last executing test programs: 2m31.485471446s ago: executing program 4 (id=5): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2m31.277705611s ago: executing program 0 (id=9): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m31.224456842s ago: executing program 4 (id=12): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x1fd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000280)='p:s/p ./file0:0\f\\', 0x11) 2m30.988135338s ago: executing program 4 (id=15): r0 = inotify_init1(0x800) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 2m30.983417298s ago: executing program 0 (id=16): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RXATTRWALK(r0, &(0x7f0000000500)={0xf, 0x1f, 0x2, 0x8000000000000000}, 0xf) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m30.934860999s ago: executing program 4 (id=19): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@auto_da_alloc}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m30.802263372s ago: executing program 4 (id=20): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 2m30.645253416s ago: executing program 0 (id=21): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$eJzs3c9rHGUfAPDvbHbTn+/bFEp5+yJS6MFK7aZJ/FHBQz2KFgvquYZkG0o23ZLdlCYWbA/24kWKIGJBvOvdg4fiRW/+FQUtFCmhgl5WZjObbJJNskk3Tdr9fGCS55lndp/5zszz8Mw+u0wAPet4+icXcSwivkgiDrWU5SMrPL6w3fyjG2PpkkS9/sGfSSTZuub2Sfb/QJb5X0T8/FnEqdzqequzc5Oj5XJpOssP1qauDlZn505fnhqdKE2UrgyPjJx9bWT4zTde71qsL1/46+v3771z9vMT81/98ODwnSTOxcGsrDWOTdmzLHezNXO8Xs+OSSHOrXjZ0JYq272Snd4BtqQva+eFiDhWOFRotnrg+fdpRNSBHpVssv3v0V/Ac6I5Dmje22/5PvgZ9fDthRug1fHnFz4bib2Ne6P988myO6P0fnegC/Wndfz4x9076RJP8jkEwCbdvBURZ/L51f1fkvV/W3emg21W1qH/g6fnXjr+eaXd+Ce3OP6JNuOfA23a7lZs3P5zD7pQzZrS8d9bbce/i5NWA31Z7j+NMV8huXS5XEr7tv9GxMko7Enz683nnJ2/X1+rrHX8ly5p/c2xYLYfD/LL55hifLQ2+iQxt3p4K+L/bce/yeL5T9qc//R4fNRhHUdLd19cq2zj+LdX/buIl9qe/6UZrWT9+cnBxvUw2LwqVnt8++hva9XfPv5fftqGUNtKz//+FfH3N0oW4x9IWudrq5uv49u9/5TWKluIP61hc9d/f/JhI92frbs+WqtND0X0J++tXj+89Npmvrl9Gv/JE+v3f+2u/30R8XGH8d8+8v0L68e/c9d/Gv/4+tf/ivO/+cT9dz/5Zq36O+v/Xm2kTmZrOun/Ot3BJzl2AAAAAAAAsNvkIuJgJLli7M3SuVyxuPD9jiOxP1euVGunLlVmroxH47eyA1HINWe6D7V8H2Io+z5sMz+8Ij8SEYcj4su+fY18caxSHt/p4AEAAAAAAAAAAAAAAAAAAGCXOLD4+/9Y9vv/1O99O713wLbLLzz/G+hBGz7yvxtPegJ2pQ3bP/Dc0v6hd2n/0Lu0f+hJjSk+7R96l/YPvUv7h96l/QMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXXTh/Pl3q849ujKX58WuzM5OVa6fHS9XJ4tTMWHGsMn21OFGpTJRLxbHK1EbvV65Urg4Nx8z1wVqpWhuszs5dnKrMXKldvDw1OlG6WPKccQAAAAAAAAAAAAAAAAAAAFitOjs3OVoul6a7kCiUy6VcRHSycUSXKn3mEn83Eo/rC7byPul5u5nv7DhvTyKJpTX5XXFUtzfx6+7Yjaea2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/BsAAP//2sc0sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x143042, 0xf2) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) fallocate(r0, 0x3, 0x6ae8, 0xf3d) 2m30.356272652s ago: executing program 0 (id=26): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 2m30.158861577s ago: executing program 0 (id=28): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2m29.707761638s ago: executing program 4 (id=36): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2m29.668751109s ago: executing program 32 (id=36): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2m29.416211995s ago: executing program 0 (id=44): capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000000916) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) 2m29.416115265s ago: executing program 33 (id=44): capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000000916) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) 2m11.427825479s ago: executing program 1 (id=381): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 2m11.368809251s ago: executing program 1 (id=383): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x2, 0x2c, 0x5, 0x0, 0x1, 0x200, 0x15, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x9}, 0xc0, 0x9, 0x6, 0x0, 0x8440, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee00) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 2m11.315022522s ago: executing program 1 (id=384): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x6, @multicast1, 0x4e24, 0x4, 'sed\x00', 0xb, 0x9, 0x79}, 0x2c) 2m11.232979304s ago: executing program 1 (id=386): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m11.154779396s ago: executing program 1 (id=389): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="0800030040000000050020000100000005000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 2m10.824772853s ago: executing program 1 (id=391): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000000)=""/185, 0xb9, 0x0) 2m10.824688653s ago: executing program 34 (id=391): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000000)=""/185, 0xb9, 0x0) 44.95764251s ago: executing program 7 (id=1750): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x4000) socket$rds(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x80140912, &(0x7f0000000380)) 44.548266659s ago: executing program 7 (id=1769): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.210342147s ago: executing program 7 (id=1762): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x100000}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) 44.127148689s ago: executing program 7 (id=1765): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 43.917752714s ago: executing program 7 (id=1766): socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x45dd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 43.860278935s ago: executing program 7 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x800401, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 43.847079096s ago: executing program 35 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x800401, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 40.867216156s ago: executing program 5 (id=1793): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 40.659115141s ago: executing program 5 (id=1794): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r0, 0x5) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r0, 0x0, 0x0) 39.749899093s ago: executing program 5 (id=1800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x100000}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) 38.702888417s ago: executing program 5 (id=1816): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@auto_da_alloc}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 38.56896752s ago: executing program 5 (id=1808): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0xf5f) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) 38.336328586s ago: executing program 5 (id=1810): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x3ff, 0x5}, 0x0, 0x0, 0x20000105a22, 0x100, 0x9, 0x3, 0x20, 0x9}}], 0x58, 0x8010}, 0x0) 38.295546647s ago: executing program 36 (id=1810): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x3ff, 0x5}, 0x0, 0x0, 0x20000105a22, 0x100, 0x9, 0x3, 0x20, 0x9}}], 0x58, 0x8010}, 0x0) 1.822419917s ago: executing program 2 (id=2314): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 1.70573229s ago: executing program 2 (id=2303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80794, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa, 0xff}, 0x1004a1, 0x1, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x9, 0x0, 0x7, 0x3, 0x4, 0x8, 0x2}}]}}]}, 0x44}}, 0x24040084) 1.70513101s ago: executing program 6 (id=2316): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1.544312784s ago: executing program 6 (id=2304): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 1.463786496s ago: executing program 9 (id=2305): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x80000, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x103802) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3}]) 1.443551206s ago: executing program 8 (id=2306): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.343353119s ago: executing program 2 (id=2309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.239668471s ago: executing program 9 (id=2310): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.238603741s ago: executing program 2 (id=2323): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400004ad"], 0x14) 888.859129ms ago: executing program 6 (id=2313): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) socket$kcm(0x10, 0x2, 0x0) 888.498749ms ago: executing program 2 (id=2315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) openat(0xffffffffffffff9c, 0x0, 0x0, 0xf6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x33, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r1, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 888.294709ms ago: executing program 3 (id=2317): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0xfffe) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 884.780069ms ago: executing program 9 (id=2318): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 780.397142ms ago: executing program 3 (id=2319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001cc0)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f0000000840)="259a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 635.903775ms ago: executing program 6 (id=2320): perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 600.395636ms ago: executing program 9 (id=2321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r1, 0x10, 0x6, 0x10001) 480.102988ms ago: executing program 3 (id=2322): unshare(0x22020600) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 470.636769ms ago: executing program 3 (id=2324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x24040804) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 436.6851ms ago: executing program 8 (id=2325): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000200000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 313.129683ms ago: executing program 9 (id=2326): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 312.361053ms ago: executing program 8 (id=2336): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xe, 0x5d, 0x81}, 0x9c) 312.046893ms ago: executing program 3 (id=2327): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80794, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa, 0xff}, 0x1004a1, 0x1, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x9, 0x0, 0x7, 0x3, 0x4, 0x8, 0x2}}]}}]}, 0x44}}, 0x24040084) 311.751723ms ago: executing program 6 (id=2337): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd4839000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/52, 0x34) 272.838034ms ago: executing program 6 (id=2328): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 246.492084ms ago: executing program 2 (id=2329): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 219.516345ms ago: executing program 3 (id=2330): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x80000, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x103802) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3}]) 192.034946ms ago: executing program 8 (id=2331): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) socket$kcm(0x10, 0x2, 0x0) 79.800708ms ago: executing program 8 (id=2332): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 216.03µs ago: executing program 8 (id=2333): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 0s ago: executing program 9 (id=2334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) kernel console output (not intermixed with test programs): bility 0, space 0, times 0 [ 151.452237][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.1832 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.452270][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.452288][ T9550] Call Trace: [ 151.452296][ T9550] [ 151.452307][ T9550] __dump_stack+0x1d/0x30 [ 151.452338][ T9550] dump_stack_lvl+0x95/0xd0 [ 151.452512][ T9550] dump_stack+0x15/0x1b [ 151.452607][ T9550] should_fail_ex+0x262/0x280 [ 151.452693][ T9550] should_failslab+0x8c/0xb0 [ 151.452801][ T9550] __kmalloc_node_noprof+0xdb/0x500 [ 151.452957][ T9550] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 151.453076][ T9550] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 151.453244][ T9550] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 151.453360][ T9550] ? __obj_cgroup_charge+0x177/0x230 [ 151.453798][ T9550] __vmalloc_node_noprof+0x89/0xc0 [ 151.453919][ T9550] ? copy_process+0x5a0/0x2340 [ 151.454119][ T9550] ? copy_process+0x5a0/0x2340 [ 151.454207][ T9550] dup_task_struct+0x22a/0x750 [ 151.454457][ T9550] copy_process+0x5a0/0x2340 [ 151.454586][ T9550] ? futex_wait+0x18f/0x1c0 [ 151.454696][ T9550] kernel_clone+0x1c0/0x5f0 [ 151.454790][ T9550] ? do_futex+0x391/0x460 [ 151.454897][ T9550] __x64_sys_clone+0x143/0x180 [ 151.455037][ T9550] x64_sys_call+0x2479/0x2550 [ 151.455137][ T9550] do_syscall_64+0x112/0x360 [ 151.455311][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.455396][ T9550] RIP: 0033:0x7f94bd00e159 [ 151.455447][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.455572][ T9550] RSP: 002b:00007f94bba66fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 151.455693][ T9550] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 151.455746][ T9550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.455789][ T9550] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 151.455884][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.455961][ T9550] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 151.456081][ T9550] [ 151.469433][ T9550] syz.2.1832: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 151.469645][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.1832 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.469735][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.469773][ T9550] Call Trace: [ 151.469794][ T9550] [ 151.469835][ T9550] __dump_stack+0x1d/0x30 [ 151.469922][ T9550] dump_stack_lvl+0x95/0xd0 [ 151.470014][ T9550] dump_stack+0x15/0x1b [ 151.470079][ T9550] warn_alloc+0x146/0x1c0 [ 151.470205][ T9550] ? should_failslab+0x8c/0xb0 [ 151.470311][ T9550] ? __kmalloc_node_noprof+0xdb/0x500 [ 151.470429][ T9550] __vmalloc_node_range_noprof+0x70d/0x1000 [ 151.470650][ T9550] ? __obj_cgroup_charge+0x177/0x230 [ 151.470757][ T9550] __vmalloc_node_noprof+0x89/0xc0 [ 151.470889][ T9550] ? copy_process+0x5a0/0x2340 [ 151.470944][ T9550] ? copy_process+0x5a0/0x2340 [ 151.471105][ T9550] dup_task_struct+0x22a/0x750 [ 151.471185][ T9550] copy_process+0x5a0/0x2340 [ 151.471290][ T9550] ? futex_wait+0x18f/0x1c0 [ 151.471365][ T9550] kernel_clone+0x1c0/0x5f0 [ 151.471454][ T9550] ? do_futex+0x391/0x460 [ 151.471600][ T9550] __x64_sys_clone+0x143/0x180 [ 151.471721][ T9550] x64_sys_call+0x2479/0x2550 [ 151.471890][ T9550] do_syscall_64+0x112/0x360 [ 151.472007][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.472084][ T9550] RIP: 0033:0x7f94bd00e159 [ 151.472145][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.472283][ T9550] RSP: 002b:00007f94bba66fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 151.472360][ T9550] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 151.472406][ T9550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.472444][ T9550] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 151.472489][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.472544][ T9550] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 151.472654][ T9550] [ 151.485016][ T9550] Mem-Info: [ 151.485057][ T9550] active_anon:6156 inactive_anon:4251 isolated_anon:0 [ 151.485057][ T9550] active_file:10586 inactive_file:10172 isolated_file:0 [ 151.485057][ T9550] unevictable:0 dirty:260 writeback:0 [ 151.485057][ T9550] slab_reclaimable:3560 slab_unreclaimable:19562 [ 151.485057][ T9550] mapped:29176 shmem:473 pagetables:1618 [ 151.485057][ T9550] sec_pagetables:0 bounce:0 [ 151.485057][ T9550] kernel_misc_reclaimable:0 [ 151.485057][ T9550] free:1877713 free_pcp:4587 free_cma:0 [ 151.485278][ T9550] Node 0 active_anon:24624kB inactive_anon:17004kB active_file:42344kB inactive_file:40688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:1040kB writeback:0kB shmem:1892kB kernel_stack:4464kB pagetables:6472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.485531][ T9550] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.485820][ T9550] lowmem_reserve[]: 0 2877 7856 7856 [ 151.485938][ T9550] Node 0 DMA32 free:2943372kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946896kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 151.486138][ T9550] lowmem_reserve[]: 0 0 4978 4978 [ 151.486188][ T9550] Node 0 Normal free:4552120kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24624kB inactive_anon:17004kB active_file:42344kB inactive_file:40688kB unevictable:0kB writepending:1040kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:14928kB local_pcp:10412kB free_cma:0kB [ 151.488385][ T9550] lowmem_reserve[]: 0 0 0 0 [ 151.488507][ T9550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.489139][ T9550] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943372kB [ 151.498309][ T9550] Node 0 Normal: 712*4kB (UM) 336*8kB (UM) 177*16kB (UME) 237*32kB (UM) 162*64kB (ME) 93*128kB (UM) 57*256kB (UME) 24*512kB (UM) 10*1024kB (UME) 12*2048kB (UM) 1087*4096kB (UM) = 4552272kB [ 151.498914][ T9550] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 151.498988][ T9550] 21225 total pagecache pages [ 151.499019][ T9550] 1 pages in swap cache [ 151.499048][ T9550] Free swap = 124992kB [ 151.499080][ T9550] Total swap = 124996kB [ 151.499103][ T9550] 2097051 pages RAM [ 151.499205][ T9550] 0 pages HighMem/MovableOnly [ 151.499228][ T9550] 81930 pages reserved [ 151.800219][ T9556] loop2: detected capacity change from 0 to 256 [ 151.809282][ T9556] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.165522][ T38] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.225789][ T38] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.271760][ T38] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.306704][ T29] audit: type=1400 audit(1788777734.315:1660): avc: denied { write } for pid=9554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.363873][ T38] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.384647][ T29] audit: type=1400 audit(1788777734.395:1661): avc: denied { write } for pid=9584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.429173][ T9473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.447352][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.458702][ T9473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.477624][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.503426][ T9593] FAULT_INJECTION: forcing a failure. [ 152.503426][ T9593] name failslab, interval 1, probability 0, space 0, times 0 [ 152.503472][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.9.1840 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.503506][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.503524][ T9593] Call Trace: [ 152.503533][ T9593] [ 152.503543][ T9593] __dump_stack+0x1d/0x30 [ 152.503578][ T9593] dump_stack_lvl+0x95/0xd0 [ 152.503615][ T9593] dump_stack+0x15/0x1b [ 152.503643][ T9593] should_fail_ex+0x262/0x280 [ 152.503675][ T9593] ? mas_alloc_nodes+0x1a2/0x210 [ 152.503716][ T9593] should_failslab+0x8c/0xb0 [ 152.503758][ T9593] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 152.503801][ T9593] ? mas_alloc_nodes+0x1a2/0x210 [ 152.503844][ T9593] mas_alloc_nodes+0x1a2/0x210 [ 152.503884][ T9593] mas_preallocate+0x2ca/0x500 [ 152.503933][ T9593] __split_vma+0x299/0x720 [ 152.503969][ T9593] ? avc_has_perm+0x101/0x190 [ 152.503998][ T9593] ? __css_rstat_updated+0xbb/0x280 [ 152.504028][ T9593] vma_modify+0xbf5/0xd50 [ 152.504055][ T9593] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 152.504102][ T9593] ? __rb_insert_augmented+0x76/0x2c0 [ 152.504141][ T9593] vma_modify_flags+0x1be/0x250 [ 152.504180][ T9593] mlock_fixup+0x166/0x460 [ 152.504223][ T9593] apply_vma_lock_flags+0x1c7/0x290 [ 152.504271][ T9593] do_mlock+0x3a0/0x510 [ 152.504309][ T9593] ? switch_fpu_return+0xe7/0x1b0 [ 152.504344][ T9593] __x64_sys_mlock+0x4d/0x70 [ 152.504379][ T9593] x64_sys_call+0x2232/0x2550 [ 152.504419][ T9593] do_syscall_64+0x112/0x360 [ 152.504452][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.504478][ T9593] RIP: 0033:0x7fa4d43fe159 [ 152.504500][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.504526][ T9593] RSP: 002b:00007fa4d2e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 152.504554][ T9593] RAX: ffffffffffffffda RBX: 00007fa4d4685fa0 RCX: 00007fa4d43fe159 [ 152.504573][ T9593] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 152.504591][ T9593] RBP: 00007fa4d4495024 R08: 0000000000000000 R09: 0000000000000000 [ 152.504608][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.504623][ T9593] R13: 00007fa4d4686038 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 152.504643][ T9593] [ 152.666370][ T9473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.678511][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.692451][ T9473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.706561][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.728102][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.728257][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.728545][ T9509] bridge_slave_0: entered allmulticast mode [ 152.733905][ T9509] bridge_slave_0: entered promiscuous mode [ 152.745023][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.745130][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.752173][ T9509] bridge_slave_1: entered allmulticast mode [ 152.768653][ T9509] bridge_slave_1: entered promiscuous mode [ 152.831945][ T9599] loop8: detected capacity change from 0 to 512 [ 152.848757][ T9599] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 152.862028][ T9599] EXT4-fs (loop8): 1 truncate cleaned up [ 152.862385][ T9599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.903713][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.936089][ T38] bridge_slave_1: left allmulticast mode [ 152.936197][ T38] bridge_slave_1: left promiscuous mode [ 152.936385][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.944298][ T38] bridge_slave_0: left allmulticast mode [ 152.944337][ T38] bridge_slave_0: left promiscuous mode [ 152.944487][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.978314][ T29] audit: type=1400 audit(1788777734.985:1662): avc: denied { write } for pid=8927 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.978478][ T8927] EXT4-fs error (device loop8): __ext4_expand_extra_isize:6537: inode #11: comm syz-executor: bad extra_isize 62 (inode size 256) [ 152.978817][ T8927] EXT4-fs (loop8): Remounting filesystem read-only [ 152.989304][ T29] audit: type=1400 audit(1788777734.985:1663): avc: denied { write } for pid=8927 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.065440][ T38] bond7 (unregistering): (slave geneve2): Releasing active interface [ 153.077804][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.088918][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.089580][ T38] bond0 (unregistering): Released all slaves [ 153.096047][ T38] bond1 (unregistering): Released all slaves [ 153.104094][ T38] bond2 (unregistering): Released all slaves [ 153.110553][ T38] bond3 (unregistering): Released all slaves [ 153.118551][ T38] bond4 (unregistering): Released all slaves [ 153.126646][ T38] bond5 (unregistering): Released all slaves [ 153.133582][ T38] bond6 (unregistering): Released all slaves [ 153.139645][ T38] bond7 (unregistering): Released all slaves [ 153.149857][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.198801][ T38] tipc: Left network mode [ 153.207703][ T38] hsr_slave_0: left promiscuous mode [ 153.213692][ T38] hsr_slave_1: left promiscuous mode [ 153.222133][ T38] veth1_macvtap: left promiscuous mode [ 153.222162][ T38] veth0_macvtap: left promiscuous mode [ 153.222210][ T38] veth1_vlan: left promiscuous mode [ 153.222314][ T38] veth0_vlan: left promiscuous mode [ 153.308744][ T38] team0 (unregistering): Port device team_slave_1 removed [ 153.318098][ T38] team0 (unregistering): Port device team_slave_0 removed [ 153.333856][ T8927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.373117][ T38] team0 (unregistering): Port device dummy0 removed [ 153.384717][ T9509] team0: Port device team_slave_0 added [ 153.392904][ T9509] team0: Port device team_slave_1 added [ 153.423144][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.423169][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.423213][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.467745][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.467766][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.467803][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.598921][ T9509] hsr_slave_0: entered promiscuous mode [ 153.605683][ T9509] hsr_slave_1: entered promiscuous mode [ 153.644093][ T29] audit: type=1400 audit(1788777735.655:1664): avc: denied { write } for pid=9609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.675835][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.715282][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.744176][ T29] audit: type=1400 audit(1788777735.755:1665): avc: denied { write } for pid=9634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.784697][ T38] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.798018][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.798076][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.817209][ T3028] 8021q: adding VLAN 0 to HW filter on device eth23 [ 153.829474][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.829533][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.877010][ T38] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.945182][ T38] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.977478][ T9652] loop9: detected capacity change from 0 to 256 [ 153.978508][ T9652] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.019170][ T38] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.157865][ T38] bridge_slave_1: left allmulticast mode [ 154.157900][ T38] bridge_slave_1: left promiscuous mode [ 154.158023][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.181263][ T38] bridge_slave_0: left allmulticast mode [ 154.181370][ T38] bridge_slave_0: left promiscuous mode [ 154.181611][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.249820][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.260108][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.269719][ T38] bond0 (unregistering): Released all slaves [ 154.282851][ T3028] 8021q: adding VLAN 0 to HW filter on device eth24 [ 154.316870][ T38] hsr_slave_0: left promiscuous mode [ 154.323466][ T38] hsr_slave_1: left promiscuous mode [ 154.324114][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.324138][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.346196][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.346232][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.364532][ T38] veth1_macvtap: left promiscuous mode [ 154.364582][ T38] veth0_macvtap: left promiscuous mode [ 154.364739][ T38] veth1_vlan: left promiscuous mode [ 154.364852][ T38] veth0_vlan: left promiscuous mode [ 154.447932][ T38] team0 (unregistering): Port device team_slave_1 removed [ 154.456199][ T38] team0 (unregistering): Port device team_slave_0 removed [ 154.506443][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.506498][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.506622][ T9625] bridge_slave_0: entered allmulticast mode [ 154.522475][ T9625] bridge_slave_0: entered promiscuous mode [ 154.539243][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.539286][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.539440][ T9625] bridge_slave_1: entered allmulticast mode [ 154.540195][ T9625] bridge_slave_1: entered promiscuous mode [ 154.564550][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.567778][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.594996][ T9625] team0: Port device team_slave_0 added [ 154.600805][ T9625] team0: Port device team_slave_1 added [ 154.623705][ T9509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.632890][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.634995][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.635049][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.635153][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.643059][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.647503][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.647523][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.647627][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.751477][ T9625] hsr_slave_0: entered promiscuous mode [ 154.752012][ T9625] hsr_slave_1: entered promiscuous mode [ 154.763798][ T9625] debugfs: 'hsr0' already exists in 'hsr' [ 154.763826][ T9625] Cannot create hsr debugfs directory [ 154.763952][ T9509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.784418][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.800309][ T9509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.810727][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.818738][ T9509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.828043][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.937833][ T9473] veth0_vlan: entered promiscuous mode [ 154.948139][ T9473] veth1_vlan: entered promiscuous mode [ 154.959308][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.982896][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.991839][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.991884][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.007388][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.007429][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.039355][ T9473] veth0_macvtap: entered promiscuous mode [ 155.050288][ T9473] veth1_macvtap: entered promiscuous mode [ 155.083304][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.092644][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.122376][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.151407][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.153687][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.153857][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.227119][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.256437][ T9625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 155.272759][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.282237][ T9625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 155.292780][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.300801][ T9625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 155.312277][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.320073][ T9625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 155.330517][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.399039][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.411958][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.423064][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.423132][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.440877][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.440930][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.454048][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.689449][ T9509] veth0_vlan: entered promiscuous mode [ 155.695776][ T9509] veth1_vlan: entered promiscuous mode [ 155.710397][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.720563][ T9509] veth0_macvtap: entered promiscuous mode [ 155.727320][ T9509] veth1_macvtap: entered promiscuous mode [ 155.740046][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.750487][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.782244][ T417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.784557][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.784715][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.784938][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.869125][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 155.869154][ T29] audit: type=1400 audit(1788777737.875:1676): avc: denied { mounton } for pid=9805 comm="syz.6.1836" path="/0/bus" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.904025][ T29] audit: type=1326 audit(1788777737.905:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904094][ T29] audit: type=1326 audit(1788777737.905:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904213][ T29] audit: type=1326 audit(1788777737.905:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904256][ T29] audit: type=1326 audit(1788777737.905:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904297][ T29] audit: type=1326 audit(1788777737.905:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904417][ T29] audit: type=1326 audit(1788777737.915:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904518][ T29] audit: type=1326 audit(1788777737.915:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904698][ T29] audit: type=1326 audit(1788777737.915:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 155.904798][ T29] audit: type=1326 audit(1788777737.915:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.9.1862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 156.141022][ T9806] loop6: detected capacity change from 512 to 0 [ 156.268909][ T9625] veth0_vlan: entered promiscuous mode [ 156.283840][ T9625] veth1_vlan: entered promiscuous mode [ 156.325601][ T9625] veth0_macvtap: entered promiscuous mode [ 156.333937][ T9625] veth1_macvtap: entered promiscuous mode [ 156.345061][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.354252][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.391314][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.391670][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.391916][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.392154][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.281490][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.817624][ T9864] FAULT_INJECTION: forcing a failure. [ 157.817624][ T9864] name failslab, interval 1, probability 0, space 0, times 0 [ 157.817670][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.8.1854 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.817703][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.817753][ T9864] Call Trace: [ 157.817797][ T9864] [ 157.817821][ T9864] __dump_stack+0x1d/0x30 [ 157.817848][ T9864] dump_stack_lvl+0x95/0xd0 [ 157.817976][ T9864] dump_stack+0x15/0x1b [ 157.818059][ T9864] should_fail_ex+0x262/0x280 [ 157.818154][ T9864] ? vm_area_dup+0x33/0x300 [ 157.818253][ T9864] should_failslab+0x8c/0xb0 [ 157.818346][ T9864] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 157.818376][ T9864] ? vm_area_dup+0x33/0x300 [ 157.818404][ T9864] ? hrtimer_start_range_ns_common+0x585/0x860 [ 157.818491][ T9864] vm_area_dup+0x33/0x300 [ 157.818592][ T9864] __split_vma+0xe4/0x720 [ 157.818672][ T9864] ? hrtimer_start_range_ns+0x108/0x120 [ 157.818747][ T9864] ? _raw_spin_unlock+0x9/0x30 [ 157.818865][ T9864] ? finish_task_switch+0x121/0x340 [ 157.818969][ T9864] vma_modify+0xbf5/0xd50 [ 157.819055][ T9864] vma_modify_flags+0x1be/0x250 [ 157.819162][ T9864] mlock_fixup+0x166/0x460 [ 157.819294][ T9864] apply_vma_lock_flags+0x1c7/0x290 [ 157.819432][ T9864] do_mlock+0x3a0/0x510 [ 157.819521][ T9864] ? __se_sys_futex+0x2f6/0x370 [ 157.819625][ T9864] ? xfd_validate_state+0x45/0xf0 [ 157.819716][ T9864] ? restore_fpregs_from_fpstate+0x61/0x110 [ 157.819810][ T9864] __x64_sys_mlock+0x4d/0x70 [ 157.819910][ T9864] x64_sys_call+0x2232/0x2550 [ 157.820010][ T9864] do_syscall_64+0x112/0x360 [ 157.820110][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.820243][ T9864] RIP: 0033:0x7fee3d27e159 [ 157.820306][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.820363][ T9864] RSP: 002b:00007fee3bcd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 157.820384][ T9864] RAX: ffffffffffffffda RBX: 00007fee3d505fa0 RCX: 00007fee3d27e159 [ 157.820416][ T9864] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 157.820466][ T9864] RBP: 00007fee3d315024 R08: 0000000000000000 R09: 0000000000000000 [ 157.820511][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.820562][ T9864] R13: 00007fee3d506038 R14: 00007fee3d505fa0 R15: 00007ffe7e761068 [ 157.820631][ T9864] [ 158.122034][ T9881] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1873'. [ 158.393792][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.504027][ T4958] kernel read not supported for file /usb/usbmon/0s (pid: 4958 comm: kworker/1:13) [ 158.520496][ T9916] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 158.614937][ T9929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.798903][ T4960] kernel read not supported for file /usb/usbmon/0s (pid: 4960 comm: kworker/1:14) [ 158.844386][ T9950] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 158.965915][ T9968] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.349859][ T9986] FAULT_INJECTION: forcing a failure. [ 159.349859][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 159.350006][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.6.1904 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.350043][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.350062][ T9986] Call Trace: [ 159.350087][ T9986] [ 159.350173][ T9986] __dump_stack+0x1d/0x30 [ 159.350208][ T9986] dump_stack_lvl+0x95/0xd0 [ 159.350384][ T9986] dump_stack+0x15/0x1b [ 159.350412][ T9986] should_fail_ex+0x262/0x280 [ 159.350453][ T9986] ? security_inode_alloc+0x37/0x100 [ 159.350487][ T9986] should_failslab+0x8c/0xb0 [ 159.350538][ T9986] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 159.350580][ T9986] ? security_inode_alloc+0x37/0x100 [ 159.350618][ T9986] security_inode_alloc+0x37/0x100 [ 159.350662][ T9986] inode_init_always_gfp+0x495/0x4e0 [ 159.350692][ T9986] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 159.350737][ T9986] alloc_inode+0x58/0x170 [ 159.350758][ T9986] new_inode+0x1d/0xe0 [ 159.350849][ T9986] __debugfs_create_file+0x97/0x2b0 [ 159.350877][ T9986] debugfs_create_file_full+0x3f/0x60 [ 159.350906][ T9986] ? __pfx_br_dev_setup+0x10/0x10 [ 159.351087][ T9986] ref_tracker_dir_debugfs+0x10e/0x220 [ 159.351141][ T9986] alloc_netdev_mqs+0x1a9/0xa90 [ 159.351189][ T9986] br_add_bridge+0x35/0xc0 [ 159.351229][ T9986] br_ioctl_stub+0x3e3/0x8f0 [ 159.351297][ T9986] ? ioctl_has_perm+0x273/0x2c0 [ 159.351381][ T9986] ? __pfx_br_ioctl_stub+0x10/0x10 [ 159.351484][ T9986] sock_ioctl+0x39a/0x610 [ 159.351533][ T9986] ? __pfx_sock_ioctl+0x10/0x10 [ 159.351564][ T9986] __se_sys_ioctl+0xce/0x140 [ 159.351606][ T9986] __x64_sys_ioctl+0x43/0x50 [ 159.351649][ T9986] x64_sys_call+0x239d/0x2550 [ 159.351733][ T9986] do_syscall_64+0x112/0x360 [ 159.351778][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.351811][ T9986] RIP: 0033:0x7fc5f50ce159 [ 159.351828][ T9986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.351881][ T9986] RSP: 002b:00007fc5f3b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.351910][ T9986] RAX: ffffffffffffffda RBX: 00007fc5f5355fa0 RCX: 00007fc5f50ce159 [ 159.351931][ T9986] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 159.351949][ T9986] RBP: 00007fc5f5165024 R08: 0000000000000000 R09: 0000000000000000 [ 159.351968][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.351986][ T9986] R13: 00007fc5f5356038 R14: 00007fc5f5355fa0 R15: 00007fff62de12c8 [ 159.352038][ T9986] [ 159.446673][ T9986] debugfs: out of free dentries, can not create file 'netdev@ffff88810b5c65e0' [ 159.925724][T10013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.470983][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.039260][T10076] loop3: detected capacity change from 0 to 512 [ 161.046838][T10076] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 161.064914][T10076] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1919: attempt to clear invalid blocks 1024 len 1 [ 161.064963][T10076] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.078175][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.078200][ C0] EXT4-fs (loop3): initial error at time 1788777743: ext4_mb_generate_buddy:1317 [ 161.078235][ C0] EXT4-fs (loop3): last error at time 1788777743: ext4_mb_generate_buddy:1317 [ 161.116402][T10076] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1919: invalid indirect mapped block 1819239214 (level 0) [ 161.116444][T10076] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.132541][T10076] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1919: invalid indirect mapped block 33554432 (level 2) [ 161.132634][T10076] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.145271][T10076] EXT4-fs (loop3): 1 truncate cleaned up [ 161.146284][T10076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.173846][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 161.173900][ T29] audit: type=1400 audit(1788777743.185:1734): avc: denied { write } for pid=10075 comm="syz.3.1919" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.277038][ T9473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.290275][ T29] audit: type=1400 audit(1788777743.295:1735): avc: denied { name_bind } for pid=10093 comm="syz.9.1922" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 161.320190][T10092] loop2: detected capacity change from 0 to 128 [ 161.339776][ T29] audit: type=1326 audit(1788777743.345:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.9.