last executing test programs: 2m33.392100035s ago: executing program 32 (id=1151): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m10.933648828s ago: executing program 33 (id=1506): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 2m9.842146236s ago: executing program 3 (id=1533): socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x2d, 0x2, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.730992523s ago: executing program 34 (id=1541): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x71bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 2m8.714046254s ago: executing program 3 (id=1543): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3ffffffe}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 2m8.532576509s ago: executing program 3 (id=1544): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m8.331867154s ago: executing program 3 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 2m8.297874034s ago: executing program 3 (id=1559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 2m7.66580486s ago: executing program 3 (id=1558): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801") 2m7.66564289s ago: executing program 35 (id=1558): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801") 1m52.788104983s ago: executing program 0 (id=1792): r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) 1m51.444295237s ago: executing program 0 (id=1805): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "8affff42f431c3d9a322d200008000004000"}, 0xe2f2, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x4d) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1m50.759984424s ago: executing program 0 (id=1813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) accept$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd60000000004e0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="5018000990"], 0x0) 1m50.705160145s ago: executing program 0 (id=1815): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980), 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) openat(r0, &(0x7f0000000080)='./file1\x00', 0x40c43, 0x12b) sync() 1m50.434243092s ago: executing program 0 (id=1821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xffffffff, 0xb, 0x0, 0x86, 0x80, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 1m49.821763957s ago: executing program 0 (id=1833): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 1m49.821675127s ago: executing program 36 (id=1833): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 1m40.731172475s ago: executing program 6 (id=1890): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x169901, 0x0) fremovexattr(r2, &(0x7f0000004240)=@known='system.posix_acl_default\x00') 1m40.53742276s ago: executing program 6 (id=1894): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@dmode}, {@session={'session', 0x3d, 0xd}}, {@cruft}, {@map_acorn}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@showassoc}, {@map_normal}, {@nocompress}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x81, 0xa4f, &(0x7f0000001500)="$eJzs3U9sXVdeB/DvfbYTxzMkmU4opWqbl5RkPB3j2M40IepiSOyX1IP/INuRGrGYzDQOCjEUGpDaCCnphhUVSCAWsKtYwYJK3dAN6g52sGKBVHXFvmIVVh7dd5/jZ/s9vzh17CT9fKznd++5v3vO79537zt+f3xPeLasHtkwt7ravD3K/EdtZS1X/2kPMuYpdmnqq08+/bi8fXQ/B9KXN4t/TQaT1JP+JC8lA5NTC/OzB7ev6HZyPckXSZGkDC4eNYfrKf4q312f/yLFP5TtdnXgUWuml1W+1fb7+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdRMTk1NjZeHMj03NV36pWkvsXk1MJ8kdXVrUvW1ql83hz1u/i8Z7tJUd4yOLg21PdLx9YXv5ikfjKvVHOvNAckz2DufufFo299v7+2tn63bL6Rg49UbWpVbrd/vrKy/H73uNV7VdwuJvj0uNKYm16cn569eKVRn16cr184d27szNuXF+uXp2cai9cWlxqz9cmFxsWl+YX68OQP6+MXLpytN0avzV+duzI1OtNYKzz/mxNjY+fqPx393cbFhcX5uTM/HV2cfHt6ZmZ67kozplxcxpwvD8TfmV6qLzUuztbrN2+tLJ/dlFPf5p1dBo332pIyaKJHTH/GJibGxycmxj9qjZ49sVZw7s0Lb54fG+sf2yRbIp7QQcvT5VD3h3k3n77hG6lV/X/+YCbTmcvVvJN6x5/JTGUh85ntsrxlrf8/daaxbbvt/X+rl+9vW/xy+etkXmvNDrb6/19J0t7/d8ll737u5MPcze38PCtZyXLe3/eM9vbnShqZy3QWM5/pzOZis6TeKqnnQs7lXMbys7yd41lMPZcznZk0sphrWcxSGs0jajILaeRiljKfhdQznMn8MPWM50Iu5GzqaWQ01zKfq5nLlUzlYrOWm7nV3O9nt8nxYdB496Dyj7kqaGKbmjZ35uWxvrP+v/G8/iXII9v9J3F4TKut/v/ApvK+raHDk3uVFAAAALCrfv0/cvjYC//+ZVLk1eb78penZxo/2e+0AAAAgF3U/LreK+XdQDn16mDz9f/YfqcFAAAA7KKi+T92RZKhHK+m1v5dypsAAAAA8Jxofv7/Worj6wVe/wMAAMBzpvc19ntGFCNrl/+t36jub7QiqrmiyPRMY3Ryfuat8ZxuXmUgyatttc0kqTWvOVgMNP/94I2cqKJODFX3Q+s1lm0OllHjo2+N542cbG3I8Ovl3evDHSInqsgfVJE/aI/sy4bIs2UkADzvTnbqj3fY/7+RkSpi5OVml9//coc+eEzPCgBPi4dj7Px/a0izDv1/K+K1bv3/j7d5/V9GvJCbx6uvFIzm3byXldzISFrfODjeqdYDrdH1qq8hjPR4N2Co9ZWF/zpfy8iW9wMGH25re+xyJjKy/o7AL1rvVWyst1jL4Wy1tMOgCADwLDq5bT/8aP3/SI/X/0O+UggAT5U7H96tRrC/8+Hd1XutiYcl6xNDbSX3usR0m9jvbQQANtJLAwAAAAAAAAAAAAAAAAAAAAAAAAAAwO7bcLn+Q63CzRfw/8/TycrKcrKjy/5/w4nBThk+3kQte5Tzvk/0JdmdCsvdv7O1fpIdtzXY4WDbwcQ/H2qt/r/7v+f3eyK7XiEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfAkXS16m8lhxMMpbkzN5n9eTc3+8Edkv9wGOtVjzIg3yQw7ueDwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAt1zr+v+1VPffqYrSX0tOJbme5Pf2O8fd9GC/E3gyit4hf1gFrl//v5YMZLVIf/WwpxiYnFqYny2rKg6Wy7/65NOPy1vvureOqlBWULZQHlQLD7OsWmgLG9i41veaa/13a64+dal5YF5aujwzNXtl4bfXA18sPqvGrai3rb2W75+f+re/bis+UGVRfFZuaWdVu0NTy3du/+l7f1yfutxsd2pru7+2cb1iu3Yfwa2V5YmypaXGO0t/9ke3Pmhb9EJOJK8PJ8Mbt/D3y1uXlk5s3p+bsv26+IvicP4u13O4dcAUq0W5c440t//QzVsry6Pvvrdy42FO9zbkdDTHk9xIBjvk9C+dczre/dhsHnW1gbLVsWZQ+etYj23cVluN41326/eah8xQ523o0ma9x/nVY7+3MjrbMaO/+ZPv5/SOH+nTPVrsqPi6+J9i89la+zLVU32Hs7NDFc3ItiOlfdmG06tWRTa3fKJ9wc8219n1rOQJ+Mv8Ir/1cPyXWtvzf+ux2pvno7YWO58Xyc7Pi388sqVHWdfskY5tGu6o9ezTbZ1WnseqqC55/mp+VNW5g2eUH/XqsZ/Q+f/3xXD+L/eN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz9iqQvyerBTeW15FSSo0mOlPP1ZHXzuvcfo73aUPHYue6Gx8n52VN03dDiQR7kgxze64wAAAAAAAAAeDIuTX31yacfl7fm5/F9+Y1akh9Xn/T3Jzla/O3A5NTC/GyPigaS62sf6Q/uLIfr5a/vrs9/Uc691GOl/f36AAA8034ZAAD//+b1YfU=") sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffffbffb}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="120000000000000029000000"], 0xb8}, 0x3400c8d4) 1m40.393697744s ago: executing program 6 (id=1899): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0xa, 0xc, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x1, 0x7, 0x4, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1m40.288832366s ago: executing program 6 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x84000, 0x0) 1m40.216057648s ago: executing program 6 (id=1906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x5}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) 1m39.983686534s ago: executing program 6 (id=1912): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 1m39.932031115s ago: executing program 37 (id=1912): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 1m37.546622955s ago: executing program 8 (id=1953): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) 1m36.622442448s ago: executing program 8 (id=1971): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x400c090) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4) 1m36.52668296s ago: executing program 8 (id=1966): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004804}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m36.135318041s ago: executing program 8 (id=1972): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x81001) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 1m36.024338323s ago: executing program 8 (id=1973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2={0xff, 0x5}}, 0x1c) 1m34.898778732s ago: executing program 8 (id=1987): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 1m34.814877703s ago: executing program 38 (id=1987): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 11.585520129s ago: executing program 1 (id=3402): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xd1, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/41, 0x29}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.474667812s ago: executing program 1 (id=3403): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11004, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x1800, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$packet(r0, 0x0, 0x0, 0x2000000, 0x0, 0x0) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.582144544s ago: executing program 1 (id=3413): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 10.540795355s ago: executing program 1 (id=3414): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xacda, 0x21002, 0x0, 0x0, 0x4, 0x14, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000003008000000b00", [0x4, 0x7]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x2000000, 0x10000) 10.301735401s ago: executing program 1 (id=3415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$eJzs2r+LHGUYB/BnzguJFy674i8SEF+0UJsht7VFDk1AXFA0K0RBMvFmddlx99hZDlbEXKWtf4K1WNoJktLmQPwLLOyuuTKFOJLb87IJJyJiNujn08wD73zheXmHl6eY/Ze//HjYr/N+MY2VLIuVS7Ebt7Nox0r8YTdeeuHaD8+8fe3d1ze73ctvpXRl8+pGJ6V07tnv3/v0m+duTc++8+25707HXvv9/YPOL3tP7Z3f/+3qR4M6Deo0Gk9TkW6Mx9PiRlWmrUE9zFN6syqLukyDUV1O7lnvV+Pt7VkqRlvra9uTsq5TMZqlYTlL03GaTmap+LAYjFKe52l9Lfgnel/fbpo4aE5dj6ZpHv0qzt6K9Z+jFdljKXv8Uvbk9ezp3ez8QdO0lt0q/wrn//+2cKmfiai+2Ont9ObP+fqrP8YgqijjYrTi17jzmRyZ11de616+mA614/Pq5lH+5qneI4f5zf5RfiNa0T45vzHPp8X8Tu90rC3mO9GKJ07Od07Mn4kXn1/I59GKnz6IcVSxFXeyd/OfbaT0yhvd+/IXDt8DAPivydOx9r3zz3x+y/M/W5/nj+erv54P75uvVuPC6nL3TkQ9+2RYVFU5URwXq/FQtKFQLLFY9s3Eg3D30JfdCQAAAAAAAAAAAH/Hg/idcNl7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHm6/BwAA//+HytTx") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 9.822977053s ago: executing program 1 (id=3416): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xfe}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20040054) 783.43651ms ago: executing program 2 (id=3700): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6a040000) 752.984151ms ago: executing program 7 (id=3703): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x13200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={0x0}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x90) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0xc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 647.394583ms ago: executing program 7 (id=3705): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0xc75, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 644.681754ms ago: executing program 2 (id=3707): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 643.385343ms ago: executing program 4 (id=3709): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) socket(0x1a, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff033189442602000000f09900", 0x0, 0x61, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 590.267754ms ago: executing program 2 (id=3712): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) unshare(0x2040400) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 576.176175ms ago: executing program 9 (id=3713): mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2003}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) 576.096945ms ago: executing program 2 (id=3714): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 576.005155ms ago: executing program 7 (id=3715): io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 507.703797ms ago: executing program 4 (id=3717): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x1, 0x6) 493.933297ms ago: executing program 2 (id=3718): add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 493.656927ms ago: executing program 9 (id=3719): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x4, &(0x7f00000003c0)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) 445.733358ms ago: executing program 2 (id=3720): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0xfffffffc, 0x0, 0xa5d8e3edaa5b6a91}, 0x8000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 445.603558ms ago: executing program 4 (id=3721): io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffcf}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x7}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000000001"], 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 426.966729ms ago: executing program 9 (id=3724): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 349.731811ms ago: executing program 4 (id=3725): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0xb9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1103, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x80000008, 0xee}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 317.117051ms ago: executing program 4 (id=3726): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x3}, 0x10000, 0x6, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrandom(&(0x7f0000004040)=""/80, 0x50, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1fe, 0x2, @perf_bp={0x0, 0x8}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) 268.155483ms ago: executing program 9 (id=3727): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 145.724126ms ago: executing program 4 (id=3728): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7f, 0x3, 0x1, 0xc, 0x0, 0x2, 0x80004, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={0x0}, 0x1000, 0x4, 0x80000000, 0x6, 0x7, 0x8, 0xd0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x2, r1, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 145.580156ms ago: executing program 9 (id=3729): set_mempolicy(0x5, &(0x7f0000000340)=0x4000000ff9, 0xf) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 117.566516ms ago: executing program 5 (id=3731): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x1c}], 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 53.698498ms ago: executing program 5 (id=3732): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000040), &(0x7f0000000180)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 53.184118ms ago: executing program 5 (id=3733): r0 = timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 53.091338ms ago: executing program 5 (id=3734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) syz_emit_ethernet(0x3b6, &(0x7f0000000240)=ANY=[], 0x0) 50.348938ms ago: executing program 5 (id=3735): unshare(0x22020600) r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='sec']) 32.185918ms ago: executing program 5 (id=3736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 0s ago: executing program 9 (id=3737): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8003) fcntl$setlease(r0, 0x400, 0x2) kernel console output (not intermixed with test programs): T11128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.452208][T11128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.806498][T11139] loop9: detected capacity change from 0 to 512 [ 193.567087][T11171] netlink: 'syz.2.2534': attribute type 17 has an invalid length. [ 193.672239][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2536'. [ 193.719761][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2536'. [ 193.740221][T11178] FAULT_INJECTION: forcing a failure. [ 193.740221][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 193.740330][T11178] CPU: 1 UID: 0 PID: 11178 Comm: syz.9.2538 Not tainted syzkaller #0 PREEMPT(lazy) [ 193.740361][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.740375][T11178] Call Trace: [ 193.740382][T11178] [ 193.740391][T11178] __dump_stack+0x1d/0x30 [ 193.740493][T11178] dump_stack_lvl+0x95/0xd0 [ 193.740517][T11178] dump_stack+0x15/0x1b [ 