last executing test programs: 2m26.794480685s ago: executing program 0 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) mount(&(0x7f0000000180)=@md0, &(0x7f0000000240)='./proc/sys/vm/compaction_proactiveness\x00', &(0x7f0000000280)='logfs\x00', 0xe, &(0x7f00000005c0)='$[\x00') ftruncate(r3, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000480)='127.0.0.1:/root\x00\x82\xda|7\xd3\x86+\x0f\xb7\x7fI\xfb\x8a\xed\xa4\xb25D\xa2\xc6\r\x97]R\b\xdaC\xb8\xac6z>? /ht>\xd0%\xc9\x1a\x86\xaa\xee\x9c\xfb\xc6x|\xe6\xf7\xcav\xb5\x85\xb0\xfa\xe3\xb6\xae\x9bl\xf7\t\xcc\xd4\xda~\x05\xfaG7\xbd\t\xae\xba\xb8?\xf0\a\xff\xf6 ?\xacV\xfa-\xeb\xb1\x17^\xa5\xe1%\xbe\xf0.\x820\xa3dP\x86H\x06\xb1\x91\xcb\x89M \xb8\xc4\x10 0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = accept4$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x80000) recvmmsg(r7, &(0x7f0000000340), 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 9.226297739s ago: executing program 1 (id=946): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x14b142, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) mount(&(0x7f0000000180)=@md0, &(0x7f0000000240)='./proc/sys/vm/compaction_proactiveness\x00', &(0x7f0000000280)='logfs\x00', 0xe, &(0x7f00000005c0)='$[\x00') ftruncate(r4, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000480)='127.0.0.1:/root\x00\x82\xda|7\xd3\x86+\x0f\xb7\x7fI\xfb\x8a\xed\xa4\xb25D\xa2\xc6\r\x97]R\b\xdaC\xb8\xac6z>? /ht>\xd0%\xc9\x1a\x86\xaa\xee\x9c\xfb\xc6x|\xe6\xf7\xcav\xb5\x85\xb0\xfa\xe3\xb6\xae\x9bl\xf7\t\xcc\xd4\xda~\x05\xfaG7\xbd\t\xae\xba\xb8?\xf0\a\xff\xf6 ?\xacV\xfa-\xeb\xb1\x17^\xa5\xe1%\xbe\xf0.\x820\xa3dP\x86H\x06\xb1\x91\xcb\x89M \xb8\xc4\x10 0x0}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2, 0x7}, {0xfff1, 0xc}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) socket(0x2, 0x6, 0x100000fc) socket(0x1d, 0x2, 0x6) 5.722345131s ago: executing program 1 (id=967): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x80000) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfff) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000810008003dfb0fa8ac310f49b55197df800c86abaea74dddf4f645819711b0f06a8672f57614cfea95720fd9a6f50177ba200a5c00", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1008000e0e) 5.070417689s ago: executing program 5 (id=969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) 5.002566592s ago: executing program 5 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1a}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffdfe, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x529, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 4.901920507s ago: executing program 5 (id=972): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="03", 0x1, 0x20000095, &(0x7f000005ffe4)={0xa, 0x4e21, 0xffffffff, @private2, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84480) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000008c0)='\xa0\xc1t\x9f\\\xd3:A\x83\xe5\xb4u$\x95\aY\xbeU\xcd\x1c.j\x90\xaf\xbdG.%\xe9\xb4\xbb\v\xc6K\x1b\xab\x1d\xd2c\x99y\x8b\x90S\xc9\t\x96\x14\xa0Y\xab@31\xb2@\xe9\ag\x91\xdd\xd7\xbb`\xc64\x8ca\x97\x06\xf6\x8f\xd7k\xcbT\xea\aqn\xff\xe2\xae}\x00\xb2\'qy*$\x91\x13\x00\xbc\x01\xe0\xcc\xef\x14\xd3\b\xb0\xf0l\x97g\xa4\xe6 \xd6\xa6\x89\x89b.\xc7\xd8/\a\x88\xe2\x9e\xb2\xf7h$\rl:\xba\xcbH/\xcd\x1a\xf1V\xbb.\xd4\xf7O}\xc3\x04\xc4e\n\xe9\xa9\xcaC\xfb\x00\xe1|\xd1\xa4L\x1f\'aO\xb612+\x92t\x9c\xceub:\x00\xb6\xbf\xa4\xcd@\xe9\x85\x8a\x02\xfe\xfc?h\xdc\x82\xad\x8f\x1aL\x80\\\xca;\xb8\x11\xe8\xc8\\\x00'/232) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'dh\x00', 0x0, 0x0, 0x62}, {@multicast2, 0x4e20, 0x3, 0x5, 0x3, 0x7f}}, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}}, 0x20000004) 4.838570339s ago: executing program 4 (id=973): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.838266839s ago: executing program 4 (id=974): r0 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0x81}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0xfffffffd, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x800}], [{0x2}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) 4.775996962s ago: executing program 4 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) r4 = memfd_secret(0x0) ftruncate(r4, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000480)='127.0.0.1:/root\x00\x82\xda|7\xd3\x86+\x0f\xb7\x7fI\xfb\x8a\xed\xa4\xb25D\xa2\xc6\r\x97]R\b\xdaC\xb8\xac6z>? /ht>\xd0%\xc9\x1a\x86\xaa\xee\x9c\xfb\xc6x|\xe6\xf7\xcav\xb5\x85\xb0\xfa\xe3\xb6\xae\x9bl\xf7\t\xcc\xd4\xda~\x05\xfaG7\xbd\t\xae\xba\xb8?\xf0\a\xff\xf6 ?\xacV\xfa-\xeb\xb1\x17^\xa5\xe1%\xbe\xf0.