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x0 [ 161.366583][ T29] audit: type=1400 audit(1788777743.375:1737): avc: denied { mounton } for pid=10091 comm="syz.2.1921" path="/165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 161.367978][T10092] FAULT_INJECTION: forcing a failure. [ 161.367978][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 161.368074][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.2.1921 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.368159][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.368202][T10092] Call Trace: [ 161.368273][T10092] [ 161.368310][T10092] __dump_stack+0x1d/0x30 [ 161.368463][T10092] dump_stack_lvl+0x95/0xd0 [ 161.368621][T10092] dump_stack+0x15/0x1b [ 161.368697][T10092] should_fail_ex+0x262/0x280 [ 161.368791][T10092] should_failslab+0x8c/0xb0 [ 161.368971][T10092] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 161.369159][T10092] ? fat_alloc_inode+0x3c/0xe0 [ 161.369306][T10092] ? fat_alloc_inode+0x3c/0xe0 [ 161.369418][T10092] ? __pfx_fat_alloc_inode+0x10/0x10 [ 161.369619][T10092] fat_alloc_inode+0x3c/0xe0 [ 161.369755][T10092] ? __pfx_fat_alloc_inode+0x10/0x10 [ 161.369864][T10092] alloc_inode+0x40/0x170 [ 161.369948][T10092] new_inode+0x1d/0xe0 [ 161.370016][T10092] fat_build_inode+0x163/0x290 [ 161.370137][T10092] vfat_lookup+0x164/0x2e0 [ 161.370246][T10092] lookup_one_qstr_excl+0xc7/0x240 [ 161.370393][T10092] filename_create+0x155/0x220 [ 161.370506][T10092] filename_mknodat+0x13e/0x450 [ 161.370668][T10092] __se_sys_mknodat+0x38/0xf0 [ 161.370777][T10092] __x64_sys_mknodat+0x55/0x70 [ 161.370883][T10092] x64_sys_call+0x2182/0x2550 [ 161.371104][T10092] do_syscall_64+0x112/0x360 [ 161.371250][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.371334][T10092] RIP: 0033:0x7f94bd00e159 [ 161.371390][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.371457][T10092] RSP: 002b:00007f94bba67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 161.371531][T10092] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 161.371617][T10092] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 161.371671][T10092] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 161.371723][T10092] R10: 0000000000000704 R11: 0000000000000246 R12: 0000000000000000 [ 161.371776][T10092] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 161.371928][T10092] [ 161.422359][T10101] FAULT_INJECTION: forcing a failure. [ 161.422359][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 161.422465][T10101] CPU: 1 UID: 0 PID: 10101 Comm: syz.3.1923 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.422583][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.422628][T10101] Call Trace: [ 161.422650][T10101] [ 161.422681][T10101] __dump_stack+0x1d/0x30 [ 161.422777][T10101] dump_stack_lvl+0x95/0xd0 [ 161.422869][T10101] dump_stack+0x15/0x1b [ 161.422946][T10101] should_fail_ex+0x262/0x280 [ 161.423055][T10101] should_failslab+0x8c/0xb0 [ 161.423345][T10101] __kvmalloc_node_noprof+0x168/0x5c0 [ 161.423479][T10101] ? sort_subprogs_topo+0x7b/0x900 [ 161.423569][T10101] ? sort_subprogs_topo+0x7b/0x900 [ 161.423647][T10101] sort_subprogs_topo+0x7b/0x900 [ 161.423777][T10101] ? bpf_prune_dead_branches+0x4ef/0x540 [ 161.423816][T10101] bpf_check+0x1b34/0x1d00 [ 161.423850][T10101] bpf_prog_load+0xefb/0x1060 [ 161.423885][T10101] ? avc_has_perm_noaudit+0xa3/0x120 [ 161.423917][T10101] __sys_bpf+0xbae/0xc30 [ 161.423947][T10101] ? do_futex+0x390/0x460 [ 161.424078][T10101] __x64_sys_bpf+0x69/0x80 [ 161.424157][T10101] x64_sys_call+0xf26/0x2550 [ 161.424234][T10101] do_syscall_64+0x112/0x360 [ 161.424337][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.424424][T10101] RIP: 0033:0x7fa341f7e159 [ 161.424479][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.424702][T10101] RSP: 002b:00007fa3409d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.424859][T10101] RAX: ffffffffffffffda RBX: 00007fa342205fa0 RCX: 00007fa341f7e159 [ 161.424913][T10101] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 161.424957][T10101] RBP: 00007fa342015024 R08: 0000000000000000 R09: 0000000000000000 [ 161.425086][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.425139][T10101] R13: 00007fa342206038 R14: 00007fa342205fa0 R15: 00007ffcb4e14418 [ 161.425216][T10101] [ 161.573170][ T29] audit: type=1400 audit(1788777743.585:1738): avc: denied { write } for pid=10085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.757840][ T29] audit: type=1400 audit(1788777743.765:1739): avc: denied { write } for pid=10105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.194940][T10109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.373708][T10129] loop2: detected capacity change from 0 to 1024 [ 162.374150][T10129] EXT4-fs: Ignoring removed orlov option [ 162.374215][T10129] EXT4-fs: Ignoring removed orlov option [ 162.417479][T10129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.430650][T10129] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 162.440384][ T29] audit: type=1400 audit(1788777744.445:1740): avc: denied { mac_admin } for pid=10128 comm="syz.2.1936" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.440457][ T29] audit: type=1400 audit(1788777744.445:1741): avc: denied { relabelto } for pid=10128 comm="syz.2.1936" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 162.440493][ T29] audit: type=1400 audit(1788777744.445:1742): avc: denied { write } for pid=10128 comm="syz.2.1936" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 162.440584][ T29] audit: type=1400 audit(1788777744.445:1743): avc: denied { add_name } for pid=10128 comm="syz.2.1936" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 162.543261][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.632313][T10143] loop2: detected capacity change from 0 to 128 [ 162.641624][T10143] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.641891][T10143] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.722171][ T6986] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.134322][T10155] loop2: detected capacity change from 0 to 512 [ 163.152790][T10155] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1947: inode has both inline data and extents flags [ 163.152839][T10155] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.166090][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 163.166117][ C1] EXT4-fs (loop2): initial error at time 1788777745: ext4_orphan_get:1403: inode 15 [ 163.166163][ C1] EXT4-fs (loop2): last error at time 1788777745: ext4_orphan_get:1403: inode 15 [ 163.176212][T10155] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1947: couldn't read orphan inode 15 (err -117) [ 163.176247][T10155] loop2: lost filesystem error report for type 5 error -117 [ 163.178628][T10155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.285014][T10160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.503835][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.614723][T10185] loop8: detected capacity change from 0 to 512 [ 163.622347][T10182] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1958'. [ 163.647856][T10185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.647950][T10185] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.705044][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.853031][T10203] loop2: detected capacity change from 0 to 1024 [ 163.853687][T10203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.867318][T10203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c018, mo2=0102] [ 163.867501][T10203] System zones: 0-1, 3-12 [ 163.868578][T10203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.946765][T10203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.985431][T10216] FAULT_INJECTION: forcing a failure. [ 163.985431][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 163.985465][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.3.1973 Not tainted syzkaller #0 PREEMPT(lazy) [ 163.985492][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.985511][T10216] Call Trace: [ 163.985553][T10216] [ 163.985562][T10216] __dump_stack+0x1d/0x30 [ 163.985592][T10216] dump_stack_lvl+0x95/0xd0 [ 163.985622][T10216] dump_stack+0x15/0x1b [ 163.985668][T10216] should_fail_ex+0x262/0x280 [ 163.985698][T10216] ? security_inode_alloc+0x37/0x100 [ 163.985857][T10216] should_failslab+0x8c/0xb0 [ 163.985966][T10216] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 163.986134][T10216] ? security_inode_alloc+0x37/0x100 [ 163.986219][T10216] security_inode_alloc+0x37/0x100 [ 163.986304][T10216] inode_init_always_gfp+0x495/0x4e0 [ 163.986378][T10216] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 163.986481][T10216] alloc_inode+0x58/0x170 [ 163.986669][T10216] new_inode+0x1d/0xe0 [ 163.986743][T10216] __debugfs_create_file+0x97/0x2b0 [ 163.986821][T10216] debugfs_create_file_full+0x3f/0x60 [ 163.986976][T10216] ? __pfx_br_dev_setup+0x10/0x10 [ 163.987043][T10216] ref_tracker_dir_debugfs+0x10e/0x220 [ 163.987235][T10216] alloc_netdev_mqs+0x1a9/0xa90 [ 163.987414][T10216] br_add_bridge+0x35/0xc0 [ 163.987510][T10216] br_ioctl_stub+0x3e3/0x8f0 [ 163.987616][T10216] ? ioctl_has_perm+0x273/0x2c0 [ 163.987702][T10216] ? __pfx_br_ioctl_stub+0x10/0x10 [ 163.987892][T10216] sock_ioctl+0x39a/0x610 [ 163.987976][T10216] ? __pfx_sock_ioctl+0x10/0x10 [ 163.988050][T10216] __se_sys_ioctl+0xce/0x140 [ 163.988226][T10216] __x64_sys_ioctl+0x43/0x50 [ 163.988342][T10216] x64_sys_call+0x239d/0x2550 [ 163.988441][T10216] do_syscall_64+0x112/0x360 [ 163.988554][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.988671][T10216] RIP: 0033:0x7fa341f7e159 [ 163.988744][T10216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.988869][T10216] RSP: 002b:00007fa3409d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.988942][T10216] RAX: ffffffffffffffda RBX: 00007fa342205fa0 RCX: 00007fa341f7e159 [ 163.988995][T10216] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 163.989040][T10216] RBP: 00007fa342015024 R08: 0000000000000000 R09: 0000000000000000 [ 163.989102][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.989144][T10216] R13: 00007fa342206038 R14: 00007fa342205fa0 R15: 00007ffcb4e14418 [ 163.989212][T10216] [ 164.031851][T10216] debugfs: out of free dentries, can not create file 'netdev@ffff88811de585e0' [ 164.418755][T10236] FAULT_INJECTION: forcing a failure. [ 164.418755][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 164.418803][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.2.1980 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.418883][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.418901][T10236] Call Trace: [ 164.418914][T10236] [ 164.418925][T10236] __dump_stack+0x1d/0x30 [ 164.419045][T10236] dump_stack_lvl+0x95/0xd0 [ 164.419194][T10236] dump_stack+0x15/0x1b [ 164.419312][T10236] should_fail_ex+0x262/0x280 [ 164.419458][T10236] should_failslab+0x8c/0xb0 [ 164.419637][T10236] __kvmalloc_node_noprof+0x168/0x5c0 [ 164.419786][T10236] ? sort_subprogs_topo+0xb2/0x900 [ 164.419890][T10236] ? sort_subprogs_topo+0xb2/0x900 [ 164.420044][T10236] sort_subprogs_topo+0xb2/0x900 [ 164.420174][T10236] ? bpf_prune_dead_branches+0x4ef/0x540 [ 164.420284][T10236] bpf_check+0x1b34/0x1d00 [ 164.420417][T10236] bpf_prog_load+0xefb/0x1060 [ 164.420527][T10236] ? avc_has_perm_noaudit+0xa3/0x120 [ 164.420717][T10236] __sys_bpf+0xbae/0xc30 [ 164.420812][T10236] ? do_futex+0x390/0x460 [ 164.420962][T10236] __x64_sys_bpf+0x69/0x80 [ 164.421044][T10236] x64_sys_call+0xf26/0x2550 [ 164.421130][T10236] do_syscall_64+0x112/0x360 [ 164.421306][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.421390][T10236] RIP: 0033:0x7f94bd00e159 [ 164.421451][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.421584][T10236] RSP: 002b:00007f94bba67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.421665][T10236] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 164.421703][T10236] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 164.421716][T10236] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 164.421822][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.421880][T10236] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 164.422025][T10236] [ 164.695359][T10250] FAULT_INJECTION: forcing a failure. [ 164.695359][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 164.695397][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.9.1985 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.695425][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.695485][T10250] Call Trace: [ 164.695494][T10250] [ 164.695504][T10250] __dump_stack+0x1d/0x30 [ 164.695539][T10250] dump_stack_lvl+0x95/0xd0 [ 164.695569][T10250] dump_stack+0x15/0x1b [ 164.695619][T10250] should_fail_ex+0x262/0x280 [ 164.695699][T10250] ? kernfs_fop_open+0x224/0x620 [ 164.695732][T10250] should_failslab+0x8c/0xb0 [ 164.695774][T10250] __kmalloc_cache_noprof+0x7a/0x400 [ 164.695824][T10250] ? kernfs_fop_open+0x224/0x620 [ 164.695855][T10250] kernfs_fop_open+0x224/0x620 [ 164.695881][T10250] do_dentry_open+0x49f/0xa60 [ 164.695909][T10250] ? __pfx_kernfs_fop_open+0x10/0x10 [ 164.696022][T10250] vfs_open+0x37/0x1e0 [ 164.696068][T10250] path_openat+0xc01/0x10d0 [ 164.696102][T10250] do_file_open+0x16c/0x290 [ 164.696143][T10250] do_sys_openat2+0xa0/0x130 [ 164.696234][T10250] __x64_sys_openat+0xf2/0x120 [ 164.696268][T10250] x64_sys_call+0x1f72/0x2550 [ 164.696314][T10250] do_syscall_64+0x112/0x360 [ 164.696354][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.696500][T10250] RIP: 0033:0x7fa4d43be98e [ 164.696522][T10250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.696550][T10250] RSP: 002b:00007fa4d2e569b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.696574][T10250] RAX: ffffffffffffffda RBX: 00007fa4d2e576c0 RCX: 00007fa4d43be98e [ 164.696596][T10250] RDX: 0000000000080001 RSI: 00007fa4d4469070 RDI: ffffffffffffff9c [ 164.696675][T10250] RBP: 00007fa4d4469070 R08: 0000000000000000 R09: 0000000000000000 [ 164.696690][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 164.696703][T10250] R13: 00007fa4d2e56a90 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 164.696724][T10250] [ 164.910639][T10254] FAULT_INJECTION: forcing a failure. [ 164.910639][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 164.910674][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.2.1987 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.910765][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.910783][T10254] Call Trace: [ 164.910791][T10254] [ 164.910799][T10254] __dump_stack+0x1d/0x30 [ 164.910838][T10254] dump_stack_lvl+0x95/0xd0 [ 164.910907][T10254] dump_stack+0x15/0x1b [ 164.911065][T10254] should_fail_ex+0x262/0x280 [ 164.911164][T10254] ? security_inode_alloc+0x37/0x100 [ 164.911197][T10254] should_failslab+0x8c/0xb0 [ 164.911344][T10254] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 164.911453][T10254] ? security_inode_alloc+0x37/0x100 [ 164.911547][T10254] security_inode_alloc+0x37/0x100 [ 164.911715][T10254] inode_init_always_gfp+0x495/0x4e0 [ 164.911791][T10254] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 164.911885][T10254] alloc_inode+0x58/0x170 [ 164.911951][T10254] new_inode+0x1d/0xe0 [ 164.912084][T10254] __debugfs_create_file+0x97/0x2b0 [ 164.912252][T10254] debugfs_create_file_full+0x3f/0x60 [ 164.912338][T10254] ? __pfx_br_dev_setup+0x10/0x10 [ 164.912414][T10254] ref_tracker_dir_debugfs+0x10e/0x220 [ 164.912550][T10254] alloc_netdev_mqs+0x1a9/0xa90 [ 164.912752][T10254] br_add_bridge+0x35/0xc0 [ 164.912856][T10254] br_ioctl_stub+0x3e3/0x8f0 [ 164.912973][T10254] ? ioctl_has_perm+0x273/0x2c0 [ 164.913120][T10254] ? __pfx_br_ioctl_stub+0x10/0x10 [ 164.913234][T10254] sock_ioctl+0x39a/0x610 [ 164.913353][T10254] ? __pfx_sock_ioctl+0x10/0x10 [ 164.913428][T10254] __se_sys_ioctl+0xce/0x140 [ 164.913541][T10254] __x64_sys_ioctl+0x43/0x50 [ 164.913656][T10254] x64_sys_call+0x239d/0x2550 [ 164.913791][T10254] do_syscall_64+0x112/0x360 [ 164.913922][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.914031][T10254] RIP: 0033:0x7f94bd00e159 [ 164.914086][T10254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.914150][T10254] RSP: 002b:00007f94bba67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.914285][T10254] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 164.914419][T10254] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 