193.740539][T11178] should_fail_ex+0x262/0x280 [ 193.740561][T11178] ? device_add+0x88/0x790 [ 193.740583][T11178] should_failslab+0x8c/0xb0 [ 193.740697][T11178] __kmalloc_cache_noprof+0x7a/0x400 [ 193.740728][T11178] ? device_add+0x88/0x790 [ 193.740750][T11178] device_add+0x88/0x790 [ 193.740782][T11178] netdev_register_kobject+0x127/0x240 [ 193.740815][T11178] register_netdevice+0xaf7/0x11a0 [ 193.740846][T11178] vif_add+0x57e/0xd00 [ 193.740897][T11178] ? _copy_from_user+0x89/0xb0 [ 193.740979][T11178] ip_mroute_setsockopt+0x81d/0xa00 [ 193.741003][T11178] ? __pfx_futex_wake_mark+0x10/0x10 [ 193.741041][T11178] do_ip_setsockopt+0xd36/0x22f0 [ 193.741152][T11178] ip_setsockopt+0x58/0x110 [ 193.741185][T11178] raw_setsockopt+0xbb/0x140 [ 193.741207][T11178] sock_common_setsockopt+0x69/0x80 [ 193.741299][T11178] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.741325][T11178] __sys_setsockopt+0x184/0x200 [ 193.741431][T11178] __x64_sys_setsockopt+0x64/0x80 [ 193.741461][T11178] x64_sys_call+0x248f/0x2550 [ 193.741498][T11178] do_syscall_64+0x112/0x360 [ 193.741544][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.741569][T11178] RIP: 0033:0x7f815842e159 [ 193.741587][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.741608][T11178] RSP: 002b:00007f8156e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.741632][T11178] RAX: ffffffffffffffda RBX: 00007f81586b5fa0 RCX: 00007f815842e159 [ 193.741648][T11178] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 193.741684][T11178] RBP: 00007f81584c5024 R08: 0000000000000010 R09: 0000000000000000 [ 193.741699][T11178] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 193.741714][T11178] R13: 00007f81586b6038 R14: 00007f81586b5fa0 R15: 00007ffd9fe9c0d8 [ 193.741734][T11178] [ 193.978442][T11188] loop9: detected capacity change from 0 to 1024 [ 193.997572][T11187] loop5: detected capacity change from 0 to 2048 [ 193.998819][T11188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.016904][ T29] audit: type=1400 audit(2000000022.380:1914): avc: denied { write } for pid=11186 comm="syz.9.2543" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.043218][ T29] audit: type=1400 audit(2000000022.400:1915): avc: denied { rename } for pid=11192 comm="syz.2.2544" name="bus" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.073534][T11187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.091525][ T8960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.130815][T11201] ip_tables: iptables: counters copy to user failed while replacing table [ 194.162735][ T29] audit: type=1400 audit(2000000022.520:1916): avc: denied { write } for pid=11185 comm="syz.5.2542" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.195678][ T29] audit: type=1400 audit(2000000022.560:1917): avc: denied { setopt } for pid=11198 comm="syz.9.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.407580][ T29] audit: type=1326 audit(2000000022.770:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.7.2551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13808ce159 code=0x0 [ 194.773959][ T4965] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 194.774036][ T4965] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.774738][ T4965] EXT4-fs (loop5): This should not happen!! Data will be lost [ 194.774738][ T4965] [ 194.774948][ T4965] EXT4-fs (loop5): Total free blocks count 0 [ 194.774967][ T4965] EXT4-fs (loop5): Free/Dirty block details [ 194.774982][ T4965] EXT4-fs (loop5): free_blocks=4096 [ 194.774998][ T4965] EXT4-fs (loop5): dirty_blocks=512 [ 194.775014][ T4965] EXT4-fs (loop5): Block reservation details [ 194.775029][ T4965] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 194.783757][ T4965] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 194.799653][ T9544] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 194.887583][T11224] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 194.929767][ T29] audit: type=1400 audit(2000000023.290:1919): avc: denied { mounton } for pid=11229 comm="syz.1.2568" path="/480/file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.982655][T11235] loop5: detected capacity change from 0 to 512 [ 194.990254][T11235] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2559: corrupted in-inode xattr: e_value size too large [ 194.990288][T11235] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.991159][T11235] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2559: couldn't read orphan inode 15 (err -117) [ 194.991190][T11235] loop5: lost filesystem error report for type 5 error -117 [ 194.991993][T11235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.004389][ T29] audit: type=1400 audit(2000000023.360:1920): avc: denied { write } for pid=11234 comm="syz.5.2559" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.035318][ T9544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.246049][T11240] loop5: detected capacity change from 0 to 32768 [ 195.287152][T11240] loop5: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 195.287305][T11240] loop5: p1 start 146641443 is beyond EOD, truncated [ 195.304642][T11240] loop5: p6 start 50334720 is beyond EOD, truncated [ 195.304674][T11240] loop5: p7 start 146641443 is beyond EOD, truncated [ 195.320471][T11240] loop5: p9 start 50334720 is beyond EOD, truncated [ 195.406430][T11252] ip_tables: iptables: counters copy to user failed while replacing table [ 195.449504][ T9184] udevd[9184]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 195.461518][ T9092] udevd[9092]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 195.466065][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 195.475672][ T9510] udevd[9510]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 195.597084][T11255] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 195.910164][T11276] loop5: detected capacity change from 0 to 256 [ 195.949606][T11268] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2575'. [ 196.499213][T11324] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2592'. [ 196.785049][T11333] FAULT_INJECTION: forcing a failure. [ 196.785049][T11333] name failslab, interval 1, probability 0, space 0, times 0 [ 196.785155][T11333] CPU: 1 UID: 0 PID: 11333 Comm: syz.2.2601 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.785181][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.785194][T11333] Call Trace: [ 196.785200][T11333] [ 196.785210][T11333] __dump_stack+0x1d/0x30 [ 196.785241][T11333] dump_stack_lvl+0x95/0xd0 [ 196.785318][T11333] dump_stack+0x15/0x1b [ 196.785338][T11333] should_fail_ex+0x262/0x280 [ 196.785433][T11333] ? asymmetric_key_generate_id+0x63/0x140 [ 196.785460][T11333] should_failslab+0x8c/0xb0 [ 196.785490][T11333] __kmalloc_noprof+0xd0/0x4d0 [ 196.785522][T11333] ? asymmetric_key_generate_id+0x63/0x140 [ 196.785607][T11333] asymmetric_key_generate_id+0x63/0x140 [ 196.785638][T11333] ? x509_get_sig_params+0x271/0x290 [ 196.785671][T11333] x509_cert_parse+0x365/0x450 [ 196.785746][T11333] x509_key_preparse+0x3c/0x420 [ 196.785782][T11333] asymmetric_key_preparse+0x68/0xb0 [ 196.785812][T11333] __key_create_or_update+0x2df/0x840 [ 196.785902][T11333] key_create_or_update+0x42/0x60 [ 196.785928][T11333] __se_sys_add_key+0x2a5/0x360 [ 196.786009][T11333] __x64_sys_add_key+0x67/0x80 [ 196.786043][T11333] x64_sys_call+0x1fa9/0x2550 [ 196.786073][T11333] do_syscall_64+0x112/0x360 [ 196.786103][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.786195][T11333] RIP: 0033:0x7f3c19c5e159 [ 196.786218][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.786248][T11333] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 196.786319][T11333] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 196.786336][T11333] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 196.786358][T11333] RBP: 00007f3c19cf5024 R08: 0000000024d3f270 R09: 0000000000000000 [ 196.786395][T11333] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 196.786410][T11333] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 196.786430][T11333] [ 196.989239][T11335] loop2: detected capacity change from 0 to 512 [ 197.065942][T11335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.080769][T11335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.080873][T11335] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.086458][ T29] audit: type=1400 audit(2000000025.450:1921): avc: denied { write } for pid=11334 comm="syz.2.2602" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.144905][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2605'. [ 197.181694][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.210143][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2605'. [ 197.430439][T11363] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2610'. [ 197.502997][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.526604][T11355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.639962][T11374] ip_tables: iptables: counters copy to user failed while replacing table [ 197.670024][T11369] loop2: detected capacity change from 0 to 512 [ 198.342833][T11369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.347852][T11369] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.419601][ T29] audit: type=1400 audit(2000000026.770:1922): avc: denied { write } for pid=11367 comm="syz.2.2615" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.705253][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.736572][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 198.751230][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2624'. [ 198.773848][T11393] hsr_slave_1 (unregistering): left promiscuous mode [ 198.800588][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2623'. [ 198.873363][T11403] loop1: detected capacity change from 0 to 256 [ 198.956797][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2636'. [ 198.963933][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2636'. [ 199.093551][ T29] audit: type=1400 audit(2000000027.450:1923): avc: denied { create } for pid=11409 comm="syz.7.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.097284][ T29] audit: type=1400 audit(2000000027.460:1924): avc: denied { write } for pid=11409 comm="syz.7.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.187245][ T29] audit: type=1400 audit(2000000027.540:1925): avc: denied { write } for pid=11412 comm="syz.1.2629" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.226322][T11423] ip_tables: iptables: counters copy to user failed while replacing table [ 199.307970][T11428] FAULT_INJECTION: forcing a failure. [ 199.307970][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 199.308016][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.1.2631 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.308048][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.308062][T11428] Call Trace: [ 199.308127][T11428] [ 199.308136][T11428] __dump_stack+0x1d/0x30 [ 199.308165][T11428] dump_stack_lvl+0x95/0xd0 [ 199.308191][T11428] dump_stack+0x15/0x1b [ 199.308216][T11428] should_fail_ex+0x262/0x280 [ 199.308283][T11428] ? asymmetric_key_generate_id+0x63/0x140 [ 199.308318][T11428] should_failslab+0x8c/0xb0 [ 199.308403][T11428] __kmalloc_noprof+0xd0/0x4d0 [ 199.308435][T11428] ? asymmetric_key_generate_id+0x63/0x140 [ 199.308469][T11428] asymmetric_key_generate_id+0x63/0x140 [ 199.308531][T11428] ? x509_get_sig_params+0x271/0x290 [ 199.308639][T11428] x509_cert_parse+0x365/0x450 [ 199.308673][T11428] x509_key_preparse+0x3c/0x420 [ 199.308713][T11428] asymmetric_key_preparse+0x68/0xb0 [ 199.308755][T11428] __key_create_or_update+0x2df/0x840 [ 199.308794][T11428] key_create_or_update+0x42/0x60 [ 199.308826][T11428] __se_sys_add_key+0x2a5/0x360 [ 199.308905][T11428] __x64_sys_add_key+0x67/0x80 [ 199.308941][T11428] x64_sys_call+0x1fa9/0x2550 [ 199.308971][T11428] do_syscall_64+0x112/0x360 [ 199.309002][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.309038][T11428] RIP: 0033:0x7f2de052e159 [ 199.309059][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.309077][T11428] RSP: 002b:00007f2ddef87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 199.309100][T11428] RAX: ffffffffffffffda RBX: 00007f2de07b5fa0 RCX: 00007f2de052e159 [ 199.309121][T11428] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 199.309136][T11428] RBP: 00007f2de05c5024 R08: 0000000027ccc28a R09: 0000000000000000 [ 199.309150][T11428] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 199.309164][T11428] R13: 00007f2de07b6038 R14: 00007f2de07b5fa0 R15: 00007ffd167c8488 [ 199.309186][T11428] [ 200.094809][T11502] loop1: detected capacity change from 0 to 2048 [ 200.124829][T11502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.141641][ T29] audit: type=1400 audit(2000000028.500:1926): avc: denied { write } for pid=11501 comm="syz.1.2633" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.300260][ T4963] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 200.300400][ T4963] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 200.300428][ T4963] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.300428][ T4963] [ 200.300471][ T4963] EXT4-fs (loop1): Total free blocks count 0 [ 200.300485][ T4963] EXT4-fs (loop1): Free/Dirty block details [ 200.300498][ T4963] EXT4-fs (loop1): free_blocks=4096 [ 200.300515][ T4963] EXT4-fs (loop1): dirty_blocks=512 [ 200.300532][ T4963] EXT4-fs (loop1): Block reservation details [ 200.300548][ T4963] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 200.375504][ T4963] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 200.391859][ T3305] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 200.554674][T11517] loop9: detected capacity change from 0 to 32768 [ 200.577206][T11517] loop9: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 200.577397][T11517] loop9: p1 start 146641443 is beyond EOD, truncated [ 200.592217][T11517] loop9: p6 start 50334720 is beyond EOD, truncated [ 200.592257][T11517] loop9: p7 start 146641443 is beyond EOD, truncated [ 200.606451][T11517] loop9: p9 start 50334720 is beyond EOD, truncated [ 200.703578][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 200.706664][ T9092] udevd[9092]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 200.718682][ T9184] udevd[9184]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 200.719156][ T9510] udevd[9510]: inotify_add_watch(7, /dev/loop9p8, 10) failed: No such file or directory [ 200.877857][T11559] loop5: detected capacity change from 0 to 256 [ 200.965834][ T29] audit: type=1400 audit(2000000029.330:1927): avc: denied { ioctl } for pid=11562 comm="syz.5.2660" path="socket:[29429]" dev="sockfs" ino=29429 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.423658][T11549] loop1: detected capacity change from 0 to 512 [ 201.790102][ T313] IPVS: starting estimator thread 0... [ 201.869154][T11602] ip_tables: iptables: counters copy to user failed while replacing table [ 201.908067][ T29] audit: type=1400 audit(2000000030.270:1928): avc: denied { setopt } for pid=11593 comm="syz.7.