\x820\xa3dP\x86H\x06\xb1\x91\xcb\x89M \xb8\xc4\x10 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}, {0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x82004}, 0x10) (fail_nth: 1) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x9f50, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x401, 0x3, 0xf, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) stat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, r7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in6=@local}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x200a, &(0x7f00000008c0)=ANY=[]) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') 4.412415348s ago: executing program 3 (id=978): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f907800006558"], 0xfdef) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) writev(r3, &(0x7f0000003ac0)=[{&(0x7f0000003740)="05", 0x1}], 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x257, @time={0x65757100, 0x5}, 0x0, {0x0, 0x7d}, 0x67, 0x2}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r4 = io_uring_setup(0x539a, &(0x7f0000000100)={0x0, 0x694c, 0x80, 0x2, 0x2f8}) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r6, 0x1) r7 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r7, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000100)={0x2d, 0x22, 0x0, 0x2, 0x8, 0xac, 0x5, 0x2, 0x1}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000080)={0x0, 0x10, 0x3}) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.964428788s ago: executing program 5 (id=979): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000800000004000000081c62ee85000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYBLOB="3f0ece2a82db0591cb6a9657853a116701001a93db4ded54d9bb2e973db6a69e36ff9bf1e3f4fa060d309bac70b574d493d244632ec590a9b5c34c1c0265ba516f7f1ad40c3598088b7e9337bc5a794f707331851b5c60322a59b3e84f1c208846ea68459206e2ed8496d21385903bc8e48fbd1f9bee3de5e949e24abf7211c758ff08e3a4b4de1b1fee2efb3805f19334a0ff56697d223f40bf0454619a79edfc9601ca85693f41aede90614e240833f5ff407fa6847067af000058e17bddc409e9247f6588e6a315afca8b9dd8b6ece2fe07ba5fa0dbec4ed27948d58ccffc36c0", @ANYRES8=0x0, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x820}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffffd5, 0x2, 0x7c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa9fc, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 3.90151162s ago: executing program 3 (id=981): unshare(0x100000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, 0x0, 0x26}, 0x28) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x105) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000094, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2d4, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef7a0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa4000161) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x10001}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) socket$kcm(0x11, 0x200000000000003, 0x300) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) close_range(r3, r2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000440)='.\x00', 0x20000000) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.90101719s ago: executing program 4 (id=982): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280a47117f82df2a32e178b17b61805000100000000000000008008000100e000000108000200e000000208000740000000055c6cf5520d67e9420094eef444c15e6af7aa8c53ae485f989fe6172c3a935198f798ca6921b21d2cb04a9197c74916e9a8d5957cb51ba293"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010914"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x4}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x66c0, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) sendfile(r3, r3, 0x0, 0x7e78a6f1) fcntl$addseals(r3, 0x409, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0}}], 0x1, 0x2000c840) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001200100028bd7000fcdbdf251e02bd044e224e220d00000009000000000400000600000007000000010000000600000006000000", @ANYRES32=0x0, @ANYBLOB="88f210a60d0000000200000000004000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40005) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0) write(r6, &(0x7f0000000300)="8781126b97", 0xfffffd22) 3.90064596s ago: executing program 2 (id=983): add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x226, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000200000604000000070000000000000001000000810000000061f49a87c6005f2e"], 0x0, 0x3e}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) futex(&(0x7f0000000000), 