTION: forcing a failure. [ 151.664429][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 151.664487][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.7.2116 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.664524][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.664539][ T9506] Call Trace: [ 151.664546][ T9506] [ 151.664555][ T9506] __dump_stack+0x1d/0x30 [ 151.664604][ T9506] dump_stack_lvl+0x95/0xd0 [ 151.664637][ T9506] dump_stack+0x15/0x1b [ 151.664667][ T9506] should_fail_ex+0x262/0x280 [ 151.664755][ T9506] ? security_sk_alloc+0x52/0x120 [ 151.664794][ T9506] should_failslab+0x8c/0xb0 [ 151.664894][ T9506] __kmalloc_noprof+0xd0/0x4d0 [ 151.664943][ T9506] ? security_sk_alloc+0x52/0x120 [ 151.664992][ T9506] ? __kmalloc_noprof+0x1f1/0x4d0 [ 151.665113][ T9506] security_sk_alloc+0x52/0x120 [ 151.665161][ T9506] sk_prot_alloc+0xc2/0x180 [ 151.665196][ T9506] sk_alloc+0x34/0x3e0 [ 151.665296][ T9506] __netlink_kernel_create+0xe9/0x550 [ 151.665349][ T9506] ? ops_init+0x4b/0x2e0 [ 151.665400][ T9506] nfnetlink_net_init+0x8d/0xd0 [ 151.665537][ T9506] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 151.665647][ T9506] ? __pfx_nfnetlink_bind+0x10/0x10 [ 151.665693][ T9506] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 151.665742][ T9506] ops_init+0x22a/0x2e0 [ 151.665813][ T9506] setup_net+0x9f/0x230 [ 151.666029][ T9506] copy_net_ns+0x333/0x490 [ 151.666076][ T9506] create_new_namespaces+0x1f6/0x420 [ 151.666127][ T9506] unshare_nsproxy_namespaces+0x115/0x150 [ 151.666235][ T9506] ksys_unshare+0x42b/0x710 [ 151.666279][ T9506] __x64_sys_unshare+0x1f/0x30 [ 151.666319][ T9506] x64_sys_call+0x1e33/0x2550 [ 151.666390][ T9506] do_syscall_64+0x112/0x360 [ 151.666472][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.666499][ T9506] RIP: 0033:0x7f32f6dce1d9 [ 151.666516][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.666538][ T9506] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.666596][ T9506] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 151.666691][ T9506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 151.666705][ T9506] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 151.666719][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.666732][ T9506] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 151.666786][ T9506] [ 151.928728][ T827] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.000659][ T9517] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2121'. [ 152.102903][ T9526] ip_tables: iptables: counters copy to user failed while replacing table [ 152.299691][ T9545] loop7: detected capacity change from 0 to 1024 [ 152.320640][ T9545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.324101][ T9550] FAULT_INJECTION: forcing a failure. [ 152.324101][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.324160][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.6.2134 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.324194][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.324213][ T9550] Call Trace: [ 152.324223][ T9550] [ 152.324234][ T9550] __dump_stack+0x1d/0x30 [ 152.324300][ T9550] dump_stack_lvl+0x95/0xd0 [ 152.324333][ T9550] dump_stack+0x15/0x1b [ 152.324368][ T9550] should_fail_ex+0x262/0x280 [ 152.324405][ T9550] should_fail+0xb/0x20 [ 152.324459][ T9550] should_fail_usercopy+0x1a/0x20 [ 152.324495][ T9550] _copy_to_user+0x20/0xa0 [ 152.324598][ T9550] bpf_verifier_vlog+0x3c5/0x5a0 [ 152.324674][ T9550] btf_verifier_log_vsi+0x1a5/0x1f0 [ 152.324706][ T9550] btf_datasec_check_meta+0x5a8/0x640 [ 152.324740][ T9550] btf_parse_type_sec+0x291/0x1520 [ 152.324772][ T9550] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 152.324803][ T9550] ? btf_parse_hdr+0x43a/0x440 [ 152.324833][ T9550] ? btf_parse_str_sec+0x1ae/0x1b0 [ 152.324912][ T9550] btf_new_fd+0x2ec/0x6a0 [ 152.324938][ T9550] bpf_btf_load+0x116/0x130 [ 152.324980][ T9550] __sys_bpf+0xbce/0xc30 [ 152.325119][ T9550] ? do_futex+0x380/0x460 [ 152.325163][ T9550] __x64_sys_bpf+0x69/0x80 [ 152.325251][ T9550] x64_sys_call+0xf26/0x2550 [ 152.325284][ T9550] do_syscall_64+0x112/0x360 [ 152.325323][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.325354][ T9550] RIP: 0033:0x7f5cee17e1d9 [ 152.325417][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.325436][ T9550] RSP: 002b:00007f5cecbd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.325489][ T9550] RAX: ffffffffffffffda RBX: 00007f5cee405fa0 RCX: 00007f5cee17e1d9 [ 152.325508][ T9550] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 152.325525][ T9550] RBP: 00007f5cee215888 R08: 0000000000000000 R09: 0000000000000000 [ 152.325587][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.325615][ T9550] R13: 00007f5cee406038 R14: 00007f5cee405fa0 R15: 00007ffd431c4ca8 [ 152.325642][ T9550] [ 152.708231][ T9562] netlink: 'syz.9.2139': attribute type 19 has an invalid length. [ 152.708333][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2139'. [ 152.742416][ T9562] netlink: 'syz.9.2139': attribute type 19 has an invalid length. [ 152.742442][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2139'. [ 152.757884][ T70] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.760964][ T51] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.761122][ T51] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.761267][ T51] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.867350][ T9571] FAULT_INJECTION: forcing a failure. [ 152.867350][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 152.867479][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.2.2145 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.867600][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.867615][ T9571] Call Trace: [ 152.867621][ T9571] [ 152.867631][ T9571] __dump_stack+0x1d/0x30 [ 152.867794][ T9571] dump_stack_lvl+0x95/0xd0 [ 152.867826][ T9571] dump_stack+0x15/0x1b [ 152.867945][ T9571] should_fail_ex+0x262/0x280 [ 152.868011][ T9571] ? __kernfs_new_node+0x70/0x440 [ 152.868150][ T9571] should_failslab+0x8c/0xb0 [ 152.868251][ T9571] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 152.868301][ T9571] ? __kernfs_new_node+0x70/0x440 [ 152.868338][ T9571] __kernfs_new_node+0x70/0x440 [ 152.868419][ T9571] ? rb_insert_color+0x291/0x2a0 [ 152.868453][ T9571] ? __rcu_read_unlock+0x4e/0x70 [ 152.868502][ T9571] ? __rcu_read_unlock+0x4e/0x70 [ 152.868551][ T9571] ? kernfs_activate_one+0x10c/0x140 [ 152.868651][ T9571] ? __rcu_read_unlock+0x4e/0x70 [ 152.868776][ T9571] ? up_write+0x19/0x60 [ 152.868828][ T9571] kernfs_new_node+0xcf/0xf0 [ 152.868863][ T9571] __kernfs_create_file+0x4b/0x180 [ 152.868946][ T9571] ? __pfx_rx_queue_attr_show+0x10/0x10 [ 152.868985][ T9571] ? __pfx_rx_queue_attr_store+0x10/0x10 [ 152.869022][ T9571] sysfs_add_file_mode_ns+0x132/0x1b0 [ 152.869081][ T9571] internal_create_group+0x43e/0x9e0 [ 152.869133][ T9571] ? kobject_init_and_add+0x13c/0x1e0 [ 152.869179][ T9571] ? rtnetlink_rcv_msg+0x64b/0x720 [ 152.869223][ T9571] ? netlink_rcv_skb+0x11e/0x220 [ 152.869264][ T9571] ? rtnetlink_rcv+0x1c/0x30 [ 152.869352][ T9571] ? netlink_unicast+0x5a9/0x680 [ 152.869422][ T9571] sysfs_create_groups+0x3f/0xf0 [ 152.869448][ T9571] net_rx_queue_update_kobjects+0x1c7/0x540 [ 152.869548][ T9571] netdev_register_kobject+0x19c/0x240 [ 152.869582][ T9571] register_netdevice+0xaf7/0x11a0 [ 152.869624][ T9571] bond_newlink+0x2f/0xb0 [ 152.869702][ T9571] ? __pfx_bond_newlink+0x10/0x10 [ 152.869730][ T9571] rtnl_newlink_create+0x1e4/0x4a0 [ 152.869796][ T9571] ? security_capable+0x7b/0x90 [ 152.869834][ T9571] ? netlink_ns_capable+0x86/0xa0 [ 152.869917][ T9571] rtnl_newlink+0x1255/0x1510 [ 152.869967][ T9571] ? try_charge_memcg+0x269/0xae0 [ 152.870066][ T9571] ? __memcg_slab_free_hook+0x154/0x340 [ 152.870100][ T9571] ? __rcu_read_unlock+0x4e/0x70 [ 152.870209][ T9571] ? avc_has_perm_noaudit+0xac/0x160 [ 152.870280][ T9571] ? cred_has_capability+0x224/0x2a0 [ 152.870331][ T9571] ? selinux_capable+0x31/0x40 [ 152.870367][ T9571] ? security_capable+0x7b/0x90 [ 152.870446][ T9571] ? ns_capable+0x80/0xb0 [ 152.870470][ T9571] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.870506][ T9571] rtnetlink_rcv_msg+0x64b/0x720 [ 152.870546][ T9571] netlink_rcv_skb+0x11e/0x220 [ 152.870648][ T9571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.870691][ T9571] rtnetlink_rcv+0x1c/0x30 [ 152.870724][ T9571] netlink_unicast+0x5a9/0x680 [ 152.870764][ T9571] netlink_sendmsg+0x5be/0x6f0 [ 152.870855][ T9571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.870879][ T9571] ____sys_sendmsg+0x532/0x580 [ 152.870972][ T9571] ___sys_sendmsg+0x195/0x1e0 [ 152.871027][ T9571] __x64_sys_sendmsg+0xd4/0x160 [ 152.871106][ T9571] x64_sys_call+0x22ab/0x2550 [ 152.871135][ T9571] do_syscall_64+0x112/0x360 [ 152.871166][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.871192][ T9571] RIP: 0033:0x7fbcf316e1d9 [ 152.871264][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.871286][ T9571] RSP: 002b:00007fbcf1bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.871311][ T9571] RAX: ffffffffffffffda RBX: 00007fbcf33f5fa0 RCX: 00007fbcf316e1d9 [ 152.871327][ T9571] RDX: 5821c98b097a09f2 RSI: 0000200000000080 RDI: 0000000000000004 [ 152.871342][ T9571] RBP: 00007fbcf3205888 R08: 0000000000000000 R09: 0000000000000000 [ 152.871432][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.871446][ T9571] R13: 00007fbcf33f6038 R14: 00007fbcf33f5fa0 R15: 00007ffe974b7618 [ 152.871468][ T9571] [ 152.895514][ T9571] bond2 (unregistered): Released all slaves [ 153.394799][ T7327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.600477][ T9599] loop9: detected capacity change from 0 to 256 [ 153.662721][ T9603] ip_tables: iptables: counters copy to user failed while replacing table [ 153.692098][ T9606] loop6: detected capacity change from 0 to 256 [ 153.694687][ T9606] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.696997][ T9608] loop7: detected capacity change from 0 to 128 [ 153.711196][ T9606] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.740068][ T9608] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.741604][ T9608] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.941177][ T7327] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.007881][ T4641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.186947][ T9634] loop7: detected capacity change from 0 to 1024 [ 154.203657][ T9634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.203862][ T9634] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.237015][ T9634] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.2171: bg 0: block 112: padding at end of block bitmap is not set [ 154.237469][ T9634] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 154.237503][ T9634] EXT4-fs (loop7): This should not happen!! Data will be lost [ 154.237503][ T9634] [ 154.237606][ T9634] EXT4-fs (loop7): Total free blocks count 0 [ 154.237623][ T9634] EXT4-fs (loop7): Free/Dirty block details [ 154.237638][ T9634] EXT4-fs (loop7): free_blocks=0 [ 154.237654][ T9634] EXT4-fs (loop7): dirty_blocks=64 [ 154.237695][ T9634] EXT4-fs (loop7): Block reservation details [ 154.237705][ T9634] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 154.277283][ T783] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 154.339642][ T9641] FAULT_INJECTION: forcing a failure. [ 154.339642][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 154.339674][ T9641] CPU: 0 UID: 0 PID: 9641 Comm: syz.7.2173 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.339710][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.339725][ T9641] Call Trace: [ 154.339734][ T9641] [ 154.339755][ T9641] __dump_stack+0x1d/0x30 [ 154.339784][ T9641] dump_stack_lvl+0x95/0xd0 [ 154.339818][ T9641] dump_stack+0x15/0x1b [ 154.339848][ T9641] should_fail_ex+0x262/0x280 [ 154.339889][ T9641] ? kobject_get_path+0x92/0x1c0 [ 154.340003][ T9641] should_failslab+0x8c/0xb0 [ 154.340087][ T9641] __kmalloc_noprof+0xd0/0x4d0 [ 154.340138][ T9641] ? kobject_get_path+0x92/0x1c0 [ 154.340182][ T9641] ? should_failslab+0x8c/0xb0 [ 154.340281][ T9641] kobject_get_path+0x92/0x1c0 [ 154.340334][ T9641] kobject_uevent_env+0x1c2/0x560 [ 154.340364][ T9641] ? netlink_unicast+0x5a9/0x680 [ 154.340460][ T9641] kobject_uevent+0x1d/0x30 [ 154.340506][ T9641] net_rx_queue_update_kobjects+0x2bc/0x540 [ 154.340609][ T9641] netdev_register_kobject+0x19c/0x240 [ 154.340665][ T9641] register_netdevice+0xaf7/0x11a0 [ 154.340702][ T9641] bond_newlink+0x2f/0xb0 [ 154.340733][ T9641] ? __pfx_bond_newlink+0x10/0x10 [ 154.340810][ T9641] rtnl_newlink_create+0x1e4/0x4a0 [ 154.340835][ T9641] ? security_capable+0x7b/0x90 [ 154.340887][ T9641] ? netlink_ns_capable+0x86/0xa0 [ 154.340932][ T9641] rtnl_newlink+0x1255/0x1510 [ 154.340993][ T9641] ? try_charge_memcg+0x269/0xae0 [ 154.341085][ T9641] ? __memcg_slab_free_hook+0x154/0x340 [ 154.341121][ T9641] ? __rcu_read_unlock+0x4e/0x70 [ 154.341156][ T9641] ? avc_has_perm_noaudit+0xac/0x160 [ 154.341243][ T9641] ? cred_has_capability+0x224/0x2a0 [ 154.341346][ T9641] ? selinux_capable+0x31/0x40 [ 154.341382][ T9641] ? security_capable+0x7b/0x90 [ 154.341419][ T9641] ? ns_capable+0x80/0xb0 [ 154.341501][ T9641] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.341548][ T9641] rtnetlink_rcv_msg+0x64b/0x720 [ 154.341784][ T9641] netlink_rcv_skb+0x11e/0x220 [ 154.341809][ T9641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.341863][ T9641] rtnetlink_rcv+0x1c/0x30 [ 154.341906][ T9641] netlink_unicast+0x5a9/0x680 [ 154.342069][ T9641] netlink_sendmsg+0x5be/0x6f0 [ 154.342166][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.342199][ T9641] ____sys_sendmsg+0x532/0x580 [ 154.342239][ T9641] ___sys_sendmsg+0x195/0x1e0 [ 154.342334][ T9641] __x64_sys_sendmsg+0xd4/0x160 [ 154.342367][ T9641] x64_sys_call+0x22ab/0x2550 [ 154.342424][ T9641] do_syscall_64+0x112/0x360 [ 154.342452][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.342496][ T9641] RIP: 0033:0x7f32f6dce1d9 [ 154.342519][ T9641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.342547][ T9641] RSP: 002b:00007f32f5827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.342577][ T9641] RAX: ffffffffffffffda RBX: 00007f32f7055fa0 RCX: 00007f32f6dce1d9 [ 154.342595][ T9641] RDX: 5821c98b097a09f2 RSI: 0000200000000080 RDI: 0000000000000004 [ 154.342651][ T9641] RBP: 00007f32f6e65888 R08: 0000000000000000 R09: 0000000000000000 [ 154.342671][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.342687][ T9641] R13: 00007f32f7056038 R14: 00007f32f7055fa0 R15: 00007ffd54cb8d28 [ 154.342785][ T9641] [ 154.347096][ T9641] bond1: entered promiscuous mode [ 154.347120][ T9641] bond1: entered allmulticast mode [ 154.347386][ T9641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.873953][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.874936][ T30] kauditd_printk_skb: 392 callbacks suppressed [ 154.874954][ T30] audit: type=1400 audit(1791570199.009:7239): avc: denied { connect } for pid=9658 comm="syz.7.