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.913021][T11598] IPVS: using max 2400 ests per chain, 120000 per kthread [ 202.137057][T11549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.140911][T11549] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.182051][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2681'. [ 202.267408][T11620] loop5: detected capacity change from 0 to 512 [ 202.283943][T11620] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.302307][T11620] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 202.302820][T11620] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2680: inode #15: comm syz.5.2680: iget: illegal inode # [ 202.302850][T11620] loop5: lost filesystem error report for type 5 error -117 [ 202.303033][T11620] EXT4-fs (loop5): Remounting filesystem read-only [ 202.303340][T11620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.349513][ T9544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.386501][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.477531][T11638] netlink: 'syz.5.2689': attribute type 1 has an invalid length. [ 202.477573][T11638] netlink: 'syz.5.2689': attribute type 4 has an invalid length. [ 202.477679][T11638] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2689'. [ 202.497281][T11638] netlink: 'syz.5.2689': attribute type 1 has an invalid length. [ 202.497315][T11638] netlink: 'syz.5.2689': attribute type 4 has an invalid length. [ 202.497327][T11638] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2689'. [ 203.480310][ T29] audit: type=1400 audit(2000000031.840:1929): avc: denied { unmount } for pid=9544 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 203.537136][T11744] FAULT_INJECTION: forcing a failure. [ 203.537136][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 203.537180][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.5.2701 Not tainted syzkaller #0 PREEMPT(lazy) [ 203.537213][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.537228][T11744] Call Trace: [ 203.537237][T11744] [ 203.537247][T11744] __dump_stack+0x1d/0x30 [ 203.537331][T11744] dump_stack_lvl+0x95/0xd0 [ 203.537360][T11744] dump_stack+0x15/0x1b [ 203.537385][T11744] should_fail_ex+0x262/0x280 [ 203.537411][T11744] ? do_getname+0x2e/0x1c0 [ 203.537483][T11744] should_failslab+0x8c/0xb0 [ 203.537510][T11744] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 203.537539][T11744] ? do_getname+0x2e/0x1c0 [ 203.537636][T11744] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 203.537746][T11744] do_getname+0x2e/0x1c0 [ 203.537779][T11744] getname_flags+0x1d/0x30 [ 203.537875][T11744] __se_sys_statx+0x5e/0x1b0 [ 203.537904][T11744] ? do_futex+0x3f8/0x460 [ 203.537938][T11744] ? xfd_validate_state+0x45/0xf0 [ 203.538026][T11744] ? restore_fpregs_from_fpstate+0x61/0x110 [ 203.538050][T11744] __x64_sys_statx+0x67/0x80 [ 203.538106][T11744] x64_sys_call+0x1c5/0x2550 [ 203.538132][T11744] do_syscall_64+0x112/0x360 [ 203.538162][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.538186][T11744] RIP: 0033:0x7f7967afe159 [ 203.538244][T11744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.538265][T11744] RSP: 002b:00007f7966557028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 203.538290][T11744] RAX: ffffffffffffffda RBX: 00007f7967d85fa0 RCX: 00007f7967afe159 [ 203.538319][T11744] RDX: 0000000000006000 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.538334][T11744] RBP: 00007f7967b95024 R08: 0000000000000000 R09: 0000000000000000 [ 203.538349][T11744] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000000 [ 203.538364][T11744] R13: 00007f7967d86038 R14: 00007f7967d85fa0 R15: 00007ffe8d63bef8 [ 203.538384][T11744] [ 203.747006][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 203.747175][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 203.803195][T11686] loop2: detected capacity change from 0 to 512 [ 203.920865][T11764] FAULT_INJECTION: forcing a failure. [ 203.920865][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 203.920903][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.5.2708 Not tainted syzkaller #0 PREEMPT(lazy) [ 203.920930][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.920944][T11764] Call Trace: [ 203.920953][T11764] [ 203.920962][T11764] __dump_stack+0x1d/0x30 [ 203.921066][T11764] dump_stack_lvl+0x95/0xd0 [ 203.921093][T11764] dump_stack+0x15/0x1b [ 203.921113][T11764] should_fail_ex+0x262/0x280 [ 203.921143][T11764] ? io_wq_create+0x4b/0x4b0 [ 203.921189][T11764] should_failslab+0x8c/0xb0 [ 203.921223][T11764] __kmalloc_cache_noprof+0x7a/0x400 [ 203.921257][T11764] ? io_uring_alloc_task_context+0xdd/0x350 [ 203.921294][T11764] ? io_wq_create+0x4b/0x4b0 [ 203.921390][T11764] io_wq_create+0x4b/0x4b0 [ 203.921490][T11764] io_uring_alloc_task_context+0x17b/0x350 [ 203.921522][T11764] __io_uring_add_tctx_node+0x2b9/0x3b0 [ 203.921614][T11764] io_uring_create+0x3e1/0x4f0 [ 203.921649][T11764] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 203.921685][T11764] __x64_sys_io_uring_setup+0x31/0x40 [ 203.921709][T11764] x64_sys_call+0x1fbf/0x2550 [ 203.921802][T11764] do_syscall_64+0x112/0x360 [ 203.921836][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.921860][T11764] RIP: 0033:0x7f7967afe159 [ 203.921938][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.921975][T11764] RSP: 002b:00007f7966556fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 203.922054][T11764] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f7967afe159 [ 203.922071][T11764] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000002 [ 203.922087][T11764] RBP: 00007f7967b95024 R08: 0000000000000000 R09: 0000000000000000 [ 203.922103][T11764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.922119][T11764] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe8d63bef8 [ 203.922139][T11764] [ 204.112105][T11686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.183315][T11686] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.306812][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.343726][T11794] syz_tun: entered allmulticast mode [ 204.347713][T11793] syz_tun: left allmulticast mode [ 204.382806][T11796] FAULT_INJECTION: forcing a failure. [ 204.382806][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 204.382916][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.2.2721 Not tainted syzkaller #0 PREEMPT(lazy) [ 204.383027][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.383040][T11796] Call Trace: [ 204.383049][T11796] [ 204.383059][T11796] __dump_stack+0x1d/0x30 [ 204.383091][T11796] dump_stack_lvl+0x95/0xd0 [ 204.383120][T11796] dump_stack+0x15/0x1b [ 204.383170][T11796] should_fail_ex+0x262/0x280 [ 204.383193][T11796] ? __io_uring_add_tctx_node+0xea/0x3b0 [ 204.383218][T11796] should_failslab+0x8c/0xb0 [ 204.383248][T11796] __kmalloc_cache_noprof+0x7a/0x400 [ 204.383305][T11796] ? __io_uring_add_tctx_node+0xea/0x3b0 [ 204.383332][T11796] __io_uring_add_tctx_node+0xea/0x3b0 [ 204.383358][T11796] io_uring_create+0x3e1/0x4f0 [ 204.383390][T11796] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 204.383464][T11796] __x64_sys_io_uring_setup+0x31/0x40 [ 204.383491][T11796] x64_sys_call+0x1fbf/0x2550 [ 204.383518][T11796] do_syscall_64+0x112/0x360 [ 204.383571][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.383595][T11796] RIP: 0033:0x7f3c19c5e159 [ 204.383617][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.383658][T11796] RSP: 002b:00007f3c186b6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 204.383681][T11796] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f3c19c5e159 [ 204.383696][T11796] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000002 [ 204.383710][T11796] RBP: 00007f3c19cf5024 R08: 0000000000000000 R09: 0000000000000000 [ 204.383723][T11796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.383737][T11796] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc245f9658 [ 204.383791][T11796] [ 204.588734][ T29] audit: type=1400 audit(2000000032.950:1930): avc: denied { write } for pid=11803 comm="syz.2.2724" name="instances" dev="tracefs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.588856][ T29] audit: type=1400 audit(2000000032.950:1931): avc: denied { add_name } for pid=11803 comm="syz.2.2724" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.588886][ T29] audit: type=1400 audit(2000000032.950:1932): avc: denied { create } for pid=11803 comm="syz.2.2724" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 204.651545][ T29] audit: type=1400 audit(2000000033.010:1933): avc: denied { write } for pid=11803 comm="syz.2.2724" name="instances" dev="tracefs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.651747][ T29] audit: type=1400 audit(2000000033.010:1934): avc: denied { remove_name } for pid=11803 comm="syz.2.2724" name="foo" dev="tracefs" ino=30071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.651774][ T29] audit: type=1400 audit(2000000033.010:1935): avc: denied { rmdir } for pid=11803 comm="syz.2.2724" name="foo" dev="tracefs" ino=30071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.846733][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 205.013351][T11820] loop5: detected capacity change from 0 to 512 [ 205.086481][T11827] FAULT_INJECTION: forcing a failure. [ 205.086481][T11827] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.086530][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.2.2732 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.086571][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.086593][T11827] Call Trace: [ 205.086603][T11827] [ 205.086612][T11827] __dump_stack+0x1d/0x30 [ 205.086642][T11827] dump_stack_lvl+0x95/0xd0 [ 205.086667][T11827] dump_stack+0x15/0x1b [ 205.086692][T11827] should_fail_ex+0x262/0x280 [ 205.086722][T11827] should_fail+0xb/0x20 [ 205.086813][T11827] get_futex_key+0x12d/0xb10 [ 205.086845][T11827] futex_wait_setup+0x49/0x3e0 [ 205.086885][T11827] ? __rcu_read_unlock+0x4e/0x70 [ 205.086989][T11827] __futex_wait+0xa9/0x260 [ 205.087010][T11827] ? __pfx_futex_wake_mark+0x10/0x10 [ 205.087050][T11827] futex_wait+0x98/0x1c0 [ 205.087123][T11827] do_futex+0x391/0x460 [ 205.087156][T11827] __se_sys_futex+0x2f6/0x370 [ 205.087192][T11827] __x64_sys_futex+0x78/0x90 [ 205.087286][T11827] x64_sys_call+0x22e2/0x2550 [ 205.087313][T11827] do_syscall_64+0x112/0x360 [ 205.087343][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.087368][T11827] RIP: 0033:0x7f3c19c5e159 [ 205.087400][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.087428][T11827] RSP: 002b:00007f3c186b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.087497][T11827] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa8 RCX: 00007f3c19c5e159 [ 205.087514][T11827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c19ee5fa8 [ 205.087531][T11827] RBP: 00007f3c19ee5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 205.087547][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.087563][T11827] R13: 00007f3c19ee6038 R14: 00007ffc245f9570 R15: 00007ffc245f9658 [ 205.087642][T11827] [ 205.307583][T11820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.310652][T11820] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.351009][ T9544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.225872][T11881] loop2: detected capacity change from 0 to 512 [ 206.228088][T11881] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.245986][T11881] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2755: corrupted in-inode xattr: e_value size too large [ 206.246030][T11881] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.260428][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 206.260471][ C1] EXT4-fs (loop2): initial error at time 2000000034: ext4_iget_extra_inode:5210: inode 15 [ 206.260504][ C1] EXT4-fs (loop2): last error at time 2000000034: ext4_iget_extra_inode:5210: inode 15 [ 206.260707][T11881] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2755: couldn't read orphan inode 15 (err -117) [ 206.260741][T11881] loop2: lost filesystem error report for type 5 error -117 [ 206.261388][T11881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.339821][ T29] audit: type=1400 audit(2000000034.700:1936): avc: denied { write } for pid=11880 comm="syz.2.2755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.363345][ T29] audit: type=1400 audit(2000000034.720:1937): avc: denied { write } for pid=11880 comm="syz.2.2755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.386295][ T29] audit: type=1400 audit(2000000034.750:1938): avc: denied { write } for pid=11880 comm="syz.2.2755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.410783][ T29] audit: type=1400 audit(2000000034.770:1939): avc: denied { write } for pid=11880 comm="syz.2.2755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.424577][T11881] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2755: corrupted in-inode xattr: e_value size too large [ 206.469122][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.622391][T11896] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.635686][T11896] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.646238][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 206.646271][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 207.484754][T11938] loop1: detected capacity change from 0 to 1024 [ 207.496680][T11938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.572751][T11946] loop9: detected capacity change from 0 to 512 [ 207.573207][T11946] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.587766][T11946] EXT4-fs error (device loop9): ext4_get_journal_inode:5927: comm syz.9.2783: inode #2147418112: comm syz.9.2783: iget: illegal inode # [ 207.587955][T11946] loop9: lost filesystem error report for type 5 error -117 [ 207.602007][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 207.602037][ C1] EXT4-fs (loop9): initial error at time 2000000035: ext4_get_journal_inode:5927 [ 207.602070][ C1] EXT4-fs (loop9): last error at time 2000000035: ext4_get_journal_inode:5927 [ 207.635870][T11946] EXT4-fs (loop9): no journal found [ 207.635896][T11946] EXT4-fs (loop9): can't get journal size [ 207.638411][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.656836][T11946] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 207.666683][T11946] EXT4-fs (loop9): failed to initialize system zone (-117) [ 207.666716][T11946] EXT4-fs (loop9): mount failed [ 207.780217][T11954] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 207.793959][T11954] bond2: entered promiscuous mode [ 207.793986][T11954] bond2: entered allmulticast mode [ 207.798634][T11954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.943080][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2790'. [ 207.943116][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2790'. [ 208.916206][T12088] loop2: detected capacity change from 0 to 128 [ 208.991464][T12101] xt_hashlimit: size too large, truncated to 1048576 [ 209.069515][T12099] loop9: detected capacity change from 0 to 1764 [ 209.732881][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 209.852467][T12126] FAULT_INJECTION: forcing a failure. [ 209.852467][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 209.852507][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.2.2812 Not tainted syzkaller #0 PREEMPT(lazy) [ 