164.914465][T10254] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 164.914515][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.914558][T10254] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 164.914632][T10254] [ 164.920291][T10254] debugfs: out of free dentries, can not create file 'netdev@ffff88810b5c65e0' [ 165.197301][T10261] FAULT_INJECTION: forcing a failure. [ 165.197301][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 165.197354][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.6.1991 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.197390][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.197444][T10261] Call Trace: [ 165.197452][T10261] [ 165.197461][T10261] __dump_stack+0x1d/0x30 [ 165.197487][T10261] dump_stack_lvl+0x95/0xd0 [ 165.197516][T10261] dump_stack+0x15/0x1b [ 165.197623][T10261] should_fail_ex+0x262/0x280 [ 165.197655][T10261] ? security_inode_init_security+0xb4/0x320 [ 165.197751][T10261] should_failslab+0x8c/0xb0 [ 165.197851][T10261] __kmalloc_noprof+0xd0/0x4d0 [ 165.197892][T10261] ? security_inode_init_security+0xb4/0x320 [ 165.197970][T10261] ? __pfx_shmem_initxattrs+0x10/0x10 [ 165.197995][T10261] security_inode_init_security+0xb4/0x320 [ 165.198027][T10261] ? simple_acl_create+0x328/0x370 [ 165.198059][T10261] shmem_mknod+0xaa/0x170 [ 165.198107][T10261] vfs_mknod+0x337/0x460 [ 165.198140][T10261] filename_mknodat+0x279/0x450 [ 165.198305][T10261] __se_sys_mknodat+0x38/0xf0 [ 165.198354][T10261] __x64_sys_mknodat+0x55/0x70 [ 165.198432][T10261] x64_sys_call+0x2182/0x2550 [ 165.198534][T10261] do_syscall_64+0x112/0x360 [ 165.198664][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.198798][T10261] RIP: 0033:0x7fc5f50ce159 [ 165.198858][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.198970][T10261] RSP: 002b:00007fc5f3b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 165.199049][T10261] RAX: ffffffffffffffda RBX: 00007fc5f5355fa0 RCX: 00007fc5f50ce159 [ 165.199162][T10261] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 165.199208][T10261] RBP: 00007fc5f5165024 R08: 0000000000000000 R09: 0000000000000000 [ 165.199335][T10261] R10: 000000000000070c R11: 0000000000000246 R12: 0000000000000000 [ 165.199380][T10261] R13: 00007fc5f5356038 R14: 00007fc5f5355fa0 R15: 00007fff62de12c8 [ 165.199453][T10261] [ 165.473889][T10270] FAULT_INJECTION: forcing a failure. [ 165.473889][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 165.473935][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.9.1995 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.473991][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.474061][T10270] Call Trace: [ 165.474069][T10270] [ 165.474078][T10270] __dump_stack+0x1d/0x30 [ 165.474145][T10270] dump_stack_lvl+0x95/0xd0 [ 165.474225][T10270] dump_stack+0x15/0x1b [ 165.474307][T10270] should_fail_ex+0x262/0x280 [ 165.474400][T10270] should_failslab+0x8c/0xb0 [ 165.474540][T10270] __kvmalloc_node_noprof+0x168/0x5c0 [ 165.474663][T10270] ? bpf_compute_const_regs+0xbb/0x1e00 [ 165.474806][T10270] ? bpf_compute_const_regs+0xbb/0x1e00 [ 165.474912][T10270] bpf_compute_const_regs+0xbb/0x1e00 [ 165.475010][T10270] ? __rcu_read_unlock+0x4e/0x70 [ 165.475113][T10270] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 165.475238][T10270] bpf_check+0x1ae2/0x1d00 [ 165.475333][T10270] bpf_prog_load+0xefb/0x1060 [ 165.475424][T10270] ? avc_has_perm_noaudit+0xa3/0x120 [ 165.475562][T10270] __sys_bpf+0xbae/0xc30 [ 165.475677][T10270] ? do_futex+0x390/0x460 [ 165.475794][T10270] __x64_sys_bpf+0x69/0x80 [ 165.475877][T10270] x64_sys_call+0xf26/0x2550 [ 165.476024][T10270] do_syscall_64+0x112/0x360 [ 165.476139][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.476221][T10270] RIP: 0033:0x7fa4d43fe159 [ 165.476275][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.476433][T10270] RSP: 002b:00007fa4d2e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.476509][T10270] RAX: ffffffffffffffda RBX: 00007fa4d4685fa0 RCX: 00007fa4d43fe159 [ 165.476573][T10270] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 165.476623][T10270] RBP: 00007fa4d4495024 R08: 0000000000000000 R09: 0000000000000000 [ 165.476674][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.476716][T10270] R13: 00007fa4d4686038 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 165.476787][T10270] [ 165.747511][T10279] FAULT_INJECTION: forcing a failure. [ 165.747511][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 165.747619][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.9.2000 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.747667][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.747686][T10279] Call Trace: [ 165.747696][T10279] [ 165.747706][T10279] __dump_stack+0x1d/0x30 [ 165.747739][T10279] dump_stack_lvl+0x95/0xd0 [ 165.747776][T10279] dump_stack+0x15/0x1b [ 165.747831][T10279] should_fail_ex+0x262/0x280 [ 165.747867][T10279] ? security_inode_alloc+0x37/0x100 [ 165.747964][T10279] should_failslab+0x8c/0xb0 [ 165.748007][T10279] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 165.748083][T10279] ? security_inode_alloc+0x37/0x100 [ 165.748184][T10279] security_inode_alloc+0x37/0x100 [ 165.748218][T10279] inode_init_always_gfp+0x495/0x4e0 [ 165.748248][T10279] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 165.748283][T10279] alloc_inode+0x58/0x170 [ 165.748433][T10279] new_inode+0x1d/0xe0 [ 165.748463][T10279] __debugfs_create_file+0x97/0x2b0 [ 165.748497][T10279] debugfs_create_file_full+0x3f/0x60 [ 165.748526][T10279] ? __pfx_br_dev_setup+0x10/0x10 [ 165.748566][T10279] ref_tracker_dir_debugfs+0x10e/0x220 [ 165.748669][T10279] alloc_netdev_mqs+0x1a9/0xa90 [ 165.748726][T10279] br_add_bridge+0x35/0xc0 [ 165.748765][T10279] br_ioctl_stub+0x3e3/0x8f0 [ 165.748896][T10279] ? ioctl_has_perm+0x273/0x2c0 [ 165.748930][T10279] ? __pfx_br_ioctl_stub+0x10/0x10 [ 165.748976][T10279] sock_ioctl+0x39a/0x610 [ 165.749119][T10279] ? __pfx_sock_ioctl+0x10/0x10 [ 165.749205][T10279] __se_sys_ioctl+0xce/0x140 [ 165.749328][T10279] __x64_sys_ioctl+0x43/0x50 [ 165.749471][T10279] x64_sys_call+0x239d/0x2550 [ 165.749566][T10279] do_syscall_64+0x112/0x360 [ 165.749743][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.749825][T10279] RIP: 0033:0x7fa4d43fe159 [ 165.749878][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.749941][T10279] RSP: 002b:00007fa4d2e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.750015][T10279] RAX: ffffffffffffffda RBX: 00007fa4d4685fa0 RCX: 00007fa4d43fe159 [ 165.750110][T10279] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 165.750162][T10279] RBP: 00007fa4d4495024 R08: 0000000000000000 R09: 0000000000000000 [ 165.750207][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.750257][T10279] R13: 00007fa4d4686038 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 165.750332][T10279] [ 165.769365][T10279] debugfs: out of free dentries, can not create file 'netdev@ffff88810b6185e0' [ 166.069730][T10287] loop8: detected capacity change from 0 to 128 [ 166.080901][T10287] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.084662][T10287] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.123958][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.124067][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.124108][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.124211][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.179706][ T9625] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.191181][T10297] loop2: detected capacity change from 0 to 512 [ 166.205912][T10298] loop3: detected capacity change from 0 to 128 [ 166.222884][T10297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 166.237551][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 166.237574][ C1] EXT4-fs (loop2): initial error at time 1788777748: ext4_mb_generate_buddy:1317 [ 166.237609][ C1] EXT4-fs (loop2): last error at time 1788777748: ext4_mb_generate_buddy:1317 [ 166.238185][T10297] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2017: attempt to clear invalid blocks 1024 len 1 [ 166.238224][T10297] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.245263][T10297] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2017: invalid indirect mapped block 1819239214 (level 0) [ 166.245305][T10297] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.245539][T10297] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2017: invalid indirect mapped block 33554432 (level 2) [ 166.245579][T10297] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.282775][T10298] FAULT_INJECTION: forcing a failure. [ 166.282775][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 166.282874][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.3.2007 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.283012][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.283060][T10298] Call Trace: [ 166.283081][T10298] [ 166.283114][T10298] __dump_stack+0x1d/0x30 [ 166.283204][T10298] dump_stack_lvl+0x95/0xd0 [ 166.283285][T10298] dump_stack+0x15/0x1b [ 166.283375][T10298] should_fail_ex+0x262/0x280 [ 166.283488][T10298] should_failslab+0x8c/0xb0 [ 166.283599][T10298] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 166.283725][T10298] ? fat_alloc_inode+0x3c/0xe0 [ 166.283912][T10298] ? fat_alloc_inode+0x3c/0xe0 [ 166.284074][T10298] ? __pfx_fat_alloc_inode+0x10/0x10 [ 166.284190][T10298] fat_alloc_inode+0x3c/0xe0 [ 166.284407][T10298] ? __pfx_fat_alloc_inode+0x10/0x10 [ 166.284599][T10298] alloc_inode+0x40/0x170 [ 166.284663][T10298] new_inode+0x1d/0xe0 [ 166.284736][T10298] fat_build_inode+0x163/0x290 [ 166.284913][T10298] vfat_lookup+0x164/0x2e0 [ 166.285001][T10298] lookup_one_qstr_excl+0xc7/0x240 [ 166.285111][T10298] filename_create+0x155/0x220 [ 166.285223][T10298] filename_mknodat+0x13e/0x450 [ 166.285413][T10298] __se_sys_mknodat+0x38/0xf0 [ 166.285535][T10298] __x64_sys_mknodat+0x55/0x70 [ 166.285676][T10298] x64_sys_call+0x2182/0x2550 [ 166.285772][T10298] do_syscall_64+0x112/0x360 [ 166.285886][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.285963][T10298] RIP: 0033:0x7fa341f7e159 [ 166.286030][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.286133][T10298] RSP: 002b:00007fa3409d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 166.286212][T10298] RAX: ffffffffffffffda RBX: 00007fa342205fa0 RCX: 00007fa341f7e159 [ 166.286256][T10298] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 166.286307][T10298] RBP: 00007fa342015024 R08: 0000000000000000 R09: 0000000000000000 [ 166.286365][T10298] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000 [ 166.286415][T10298] R13: 00007fa342206038 R14: 00007fa342205fa0 R15: 00007ffcb4e14418 [ 166.286499][T10298] [ 166.297793][T10297] EXT4-fs (loop2): 1 truncate cleaned up [ 166.298901][T10297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.383488][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 166.383547][ T29] audit: type=1400 audit(1788777748.395:1765): avc: denied { write } for pid=10294 comm="syz.2.2017" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.614831][T10307] FAULT_INJECTION: forcing a failure. [ 166.614831][T10307] name failslab, interval 1, probability 0, space 0, times 0 [ 166.614887][T10307] CPU: 1 UID: 0 PID: 10307 Comm: syz.6.2010 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.614924][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.615021][T10307] Call Trace: [ 166.615030][T10307] [ 166.615039][T10307] __dump_stack+0x1d/0x30 [ 166.615098][T10307] dump_stack_lvl+0x95/0xd0 [ 166.615130][T10307] dump_stack+0x15/0x1b [ 166.615159][T10307] should_fail_ex+0x262/0x280 [ 166.615191][T10307] should_failslab+0x8c/0xb0 [ 166.615257][T10307] __kvmalloc_node_noprof+0x168/0x5c0 [ 166.615299][T10307] ? bpf_compute_const_regs+0xbb/0x1e00 [ 166.615337][T10307] ? bpf_compute_const_regs+0xbb/0x1e00 [ 166.615375][T10307] bpf_compute_const_regs+0xbb/0x1e00 [ 166.615438][T10307] ? __rcu_read_unlock+0x4e/0x70 [ 166.615479][T10307] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 166.615597][T10307] bpf_check+0x1ae2/0x1d00 [ 166.615630][T10307] bpf_prog_load+0xefb/0x1060 [ 166.615729][T10307] ? avc_has_perm_noaudit+0xa3/0x120 [ 166.615771][T10307] __sys_bpf+0xbae/0xc30 [ 166.615806][T10307] ? do_futex+0x390/0x460 [ 166.615892][T10307] __x64_sys_bpf+0x69/0x80 [ 166.615915][T10307] x64_sys_call+0xf26/0x2550 [ 166.615944][T10307] do_syscall_64+0x112/0x360 [ 166.616018][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.616049][T10307] RIP: 0033:0x7fc5f50ce159 [ 166.616069][T10307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.616095][T10307] RSP: 002b:00007fc5f3b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.616120][T10307] RAX: ffffffffffffffda RBX: 00007fc5f5355fa0 RCX: 00007fc5f50ce159 [ 166.616252][T10307] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 166.616290][T10307] RBP: 00007fc5f5165024 R08: 0000000000000000 R09: 0000000000000000 [ 166.616309][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.616326][T10307] R13: 00007fc5f5356038 R14: 00007fc5f5355fa0 R15: 00007fff62de12c8 [ 166.616346][T10307] [ 166.629198][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.855502][T10311] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2012'. [ 166.900579][T10313] loop3: detected capacity change from 0 to 1024 [ 166.907749][T10313] EXT4-fs: Ignoring removed orlov option [ 166.907926][T10313] EXT4-fs: Ignoring removed orlov option [ 166.924649][T10313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.940911][ T29] audit: type=1400 audit(1788777748.945:1766): avc: denied { write } for pid=10308 comm="syz.3.2011" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.984009][ T9473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.274221][T10335] loop8: detected capacity change from 0 to 128 [ 167.295818][T10335] FAULT_INJECTION: forcing a failure. [ 167.295818][T10335] name failslab, interval 1, probability 0, space 0, times 0 [ 167.295866][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.8.2023 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.295942][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.295956][T10335] Call Trace: [ 167.295963][T10335] [ 167.295972][T10335] __dump_stack+0x1d/0x30 [ 167.296001][T10335] dump_stack_lvl+0x95/0xd0 [ 167.296100][T10335] dump_stack+0x15/0x1b [ 167.296128][T10335] should_fail_ex+0x262/0x280 [ 167.296154][T10335] should_failslab+0x8c/0xb0 [ 167.296237][T10335] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 