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.917163][ T9662] FAULT_INJECTION: forcing a failure. [ 154.917163][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 154.917200][ T9662] CPU: 0 UID: 0 PID: 9662 Comm: syz.9.2182 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.917226][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.917244][ T9662] Call Trace: [ 154.917254][ T9662] [ 154.917266][ T9662] __dump_stack+0x1d/0x30 [ 154.917309][ T9662] dump_stack_lvl+0x95/0xd0 [ 154.917369][ T9662] dump_stack+0x15/0x1b [ 154.917391][ T9662] should_fail_ex+0x262/0x280 [ 154.917440][ T9662] should_failslab+0x8c/0xb0 [ 154.917493][ T9662] __kvmalloc_node_noprof+0x168/0x5c0 [ 154.917532][ T9662] ? bpf_stack_liveness_init+0x29/0x80 [ 154.917568][ T9662] ? bpf_stack_liveness_init+0x29/0x80 [ 154.917603][ T9662] bpf_stack_liveness_init+0x29/0x80 [ 154.917672][ T9662] bpf_check+0x12bc/0x1d90 [ 154.917706][ T9662] bpf_prog_load+0xefb/0x1060 [ 154.917742][ T9662] ? avc_has_perm_noaudit+0xac/0x160 [ 154.917815][ T9662] __sys_bpf+0xbae/0xc30 [ 154.917853][ T9662] ? do_futex+0x380/0x460 [ 154.917903][ T9662] __x64_sys_bpf+0x69/0x80 [ 154.917935][ T9662] x64_sys_call+0xf26/0x2550 [ 154.917992][ T9662] do_syscall_64+0x112/0x360 [ 154.918029][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.918121][ T9662] RIP: 0033:0x7f4795a5e1d9 [ 154.918138][ T9662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.918158][ T9662] RSP: 002b:00007f47944b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.918184][ T9662] RAX: ffffffffffffffda RBX: 00007f4795ce5fa0 RCX: 00007f4795a5e1d9 [ 154.918205][ T9662] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 154.918295][ T9662] RBP: 00007f4795af5888 R08: 0000000000000000 R09: 0000000000000000 [ 154.918310][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.918328][ T9662] R13: 00007f4795ce6038 R14: 00007f4795ce5fa0 R15: 00007ffd8c3fa8b8 [ 154.918357][ T9662] [ 155.170320][ T9665] ================================================================== [ 155.170365][ T9665] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 155.170410][ T9665] [ 155.170416][ T9665] write to 0xffff88810b219220 of 8 bytes by task 9667 on cpu 1: [ 155.170432][ T9665] shmem_file_splice_read+0x401/0x590 [ 155.170455][ T9665] splice_direct_to_actor+0x261/0x680 [ 155.170486][ T9665] do_splice_direct+0x119/0x1a0 [ 155.170515][ T9665] do_sendfile+0x37d/0x640 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.170540][ T9665] __x64_sys_sendfile64+0x105/0x150 [ 155.170563][ T9665] x64_sys_call+0x1015/0x2550 [ 155.170597][ T9665] do_syscall_64+0x112/0x360 [ 155.170628][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.170658][ T9665] [ 155.170666][ T9665] write to 0xffff88810b219220 of 8 bytes by task 9665 on cpu 0: [ 155.170687][ T9665] shmem_file_splice_read+0x401/0x590 [ 155.170710][ T9665] splice_direct_to_actor+0x261/0x680 [ 155.170732][ T9665] do_splice_direct+0x119/0x1a0 [ 155.170753][ T9665] do_sendfile+0x37d/0x640 [ 155.170782][ T9665] __x64_sys_sendfile64+0x105/0x150 [ 155.170811][ T9665] x64_sys_call+0x1015/0x2550 [ 155.170839][ T9665] do_syscall_64+0x112/0x360 [ 155.170861][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.170886][ T9665] [ 155.170890][ T9665] value changed: 0x00000000000166a8 -> 0x0000000000016704 [ 155.170905][ T9665] [ 155.170909][ T9665] Reported by Kernel Concurrency Sanitizer on: [ 155.170924][ T9665] CPU: 0 UID: 0 PID: 9665 Comm: syz.2.2183 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.170953][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.170966][ T9665] ================================================================== [ 155.392027][ T9616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.682402][ T783] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.682445][ T783] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.781174][ T783] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.781210][ T783] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.835568][ T783] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.835619][ T783] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.911242][ T783] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.911288][ T783] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.992210][ T783] bridge_slave_1: left allmulticast mode [ 155.992311][ T783] bridge_slave_1: left promiscuous mode [ 155.992437][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.996079][ T783] bridge_slave_0: left allmulticast mode [ 155.996105][ T783] bridge_slave_0: left promiscuous mode [ 155.996271][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.123418][ T783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.127029][ T783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.132453][ T783] bond0 (unregistering): Released all slaves [ 156.185594][ T30] audit: type=1400 audit(1791570200.319:7240): avc: denied { write } for pid=9672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.213191][ T783] hsr_slave_0: left promiscuous mode [ 156.213523][ T783] hsr_slave_1: left promiscuous mode [ 156.214070][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.214093][ T783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.214611][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.214633][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.260130][ T783] veth1_macvtap: left promiscuous mode [ 156.260179][ T783] veth0_macvtap: left promiscuous mode [ 156.260378][ T783] veth1_vlan: left promiscuous mode [ 156.260428][ T783] veth0_vlan: left promiscuous mode [ 156.261351][ T30] audit: type=1400 audit(1791570200.409:7241): avc: denied { write } for pid=9683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.369246][ T783] team0 (unregistering): Port device team_slave_1 removed [ 156.371893][ T783] team0 (unregistering): Port device team_slave_0 removed [ 156.408620][ T3030] 8021q: adding VLAN 0 to HW filter on device eth13 [ 156.493822][ T30] audit: type=1400 audit(1791570200.629:7242): avc: denied { write } for pid=9686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.534768][ T30] audit: type=1400 audit(1791570200.669:7243): avc: denied { write } for pid=9697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.566827][ T3030] 8021q: adding VLAN 0 to HW filter on device eth14 [ 156.651027][ T30] audit: type=1400 audit(1791570200.789:7244): avc: denied { write } for pid=9700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.686059][ T783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.699585][ T30] audit: type=1400 audit(1791570200.839:7245): avc: denied { write } for pid=9711 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.732568][ T3030] 8021q: adding VLAN 0 to HW filter on device eth15 [ 156.749402][ T783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.802269][ T783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.837558][ T30] audit: type=1400 audit(1791570200.969:7246): avc: denied { write } for pid=9714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.864919][ T783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.886007][ T30] audit: type=1400 audit(1791570201.019:7247): avc: denied { write } for pid=9725 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.887896][ T4641] Bluetooth: hci0: command 0x1003 tx timeout [ 156.888007][ T3965] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.941318][ T3030] 8021q: adding VLAN 0 to HW filter on device eth16 [ 156.968624][ T783] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.022436][ T783] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.071038][ T30] audit: type=1400 audit(1791570201.209:7248): avc: denied { write } for pid=9729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.111948][ T783] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.135966][ T3030] 8021q: adding VLAN 0 to HW filter on device eth17 [ 157.156189][ T783] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.251189][ T783] bridge_slave_1: left allmulticast mode [ 157.251218][ T783] bridge_slave_1: left promiscuous mode [ 157.251375][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.254648][ T783] bridge_slave_0: left allmulticast mode [ 157.254674][ T783] bridge_slave_0: left promiscuous mode [ 157.254830][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.301336][ T783] bridge_slave_1: left allmulticast mode [ 157.301361][ T783] bridge_slave_1: left promiscuous mode [ 157.301482][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.302422][ T783] bridge_slave_0: left allmulticast mode [ 157.302443][ T783] bridge_slave_0: left promiscuous mode [ 157.302531][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.433242][ T783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.434710][ T783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.435682][ T783] bond0 (unregistering): Released all slaves [ 157.437490][ T783] bond1 (unregistering): Released all slaves [ 157.480564][ T783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.481663][ T783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.482549][ T783] bond0 (unregistering): Released all slaves [ 157.484249][ T3030] 8021q: adding VLAN 0 to HW filter on device eth18 [ 157.582692][ T783] hsr_slave_0: left promiscuous mode [ 157.583172][ T783] hsr_slave_1: left promiscuous mode [ 157.583781][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.583802][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.585980][ T783] hsr_slave_0: left promiscuous mode [ 157.586361][ T783] hsr_slave_1: left promiscuous mode [ 157.586961][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.586995][ T783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.587542][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.587558][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.661002][ T783] veth1_macvtap: left promiscuous mode [ 157.661038][ T783] veth0_macvtap: left promiscuous mode [ 157.661104][ T783] veth1_vlan: left promiscuous mode [ 157.661188][ T783] veth0_vlan: left promiscuous mode [ 157.661789][ T783] veth1_macvtap: left promiscuous mode [ 157.661829][ T783] veth0_macvtap: left promiscuous mode [ 157.661889][ T783] veth1_vlan: left promiscuous mode [ 157.661931][ T783] veth0_vlan: left promiscuous mode [ 157.795904][ T783] team0 (unregistering): Port device team_slave_1 removed [ 157.805456][ T783] team0 (unregistering): Port device team_slave_0 removed [ 157.862271][ T783] team0 (unregistering): Port device team_slave_1 removed [ 157.865497][ T783] team0 (unregistering): Port device team_slave_0 removed [ 157.901329][ T3030] 8021q: adding VLAN 0 to HW filter on device eth19 [ 158.019438][ T3030] 8021q: adding VLAN 0 to HW filter on device eth20 [ 158.154541][ T3030] 8021q: adding VLAN 0 to HW filter on device eth21 [ 158.281967][ T3030] 8021q: adding VLAN 0 to HW filter on device eth22 [ 158.397717][ T3030] 8021q: adding VLAN 0 to HW filter on device eth23 [ 158.511726][ T3030] 8021q: adding VLAN 0 to HW filter on device eth24