209.852538][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.852558][T12126] Call Trace: [ 209.852566][T12126] [ 209.852576][T12126] __dump_stack+0x1d/0x30 [ 209.852669][T12126] dump_stack_lvl+0x95/0xd0 [ 209.852698][T12126] dump_stack+0x15/0x1b [ 209.852734][T12126] should_fail_ex+0x262/0x280 [ 209.852768][T12126] should_failslab+0x8c/0xb0 [ 209.852802][T12126] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 209.852910][T12126] ? v9fs_init_fs_context+0x33/0x220 [ 209.852994][T12126] ? v9fs_init_fs_context+0xc7/0x220 [ 209.853021][T12126] ? v9fs_init_fs_context+0xc7/0x220 [ 209.853121][T12126] kstrdup+0x3e/0xd0 [ 209.853167][T12126] v9fs_init_fs_context+0xc7/0x220 [ 209.853195][T12126] alloc_fs_context+0x490/0x570 [ 209.853221][T12126] fs_context_for_mount+0x22/0x30 [ 209.853247][T12126] do_new_mount+0xe7/0x8d0 [ 209.853329][T12126] ? security_capable+0x7b/0x90 [ 209.853365][T12126] path_mount+0x4ad/0xb90 [ 209.853540][T12126] __se_sys_mount+0x28c/0x2e0 [ 209.853571][T12126] __x64_sys_mount+0x67/0x80 [ 209.853604][T12126] x64_sys_call+0xc3b/0x2550 [ 209.853632][T12126] do_syscall_64+0x112/0x360 [ 209.853738][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.853821][T12126] RIP: 0033:0x7f3c19c5e159 [ 209.853865][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.853885][T12126] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.853909][T12126] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 209.853926][T12126] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 209.853941][T12126] RBP: 00007f3c19cf5024 R08: 0000200000000280 R09: 0000000000000000 [ 209.853963][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.853977][T12126] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 209.853997][T12126] [ 209.854149][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 209.854163][ T29] audit: type=1400 audit(2000000038.210:1945): avc: denied { mounton } for pid=12125 comm="syz.2.2812" path="/145/proc/339/task/340/fail-nth" dev="proc" ino=32066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 210.135884][T12136] loop2: detected capacity change from 0 to 128 [ 210.147631][T12136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.152910][ T29] audit: type=1400 audit(2000000038.510:1946): avc: denied { setopt } for pid=12135 comm="syz.2.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.155035][T12136] FAT-fs (loop2): error, parent dir link count too low (2) [ 210.155057][T12136] FAT-fs (loop2): Filesystem has been set read-only [ 210.178894][ T9222] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.338649][T12155] netlink: 'syz.7.2823': attribute type 1 has an invalid length. [ 210.349818][T12155] bond3: entered promiscuous mode [ 210.349894][T12155] bond3: entered allmulticast mode [ 210.350003][T12155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.377857][T12155] erspan1: entered allmulticast mode [ 210.386773][T12155] bond3: (slave erspan1): making interface the new active one [ 210.386912][T12155] erspan1: entered promiscuous mode [ 210.387783][T12155] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 210.805767][T12190] FAULT_INJECTION: forcing a failure. [ 210.805767][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 210.805890][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.9.2837 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.805922][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.805938][T12190] Call Trace: [ 210.805946][T12190] [ 210.805956][T12190] __dump_stack+0x1d/0x30 [ 210.805988][T12190] dump_stack_lvl+0x95/0xd0 [ 210.806069][T12190] dump_stack+0x15/0x1b [ 210.806094][T12190] should_fail_ex+0x262/0x280 [ 210.806196][T12190] should_failslab+0x8c/0xb0 [ 210.806234][T12190] __kvmalloc_node_noprof+0x168/0x5c0 [ 210.806300][T12190] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 210.806333][T12190] ? bpf_test_run_xdp_live+0x17b/0x1330 [ 210.806416][T12190] bpf_test_run_xdp_live+0x17b/0x1330 [ 210.806507][T12190] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 210.806528][T12190] ? __pfx_autoremove_wake_function+0x10/0x10 [ 210.806606][T12190] ? mutex_unlock+0x4e/0x90 [ 210.806634][T12190] ? 0xffffffffa04044c0 [ 210.806695][T12190] ? bpf_dispatcher_change_prog+0x7b9/0x800 [ 210.806726][T12190] ? 0xffffffffa04044c0 [ 210.806750][T12190] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 210.806787][T12190] bpf_prog_test_run_xdp+0x559/0x9e0 [ 210.806881][T12190] ? __rcu_read_unlock+0x4e/0x70 [ 210.806917][T12190] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 210.806949][T12190] bpf_prog_test_run+0x208/0x340 [ 210.807054][T12190] __sys_bpf+0x8da/0xc30 [ 210.807080][T12190] ? do_futex+0x350/0x460 [ 210.807194][T12190] __x64_sys_bpf+0x69/0x80 [ 210.807222][T12190] x64_sys_call+0xf26/0x2550 [ 210.807302][T12190] do_syscall_64+0x112/0x360 [ 210.807335][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.807362][T12190] RIP: 0033:0x7f815842e159 [ 210.807382][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.807429][T12190] RSP: 002b:00007f8156e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.807456][T12190] RAX: ffffffffffffffda RBX: 00007f81586b5fa0 RCX: 00007f815842e159 [ 210.807475][T12190] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 210.807492][T12190] RBP: 00007f81584c5024 R08: 0000000000000000 R09: 0000000000000000 [ 210.807508][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.807525][T12190] R13: 00007f81586b6038 R14: 00007f81586b5fa0 R15: 00007ffd9fe9c0d8 [ 210.807579][T12190] [ 210.812370][ T29] audit: type=1400 audit(2000000039.170:1947): avc: denied { bind } for pid=12191 comm="syz.2.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.814002][ T29] audit: type=1400 audit(2000000039.170:1948): avc: denied { listen } for pid=12191 comm="syz.2.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.875540][ T29] audit: type=1400 audit(2000000039.240:1949): avc: denied { accept } for pid=12191 comm="syz.2.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.907910][T12195] sd 0:0:1:0: PR command failed: 1026 [ 210.907989][T12195] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 210.908026][T12195] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 211.315618][ T4029] rpcbind: server 127.0.0.1 not responding, timed out [ 211.606039][T12232] FAULT_INJECTION: forcing a failure. [ 211.606039][T12232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.606100][T12232] CPU: 0 UID: 0 PID: 12232 Comm: syz.9.2855 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.606185][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.606200][T12232] Call Trace: [ 211.606207][T12232] [ 211.606216][T12232] __dump_stack+0x1d/0x30 [ 211.606246][T12232] dump_stack_lvl+0x95/0xd0 [ 211.606308][T12232] dump_stack+0x15/0x1b [ 211.606331][T12232] should_fail_ex+0x262/0x280 [ 211.606399][T12232] should_fail_alloc_page+0xf2/0x100 [ 211.606481][T12232] __alloc_frozen_pages_noprof+0x157/0x400 [ 211.606522][T12232] alloc_pages_mpol+0xaf/0x1d0 [ 211.606608][T12232] vma_alloc_folio_noprof+0x1b3/0x300 [ 211.606634][T12232] do_wp_page+0x64d/0x1ed0 [ 211.606702][T12232] ? __rcu_read_lock+0x36/0x50 [ 211.606737][T12232] handle_mm_fault+0xe29/0x3bb0 [ 211.606777][T12232] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 211.606911][T12232] do_user_addr_fault+0x404/0x1060 [ 211.606948][T12232] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 211.606991][T12232] exc_page_fault+0x62/0xa0 [ 211.607017][T12232] asm_exc_page_fault+0x26/0x30 [ 211.607079][T12232] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 211.607119][T12232] Code: 22 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 211.607141][T12232] RSP: 0018:ffffc90007053b38 EFLAGS: 00050206 [ 211.607162][T12232] RAX: ffff8881351df2c0 RBX: ffffc90007053cd0 RCX: 0000000000000e80 [ 211.607178][T12232] RDX: 0000000000000000 RSI: ffff888005c2f180 RDI: 000020000000b000 [ 211.607263][T12232] RBP: 000000000000ab80 R08: 0000000000000322 R09: 0000000000000000 [ 211.607279][T12232] R10: 0001888005c2f000 R11: 0001888005c2ffff R12: ffffc90007053cb8 [ 211.607296][T12232] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 211.607319][T12232] _copy_to_iter+0x2d4/0xea0 [ 211.607351][T12232] ? should_fail_ex+0xdb/0x280 [ 211.607452][T12232] ? process_vm_rw+0x29c/0x9c0 [ 211.607479][T12232] ? should_failslab+0x8c/0xb0 [ 211.607540][T12232] copy_page_to_iter+0x174/0x210 [ 211.607566][T12232] process_vm_rw+0x6c6/0x9c0 [ 211.607593][T12232] ? __futex_wait+0x1fd/0x260 [ 211.607640][T12232] ? restore_fpregs_from_fpstate+0x61/0x110 [ 211.607668][T12232] __x64_sys_process_vm_readv+0x78/0x90 [ 211.607699][T12232] x64_sys_call+0x1d62/0x2550 [ 211.607753][T12232] do_syscall_64+0x112/0x360 [ 211.607785][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.607880][T12232] RIP: 0033:0x7f815842e159 [ 211.607898][T12232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.607918][T12232] RSP: 002b:00007f8156e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 211.608010][T12232] RAX: ffffffffffffffda RBX: 00007f81586b5fa0 RCX: 00007f815842e159 [ 211.608027][T12232] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000001e7 [ 211.608042][T12232] RBP: 00007f81584c5024 R08: 0000000000000286 R09: 0000000000000000 [ 211.608057][T12232] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 211.608072][T12232] R13: 00007f81586b6038 R14: 00007f81586b5fa0 R15: 00007ffd9fe9c0d8 [ 211.608095][T12232] [ 212.196538][ T29] audit: type=1400 audit(2000000040.560:1950): avc: denied { accept } for pid=12263 comm="syz.9.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 212.305396][ T29] audit: type=1400 audit(2000000040.670:1951): avc: denied { write } for pid=12275 comm="syz.5.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.342962][ T29] audit: type=1400 audit(2000000040.700:1952): avc: denied { write } for pid=12271 comm="syz.9.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.462919][T12291] loop2: detected capacity change from 0 to 256 [ 212.470835][T12291] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 212.470868][T12291] FAT-fs (loop2): Can't find a valid FAT filesystem [ 212.648975][ T29] audit: type=1400 audit(2000000041.010:1953): avc: denied { mounton } for pid=12302 comm="syz.5.2887" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 212.755706][T12321] loop9: detected capacity change from 0 to 128 [ 212.763793][T12321] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.775662][T12321] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.808612][ T313] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.394410][ T313] rpcbind: server 127.0.0.1 not responding, timed out [ 213.759973][ T29] audit: type=1400 audit(2000000042.120:1954): avc: denied { name_bind } for pid=12352 comm="syz.2.2910" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 213.814534][ T4029] rpcbind: server 127.0.0.1 not responding, timed out [ 213.849691][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.849926][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.850079][T12359] bridge0: entered allmulticast mode [ 213.903030][T12359] bridge_slave_1: left allmulticast mode [ 213.903077][T12359] bridge_slave_1: left promiscuous mode [ 213.903183][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.915697][T12359] bridge_slave_0: left allmulticast mode [ 213.915721][T12359] bridge_slave_0: left promiscuous mode [ 213.915889][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.060480][T12357] loop9: detected capacity change from 0 to 32768 [ 214.140850][T12357] loop9: p1 p3 < > [ 214.301898][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 214.303976][ T9184] udevd[9184]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 215.428039][ T29] audit: type=1326 audit(2000000043.790:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.2.2939" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c19c5e159 code=0x7ffc0000 [ 215.429500][ T29] audit: type=1326 audit(2000000043.790:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.2.2939" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3c19c5e159 code=0x7ffc0000 [ 215.613643][ T29] audit: type=1326 audit(2000000043.970:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.2.2939" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c19c5e159 code=0x7ffc0000 [ 215.613772][ T29] audit: type=1326 audit(2000000043.970:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.2.2939" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c19c5e159 code=0x7ffc0000 [ 215.700598][T12438] FAULT_INJECTION: forcing a failure. [ 215.700598][T12438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.700644][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.2.2946 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.700752][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.700765][T12438] Call Trace: [ 215.700772][T12438] [ 215.700782][T12438] __dump_stack+0x1d/0x30 [ 215.700866][T12438] dump_stack_lvl+0x95/0xd0 [ 215.700893][T12438] dump_stack+0x15/0x1b [ 215.700930][T12438] should_fail_ex+0x262/0x280 [ 215.700957][T12438] should_fail_alloc_page+0xf2/0x100 [ 215.700994][T12438] __alloc_frozen_pages_noprof+0x157/0x400 [ 215.701036][T12438] alloc_pages_mpol+0xaf/0x1d0 [ 215.701148][T12438] vma_alloc_folio_noprof+0x1b3/0x300 [ 215.701177][T12438] do_wp_page+0x64d/0x1ed0 [ 215.701214][T12438] ? __rcu_read_lock+0x36/0x50 [ 215.701252][T12438] handle_mm_fault+0xe29/0x3bb0 [ 215.701285][T12438] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 215.701368][T12438] do_user_addr_fault+0x404/0x1060 [ 215.701476][T12438] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 215.701550][T12438] exc_page_fault+0x62/0xa0 [ 215.701578][T12438] asm_exc_page_fault+0x26/0x30 [ 215.701603][T12438] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 215.701691][T12438] Code: 22 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 215.701713][T12438] RSP: 0018:ffffc90007757b38 EFLAGS: 00050206 [ 215.701752][T12438] RAX: ffff888134763f00 RBX: ffffc90007757cd0 RCX: 0000000000000e80 [ 215.701791][T12438] RDX: 0000000000000000 RSI: ffff888005c2f180 RDI: 000020000000b000 [ 215.701886][T12438] RBP: 000000000000ab80 R08: 0000000000000727 R09: 0000000000000000 [ 215.701902][T12438] R10: 0001888005c2f000 R11: 0001888005c2ffff R12: ffffc90007757cb8 [ 215.701919][T12438] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 215.701942][T12438] _copy_to_iter+0x2d4/0xea0 [ 215.701970][T12438] ? should_fail_ex+0xdb/0x280 [ 215.701996][T12438] ? process_vm_rw+0x29c/0x9c0 [ 215.702026][T12438] ? should_failslab+0x8c/0xb0 [ 215.702062][T12438] copy_page_to_iter+0x174/0x210 [ 215.702089][T12438] process_vm_rw+0x6c6/0x9c0 [ 215.702113][T12438] ? __futex_wait+0x1fd/0x260 [ 215.702222][T12438] ? restore_fpregs_from_fpstate+0x61/0x110 [ 215.702309][T12438] __x64_sys_process_vm_readv+0x78/0x90 [ 215.702381][T12438] x64_sys_call+0x1d62/0x2550 [ 215.702409][T12438] do_syscall_64+0x112/0x360 [ 215.702439][T12438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.702463][T12438] RIP: 0033:0x7f3c19c5e159 [ 215.702481][T12438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.702574][T12438] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 215.702597][T12438] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 215.702677][T12438] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000199 [ 215.702691][T12438] RBP: 00007f3c19cf5024 R08: 0000000000000286 R09: 0000000000000000 [ 215.702706][T12438] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 215.702720][T12438] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 215.702742][T12438] [ 216.055007][T12443] netlink: 'syz.7.2949': attribute type 3 has an invalid length. [ 216.055040][T12443] netlink: 'syz.7.2949': attribute type 4 has an invalid length. [ 216.055058][T12443] netlink: 9067 bytes leftover after parsing attributes in process `syz.7.2949'. [ 216.115131][ T4029] rpcbind: server 127.0.0.1 not responding, timed out [ 216.240561][ T29] audit: type=1400 audit(2000000044.600:1959): avc: denied { create } for pid=12455 comm="syz.2.