167.296281][T10335] ? fat_alloc_inode+0x3c/0xe0 [ 167.296371][T10335] ? fat_alloc_inode+0x3c/0xe0 [ 167.296420][T10335] ? __pfx_fat_alloc_inode+0x10/0x10 [ 167.296543][T10335] fat_alloc_inode+0x3c/0xe0 [ 167.296593][T10335] ? __pfx_fat_alloc_inode+0x10/0x10 [ 167.296769][T10335] alloc_inode+0x40/0x170 [ 167.296841][T10335] new_inode+0x1d/0xe0 [ 167.296948][T10335] fat_build_inode+0x163/0x290 [ 167.297059][T10335] vfat_lookup+0x164/0x2e0 [ 167.297225][T10335] lookup_one_qstr_excl+0xc7/0x240 [ 167.297324][T10335] filename_create+0x155/0x220 [ 167.297483][T10335] filename_mknodat+0x13e/0x450 [ 167.297598][T10335] __se_sys_mknodat+0x38/0xf0 [ 167.297704][T10335] __x64_sys_mknodat+0x55/0x70 [ 167.297889][T10335] x64_sys_call+0x2182/0x2550 [ 167.297994][T10335] do_syscall_64+0x112/0x360 [ 167.298136][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.298263][T10335] RIP: 0033:0x7fee3d27e159 [ 167.298311][T10335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.298362][T10335] RSP: 002b:00007fee3bcd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 167.298430][T10335] RAX: ffffffffffffffda RBX: 00007fee3d505fa0 RCX: 00007fee3d27e159 [ 167.298483][T10335] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 167.298534][T10335] RBP: 00007fee3d315024 R08: 0000000000000000 R09: 0000000000000000 [ 167.298653][T10335] R10: 0000000000000710 R11: 0000000000000246 R12: 0000000000000000 [ 167.298702][T10335] R13: 00007fee3d506038 R14: 00007fee3d505fa0 R15: 00007ffe7e761068 [ 167.298767][T10335] [ 167.690591][T10337] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.2025'. [ 167.815129][T10352] loop8: detected capacity change from 0 to 1024 [ 167.822408][T10352] EXT4-fs: Ignoring removed orlov option [ 167.822478][T10352] EXT4-fs: Ignoring removed orlov option [ 167.846311][T10352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.875681][ T29] audit: type=1400 audit(1788777749.885:1767): avc: denied { write } for pid=10351 comm="syz.8.2029" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 167.948253][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.005222][ T29] audit: type=1326 audit(1788777750.015:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.019734][ T29] audit: type=1326 audit(1788777750.025:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.032750][ T29] audit: type=1326 audit(1788777750.045:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.035743][ T29] audit: type=1326 audit(1788777750.045:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.039510][ T29] audit: type=1326 audit(1788777750.045:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.121579][ T29] audit: type=1326 audit(1788777750.125:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 168.121825][ T29] audit: type=1326 audit(1788777750.125:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee3d27dec2 code=0x7ffc0000 [ 168.431262][ T141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.431664][ T141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.431747][ T141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.432006][ T141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.916195][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10392 comm=syz.3.2048 [ 169.007763][T10398] FAULT_INJECTION: forcing a failure. [ 169.007763][T10398] name failslab, interval 1, probability 0, space 0, times 0 [ 169.007808][T10398] CPU: 0 UID: 0 PID: 10398 Comm: syz.8.2049 Not tainted syzkaller #0 PREEMPT(lazy) [ 169.007843][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.007885][T10398] Call Trace: [ 169.007895][T10398] [ 169.007906][T10398] __dump_stack+0x1d/0x30 [ 169.007935][T10398] dump_stack_lvl+0x95/0xd0 [ 169.007992][T10398] dump_stack+0x15/0x1b [ 169.008022][T10398] should_fail_ex+0x262/0x280 [ 169.008054][T10398] ? __kthread_create_on_node+0x80/0x240 [ 169.008138][T10398] should_failslab+0x8c/0xb0 [ 169.008200][T10398] __kmalloc_cache_noprof+0x7a/0x400 [ 169.008332][T10398] ? _raw_spin_unlock_irq+0x9/0x30 [ 169.008369][T10398] ? __kthread_create_on_node+0x80/0x240 [ 169.008568][T10398] ? __pfx_vhci_tx_loop+0x10/0x10 [ 169.008714][T10398] __kthread_create_on_node+0x80/0x240 [ 169.008897][T10398] ? __pfx_vhci_tx_loop+0x10/0x10 [ 169.009008][T10398] kthread_create_on_node+0x89/0xc0 [ 169.009199][T10398] ? __fget_files+0x184/0x1c0 [ 169.009266][T10398] ? __rcu_read_unlock+0x4e/0x70 [ 169.009378][T10398] ? fget+0x35/0x40 [ 169.009450][T10398] attach_store+0x2a7/0x670 [ 169.009632][T10398] ? __pfx_attach_store+0x10/0x10 [ 169.009752][T10398] dev_attr_store+0x4a/0x70 [ 169.009874][T10398] ? __pfx_dev_attr_store+0x10/0x10 [ 169.009973][T10398] sysfs_kf_write+0xfe/0x120 [ 169.010103][T10398] ? __pfx_sysfs_kf_write+0x10/0x10 [ 169.010199][T10398] kernfs_fop_write_iter+0x1d2/0x2e0 [ 169.010286][T10398] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 169.010376][T10398] vfs_write+0x57f/0x9a0 [ 169.010496][T10398] ksys_write+0xdc/0x1a0 [ 169.010610][T10398] __x64_sys_write+0x40/0x50 [ 169.010785][T10398] x64_sys_call+0x154e/0x2550 [ 169.010879][T10398] do_syscall_64+0x112/0x360 [ 169.011054][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.011147][T10398] RIP: 0033:0x7fee3d23e98e [ 169.011195][T10398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.011215][T10398] RSP: 002b:00007fee3bcd6a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.011236][T10398] RAX: ffffffffffffffda RBX: 00007fee3bcd76c0 RCX: 00007fee3d23e98e [ 169.011283][T10398] RDX: 0000000000000009 RSI: 00007fee3bcd6a90 RDI: 0000000000000006 [ 169.011461][T10398] RBP: 00007fee3d2e9070 R08: 0000000000000000 R09: 0000000000000000 [ 169.011505][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 169.011547][T10398] R13: 00007fee3bcd6a90 R14: 00007fee3d505fa0 R15: 00007ffe7e761068 [ 169.011619][T10398] [ 169.043139][ T354] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.043988][ T354] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.044199][ T354] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.044334][ T354] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.667820][ T417] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.667897][ T417] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.668037][ T417] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.668140][ T417] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.705113][T10417] loop8: detected capacity change from 0 to 512 [ 169.718259][T10417] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.2055: inode has both inline data and extents flags [ 169.718341][T10417] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.718569][T10417] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2055: couldn't read orphan inode 15 (err -117) [ 169.718607][T10417] loop8: lost filesystem error report for type 5 error -117 [ 169.720387][T10417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.788506][T10420] loop9: detected capacity change from 0 to 1024 [ 169.806237][T10420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.897858][T10409] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 169.916599][T10409] EXT4-fs (loop9): Remounting filesystem read-only [ 170.050461][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.086467][ T9350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.233198][T10433] ip_tables: iptables: counters copy to user failed while replacing table [ 170.385988][T10435] loop9: detected capacity change from 0 to 8192 [ 170.651303][T10451] FAULT_INJECTION: forcing a failure. [ 170.651303][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 170.651412][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.6.2069 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.651493][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.651512][T10451] Call Trace: [ 170.651521][T10451] [ 170.651590][T10451] __dump_stack+0x1d/0x30 [ 170.651623][T10451] dump_stack_lvl+0x95/0xd0 [ 170.651688][T10451] dump_stack+0x15/0x1b [ 170.651709][T10451] should_fail_ex+0x262/0x280 [ 170.651733][T10451] ? __kthread_create_on_node+0x80/0x240 [ 170.651820][T10451] should_failslab+0x8c/0xb0 [ 170.651892][T10451] __kmalloc_cache_noprof+0x7a/0x400 [ 170.651931][T10451] ? _raw_spin_unlock_irq+0x9/0x30 [ 170.651982][T10451] ? __kthread_create_on_node+0x80/0x240 [ 170.652108][T10451] ? __pfx_vhci_tx_loop+0x10/0x10 [ 170.652155][T10451] __kthread_create_on_node+0x80/0x240 [ 170.652219][T10451] ? __pfx_vhci_tx_loop+0x10/0x10 [ 170.652261][T10451] kthread_create_on_node+0x89/0xc0 [ 170.652307][T10451] ? __fget_files+0x184/0x1c0 [ 170.652329][T10451] ? __rcu_read_unlock+0x4e/0x70 [ 170.652449][T10451] ? fget+0x35/0x40 [ 170.652475][T10451] attach_store+0x2a7/0x670 [ 170.652511][T10451] ? __pfx_attach_store+0x10/0x10 [ 170.652777][T10451] dev_attr_store+0x4a/0x70 [ 170.652881][T10451] ? __pfx_dev_attr_store+0x10/0x10 [ 170.653045][T10451] sysfs_kf_write+0xfe/0x120 [ 170.653179][T10451] ? __pfx_sysfs_kf_write+0x10/0x10 [ 170.653273][T10451] kernfs_fop_write_iter+0x1d2/0x2e0 [ 170.653340][T10451] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 170.653427][T10451] vfs_write+0x57f/0x9a0 [ 170.653591][T10451] ksys_write+0xdc/0x1a0 [ 170.653690][T10451] __x64_sys_write+0x40/0x50 [ 170.653818][T10451] x64_sys_call+0x154e/0x2550 [ 170.653912][T10451] do_syscall_64+0x112/0x360 [ 170.654068][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.654185][T10451] RIP: 0033:0x7fc5f508e98e [ 170.654248][T10451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.654318][T10451] RSP: 002b:00007fc5f3b26a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.654389][T10451] RAX: ffffffffffffffda RBX: 00007fc5f3b276c0 RCX: 00007fc5f508e98e [ 170.654442][T10451] RDX: 0000000000000008 RSI: 00007fc5f3b26a90 RDI: 0000000000000006 [ 170.654494][T10451] RBP: 00007fc5f5139070 R08: 0000000000000000 R09: 0000000000000000 [ 170.654545][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 170.654588][T10451] R13: 00007fc5f3b26a90 R14: 00007fc5f5355fa0 R15: 00007fff62de12c8 [ 170.654665][T10451] [ 170.836767][T10456] loop3: detected capacity change from 0 to 512 [ 170.877684][T10456] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2071: inode has both inline data and extents flags [ 170.877791][T10456] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.878096][T10456] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2071: couldn't read orphan inode 15 (err -117) [ 170.878181][T10456] loop3: lost filesystem error report for type 5 error -117 [ 170.881409][T10456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.236683][ T9473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.701841][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 171.701869][ T29] audit: type=1326 audit(1788777753.715:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.713192][ T29] audit: type=1326 audit(1788777753.715:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.762232][ T29] audit: type=1326 audit(1788777753.775:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.762285][ T29] audit: type=1326 audit(1788777753.775:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.768749][ T29] audit: type=1326 audit(1788777753.775:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.768911][ T29] audit: type=1326 audit(1788777753.775:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.769024][ T29] audit: type=1326 audit(1788777753.775:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.777485][ T29] audit: type=1326 audit(1788777753.785:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.777930][ T29] audit: type=1326 audit(1788777753.785:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 171.778577][ T29] audit: type=1326 audit(1788777753.785:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.3.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa341f7e159 code=0x7ffc0000 [ 172.004911][T10482] FAULT_INJECTION: forcing a failure. [ 172.004911][T10482] name fail_futex, interval 1, probability 0, space 0, times 0 [ 172.004957][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.9.2080 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.004988][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.005004][T10482] Call Trace: [ 172.005012][T10482] [ 172.005021][T10482] __dump_stack+0x1d/0x30 [ 172.005076][T10482] dump_stack_lvl+0x95/0xd0 [ 172.005107][T10482] dump_stack+0x15/0x1b [ 172.005136][T10482] should_fail_ex+0x262/0x280 [ 172.005168][T10482] should_fail+0xb/0x20 [ 172.005190][T10482] get_futex_key+0x12d/0xb10 [ 172.005337][T10482] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 172.005380][T10482] futex_wake+0x89/0x400 [ 172.005453][T10482] do_futex+0x3f8/0x460 [ 172.005492][T10482] __se_sys_futex+0x2f6/0x370 [ 172.005532][T10482] __x64_sys_futex+0x78/0x90 [ 172.005693][T10482] x64_sys_call+0x22e2/0x2550 [ 172.005723][T10482] do_syscall_64+0x112/0x360 [ 172.005893][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.005924][T10482] RIP: 0033:0x7fa4d43fe159 [ 172.005946][T10482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.005970][T10482] RSP: 002b:00007fa4d2e570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.006064][T10482] RAX: ffffffffffffffda RBX: 00007fa4d4685fa8 RCX: 00007fa4d43fe159 [ 172.006085][T10482] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa4d4685fac [ 172.006104][T10482] RBP: 00007fa4d4685fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 172.006123][T10482] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 172.006186][T10482] R13: 00007fa4d4686038 R14: 00007ffd610fc770 R15: 00007ffd610fc858 [ 172.006287][T10482] [ 172.253955][T10486] loop2: detected capacity change from 0 to 512 [ 172.266301][T10486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.266387][T10486] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.334934][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.466143][T10497] loop2: detected capacity change from 0 to 8192 [ 173.309371][T10550] loop3: detected capacity change from 0 to 8192 [ 173.365442][T10554] loop8: detected capacity change from 0 to 1024 [ 173.375481][T10554] EXT4-fs: Ignoring removed bh option [ 173.407065][T10554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.407152][T10554] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.421248][T10562] ip_tables: iptables: counters copy to user failed while replacing table [ 173.452173][T10554] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.468098][T10554] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.468134][T10554] EXT4-fs (loop8): This should not happen!! Data will be lost [ 173.468134][T10554] [ 173.491277][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.505526][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.519831][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.534420][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.548765][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.563305][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.577697][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.592108][T10554] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: block 3: comm syz.8.2109: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.607970][T10563] EXT4-fs error (device loop8): ext4_ext_remove_space:2977: inode #15: comm syz.8.2109: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 173.804381][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2117'. [ 173.806484][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2117'. [ 174.110675][T10586] loop2: detected capacity change from 0 to 512 [ 174.111721][T10586] EXT4-fs: Ignoring removed nobh option [ 174.117817][T10586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.134494][T10586] EXT4-fs (loop2): 1 truncate cleaned up [ 174.134886][T10586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.203016][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.205589][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.254367][T10592] ip_tables: iptables: counters copy to user failed while replacing table [ 174.753658][T10609] loop8: detected capacity change from 0 to 512 [ 174.754562][T10609] EXT4-fs: Ignoring removed nobh option [ 174.755642][T10609] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 174.764515][T10609] EXT4-fs (loop8): 1 truncate cleaned up [ 174.765522][T10609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.845629][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.868776][T10615] loop9: detected capacity change from 0 to 512 [ 174.884888][T10615] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2135: inode has both inline data and extents flags [ 174.884931][T10615] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.885235][T10615] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2135: couldn't read orphan inode 15 (err -117) [ 174.885293][T10615] loop9: lost filesystem error report for type 5 error -117 [ 174.886439][T10615] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.953123][T10620] loop8: detected capacity change from 0 to 512 [ 174.971374][T10623] lo: Caught tx_queue_len zero misconfig [ 174.983038][T10620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.983146][T10620] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.056144][ T9625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.182694][T10635] capability: warning: `syz.8.2142' uses deprecated v2 capabilities in a way that may be insecure [ 175.197433][ T9350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.208491][T10635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10635 comm=syz.8.2142 [ 175.618214][T10515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.326396][T10652] loop3: detected capacity change from 0 to 512 [ 176.333668][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 176.344015][T10652] EXT4-fs: Ignoring removed nobh option [ 176.355699][T10652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.358080][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 176.375895][T10652] EXT4-fs (loop3): 1 truncate cleaned up [ 176.376319][T10652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.431896][T10659] FAULT_INJECTION: forcing a failure. [ 176.431896][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 176.431943][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.2.2153 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.431977][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.431991][T10659] Call Trace: [ 176.431999][T10659] [ 176.432008][T10659] __dump_stack+0x1d/0x30 [ 176.432086][T10659] dump_stack_lvl+0x95/0xd0 [ 176.432113][T10659] dump_stack+0x15/0x1b [ 176.432138][T10659] should_fail_ex+0x262/0x280 [ 176.432164][T10659] ? mpi_alloc+0x31/0xd0 [ 176.432187][T10659] should_failslab+0x8c/0xb0 [ 176.432347][T10659] __kmalloc_cache_noprof+0x7a/0x400 [ 176.432471][T10659] ? mpi_alloc+0x31/0xd0 [ 176.432568][T10659] mpi_alloc+0x31/0xd0 [ 176.432625][T10659] mpi_read_raw_data+0xf0/0x470 [ 176.432762][T10659] rsa_set_pub_key+0x185/0x340 [ 176.432867][T10659] rsassa_pkcs1_set_pub_key+0x6b/0xf0 [ 176.432962][T10659] public_key_verify_signature+0x32e/0x4e0 [ 176.433203][T10659] x509_check_for_self_signed+0x1c4/0x250 [ 176.433282][T10659] x509_cert_parse+0x3bf/0x450 [ 176.433377][T10659] x509_key_preparse+0x3c/0x420 [ 176.433441][T10659] ? __key_create_or_update+0xc0/0x840 [ 176.433571][T10659] asymmetric_key_preparse+0x68/0xb0 [ 176.433670][T10659] __key_create_or_update+0x2df/0x840 [ 176.433771][T10659] key_create_or_update+0x42/0x60 [ 176.433879][T10659] __se_sys_add_key+0x2a5/0x360 [ 176.434086][T10659] __x64_sys_add_key+0x67/0x80 [ 176.434273][T10659] x64_sys_call+0x1fa9/0x2550 [ 176.434365][T10659] do_syscall_64+0x112/0x360 [ 176.434472][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.434553][T10659] RIP: 0033:0x7f94bd00e159 [ 176.434689][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.434756][T10659] RSP: 002b:00007f94bba67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 176.434828][T10659] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 176.434928][T10659] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 176.434976][T10659] RBP: 00007f94bd0a5024 R08: ffffffffffffffff R09: 0000000000000000 [ 176.435026][T10659] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 176.435086][T10659] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 176.435212][T10659] [ 176.658761][ T9473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.767398][T10676] ip_tables: iptables: counters copy to user failed while replacing table [ 177.076023][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2167'. [ 177.086176][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2167'. [ 177.636482][T10705] loop9: detected capacity change from 0 to 1024 [ 177.643281][T10705] EXT4-fs: Ignoring removed bh option [ 177.656835][T10705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.656987][T10705] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.676657][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 177.676710][ T29] audit: type=1400 audit(1788777759.685:2032): avc: denied { write } for pid=10704 comm="syz.9.2177" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.693377][T10705] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 3) [ 177.710222][T10705] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 177.710316][T10705] EXT4-fs (loop9): This should not happen!! Data will be lost [ 177.710316][T10705] [ 177.723342][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.753605][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.754823][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.756404][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.756950][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.757704][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.758963][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.759486][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.768417][T10705] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: block 3: comm syz.9.2177: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.226493][T10724] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 178.312633][ T29] audit: type=1326 audit(1788777760.325:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.339732][ T29] audit: type=1326 audit(1788777760.345:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.366113][ T29] audit: type=1326 audit(1788777760.375:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.366164][ T29] audit: type=1326 audit(1788777760.375:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.382484][ T29] audit: type=1326 audit(1788777760.395:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.383871][ T29] audit: type=1326 audit(1788777760.395:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.385702][ T29] audit: type=1326 audit(1788777760.395:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.444356][ T29] audit: type=1326 audit(1788777760.455:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.444707][ T29] audit: type=1326 audit(1788777760.455:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.8.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d27e159 code=0x7ffc0000 [ 178.594939][ T9350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.670465][T10741] loop2: detected capacity change from 0 to 1024 [ 178.679356][T10741] EXT4-fs: Ignoring removed bh option [ 178.689669][T10743] FAULT_INJECTION: forcing a failure. [ 178.689669][T10743] name failslab, interval 1, probability 0, space 0, times 0 [ 178.689706][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.9.2193 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.689815][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.689833][T10743] Call Trace: [ 178.689843][T10743] [ 178.689854][T10743] __dump_stack+0x1d/0x30 [ 178.689927][T10743] dump_stack_lvl+0x95/0xd0 [ 178.689958][T10743] dump_stack+0x15/0x1b [ 178.689988][T10743] should_fail_ex+0x262/0x280 [ 178.690028][T10743] ? mpi_alloc+0x31/0xd0 [ 178.690060][T10743] should_failslab+0x8c/0xb0 [ 178.690102][T10743] __kmalloc_cache_noprof+0x7a/0x400 [ 178.690146][T10743] ? mpi_alloc+0x31/0xd0 [ 178.690236][T10743] mpi_alloc+0x31/0xd0 [ 178.690262][T10743] mpi_read_raw_data+0xf0/0x470 [ 178.690297][T10743] rsa_set_pub_key+0x185/0x340 [ 178.690328][T10743] rsassa_pkcs1_set_pub_key+0x6b/0xf0 [ 178.690382][T10743] public_key_verify_signature+0x32e/0x4e0 [ 178.690426][T10743] x509_check_for_self_signed+0x1c4/0x250 [ 178.690450][T10743] x509_cert_parse+0x3bf/0x450 [ 178.690484][T10743] x509_key_preparse+0x3c/0x420 [ 178.690523][T10743] asymmetric_key_preparse+0x68/0xb0 [ 178.690574][T10743] __key_create_or_update+0x2df/0x840 [ 178.690622][T10743] key_create_or_update+0x42/0x60 [ 178.690677][T10743] __se_sys_add_key+0x2a5/0x360 [ 178.690733][T10743] __x64_sys_add_key+0x67/0x80 [ 178.690781][T10743] x64_sys_call+0x1fa9/0x2550 [ 178.690880][T10743] do_syscall_64+0x112/0x360 [ 178.690925][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.690958][T10743] RIP: 0033:0x7fa4d43fe159 [ 178.690981][T10743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.691010][T10743] RSP: 002b:00007fa4d2e57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 178.691090][T10743] RAX: ffffffffffffffda RBX: 00007fa4d4685fa0 RCX: 00007fa4d43fe159 [ 178.691110][T10743] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 178.691137][T10743] RBP: 00007fa4d4495024 R08: ffffffffffffffff R09: 0000000000000000 [ 178.691154][T10743] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 178.691168][T10743] R13: 00007fa4d4686038 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 178.691188][T10743] [ 178.732598][T10741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.733523][T10741] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.842568][T10741] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 3) [ 178.850226][T10741] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 178.850318][T10741] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.850318][T10741] [ 178.907567][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.910491][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.912031][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.916655][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.917771][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.922518][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.925468][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.928607][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.933374][T10741] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.2200: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.555392][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.799029][T10869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2249'. [ 181.918029][T10882] loop3: detected capacity change from 0 to 256 [ 182.020465][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 182.020571][T10895] bond0: Unable to set down delay as MII monitoring is disabled [ 182.064492][T10897] netlink: 'syz.2.2265': attribute type 4 has an invalid length. [ 182.078339][T10897] netlink: 'syz.2.2265': attribute type 4 has an invalid length. [ 182.147573][T10902] FAULT_INJECTION: forcing a failure. [ 182.147573][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 182.147610][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.2.2267 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.147643][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.147662][T10902] Call Trace: [ 182.147671][T10902] [ 182.147681][T10902] __dump_stack+0x1d/0x30 [ 182.147715][T10902] dump_stack_lvl+0x95/0xd0 [ 182.147740][T10902] dump_stack+0x15/0x1b [ 182.147763][T10902] should_fail_ex+0x262/0x280 [ 182.147791][T10902] ? mas_alloc_nodes+0x1a2/0x210 [ 182.147831][T10902] should_failslab+0x8c/0xb0 [ 182.147863][T10902] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 182.147896][T10902] ? mas_alloc_nodes+0x1a2/0x210 [ 182.147939][T10902] mas_alloc_nodes+0x1a2/0x210 [ 182.147979][T10902] mas_preallocate+0x2ca/0x500 [ 182.148015][T10902] commit_merge+0x39d/0x840 [ 182.148040][T10902] vma_modify+0x9eb/0xd50 [ 182.148068][T10902] vma_modify_flags+0x1be/0x250 [ 182.148097][T10902] mlock_fixup+0x166/0x460 [ 182.148129][T10902] apply_vma_lock_flags+0x1c7/0x290 [ 182.148176][T10902] do_mlock+0x3a0/0x510 [ 182.148215][T10902] ? __se_sys_futex+0x2f6/0x370 [ 182.148249][T10902] ? xfd_validate_state+0x45/0xf0 [ 182.148337][T10902] ? restore_fpregs_from_fpstate+0x61/0x110 [ 182.148363][T10902] __x64_sys_mlock+0x4d/0x70 [ 182.148391][T10902] x64_sys_call+0x2232/0x2550 [ 182.148502][T10902] do_syscall_64+0x112/0x360 [ 182.148615][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.148696][T10902] RIP: 0033:0x7f94bd00e159 [ 182.148757][T10902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.148816][T10902] RSP: 002b:00007f94bba67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 