0x80, 0x435, &(0x7f0000000040), &(0x7f00000000c0)=0x1, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c000700000000452b56d50008000900"], 0x68}}, 0x0) 3.813517984s ago: executing program 2 (id=984): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.708963008s ago: executing program 2 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0120180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.708405408s ago: executing program 5 (id=986): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x0, 0x3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x15, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRES64, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_ublk_setup_io_uring(0x6d56, &(0x7f00000006c0)={0x0, 0x7daf, 0x80, 0x0, 0x3de}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000880)={r5, 0x0, 0x9, 0x5, 0x3}, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x19f) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./my_configfs/target/usb_gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000081e3e15f00fb728b003a84390d789b00e2070000000000008e221f09f5e604e2d4f4c32274d9ed9c280caab19ff6b91f648f1b4130db36"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$inet(0x2, 0x1, 0x0) pipe(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_robust_list(0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 3.541005395s ago: executing program 2 (id=987): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) 3.44993319s ago: executing program 5 (id=988): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/203}], 0x0, &(0x7f00000001c0)=""/40}, 0x2}], 0x641, 0x40000103, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x100000b, 0x12011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 3.384194342s ago: executing program 2 (id=989): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20004884) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x6}]}]}, {0x0, [0x5f]}}, 0x0, 0x2f, 0x0, 0x0, 0x4}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f]}}, 0x0, 0x20, 0x0, 0x9, 0x6}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x5, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xf2, 0x7}}, 0x1c}, 0x1, 0x1000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x8000005, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80088c0}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) 3.055814437s ago: executing program 1 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) (fail_nth: 8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 329.446645ms ago: executing program 2 (id=991): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = io_uring_setup(0x7f71, &(0x7f0000000180)={0x0, 0x28bf, 0x1, 0x0, 0x165}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000200)=[0x8, 0x80000000], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000150a0103000000000000"], 0x28}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0xc0002) setreuid(0x0, 0xee01) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x0, 0x2, 0x0, {{0x26, 0x4, 0x2, 0x1b, 0x98, 0x65, 0x0, 0x5, 0x29, 0x0, @loopback, @multicast2, {[@end, @timestamp_prespec={0x44, 0x34, 0x6, 0x3, 0xe, [{@multicast1, 0x8}, {@remote, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x12, "acbfe254658c0be72ce5ecd6f42561c4"}, {0x0, 0xd, "046d9710ad18bcb9729409"}]}, @rr={0x7, 0x13, 0x3b, [@empty, @remote, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @cipso={0x86, 0x15, 0x3, [{0x1, 0xf, "cb8932facc65ff249f06a6a6e8"}]}]}}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x5c5582, 0x102) write(r6, &(0x7f0000000400)="74b8b8", 0x3) sendfile(r6, r5, 0x0, 0x7fffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 0s ago: executing program 1 (id=992): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x472501, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000005c0000000000990bd65b00"/32], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004000004000000000200000000000000ab8d7e4ebe1d307668f8b3b58a508d5c4aaa27359d16e977daf3d0ec1fc194c77dc166a98aa6d43d7feb89acfa68daec071528070547a69e8ff6dd5f2072eb15c83bd76ef360e965e753e958c95863bbb1303dcd69f92cd77c6a697daf86982b3f9cc2e75f3160a8d2314537725bc45dccc18b4868358d371d3a4d6a7fe6b652f7de4a640cf7e178fbe008bf7be6222c5ea0fe095b9a3affc859dc41a182fb3cab660a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000001080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\twrm'], 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000000)='10', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) writev(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000002dd00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x3f7, 