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.260917][ T29] audit: type=1400 audit(2000000044.600:1960): avc: denied { setopt } for pid=12455 comm="syz.2.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.281725][ T29] audit: type=1400 audit(2000000044.620:1961): avc: denied { bind } for pid=12455 comm="syz.2.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.301635][ T29] audit: type=1400 audit(2000000044.640:1962): avc: denied { ioctl } for pid=12455 comm="syz.2.2956" path="socket:[33597]" dev="sockfs" ino=33597 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.336917][ T29] audit: type=1400 audit(2000000044.700:1963): avc: denied { write } for pid=12461 comm="syz.2.2958" name="/" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.489427][T12473] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2963'. [ 216.502085][T12473] netlink: zone id is out of range [ 216.531580][T12473] netlink: zone id is out of range [ 216.531810][T12473] netlink: zone id is out of range [ 216.531891][T12473] netlink: zone id is out of range [ 216.531961][T12473] netlink: zone id is out of range [ 216.532100][T12473] netlink: zone id is out of range [ 216.567211][T12473] netlink: zone id is out of range [ 216.567631][T12473] netlink: zone id is out of range [ 216.568080][T12473] netlink: zone id is out of range [ 216.568211][T12473] netlink: zone id is out of range [ 216.691541][T12486] loop1: detected capacity change from 0 to 512 [ 216.806314][ T29] audit: type=1400 audit(2000000045.170:1964): avc: denied { write } for pid=12482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.903584][ T3021] veth0_vlan: left promiscuous mode [ 216.907007][ T6967] veth0_vlan: entered promiscuous mode [ 216.933524][T12503] FAULT_INJECTION: forcing a failure. [ 216.933524][T12503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.933569][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.1.2969 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.933600][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.933613][T12503] Call Trace: [ 216.933621][T12503] [ 216.933629][T12503] __dump_stack+0x1d/0x30 [ 216.933670][T12503] dump_stack_lvl+0x95/0xd0 [ 216.933737][T12503] dump_stack+0x15/0x1b [ 216.933760][T12503] should_fail_ex+0x262/0x280 [ 216.933783][T12503] should_fail_alloc_page+0xf2/0x100 [ 216.933870][T12503] __alloc_frozen_pages_noprof+0x157/0x400 [ 216.933907][T12503] alloc_pages_mpol+0xaf/0x1d0 [ 216.933930][T12503] vma_alloc_folio_noprof+0x1b3/0x300 [ 216.934010][T12503] handle_mm_fault+0x137d/0x3bb0 [ 216.934041][T12503] __get_user_pages+0x12e9/0x1eb0 [ 216.934123][T12503] faultin_page_range+0xfe/0x500 [ 216.934147][T12503] madvise_do_behavior+0x189/0x990 [ 216.934181][T12503] do_madvise+0x1bd/0x220 [ 216.934255][T12503] __x64_sys_madvise+0x63/0x80 [ 216.934286][T12503] x64_sys_call+0x251e/0x2550 [ 216.934329][T12503] do_syscall_64+0x112/0x360 [ 216.934359][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.934383][T12503] RIP: 0033:0x7f2de052e159 [ 216.934448][T12503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.934469][T12503] RSP: 002b:00007f2ddef87028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 216.934493][T12503] RAX: ffffffffffffffda RBX: 00007f2de07b5fa0 RCX: 00007f2de052e159 [ 216.934509][T12503] RDX: 0000000000000017 RSI: 0000000000004000 RDI: 0000200000000000 [ 216.934553][T12503] RBP: 00007f2de05c5024 R08: 0000000000000000 R09: 0000000000000000 [ 216.934568][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.934583][T12503] R13: 00007f2de07b6038 R14: 00007f2de07b5fa0 R15: 00007ffd167c8488 [ 216.934603][T12503] [ 217.096285][T12519] loop1: detected capacity change from 0 to 512 [ 217.097312][T12519] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.125607][T12519] EXT4-fs (loop1): 1 truncate cleaned up [ 217.126059][T12519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.179162][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.336712][T12611] loop2: detected capacity change from 0 to 1024 [ 218.338611][T12611] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.338640][T12611] EXT4-fs: Ignoring removed oldalloc option [ 218.371556][T12611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.371758][T12611] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.411957][T12623] FAULT_INJECTION: forcing a failure. [ 218.411957][T12623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.412004][T12623] CPU: 0 UID: 0 PID: 12623 Comm: syz.9.3011 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.412044][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.412059][T12623] Call Trace: [ 218.412068][T12623] [ 218.412076][T12623] __dump_stack+0x1d/0x30 [ 218.412107][T12623] dump_stack_lvl+0x95/0xd0 [ 218.412133][T12623] dump_stack+0x15/0x1b [ 218.412237][T12623] should_fail_ex+0x262/0x280 [ 218.412263][T12623] should_fail+0xb/0x20 [ 218.412285][T12623] should_fail_usercopy+0x1a/0x20 [ 218.412332][T12623] _copy_from_user+0x1c/0xb0 [ 218.412360][T12623] memdup_user+0x5e/0xd0 [ 218.412384][T12623] strndup_user+0x68/0xb0 [ 218.412408][T12623] __se_sys_keyctl+0x656/0xb70 [ 218.412436][T12623] ? xfd_validate_state+0x45/0xf0 [ 218.412486][T12623] ? restore_fpregs_from_fpstate+0x61/0x110 [ 218.412561][T12623] __x64_sys_keyctl+0x67/0x80 [ 218.412587][T12623] x64_sys_call+0x1fe0/0x2550 [ 218.412617][T12623] do_syscall_64+0x112/0x360 [ 218.412714][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.412740][T12623] RIP: 0033:0x7f815842e159 [ 218.412760][T12623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.412782][T12623] RSP: 002b:00007f8156e87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 218.412868][T12623] RAX: ffffffffffffffda RBX: 00007f81586b5fa0 RCX: 00007f815842e159 [ 218.412945][T12623] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000001 [ 218.412961][T12623] RBP: 00007f81584c5024 R08: 0000000000000000 R09: 0000000000000000 [ 218.412977][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.412993][T12623] R13: 00007f81586b6038 R14: 00007f81586b5fa0 R15: 00007ffd9fe9c0d8 [ 218.413016][T12623] [ 218.514278][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.678520][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 218.678660][T12641] netlink: 'syz.1.3019': attribute type 26 has an invalid length. [ 218.934824][T12659] FAULT_INJECTION: forcing a failure. [ 218.934824][T12659] name failslab, interval 1, probability 0, space 0, times 0 [ 218.934867][T12659] CPU: 1 UID: 0 PID: 12659 Comm: syz.1.3027 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.934943][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.934958][T12659] Call Trace: [ 218.934966][T12659] [ 218.934975][T12659] __dump_stack+0x1d/0x30 [ 218.935027][T12659] dump_stack_lvl+0x95/0xd0 [ 218.935053][T12659] dump_stack+0x15/0x1b [ 218.935078][T12659] should_fail_ex+0x262/0x280 [ 218.935176][T12659] should_failslab+0x8c/0xb0 [ 218.935281][T12659] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 218.935314][T12659] ? __d_alloc+0x34/0x320 [ 218.935409][T12659] ? __d_alloc+0x34/0x320 [ 218.935440][T12659] __d_alloc+0x34/0x320 [ 218.935465][T12659] ? d_alloc_pseudo+0x13/0x80 [ 218.935494][T12659] d_alloc_pseudo+0x1e/0x80 [ 218.935522][T12659] alloc_path_pseudo+0xa4/0x140 [ 218.935629][T12659] alloc_file_pseudo+0x55/0x120 [ 218.935654][T12659] anon_inode_getfile+0xa0/0x120 [ 218.935692][T12659] init_listener+0xc5/0x170 [ 218.935756][T12659] do_seccomp+0x70b/0xa40 [ 218.935787][T12659] ? restore_fpregs_from_fpstate+0x61/0x110 [ 218.935845][T12659] __x64_sys_seccomp+0x40/0x50 [ 218.935942][T12659] x64_sys_call+0x3f0/0x2550 [ 218.936040][T12659] do_syscall_64+0x112/0x360 [ 218.936073][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.936100][T12659] RIP: 0033:0x7f2de052e159 [ 218.936141][T12659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.936163][T12659] RSP: 002b:00007f2ddef87028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 218.936189][T12659] RAX: ffffffffffffffda RBX: 00007f2de07b5fa0 RCX: 00007f2de052e159 [ 218.936205][T12659] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 218.936229][T12659] RBP: 00007f2de05c5024 R08: 0000000000000000 R09: 0000000000000000 [ 218.936295][T12659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.936311][T12659] R13: 00007f2de07b6038 R14: 00007f2de07b5fa0 R15: 00007ffd167c8488 [ 218.936334][T12659] [ 219.021089][T12661] FAULT_INJECTION: forcing a failure. [ 219.021089][T12661] name failslab, interval 1, probability 0, space 0, times 0 [ 219.021166][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.2.3028 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.021194][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.021207][T12661] Call Trace: [ 219.021215][T12661] [ 219.021261][T12661] __dump_stack+0x1d/0x30 [ 219.021287][T12661] dump_stack_lvl+0x95/0xd0 [ 219.021311][T12661] dump_stack+0x15/0x1b [ 219.021379][T12661] should_fail_ex+0x262/0x280 [ 219.021402][T12661] ? bpf_test_init+0x86/0x130 [ 219.021427][T12661] should_failslab+0x8c/0xb0 [ 219.021457][T12661] __kmalloc_noprof+0xd0/0x4d0 [ 219.021566][T12661] ? finish_task_switch+0x121/0x340 [ 219.021591][T12661] ? bpf_test_init+0x86/0x130 [ 219.021617][T12661] bpf_test_init+0x86/0x130 [ 219.021696][T12661] bpf_prog_test_run_skb+0x271/0x11b0 [ 219.021732][T12661] ? futex_unqueue+0xc5/0xf0 [ 219.021761][T12661] ? __rcu_read_unlock+0x4e/0x70 [ 219.021791][T12661] ? __fget_files+0x184/0x1c0 [ 219.021873][T12661] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 219.021900][T12661] bpf_prog_test_run+0x208/0x340 [ 219.021962][T12661] __sys_bpf+0x8da/0xc30 [ 219.021988][T12661] ? do_futex+0x350/0x460 [ 219.022022][T12661] __x64_sys_bpf+0x69/0x80 [ 219.022117][T12661] x64_sys_call+0xf26/0x2550 [ 219.022144][T12661] do_syscall_64+0x112/0x360 [ 219.022188][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.022213][T12661] RIP: 0033:0x7f3c19c5e159 [ 219.022231][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.022252][T12661] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.022279][T12661] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 219.022295][T12661] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 219.022310][T12661] RBP: 00007f3c19cf5024 R08: 0000000000000000 R09: 0000000000000000 [ 219.022325][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.022340][T12661] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 219.022370][T12661] [ 219.482691][T12678] lo: left allmulticast mode [ 219.607903][T12682] netlink: 143932 bytes leftover after parsing attributes in process `syz.9.3038'. [ 219.889302][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3045'. [ 219.889344][T12697] netlink: 'syz.9.3045': attribute type 26 has an invalid length. [ 219.937266][T12701] loop9: detected capacity change from 0 to 128 [ 219.945535][T12701] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000°"ý„ ’«Ž¾9ÏÁ€¼)&”7¡Þ©ÊV1ÁKg÷©íÐØ |sdS:¶ÓÀÓ³ú•WÑ@q¶'Ùh ®{Õ€ÒÙý4E>Ïúè #Nrû㦠½RbÅ' [ 220.595602][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3057'. [ 220.600033][T12728] ipvlan2: entered allmulticast mode [ 220.600062][T12728] syz_tun: entered allmulticast mode [ 220.694842][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 220.817938][T12743] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3070'. [ 220.818568][T12743] netlink: 'syz.9.3070': attribute type 1 has an invalid length. [ 220.818671][T12743] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3070'. [ 220.968341][T12711] loop2: detected capacity change from 0 to 512 [ 221.077932][T12711] SET target dimension over the limit! [ 221.171388][T12753] loop2: detected capacity change from 0 to 2048 [ 221.190637][T12753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.203388][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 221.203408][ T29] audit: type=1400 audit(2000000049.550:1976): avc: denied { write } for pid=12751 comm="syz.2.3065" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.239367][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.290793][T12765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.290903][T12765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.301381][T12766] netlink: 143932 bytes leftover after parsing attributes in process `syz.7.3067'. [ 221.337313][T12765] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 221.378133][T12771] loop1: detected capacity change from 0 to 512 [ 221.378672][T12771] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.403697][T12765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.140409][T12795] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.140654][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.140819][T12795] bridge0: entered allmulticast mode [ 222.167243][T12795] bridge_slave_1: left allmulticast mode [ 222.167274][T12795] bridge_slave_1: left promiscuous mode [ 222.167492][T12795] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.189285][T12795] bridge_slave_0: left allmulticast mode [ 222.189332][T12795] bridge_slave_0: left promiscuous mode [ 222.189435][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.382713][T12778] loop5: detected capacity change from 0 to 512 [ 222.433986][T12778] SET target dimension over the limit! [ 222.462259][ T29] audit: type=1400 audit(2000000050.820:1977): avc: denied { wake_alarm } for pid=12803 comm="syz.9.3094" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.555573][T12812] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.3083'. [ 222.575468][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 222.589860][T12812] net_ratelimit: 10649 callbacks suppressed [ 222.589926][T12812] netlink: zone id is out of range [ 222.604257][T12812] netlink: zone id is out of range [ 222.605072][T12812] netlink: zone id is out of range [ 222.605103][T12812] netlink: zone id is out of range [ 222.605173][T12812] netlink: zone id is out of range [ 222.605333][T12812] netlink: zone id is out of range [ 222.605340][T12812] netlink: zone id is out of range [ 222.605347][T12812] netlink: zone id is out of range [ 222.605353][T12812] netlink: zone id is out of range [ 222.605360][T12812] netlink: zone id is out of range [ 222.737864][T12834] tmpfs: Unknown parameter 'siz' [ 222.816321][ T29] audit: type=1400 audit(2000000052.151:1978): avc: denied { write } for pid=12833 comm="syz.5.3107" dev="sockfs" ino=34320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.842363][ T29] audit: type=1400 audit(2000000052.171:1979): avc: denied { setattr } for pid=12833 comm="syz.5.3107" name="IEEE-802.15.4-MAC" dev="sockfs" ino=34320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.862873][T12841] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3097'. [ 222.863665][T12841] netlink: 'syz.7.3097': attribute type 1 has an invalid length. [ 222.863681][T12841] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3097'. [ 222.920681][ T29] audit: type=1400 audit(2000000052.271:1980): avc: denied { create } for pid=12845 comm="syz.5.