182.148881][T10902] RAX: ffffffffffffffda RBX: 00007f94bd295fa0 RCX: 00007f94bd00e159 [ 182.148935][T10902] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 182.148985][T10902] RBP: 00007f94bd0a5024 R08: 0000000000000000 R09: 0000000000000000 [ 182.149029][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.149087][T10902] R13: 00007f94bd296038 R14: 00007f94bd295fa0 R15: 00007ffdbc813148 [ 182.149154][T10902] [ 182.504799][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 182.504843][T10926] bond0: Unable to set down delay as MII monitoring is disabled [ 182.795488][T10948] FAULT_INJECTION: forcing a failure. [ 182.795488][T10948] name failslab, interval 1, probability 0, space 0, times 0 [ 182.795602][T10948] CPU: 1 UID: 0 PID: 10948 Comm: syz.8.2295 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.795638][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.795657][T10948] Call Trace: [ 182.795685][T10948] [ 182.795752][T10948] __dump_stack+0x1d/0x30 [ 182.795781][T10948] dump_stack_lvl+0x95/0xd0 [ 182.795804][T10948] dump_stack+0x15/0x1b [ 182.795830][T10948] should_fail_ex+0x262/0x280 [ 182.795874][T10948] ? mpi_alloc+0x31/0xd0 [ 182.795899][T10948] should_failslab+0x8c/0xb0 [ 182.795939][T10948] __kmalloc_cache_noprof+0x7a/0x400 [ 182.795975][T10948] ? mpi_alloc+0x31/0xd0 [ 182.795999][T10948] mpi_alloc+0x31/0xd0 [ 182.796020][T10948] mpi_read_raw_data+0xf0/0x470 [ 182.796065][T10948] rsa_set_pub_key+0x185/0x340 [ 182.796104][T10948] rsassa_pkcs1_set_pub_key+0x6b/0xf0 [ 182.796194][T10948] public_key_verify_signature+0x32e/0x4e0 [ 182.796250][T10948] x509_check_for_self_signed+0x1c4/0x250 [ 182.796281][T10948] x509_cert_parse+0x3bf/0x450 [ 182.796413][T10948] x509_key_preparse+0x3c/0x420 [ 182.796443][T10948] asymmetric_key_preparse+0x68/0xb0 [ 182.796604][T10948] __key_create_or_update+0x2df/0x840 [ 182.796659][T10948] key_create_or_update+0x42/0x60 [ 182.796701][T10948] __se_sys_add_key+0x2a5/0x360 [ 182.796761][T10948] __x64_sys_add_key+0x67/0x80 [ 182.796847][T10948] x64_sys_call+0x1fa9/0x2550 [ 182.796881][T10948] do_syscall_64+0x112/0x360 [ 182.796946][T10948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.796977][T10948] RIP: 0033:0x7fee3d27e159 [ 182.796999][T10948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.797024][T10948] RSP: 002b:00007fee3bcd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 182.797123][T10948] RAX: ffffffffffffffda RBX: 00007fee3d505fa0 RCX: 00007fee3d27e159 [ 182.797138][T10948] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 182.797153][T10948] RBP: 00007fee3d315024 R08: ffffffffffffffff R09: 0000000000000000 [ 182.797202][T10948] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 182.797221][T10948] R13: 00007fee3d506038 R14: 00007fee3d505fa0 R15: 00007ffe7e761068 [ 182.797247][T10948] [ 183.004991][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 183.005013][ T29] audit: type=1326 audit(1788777765.015:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 183.005098][ T29] audit: type=1326 audit(1788777765.015:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 183.013301][ T29] audit: type=1326 audit(1788777765.015:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 183.013337][ T29] audit: type=1326 audit(1788777765.015:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 183.013366][ T29] audit: type=1326 audit(1788777765.025:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa4d43fe159 code=0x7ffc0000 [ 183.081920][ T29] audit: type=1326 audit(1788777765.075:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4d43be98e code=0x7ffc0000 [ 183.082063][ T29] audit: type=1326 audit(1788777765.085:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4d43be98e code=0x7ffc0000 [ 183.082229][ T29] audit: type=1326 audit(1788777765.085:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4d43be98e code=0x7ffc0000 [ 183.082415][ T29] audit: type=1326 audit(1788777765.085:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4d43be98e code=0x7ffc0000 [ 183.088584][ T29] audit: type=1326 audit(1788777765.095:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10952 comm="syz.9.2286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4d43be98e code=0x7ffc0000 [ 183.689714][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2292'. [ 183.689817][T10969] bond0: Unable to set down delay as MII monitoring is disabled [ 184.459657][T10993] loop2: detected capacity change from 0 to 512 [ 184.486372][T10993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.486460][T10993] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.574776][ T6986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.594989][T10998] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2316'. [ 184.614371][T11001] FAULT_INJECTION: forcing a failure. [ 184.614371][T11001] name failslab, interval 1, probability 0, space 0, times 0 [ 184.614426][T11001] CPU: 1 UID: 0 PID: 11001 Comm: syz.3.2301 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.614534][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.614548][T11001] Call Trace: [ 184.614557][T11001] [ 184.614569][T11001] __dump_stack+0x1d/0x30 [ 184.614604][T11001] dump_stack_lvl+0x95/0xd0 [ 184.614642][T11001] dump_stack+0x15/0x1b [ 184.614668][T11001] should_fail_ex+0x262/0x280 [ 184.614713][T11001] ? mpi_alloc+0x31/0xd0 [ 184.614798][T11001] should_failslab+0x8c/0xb0 [ 184.614834][T11001] __kmalloc_cache_noprof+0x7a/0x400 [ 184.614872][T11001] ? mpi_alloc+0x31/0xd0 [ 184.614893][T11001] mpi_alloc+0x31/0xd0 [ 184.614932][T11001] mpi_read_raw_data+0xf0/0x470 [ 184.614994][T11001] rsa_set_pub_key+0x185/0x340 [ 184.615039][T11001] rsassa_pkcs1_set_pub_key+0x6b/0xf0 [ 184.615075][T11001] public_key_verify_signature+0x32e/0x4e0 [ 184.615188][T11001] x509_check_for_self_signed+0x1c4/0x250 [ 184.615245][T11001] x509_cert_parse+0x3bf/0x450 [ 184.615345][T11001] x509_key_preparse+0x3c/0x420 [ 184.615372][T11001] asymmetric_key_preparse+0x68/0xb0 [ 184.615403][T11001] __key_create_or_update+0x2df/0x840 [ 184.615556][T11001] key_create_or_update+0x42/0x60 [ 184.615589][T11001] __se_sys_add_key+0x2a5/0x360 [ 184.615639][T11001] __x64_sys_add_key+0x67/0x80 [ 184.615676][T11001] x64_sys_call+0x1fa9/0x2550 [ 184.615708][T11001] do_syscall_64+0x112/0x360 [ 184.615748][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.615777][T11001] RIP: 0033:0x7fa341f7e159 [ 184.615796][T11001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.615836][T11001] RSP: 002b:00007fa3409d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 184.615859][T11001] RAX: ffffffffffffffda RBX: 00007fa342205fa0 RCX: 00007fa341f7e159 [ 184.615938][T11001] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 184.615952][T11001] RBP: 00007fa342015024 R08: ffffffffffffffff R09: 0000000000000000 [ 184.615966][T11001] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 184.615979][T11001] R13: 00007fa342206038 R14: 00007fa342205fa0 R15: 00007ffcb4e14418 [ 184.616004][T11001] [ 184.739144][T11003] team_slave_1: Caught tx_queue_len zero misconfig [ 184.942283][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 184.942406][T11012] netlink: 'syz.3.2308': attribute type 30 has an invalid length. [ 184.992106][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 184.992167][T11012] netlink: 'syz.3.2308': attribute type 30 has an invalid length. [ 185.147473][T11026] loop3: detected capacity change from 0 to 1024 [ 185.154617][T11026] EXT4-fs: Ignoring removed orlov option [ 185.187406][T11026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.189216][T11026] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2311'. [ 185.226831][ T9473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.423883][T11034] FAULT_INJECTION: forcing a failure. [ 185.423883][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 185.423928][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.9.2318 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.423965][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.424052][T11034] Call Trace: [ 185.424062][T11034] [ 185.424073][T11034] __dump_stack+0x1d/0x30 [ 185.424108][T11034] dump_stack_lvl+0x95/0xd0 [ 185.424172][T11034] dump_stack+0x15/0x1b [ 185.424201][T11034] should_fail_ex+0x262/0x280 [ 185.424228][T11034] ? usbdev_open+0x4c/0x450 [ 185.424293][T11034] should_failslab+0x8c/0xb0 [ 185.424409][T11034] __kmalloc_cache_noprof+0x7a/0x400 [ 185.424461][T11034] ? kobject_get_unless_zero+0xf5/0x160 [ 185.424506][T11034] ? usbdev_open+0x4c/0x450 [ 185.424536][T11034] ? mutex_unlock+0x4e/0x90 [ 185.424569][T11034] usbdev_open+0x4c/0x450 [ 185.424602][T11034] chrdev_open+0x2eb/0x3a0 [ 185.424681][T11034] do_dentry_open+0x49f/0xa60 [ 185.424706][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 185.424774][T11034] vfs_open+0x37/0x1e0 [ 185.424799][T11034] path_openat+0xc01/0x10d0 [ 185.424833][T11034] do_file_open+0x16c/0x290 [ 185.424898][T11034] do_sys_openat2+0xa0/0x130 [ 185.424925][T11034] __x64_sys_openat+0xf2/0x120 [ 185.424959][T11034] x64_sys_call+0x1f72/0x2550 [ 185.425036][T11034] do_syscall_64+0x112/0x360 [ 185.425075][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.425172][T11034] RIP: 0033:0x7fa4d43be98e [ 185.425196][T11034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.425219][T11034] RSP: 002b:00007fa4d2e56b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.425240][T11034] RAX: ffffffffffffffda RBX: 00007fa4d2e576c0 RCX: 00007fa4d43be98e [ 185.425256][T11034] RDX: 0000000000101b01 RSI: 00007fa4d2e56c00 RDI: ffffffffffffff9c [ 185.425274][T11034] RBP: 00007fa4d2e56c00 R08: 0000000000000000 R09: 0000000000000000 [ 185.425363][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 185.425378][T11034] R13: 00007fa4d4686038 R14: 00007fa4d4685fa0 R15: 00007ffd610fc858 [ 185.425434][T11034] [ 185.650084][T11040] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2319'. [ 185.684823][T11045] loop9: detected capacity change from 0 to 1024 [ 185.692266][T11045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.720345][T11045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.992924][ T9350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.035761][T11065] ip_tables: iptables: counters copy to user failed while replacing table [ 186.246358][T11073] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2332'. [ 186.337435][T11071] ================================================================== [ 186.337479][T11071] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 186.337522][T11071] [ 186.337530][T11071] read-write to 0xffffc900027afcc0 of 8 bytes by task 11074 on cpu 0: [ 186.337548][T11071] shmem_writeout+0x2eb/0x8f0 [ 186.337575][T11071] shrink_folio_list+0x1a81/0x26f0 [ 186.337604][T11071] shrink_lruvec+0x1293/0x1d40 [ 186.337645][T11071] shrink_node+0x67c/0x2000 [ 186.337674][T11071] do_try_to_free_pages+0x408/0xca0 [ 186.337708][T11071] try_to_free_mem_cgroup_pages+0x201/0x420 [ 186.337746][T11071] mem_cgroup_resize_max+0x13d/0x290 [ 186.337783][T11071] mem_cgroup_write+0x132/0x1c0 [ 186.337815][T11071] cgroup_file_write+0x197/0x350 [ 186.337855][T11071] kernfs_fop_write_iter+0x1d2/0x2e0 [ 186.337883][T11071] vfs_write+0x57f/0x9a0 [ 186.337910][T11071] ksys_write+0xdc/0x1a0 [ 186.337936][T11071] __x64_sys_write+0x40/0x50 [ 186.337970][T11071] x64_sys_call+0x154e/0x2550 [ 186.338007][T11071] do_syscall_64+0x112/0x360 [ 186.338045][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.338074][T11071] [ 186.338080][T11071] read to 0xffffc900027afcc0 of 8 bytes by task 11071 on cpu 1: [ 186.338097][T11071] shmem_fallocate+0x5cb/0x8d0 [ 186.338121][T11071] vfs_fallocate+0x3ac/0x400 [ 186.338161][T11071] file_ioctl+0x4e1/0x5b0 [ 186.338191][T11071] do_vfs_ioctl+0x7c4/0xe50 [ 186.338228][T11071] __se_sys_ioctl+0x82/0x140 [ 186.338261][T11071] __x64_sys_ioctl+0x43/0x50 [ 186.338289][T11071] x64_sys_call+0x239d/0x2550 [ 186.338319][T11071] do_syscall_64+0x112/0x360 [ 186.338356][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.338384][T11071] [ 186.338389][T11071] value changed: 0x000000000000012d -> 0x0000000000000131 [ 186.338405][T11071] [ 186.338410][T11071] Reported by Kernel Concurrency Sanitizer on: [ 186.338424][T11071] CPU: 1 UID: 0 PID: 11071 Comm: syz.2.2329 Not tainted syzkaller #0 PREEMPT(lazy) [ 186.338465][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.338482][T11071] ================================================================== [ 186.363863][T11078] FAULT_INJECTION: forcing a failure. [ 186.363863][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 186.364130][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.8.2333 Not tainted syzkaller #0 PREEMPT(lazy) [ 186.364277][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.364323][T11078] Call Trace: [ 186.364353][T11078] [ 186.364378][T11078] __dump_stack+0x1d/0x30 [ 186.364501][T11078] dump_stack_lvl+0x95/0xd0 [ 186.364584][T11078] dump_stack+0x15/0x1b [ 186.364658][T11078] should_fail_ex+0x262/0x280 [ 186.364741][T11078] ? usbdev_open+0x4c/0x450 [ 186.364866][T11078] should_failslab+0x8c/0xb0 [ 186.365005][T11078] __kmalloc_cache_noprof+0x7a/0x400 [ 186.365141][T11078] ? usbdev_open+0x4c/0x450 [ 186.365272][T11078] usbdev_open+0x4c/0x450 [ 186.365415][T11078] ? kobject_get_unless_zero+0xf5/0x160 [ 186.365558][T11078] chrdev_open+0x2eb/0x3a0 [ 186.365727][T11078] do_dentry_open+0x49f/0xa60 [ 186.365809][T11078] ? __pfx_chrdev_open+0x10/0x10 [ 186.365930][T11078] vfs_open+0x37/0x1e0 [ 186.366007][T11078] path_openat+0xc01/0x10d0 [ 186.366148][T11078] do_file_open+0x16c/0x290 [ 186.366194][T11078] do_sys_openat2+0xa0/0x130 [ 186.366225][T11078] __x64_sys_openat+0xf2/0x120 [ 186.366257][T11078] x64_sys_call+0x1f72/0x2550 [ 186.366364][T11078] do_syscall_64+0x112/0x360 [ 186.366422][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.366448][T11078] RIP: 0033:0x7fee3d23e98e [ 186.366521][T11078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.366626][T11078] RSP: 002b:00007fee3bcd6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.366761][T11078] RAX: ffffffffffffffda RBX: 00007fee3bcd76c0 RCX: 00007fee3d23e98e [ 186.366813][T11078] RDX: 0000000000101b01 RSI: 00007fee3bcd6c00 RDI: ffffffffffffff9c [ 186.366866][T11078] RBP: 00007fee3bcd6c00 R08: 0000000000000000 R09: 0000000000000000 [ 186.366912][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 186.366968][T11078] R13: 00007fee3d506038 R14: 00007fee3d505fa0 R15: 00007ffe7e761068 [ 186.367013][T11078]