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.942230][ T29] audit: type=1400 audit(2000000052.291:1981): avc: denied { listen } for pid=12845 comm="syz.5.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.971311][ T29] audit: type=1400 audit(2000000052.321:1982): avc: denied { accept } for pid=12845 comm="syz.5.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.268407][T12842] loop9: detected capacity change from 0 to 512 [ 223.830621][T12842] SET target dimension over the limit! [ 223.904325][ T29] audit: type=1400 audit(2000000054.252:1983): avc: denied { write } for pid=12866 comm="syz.9.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.738058][ T29] audit: type=1400 audit(2000000055.092:1984): avc: denied { unmount } for pid=9544 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.128571][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3136'. [ 225.141927][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3126'. [ 225.163619][T12908] ipvlan2: entered allmulticast mode [ 225.163647][T12908] syz_tun: entered allmulticast mode [ 225.236957][T12910] pim6reg1: entered promiscuous mode [ 225.236989][T12910] pim6reg1: entered allmulticast mode [ 225.488232][T12935] tmpfs: Unknown parameter 'siz' [ 225.497342][T12930] netlink: 'syz.2.3137': attribute type 4 has an invalid length. [ 225.513591][T12930] netlink: 'syz.2.3137': attribute type 4 has an invalid length. [ 225.579701][T12937] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.3135'. [ 225.916345][ T29] audit: type=1400 audit(2000000056.272:1985): avc: denied { read } for pid=12961 comm="syz.7.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.966387][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3150'. [ 226.225577][T12983] netlink: 143932 bytes leftover after parsing attributes in process `syz.9.3156'. [ 226.683347][T12998] netlink: 'syz.9.3172': attribute type 4 has an invalid length. [ 226.694813][T12998] netlink: 'syz.9.3172': attribute type 4 has an invalid length. [ 227.122447][T13004] loop9: detected capacity change from 0 to 512 [ 227.297670][ T29] audit: type=1400 audit(2000000057.652:1986): avc: denied { write } for pid=13017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.380730][ T29] audit: type=1400 audit(2000000057.732:1987): avc: denied { write } for pid=13030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.490948][ T29] audit: type=1400 audit(2000000057.842:1988): avc: denied { read write } for pid=13037 comm="syz.5.3175" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 227.491015][ T29] audit: type=1400 audit(2000000057.842:1989): avc: denied { open } for pid=13037 comm="syz.5.3175" path="/215/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 227.514590][ T22] MTRR: CPU 1: Writing MSR 202 to 2002:0 failed [ 227.514638][ T19] MTRR: CPU 0: Writing MSR 202 to 2002:0 failed [ 227.516078][ T29] audit: type=1400 audit(2000000057.842:1990): avc: denied { ioctl } for pid=13037 comm="syz.5.3175" path="/215/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 227.616438][ T29] audit: type=1400 audit(2000000057.972:1991): avc: denied { ioctl } for pid=13047 comm="syz.7.3177" path="socket:[34814]" dev="sockfs" ino=34814 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.672244][ T29] audit: type=1400 audit(2000000058.022:1992): avc: denied { write } for pid=13039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.737165][ T29] audit: type=1400 audit(2000000058.092:1993): avc: denied { write } for pid=13059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.924142][T13004] SET target dimension over the limit! [ 228.000648][T13068] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.3181'. [ 228.012100][T13068] net_ratelimit: 10649 callbacks suppressed [ 228.012594][T13068] netlink: zone id is out of range [ 228.023909][T13073] loop9: detected capacity change from 0 to 512 [ 228.026021][T13073] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.037176][T13073] EXT4-fs error (device loop9): ext4_xattr_inode_iget:473: comm syz.9.3183: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 228.037200][T13068] netlink: zone id is out of range [ 228.037220][T13073] loop9: lost filesystem error report for type 5 error -117 [ 228.037459][T13068] netlink: zone id is out of range [ 228.037489][T13068] netlink: zone id is out of range [ 228.037519][T13068] netlink: zone id is out of range [ 228.037559][T13068] netlink: zone id is out of range [ 228.037719][T13068] netlink: zone id is out of range [ 228.037749][T13068] netlink: zone id is out of range [ 228.037799][T13068] netlink: zone id is out of range [ 228.037848][T13068] netlink: zone id is out of range [ 228.050359][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 228.050385][ C0] EXT4-fs (loop9): initial error at time 2000000058: ext4_xattr_inode_iget:473 [ 228.050415][ C0] EXT4-fs (loop9): last error at time 2000000058: ext4_xattr_inode_iget:473 [ 228.055951][T13073] EXT4-fs (loop9): Remounting filesystem read-only [ 228.055990][T13073] EXT4-fs (loop9): 1 orphan inode deleted [ 228.056524][T13073] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.109820][T13078] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3183'. [ 228.146225][ T8960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.240619][T13089] xt_hashlimit: size too large, truncated to 1048576 [ 228.436085][ T29] audit: type=1400 audit(2000000058.792:1994): avc: denied { write } for pid=13085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.498487][ T29] audit: type=1400 audit(2000000058.852:1995): avc: denied { write } for pid=13106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.236437][T13181] loop9: detected capacity change from 0 to 128 [ 229.588186][T13201] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3210'. [ 229.606199][T13201] netlink: 'syz.9.3210': attribute type 4 has an invalid length. [ 229.692839][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3213'. [ 230.377364][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.377402][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.377635][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.379214][T13309] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.408496][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.408851][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.409220][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.417080][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.417463][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.417829][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.424815][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.425224][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.425565][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.425990][T13309] gretap0 speed is unknown, defaulting to 1000 [ 230.506520][T13316] gretap0: entered promiscuous mode [ 232.725404][T13222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.767083][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 232.767122][ T29] audit: type=1326 audit(2000000063.122:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.767228][ T29] audit: type=1326 audit(2000000063.122:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.800064][ T29] audit: type=1326 audit(2000000063.152:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.800326][ T29] audit: type=1326 audit(2000000063.152:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.823271][ T29] audit: type=1326 audit(2000000063.172:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.823308][ T29] audit: type=1326 audit(2000000063.172:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.823453][ T29] audit: type=1326 audit(2000000063.172:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.826224][ T29] audit: type=1326 audit(2000000063.182:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.826285][ T29] audit: type=1326 audit(2000000063.182:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 232.829887][ T29] audit: type=1326 audit(2000000063.182:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13336 comm="syz.1.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 233.006652][ T4963] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.046394][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3248'. [ 233.186143][T13368] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3255'. [ 233.186895][T13368] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3255'. [ 233.187919][T13368] netlink: 'syz.7.3255': attribute type 32 has an invalid length. [ 233.256048][T13370] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3256'. [ 233.256089][T13370] net_ratelimit: 3543 callbacks suppressed [ 233.256103][T13370] openvswitch: netlink: Key type 386 is out of range max 32 [ 233.869237][T13421] loop2: detected capacity change from 0 to 128 [ 233.881648][T13421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 233.881729][T13421] System zones: 1-3, 19-19, 35-36 [ 233.890712][T13421] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.907345][T13421] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.956876][ T9222] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.060629][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3279'. [ 234.060738][T13431] FAULT_INJECTION: forcing a failure. [ 234.060738][T13431] name failslab, interval 1, probability 0, space 0, times 0 [ 234.060843][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.2.3279 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.060871][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.060884][T13431] Call Trace: [ 234.060926][T13431] [ 234.060939][T13431] __dump_stack+0x1d/0x30 [ 234.060968][T13431] dump_stack_lvl+0x95/0xd0 [ 234.060991][T13431] dump_stack+0x15/0x1b [ 234.061014][T13431] should_fail_ex+0x262/0x280 [ 234.061038][T13431] should_failslab+0x8c/0xb0 [ 234.061145][T13431] __kvmalloc_node_noprof+0x168/0x5c0 [ 234.061246][T13431] ? alloc_netdev_mqs+0x8c9/0xa90 [ 234.061278][T13431] ? __kmalloc_cache_noprof+0x1ff/0x400 [ 234.061309][T13431] ? alloc_netdev_mqs+0x8c9/0xa90 [ 234.061341][T13431] alloc_netdev_mqs+0x8c9/0xa90 [ 234.061400][T13431] rtnl_create_link+0x239/0x720 [ 234.061434][T13431] rtnl_newlink_create+0x17a/0x4a0 [ 234.061540][T13431] ? security_capable+0x7b/0x90 [ 234.061573][T13431] ? netlink_ns_capable+0x86/0xa0 [ 234.061694][T13431] rtnl_newlink+0x1255/0x1510 [ 234.061725][T13431] ? try_charge_memcg+0x269/0xae0 [ 234.061752][T13431] ? __memcg_slab_free_hook+0x154/0x340 [ 234.061776][T13431] ? __rcu_read_unlock+0x4e/0x70 [ 234.061928][T13431] ? avc_has_perm_noaudit+0xa3/0x120 [ 234.061953][T13431] ? cred_has_capability+0x224/0x2a0 [ 234.061988][T13431] ? selinux_capable+0x31/0x40 [ 234.062028][T13431] ? security_capable+0x7b/0x90 [ 234.062062][T13431] ? ns_capable+0x80/0xb0 [ 234.062083][T13431] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.062107][T13431] rtnetlink_rcv_msg+0x64b/0x720 [ 234.062201][T13431] netlink_rcv_skb+0x11e/0x220 [ 234.062227][T13431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.062296][T13431] rtnetlink_rcv+0x1c/0x30 [ 234.062323][T13431] netlink_unicast+0x5a9/0x680 [ 234.062349][T13431] netlink_sendmsg+0x5be/0x6f0 [ 234.062406][T13431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.062468][T13431] ____sys_sendmsg+0x532/0x580 [ 234.062510][T13431] ___sys_sendmsg+0x195/0x1e0 [ 234.062564][T13431] __x64_sys_sendmsg+0xd4/0x160 [ 234.062651][T13431] x64_sys_call+0x22ab/0x2550 [ 234.062678][T13431] do_syscall_64+0x112/0x360 [ 234.062708][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.062773][T13431] RIP: 0033:0x7f3c19c5e159 [ 234.062862][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.062895][T13431] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.062919][T13431] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 234.062935][T13431] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000004 [ 234.062951][T13431] RBP: 00007f3c19cf5024 R08: 0000000000000000 R09: 0000000000000000 [ 234.062965][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.062979][T13431] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 234.063039][T13431] [ 234.097519][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 234.229125][T13437] ip_tables: iptables: counters copy to user failed while replacing table [ 234.486463][ T4029] bridge_slave_1: left allmulticast mode [ 234.486494][ T4029] bridge_slave_1: left promiscuous mode [ 234.486707][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.500610][ T4029] bridge_slave_0: left allmulticast mode [ 234.500633][ T4029] bridge_slave_0: left promiscuous mode [ 234.500865][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.537908][ T4029] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 234.538009][ T4029] ip6gre2 (unregistering): left promiscuous mode [ 234.565760][ T4029] batman_adv: batadv0: Removing interface: gretap1 [ 234.582966][ T4029] bond1 (unregistering): (slave bridge1): Releasing active interface [ 234.593914][ T4029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.604183][ T4029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.614655][ T4029] bond0 (unregistering): (slave team0): Releasing backup interface [ 234.623667][ T4029] bond0 (unregistering): Released all slaves [ 234.632995][ T4029] bond1 (unregistering): Released all slaves [ 234.638110][ T4029] bond2 (unregistering): Released all slaves [ 234.640621][ T4029] bond3 (unregistering): Released all slaves [ 234.717188][ T4029] hsr_slave_0: left promiscuous mode [ 234.734146][ T4029] hsr_slave_1: left promiscuous mode [ 234.735626][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.799617][ T4029] team0 (unregistering): Port device team_slave_1 removed [ 234.809253][ T4029] team0 (unregistering): Port device team_slave_0 removed [ 234.952568][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.952756][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.074538][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 235.074600][ T4553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.086769][T13495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13495 comm=syz.7.3299 [ 235.104021][T13483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.179227][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 235.205610][ T4027] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.206572][ T4963] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.206622][ T4963] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.206657][ T4963] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.224369][T13508] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3303'. [ 235.227858][T13508] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3303'. [ 235.231954][T13508] netlink: 'syz.9.3303': attribute type 32 has an invalid length. [ 235.543057][T13528] syz.1.3311 (13528): attempted to duplicate a private mapping with mremap. This is not supported. [ 235.657782][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 236.000232][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3317'. [ 236.002348][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 236.100632][T13542] loop1: detected capacity change from 0 to 512 [ 236.142468][T13542] EXT4-fs: Ignoring removed oldalloc option [ 236.589094][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 236.640409][T13542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.712336][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.099503][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.099633][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.794228][ T4027] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.794292][ T4027] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.794333][ T4027] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 237.794395][ T4027] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.794449][ T4027] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.794484][ T4027] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 237.794610][ T4027] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.794645][ T4027] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.794680][ T4027] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 237.794785][ T4027] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.794878][ T4027] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.794912][ T4027] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.085920][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 238.086047][ T29] audit: type=1326 audit(2000000068.432:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.086090][ T29] audit: type=1326 audit(2000000068.432:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.086118][ T29] audit: type=1326 audit(2000000068.432:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.086148][ T29] audit: type=1326 audit(2000000068.442:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.086235][ T29] audit: type=1326 audit(2000000068.442:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.169424][ T29] audit: type=1326 audit(2000000068.522:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.223101][ T29] audit: type=1326 audit(2000000068.572:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.223285][ T29] audit: type=1326 audit(2000000068.572:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.250443][ T29] audit: type=1326 audit(2000000068.602:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2de052e159 code=0x7ffc0000 [ 238.250479][ T29] audit: type=1326 audit(2000000068.602:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13657 comm="syz.1.3347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2de052dec2 code=0x7ffc0000 [ 238.366088][T13658] loop1: detected capacity change from 0 to 512 [ 238.373090][T13658] EXT4-fs: Ignoring removed nobh option [ 238.410865][T13658] EXT4-fs (loop1): orphan cleanup on readonly fs [ 238.410914][T13658] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #11: comm syz.1.3347: unexpected EA_INODE flag [ 238.410970][T13658] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 238.417576][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 238.417600][ C1] EXT4-fs (loop1): initial error at time 2000000068: ext4_orphan_get:1403: inode 11 [ 238.417649][ C1] EXT4-fs (loop1): last error at time 2000000068: ext4_orphan_get:1403: inode 11 [ 238.418586][T13658] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.3347: couldn't read orphan inode 11 (err -117) [ 238.418645][T13658] loop1: lost filesystem error report for type 5 error -117 [ 238.432342][T13658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.573372][T13644] loop2: detected capacity change from 0 to 512 [ 238.603499][T13644] EXT4-fs: Ignoring removed oldalloc option [ 238.748533][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.762998][T13644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.917473][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.084172][ T4027] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.084240][ T4027] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.084323][ T4027] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.084377][ T4027] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.084413][ T4027] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.084470][ T4027] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.084504][ T4027] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.084630][ T4027] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.260129][T13699] loop5: detected capacity change from 0 to 512 [ 239.280632][T13703] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 239.295933][T13699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.314627][T13703] bond4: entered promiscuous mode [ 239.314789][T13703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.341935][T13703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.352993][T13703] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 239.353147][T13703] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 239.355522][ T9544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.373856][T13703] bond4: (slave ip6gre2): making interface the new active one [ 239.373913][T13703] ip6gre2: entered promiscuous mode [ 239.383128][T13703] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 240.499454][T13727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.978345][ T3383] gretap0 speed is unknown, defaulting to 1000 [ 240.978378][ T3383] syz1: Port: 1 Link DOWN [ 240.986124][ T4027] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.986162][ T4027] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.986240][ T4027] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.986272][ T4027] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.986303][ T4027] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.986332][ T4027] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.986435][ T4027] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.986468][ T4027] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.687228][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.700755][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.953752][T13769] loop9: detected capacity change from 0 to 512 [ 241.954522][T13769] EXT4-fs: Ignoring removed nobh option [ 241.966604][T13769] EXT4-fs (loop9): orphan cleanup on readonly fs [ 241.966650][T13769] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #11: comm syz.9.3389: unexpected EA_INODE flag [ 241.966692][T13769] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.973872][T13769] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.3389: couldn't read orphan inode 11 (err -117) [ 241.973905][T13769] loop9: lost filesystem error report for type 5 error -117 [ 241.975252][T13769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.052941][ T8960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.147554][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.147730][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.215269][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.226525][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.424373][ T4027] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.424452][ T4027] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.424558][ T4027] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.444887][ T4965] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.508193][T13782] loop9: detected capacity change from 0 to 512 [ 242.518161][T13782] EXT4-fs error (device loop9): ext4_xattr_inode_iget:473: comm syz.9.3394: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 242.518209][T13782] loop9: lost filesystem error report for type 5 error -117 [ 242.519176][T13782] EXT4-fs (loop9): 1 orphan inode deleted [ 242.519642][T13782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.587685][ T8960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.709803][T13797] FAULT_INJECTION: forcing a failure. [ 242.709803][T13797] name failslab, interval 1, probability 0, space 0, times 0 [ 242.709865][T13797] CPU: 0 UID: 0 PID: 13797 Comm: syz.2.3401 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.709897][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.709919][T13797] Call Trace: [ 242.709928][T13797] [ 242.710007][T13797] __dump_stack+0x1d/0x30 [ 242.710038][T13797] dump_stack_lvl+0x95/0xd0 [ 242.710064][T13797] dump_stack+0x15/0x1b [ 242.710139][T13797] should_fail_ex+0x262/0x280 [ 242.710160][T13797] ? skb_clone+0x151/0x1f0 [ 242.710194][T13797] should_failslab+0x8c/0xb0 [ 242.710222][T13797] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 242.710329][T13797] ? skb_clone+0x151/0x1f0 [ 242.710372][T13797] skb_clone+0x151/0x1f0 [ 242.710399][T13797] bpf_clone_redirect+0xed/0x280 [ 242.710464][T13797] bpf_prog_53f18857bc887b09+0x22/0x2a [ 242.710494][T13797] bpf_test_run+0x29b/0x620 [ 242.710531][T13797] ? __list_add_valid_or_report+0x38/0xe0 [ 242.710603][T13797] ? bpf_test_run+0x198/0x620 [ 242.710636][T13797] bpf_prog_test_run_skb+0xe67/0x11b0 [ 242.710805][T13797] ? __rcu_read_unlock+0x4e/0x70 [ 242.710874][T13797] ? __fget_files+0x184/0x1c0 [ 242.710898][T13797] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.710925][T13797] bpf_prog_test_run+0x208/0x340 [ 242.710960][T13797] __sys_bpf+0x8da/0xc30 [ 242.711001][T13797] ? do_futex+0x350/0x460 [ 242.711034][T13797] __x64_sys_bpf+0x69/0x80 [ 242.711056][T13797] x64_sys_call+0xf26/0x2550 [ 242.711129][T13797] do_syscall_64+0x112/0x360 [ 242.711186][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.711211][T13797] RIP: 0033:0x7f3c19c5e159 [ 242.711229][T13797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.711249][T13797] RSP: 002b:00007f3c186b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.711298][T13797] RAX: ffffffffffffffda RBX: 00007f3c19ee5fa0 RCX: 00007f3c19c5e159 [ 242.711313][T13797] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 242.711328][T13797] RBP: 00007f3c19cf5024 R08: 0000000000000000 R09: 0000000000000000 [ 242.711343][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.711428][T13797] R13: 00007f3c19ee6038 R14: 00007f3c19ee5fa0 R15: 00007ffc245f9658 [ 242.711448][T13797] [ 243.629729][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.629829][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.687453][T13829] loop2: detected capacity change from 0 to 512 [ 243.698741][T13829] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.733346][T13835] loop1: detected capacity change from 0 to 512 [ 243.741511][T13829] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3412: bad orphan inode 13 [ 243.741632][T13829] loop2: lost filesystem error report for type 5 error -117 [ 243.751750][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 243.751772][ C0] EXT4-fs (loop2): last error at time 2000000074: ext4_orphan_get:1429 [ 243.774722][T13829] ext4_test_bit(bit=12, block=18) = 1 [ 243.774804][T13829] is_bad_inode(inode)=0 [ 243.774813][T13829] NEXT_ORPHAN(inode)=0 [ 243.774822][T13829] max_ino=32 [ 243.774883][T13829] i_nlink=1 [ 243.775339][T13829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 243.805594][T13835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 243.806479][T13835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.806602][T13835] ext4 filesystem being mounted at /624/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.808424][T13829] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 243.808610][T13829] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3412: bg 0: block 248: padding at end of block bitmap is not set [ 243.808862][T13829] __quota_error: 48 callbacks suppressed [ 243.808894][T13829] Quota error (device loop2): write_blk: dquota write failed [ 243.808909][T13829] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 243.808931][T13829] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3412: Failed to acquire dquot type 1 [ 243.813328][T13829] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 243.813356][T13829] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 243.813374][T13829] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3412: Failed to acquire dquot type 1 [ 243.834319][ T29] audit: type=1400 audit(2000000074.162:2108): avc: denied { write } for pid=13828 comm="syz.2.3412" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.834431][ T29] audit: type=1400 audit(2000000074.172:2109): avc: denied { write } for pid=13833 comm="syz.1.3414" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.834516][ T29] audit: type=1400 audit(2000000074.172:2110): avc: denied { write } for pid=13828 comm="syz.2.3412" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.834540][ T29] audit: type=1400 audit(2000000074.172:2111): avc: denied { write } for pid=13828 comm="syz.2.3412" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.834565][ T29] audit: type=1400 audit(2000000074.172:2112): avc: denied { rename } for pid=13828 comm="syz.2.3412" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.834589][ T29] audit: type=1400 audit(2000000074.172:2113): avc: denied { unlink } for pid=13828 comm="syz.2.3412" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.865743][T13835] loop1: detected capacity change from 512 to 264 [ 243.877579][T13835] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.3414: reserved inode found cleared - inode=1 [ 243.963445][ T9222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 243.984180][ T4029] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 1 [ 243.984266][ T4029] loop2: lost filesystem error report for type 5 error -117 [ 244.418582][T11810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.731248][T13862] gretap0 speed is unknown, defaulting to 1000 [ 244.898388][T13854] loop9: detected capacity change from 0 to 2048 [ 244.929436][T13862] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.929482][T13862] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.929614][T13862] bridge_slave_0: entered allmulticast mode [ 244.930173][T13862] bridge_slave_0: entered promiscuous mode [ 244.932660][T13862] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.932691][T13862] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.932744][T13862] bridge_slave_1: entered allmulticast mode [ 244.933443][T13862] bridge_slave_1: entered promiscuous mode [ 244.946027][T13862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.947211][T13862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.957683][T13862] team0: Port device team_slave_0 added [ 244.958815][T13862] team0: Port device team_slave_1 added [ 244.969960][T13854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.980522][T13862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.980538][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.980595][T13862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.982601][T13862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.982615][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.982706][T13862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.017507][T13862] hsr_slave_0: entered promiscuous mode [ 245.017863][T13862] hsr_slave_1: entered promiscuous mode [ 245.019708][T13862] debugfs: 'hsr0' already exists in 'hsr' [ 245.019723][T13862] Cannot create hsr debugfs directory [ 245.026143][T13852] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 245.026208][T13852] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 245.026306][T13852] EXT4-fs (loop9): This should not happen!! Data will be lost [ 245.026306][T13852] [ 245.026319][T13852] EXT4-fs (loop9): Total free blocks count 0 [ 245.026333][T13852] EXT4-fs (loop9): Free/Dirty block details [ 245.026416][T13852] EXT4-fs (loop9): free_blocks=4096 [ 245.026430][T13852] EXT4-fs (loop9): dirty_blocks=64 [ 245.026443][T13852] EXT4-fs (loop9): Block reservation details [ 245.026455][T13852] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 245.061333][ T4029] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 245.118084][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.128566][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.369707][T13862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.378625][T13862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.379362][T13862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.388029][T13862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.388776][T13862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.395039][T13862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.395782][T13862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.402028][T13862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.432327][T13862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.438173][T13862] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.441183][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.441218][ T4965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.445126][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.445212][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.556264][T13862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.668575][T13862] veth0_vlan: entered promiscuous mode [ 245.682614][T13862] veth1_vlan: entered promiscuous mode [ 245.703299][T13862] veth0_macvtap: entered promiscuous mode [ 245.711896][T13862] veth1_macvtap: entered promiscuous mode [ 245.741608][T13862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.751101][T13862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.774464][ T4965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.774532][ T4965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.774973][ T4965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.775077][ T4965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.972410][T13954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13954 comm=syz.5.3439 [ 246.079196][T13965] loop5: detected capacity change from 0 to 512 [ 246.327370][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.327482][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.624599][T13996] loop9: detected capacity change from 0 to 128 [ 246.635667][T13996] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.649179][T13996] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.712694][ T8960] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.893351][T14009] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 246.910787][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3458'. [ 246.910942][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3458'. [ 247.191018][ T4963] tipc: Subscription rejected, illegal request [ 247.371521][T14058] loop4: detected capacity change from 0 to 4096 [ 247.410786][T14058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.431249][T13862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.676545][T14056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.685539][T14056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.716242][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3483'. [ 247.802066][T14099] syzkaller1: entered promiscuous mode [ 247.802101][T14099] syzkaller1: entered allmulticast mode [ 247.893216][T14104] netlink: 'syz.9.3488': attribute type 4 has an invalid length. [ 248.227905][T14166] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.230761][T14166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.258804][T14166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.259978][T14166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.263170][T14166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.263195][T14166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.266524][T14166] veth1_vlan: left promiscuous mode [ 248.267007][T14166] veth0_vlan: left promiscuous mode [ 248.269230][T14166] veth0_vlan: entered promiscuous mode [ 248.270439][T14166] veth1_vlan: entered promiscuous mode [ 248.273243][T14166] veth1_macvtap: left promiscuous mode [ 248.273775][T14166] veth0_macvtap: left promiscuous mode [ 248.275570][T14166] veth0_macvtap: entered promiscuous mode [ 248.276233][T14166] veth1_macvtap: entered promiscuous mode [ 248.278948][T14166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.280140][T14166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.281212][T14166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.282414][T14166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.329902][T14166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.332760][T14166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.333787][T14166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.458292][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3509'. [ 248.483839][T14178] gretap0 speed is unknown, defaulting to 1000 [ 248.614181][ T4029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.614276][ T4029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.614397][ T4029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.614438][ T4029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.691637][ T4029] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.789747][T14221] ip_tables: iptables: counters copy to user failed while replacing table [ 248.851569][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 248.851626][ T29] audit: type=1400 audit(2000000079.202:2194): avc: denied { watch watch_reads } for pid=14222 comm="syz.2.3530" path="/proc/713/task/714/net" dev="proc" ino=41539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 248.900376][ T29] audit: type=1400 audit(2000000079.252:2195): avc: denied { map_create } for pid=14224 comm="syz.9.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.922129][ T29] audit: type=1400 audit(2000000079.252:2196): avc: denied { prog_load } for pid=14224 comm="syz.9.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.978290][ T29] audit: type=1400 audit(2000000079.332:2197): avc: denied { read write } for pid=8960 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.005716][ T29] audit: type=1400 audit(2000000079.362:2198): avc: denied { allowed } for pid=14228 comm="syz.9.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 249.005890][ T29] audit: type=1400 audit(2000000079.362:2199): avc: denied { bpf } for pid=14228 comm="syz.9.3532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 249.047509][ T29] audit: type=1400 audit(2000000079.412:2200): avc: denied { read write } for pid=8960 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.231170][ T29] audit: type=1400 audit(2000000079.582:2201): avc: denied { open } for pid=14234 comm="syz.7.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 249.232545][ T29] audit: type=1400 audit(2000000079.582:2202): avc: denied { map_create } for pid=14234 comm="syz.7.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.298706][ T29] audit: type=1400 audit(2000000079.652:2203): avc: denied { name_bind } for pid=14237 comm="syz.7.3535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 249.402514][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3539'. [ 249.643155][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3545'. [ 250.383938][T14352] gretap0 speed is unknown, defaulting to 1000 [ 250.754584][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 250.755299][ T4553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.777542][T14434] netlink: 'syz.4.3626': attribute type 1 has an invalid length. [ 252.402139][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3667'. [ 252.402179][T14520] netlink: 'syz.9.3667': attribute type 30 has an invalid length. [ 252.402202][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3667'. [ 252.402399][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3667'. [ 252.402419][T14520] netlink: 'syz.9.3667': attribute type 30 has an invalid length. [ 252.402434][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3667'. [ 252.680786][T14557] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14557 comm=syz.2.3683 [ 253.102198][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'. [ 253.416523][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3710'. [ 253.430527][T14606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14606 comm=syz.7.3698 [ 253.451269][T14605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3710'. [ 253.451299][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3710'. [ 253.556413][T14613] gretap0 speed is unknown, defaulting to 1000 [ 253.720504][T14637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14637 comm=syz.9.3713 [ 253.855288][ T29] kauditd_printk_skb: 8017 callbacks suppressed [ 253.855325][ T29] audit: type=1400 audit(2000000084.212:9978): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.855495][ T29] audit: type=1400 audit(2000000084.212:9979): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.855919][ T29] audit: type=1400 audit(2000000084.212:9980): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.856946][ T29] audit: type=1400 audit(2000000084.212:9981): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.857085][ T29] audit: type=1400 audit(2000000084.212:9982): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.857301][ T29] audit: type=1400 audit(2000000084.212:9983): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.857493][ T29] audit: type=1400 audit(2000000084.212:9984): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.859113][ T29] audit: type=1400 audit(2000000084.212:9985): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.859286][ T29] audit: type=1400 audit(2000000084.212:9986): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.859454][ T29] audit: type=1400 audit(2000000084.212:9987): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.106612][T14663] netlink: 'syz.4.3728': attribute type 2 has an invalid length. [ 254.107090][T14663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3728'. [ 254.252377][T14642] ================================================================== [ 254.252430][T14642] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 254.252483][T14642] [ 254.252491][T14642] write to 0xffff8881248aabe0 of 8 bytes by task 14635 on cpu 1: [ 254.252522][T14642] shmem_file_splice_read+0x401/0x590 [ 254.252555][T14642] splice_direct_to_actor+0x261/0x680 [ 254.252601][T14642] do_splice_direct+0x119/0x1a0 [ 254.252637][T14642] do_sendfile+0x37d/0x640 [ 254.252659][T14642] __x64_sys_sendfile64+0x105/0x150 [ 254.252690][T14642] x64_sys_call+0x1015/0x2550 [ 254.252720][T14642] do_syscall_64+0x112/0x360 [ 254.252746][T14642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.252768][T14642] [ 254.252775][T14642] write to 0xffff8881248aabe0 of 8 bytes by task 14642 on cpu 0: [ 254.252796][T14642] shmem_file_splice_read+0x401/0x590 [ 254.252836][T14642] splice_direct_to_actor+0x261/0x680 [ 254.252871][T14642] do_splice_direct+0x119/0x1a0 [ 254.252912][T14642] do_sendfile+0x37d/0x640 [ 254.252933][T14642] __x64_sys_sendfile64+0x105/0x150 [ 254.252966][T14642] x64_sys_call+0x1015/0x2550 [ 254.252990][T14642] do_syscall_64+0x112/0x360 [ 254.253014][T14642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.253038][T14642] [ 254.253043][T14642] value changed: 0x00000000000034c4 -> 0x00000000000034c9 [ 254.253057][T14642] [ 254.253062][T14642] Reported by Kernel Concurrency Sanitizer on: [ 254.253075][T14642] CPU: 0 UID: 0 PID: 14642 Comm: syz.7.3715 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.253104][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.253119][T14642] ================================================================== [ 258.864119][ T29] kauditd_printk_skb: 43784 callbacks suppressed [ 258.864174][ T29] audit: type=1400 audit(2000000089.212:53772): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.864259][ T29] audit: type=1400 audit(2000000089.222:53773): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.865866][ T29] audit: type=1400 audit(2000000089.222:53774): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.865968][ T29] audit: type=1400 audit(2000000089.222:53775): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.866107][ T29] audit: type=1400 audit(2000000089.222:53776): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.866259][ T29] audit: type=1400 audit(2000000089.222:53777): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.867221][ T29] audit: type=1400 audit(2000000089.222:53778): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.867248][ T29] audit: type=1400 audit(2000000089.222:53779): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.867273][ T29] audit: type=1400 audit(2000000089.222:53780): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.867297][ T29] audit: type=1400 audit(2000000089.222:53781): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.874182][ T29] kauditd_printk_skb: 45393 callbacks suppressed [ 263.874208][ T29] audit: type=1400 audit(2000000094.222:99175): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.874308][ T29] audit: type=1400 audit(2000000094.232:99176): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.880823][ T29] audit: type=1400 audit(2000000094.232:99177): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.880935][ T29] audit: type=1400 audit(2000000094.232:99178): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.880992][ T29] audit: type=1400 audit(2000000094.232:99179): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.881023][ T29] audit: type=1400 audit(2000000094.232:99180): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.881096][ T29] audit: type=1400 audit(2000000094.232:99181): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.881123][ T29] audit: type=1400 audit(2000000094.232:99182): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.881161][ T29] audit: type=1400 audit(2000000094.232:99183): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.881187][ T29] audit: type=1400 audit(2000000094.232:99184): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0