0x300, 0x70bd27, 0x25dfdbfb, {0x1a, 0xc, './proc/sys/vm/nr_hugepages', './proc/file0'}, ["", "", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x800) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe, 0x9, 0x0, 0x40000}}, @TCA_CT_LABELS={0x14, 0x7, "7af4c62afe5def9780d5c7de3cc835ba"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2dbba109be806e9dee560adba7a78406"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x4010) kernel console output (not intermixed with test programs): system_u:object_r:tracefs_t tclass=file permissive=1 [ 105.542920][ T29] audit: type=1400 audit(1789836823.718:821): avc: denied { open } for pid=5403 comm="syz.3.468" path="/99/tracefs_dir/buffer_size_kb" dev="tracefs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.104561][ T5421] loop3: detected capacity change from 0 to 512 [ 106.131851][ T5421] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.468: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 106.131908][ T5421] loop3: lost filesystem error report for type 5 error -117 [ 106.132448][ T5421] EXT4-fs (loop3): 1 orphan inode deleted [ 106.133030][ T5421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.190834][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.194336][ T29] audit: type=1326 audit(1789836824.378:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 106.194688][ T29] audit: type=1326 audit(1789836824.378:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 106.194722][ T29] audit: type=1326 audit(1789836824.378:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 106.194829][ T29] audit: type=1326 audit(1789836824.378:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 106.426851][ T5427] tap0: tun_chr_ioctl cmd 2147767520 [ 106.487377][ T5437] FAULT_INJECTION: forcing a failure. [ 106.487377][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.487411][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.487463][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.487477][ T5437] Call Trace: [ 106.487484][ T5437] [ 106.487492][ T5437] __dump_stack+0x1d/0x30 [ 106.487565][ T5437] dump_stack_lvl+0x95/0xd0 [ 106.487658][ T5437] dump_stack+0x15/0x1b [ 106.487678][ T5437] should_fail_ex+0x262/0x280 [ 106.487701][ T5437] should_fail+0xb/0x20 [ 106.487748][ T5437] should_fail_usercopy+0x1a/0x20 [ 106.487777][ T5437] _copy_from_user+0x1c/0xb0 [ 106.487808][ T5437] ___sys_sendmsg+0xc1/0x1e0 [ 106.487844][ T5437] __x64_sys_sendmsg+0xd4/0x160 [ 106.487930][ T5437] x64_sys_call+0x22ab/0x2550 [ 106.487953][ T5437] do_syscall_64+0x112/0x360 [ 106.488011][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.488060][ T5437] RIP: 0033:0x7ff093ffe159 [ 106.488079][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.488098][ T5437] RSP: 002b:00007ff092a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.488122][ T5437] RAX: ffffffffffffffda RBX: 00007ff094285fa0 RCX: 00007ff093ffe159 [ 106.488138][ T5437] RDX: 0000000020000940 RSI: 0000200000000180 RDI: 0000000000000005 [ 106.488201][ T5437] RBP: 00007ff092a57090 R08: 0000000000000000 R09: 0000000000000000 [ 106.488218][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.488236][ T5437] R13: 00007ff094286038 R14: 00007ff094285fa0 R15: 00007ffe79267218 [ 106.488255][ T5437] [ 106.500247][ T5437] tap0: tun_chr_ioctl cmd 2147767520 [ 106.905786][ T5445] loop4: detected capacity change from 0 to 128 [ 106.980289][ T5445] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 107.030670][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 107.066128][ T5445] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.094681][ T5445] ext2 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.137992][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.319094][ T5458] tap0: tun_chr_ioctl cmd 2147767520 [ 107.668420][ T5470] loop2: detected capacity change from 0 to 512 [ 108.167789][ T5477] nfs4: Unknown parameter 'retra' [ 108.605395][ T5475] loop1: detected capacity change from 0 to 2048 [ 108.641951][ T5475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.642399][ T5475] FAULT_INJECTION: forcing a failure. [ 108.642399][ T5475] name failslab, interval 1, probability 0, space 0, times 0 [ 108.642428][ T5475] CPU: 1 UID: 0 PID: 5475 Comm: syz.1.479 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.642487][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.642521][ T5475] Call Trace: [ 108.642529][ T5475] [ 108.642539][ T5475] __dump_stack+0x1d/0x30 [ 108.642568][ T5475] dump_stack_lvl+0x95/0xd0 [ 108.642589][ T5475] dump_stack+0x15/0x1b [ 108.642614][ T5475] should_fail_ex+0x262/0x280 [ 108.642720][ T5475] ? do_getname+0x2e/0x1c0 [ 108.642738][ T5475] should_failslab+0x8c/0xb0 [ 108.642781][ T5475] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 108.642889][ T5475] ? do_getname+0x2e/0x1c0 [ 108.642909][ T5475] do_getname+0x2e/0x1c0 [ 108.642928][ T5475] getname_flags+0x1d/0x30 [ 108.642946][ T5475] do_sys_openat2+0x6c/0x130 [ 108.643028][ T5475] __x64_sys_open+0xe6/0x110 [ 108.643054][ T5475] x64_sys_call+0x23a8/0x2550 [ 108.643079][ T5475] do_syscall_64+0x112/0x360 [ 108.643111][ T5475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.643205][ T5475] RIP: 0033:0x7ff093ffe159 [ 108.643224][ T5475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.643242][ T5475] RSP: 002b:00007ff092a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 108.643335][ T5475] RAX: ffffffffffffffda RBX: 00007ff094285fa0 RCX: 00007ff093ffe159 [ 108.643352][ T5475] RDX: 0000000000000010 RSI: 000000000004827e RDI: 0000200000000280 [ 108.643367][ T5475] RBP: 00007ff092a57090 R08: 0000000000000000 R09: 0000000000000000 [ 108.643387][ T5475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.643400][ T5475] R13: 00007ff094286038 R14: 00007ff094285fa0 R15: 00007ffe79267218 [ 108.643489][ T5475] [ 108.782283][ T5483] xt_hashlimit: size too large, truncated to 1048576 [ 108.813262][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.843410][ T5486] –: renamed from vxcan1 (while UP) [ 108.986842][ T5486] FAULT_INJECTION: forcing a failure. [ 108.986842][ T5486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.986885][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.986917][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.986931][ T5486] Call Trace: [ 108.986940][ T5486] [ 108.986950][ T5486] __dump_stack+0x1d/0x30 [ 108.986976][ T5486] dump_stack_lvl+0x95/0xd0 [ 108.987000][ T5486] dump_stack+0x15/0x1b [ 108.987110][ T5486] should_fail_ex+0x262/0x280 [ 108.987133][ T5486] should_fail+0xb/0x20 [ 108.987201][ T5486] should_fail_usercopy+0x1a/0x20 [ 108.987229][ T5486] _copy_from_user+0x1c/0xb0 [ 108.987262][ T5486] get_user_ifreq+0x52/0x110 [ 108.987331][ T5486] sock_ioctl+0x54a/0x610 [ 108.987355][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 108.987436][ T5486] __se_sys_ioctl+0xce/0x140 [ 108.987540][ T5486] __x64_sys_ioctl+0x43/0x50 [ 108.987569][ T5486] x64_sys_call+0x239d/0x2550 [ 108.987593][ T5486] do_syscall_64+0x112/0x360 [ 108.987632][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.987653][ T5486] RIP: 0033:0x7f471006e159 [ 108.987671][ T5486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.987690][ T5486] RSP: 002b:00007f470eaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.987710][ T5486] RAX: ffffffffffffffda RBX: 00007f47102f6090 RCX: 00007f471006e159 [ 108.987776][ T5486] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 108.987796][ T5486] RBP: 00007f470eaa6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.987808][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.987873][ T5486] R13: 00007f47102f6128 R14: 00007f47102f6090 R15: 00007ffcad76b928 [ 108.987895][ T5486] [ 109.084139][ T5496] xt_hashlimit: size too large, truncated to 1048576 [ 109.128065][ T5494] netlink: 'syz.4.482': attribute type 16 has an invalid length. [ 109.135030][ T5492] –: renamed from vxcan1 (while UP) [ 109.219103][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.402099][ T5504] xt_hashlimit: size too large, truncated to 1048576 [ 109.451510][ T5500] –: renamed from vxcan1 (while UP) [ 109.801230][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 109.881943][ T5511] netlink: 52 bytes leftover after parsing attributes in process `syz.5.481'. [ 110.362758][ T5532] nfs4: Unknown parameter 'retra' [ 110.485642][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.485833][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.521543][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 110.610238][ T5533] loop2: detected capacity change from 0 to 128 [ 110.708847][ T5533] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 110.812162][ T5533] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.833996][ T5533] ext2 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.003719][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 111.003741][ T29] audit: type=1400 audit(1789836829.168:915): avc: denied { write } for pid=5531 comm="syz.2.492" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.340487][ T5548] FAULT_INJECTION: forcing a failure. [ 111.340487][ T5548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.340997][ T5548] CPU: 1 UID: 0 PID: 5548 Comm: syz.3.497 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.341099][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.341135][ T5548] Call Trace: [ 111.341143][ T5548] [ 111.341153][ T5548] __dump_stack+0x1d/0x30 [ 111.341203][ T5548] dump_stack_lvl+0x95/0xd0 [ 111.341228][ T5548] dump_stack+0x15/0x1b [ 111.341251][ T5548] should_fail_ex+0x262/0x280 [ 111.341276][ T5548] should_fail_alloc_page+0xf2/0x100 [ 111.341312][ T5548] __alloc_frozen_pages_noprof+0x157/0x400 [ 111.341367][ T5548] alloc_pages_mpol+0xaf/0x1d0 [ 111.341473][ T5548] vma_alloc_folio_noprof+0x1b3/0x300 [ 111.341501][ T5548] handle_mm_fault+0x137d/0x3bb0 [ 111.341533][ T5548] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 111.341596][ T5548] do_user_addr_fault+0x404/0x1060 [ 111.341634][ T5548] exc_page_fault+0x62/0xa0 [ 111.341663][ T5548] asm_exc_page_fault+0x26/0x30 [ 111.341687][ T5548] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 111.341762][ T5548] Code: 23 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 111.341783][ T5548] RSP: 0018:ffffc90001467c98 EFLAGS: 00050202 [ 111.341803][ T5548] RAX: ffff888101d09c80 RBX: 0000000000000186 RCX: 0000000000000186 [ 111.341820][ T5548] RDX: 0000000000000000 RSI: ffffc90001467cda RDI: 000020000000b340 [ 111.341836][ T5548] RBP: ffffc90001467ed8 R08: 000000000000008d R09: 0000000000000000 [ 111.341851][ T5548] R10: 0001c90001467cda R11: 0001c90001467e5f R12: 000020000000b4c6 [ 111.341868][ T5548] R13: 00007ffffffff000 R14: 000020000000b340 R15: ffffc90001467cda [ 111.341917][ T5548] _copy_to_user+0x7c/0xa0 [ 111.341948][ T5548] __se_sys_newuname+0x90/0x270 [ 111.341988][ T5548] ? switch_fpu_return+0xb2/0x1b0 [ 111.342015][ T5548] ? arch_exit_work+0x30/0x40 [ 111.342090][ T5548] __x64_sys_newuname+0x1f/0x30 [ 111.342114][ T5548] x64_sys_call+0x66a/0x2550 [ 111.342141][ T5548] do_syscall_64+0x112/0x360 [ 111.342293][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.342318][ T5548] RIP: 0033:0x7f471006e159 [ 111.342336][ T5548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.342407][ T5548] RSP: 002b:00007f470eac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 111.342431][ T5548] RAX: ffffffffffffffda RBX: 00007f47102f5fa0 RCX: 00007f471006e159 [ 111.342447][ T5548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000000b340 [ 111.342461][ T5548] RBP: 00007f470eac7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.342475][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.342490][ T5548] R13: 00007f47102f6038 R14: 00007f47102f5fa0 R15: 00007ffcad76b928 [ 111.342577][ T5548] [ 111.363513][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.628926][ T29] audit: type=1400 audit(1789836829.818:916): avc: denied { setattr } for pid=5554 comm="syz.1.499" name="PACKET" dev="sockfs" ino=13507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.091195][ T5566] loop1: detected capacity change from 0 to 1024 [ 112.094179][ T29] audit: type=1400 audit(1789836830.278:917): avc: denied { remount } for pid=5565 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.235648][ T5523] loop5: detected capacity change from 0 to 128 [ 112.664241][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 113.154740][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 113.361610][ T5587] loop4: detected capacity change from 0 to 512 [ 113.362198][ T5587] EXT4-fs (loop4): bad s_min_extra_isize: 65535 [ 113.387707][ T5587] loop4: detected capacity change from 0 to 512 [ 113.390947][ T5587] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.420478][ T5587] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.505: bad orphan inode 13 [ 113.420580][ T5587] loop4: lost filesystem error report for type 5 error -117 [ 113.421488][ T5587] ext4_test_bit(bit=12, block=18) = 1 [ 113.421522][ T5587] is_bad_inode(inode)=0 [ 113.421531][ T5587] NEXT_ORPHAN(inode)=0 [ 113.421540][ T5587] max_ino=32 [ 113.421547][ T5587] i_nlink=1 [ 113.421919][ T5587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 113.506893][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 113.539779][ T29] audit: type=1326 audit(1789836831.728:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.540011][ T29] audit: type=1326 audit(1789836831.728:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.542246][ T29] audit: type=1326 audit(1789836831.728:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.542388][ T29] audit: type=1326 audit(1789836831.728:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.542871][ T29] audit: type=1326 audit(1789836831.728:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.543049][ T29] audit: type=1326 audit(1789836831.728:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.705234][ T29] audit: type=1326 audit(1789836831.888:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efeffa3e159 code=0x7ffc0000 [ 113.826277][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 114.009601][ T5607] loop4: detected capacity change from 0 to 8192 [ 114.031852][ T5607] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.368639][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.519'. [ 114.385706][ T5618] loop1: detected capacity change from 0 to 128 [ 114.591003][ T5635] netlink: 'syz.5.523': attribute type 10 has an invalid length. [ 114.591024][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.5.523'. [ 114.591108][ T5635] dummy0: entered promiscuous mode [ 114.591740][ T5635] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 114.725872][ T5618] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.960844][ T5648] loop3: detected capacity change from 0 to 128 [ 114.987469][ T5648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 114.987532][ T5648] System zones: 1-3, 19-19, 35-36 [ 114.988274][ T5648] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.988587][ T5648] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.052224][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.072216][ T5618] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.110672][ T5652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.527'. [ 115.161771][ T5618] ext2 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.284637][ T5656] loop5: detected capacity change from 0 to 736 [ 115.298651][ T5656] iso9660: Unexpected value for 'norock' [ 115.500479][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 115.569889][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.657173][ T5669] FAULT_INJECTION: forcing a failure. [ 115.657173][ T5669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.657204][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: syz.3.534 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.657232][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.657247][ T5669] Call Trace: [ 115.657332][ T5669] [ 115.657340][ T5669] __dump_stack+0x1d/0x30 [ 115.657365][ T5669] dump_stack_lvl+0x95/0xd0 [ 115.657443][ T5669] dump_stack+0x15/0x1b [ 115.657466][ T5669] should_fail_ex+0x262/0x280 [ 115.657500][ T5669] should_fail+0xb/0x20 [ 115.657524][ T5669] should_fail_usercopy+0x1a/0x20 [ 115.657554][ T5669] _copy_from_user+0x1c/0xb0 [ 115.657648][ T5669] ___sys_sendmsg+0xc1/0x1e0 [ 115.657687][ T5669] __x64_sys_sendmsg+0xd4/0x160 [ 115.657790][ T5669] x64_sys_call+0x22ab/0x2550 [ 115.657814][ T5669] do_syscall_64+0x112/0x360 [ 115.657853][ T5669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.657923][ T5669] RIP: 0033:0x7f471006e159 [ 115.657942][ T5669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.657964][ T5669] RSP: 002b:00007f470eac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.658044][ T5669] RAX: ffffffffffffffda RBX: 00007f47102f5fa0 RCX: 00007f471006e159 [ 115.658086][ T5669] RDX: 0000000020000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 115.658103][ T5669] RBP: 00007f470eac7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.658119][ T5669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.658152][ T5669] R13: 00007f47102f6038 R14: 00007f47102f5fa0 R15: 00007ffcad76b928 [ 115.658184][ T5669] [ 115.949713][ T5674] 9p: Bad value for 'rfdno' [ 116.522847][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 116.522865][ T29] audit: type=1400 audit(1789836834.708:934): avc: denied { connect } for pid=5675 comm="syz.5.537" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.545058][ T5680] FAULT_INJECTION: forcing a failure. [ 116.545058][ T5680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.545095][ T5680] CPU: 0 UID: 0 PID: 5680 Comm: syz.2.538 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.545120][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.545133][ T5680] Call Trace: [ 116.545141][ T5680] [ 116.545150][ T5680] __dump_stack+0x1d/0x30 [ 116.545176][ T5680] dump_stack_lvl+0x95/0xd0 [ 116.545312][ T5680] dump_stack+0x15/0x1b [ 116.545358][ T5680] should_fail_ex+0x262/0x280 [ 116.545401][ T5680] should_fail+0xb/0x20 [ 116.545422][ T5680] should_fail_usercopy+0x1a/0x20 [ 116.545593][ T5680] _copy_to_user+0x20/0xa0 [ 116.545621][ T5680] simple_read_from_buffer+0xb5/0x130 [ 116.545657][ T5680] proc_fail_nth_read+0x10e/0x150 [ 116.545729][ T5680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.545790][ T5680] vfs_read+0x18e/0x7c0 [ 116.545817][ T5680] ? __rcu_read_unlock+0x4e/0x70 [ 116.545848][ T5680] ? __fget_files+0x184/0x1c0 [ 116.545870][ T5680] ? mutex_lock+0x57/0x90 [ 116.545959][ T5680] ksys_read+0xdc/0x1a0 [ 116.545988][ T5680] __x64_sys_read+0x40/0x50 [ 116.546015][ T5680] x64_sys_call+0x2135/0x2550 [ 116.546076][ T5680] do_syscall_64+0x112/0x360 [ 116.546137][ T5680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.546160][ T5680] RIP: 0033:0x7f257a14e98e [ 116.546177][ T5680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.546227][ T5680] RSP: 002b:00007f2578bc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.546250][ T5680] RAX: ffffffffffffffda RBX: 00007f2578bc66c0 RCX: 00007f257a14e98e [ 116.546265][ T5680] RDX: 000000000000000f RSI: 00007f2578bc60a0 RDI: 0000000000000005 [ 116.546279][ T5680] RBP: 00007f2578bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.546297][ T5680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.546364][ T5680] R13: 00007f257a416128 R14: 00007f257a416090 R15: 00007ffde5a8b758 [ 116.546411][ T5680] [ 116.557320][ T29] audit: type=1400 audit(1789836834.728:935): avc: denied { read } for pid=5677 comm="syz.2.538" name="event2" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.590785][ T29] audit: type=1400 audit(1789836834.738:936): avc: denied { open } for pid=5677 comm="syz.2.538" path="/dev/input/event2" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.905974][ T5690] loop2: detected capacity change from 0 to 128 [ 116.920120][ T5690] syz.2.543: attempt to access beyond end of device [ 116.920120][ T5690] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 116.932878][ T5690] syz.2.543: attempt to access beyond end of device [ 116.932878][ T5690] loop2: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 116.932909][ T5690] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 116.932927][ T5690] syz.2.543: attempt to access beyond end of device [ 116.932927][ T5690] loop2: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 116.932950][ T5690] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 116.933024][ T5690] syz.2.543: attempt to access beyond end of device [ 116.933024][ T5690] loop2: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 116.933119][ T5690] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 116.933240][ T5690] syz.2.543: attempt to access beyond end of device [ 116.933240][ T5690] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 116.937378][ T5690] syz.2.543: attempt to access beyond end of device [ 116.937378][ T5690] loop2: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 116.937438][ T5690] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 116.953674][ T5690] vhci_hcd vhci_hcd.0: default hub control req: 4006 v0304 i0000 l0 [ 117.066619][ T5671] loop1: detected capacity change from 0 to 764 [ 117.210748][ T29] audit: type=1400 audit(1789836835.398:937): avc: denied { read } for pid=5695 comm="syz.3.546" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.310199][ T5697] sd 0:0:1:0: PR command failed: 1026 [ 117.310228][ T5697] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 117.310250][ T5697] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.333739][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 117.406643][ T5692] loop5: detected capacity change from 0 to 128 [ 117.448337][ T29] audit: type=1400 audit(1789836835.628:938): avc: denied { read write } for pid=5670 comm="syz.1.535" dev="sockfs" ino=13786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.483701][ T29] audit: type=1400 audit(1789836835.668:939): avc: denied { read } for pid=5699 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.519519][ T29] audit: type=1400 audit(1789836835.668:940): avc: denied { mounton } for pid=5670 comm="syz.1.535" path="/119/file1" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 117.523540][ T5671] 9p: Bad value for 'rfdno' [ 117.608713][ T5705] 9p: Bad value for 'rfdno' [ 117.631337][ T5692] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 117.724873][ T5692] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.826987][ T5692] ext2 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.875790][ T5717] loop1: detected capacity change from 0 to 128 [ 117.941527][ T5717] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.053585][ T5717] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.077383][ T5717] ext2 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.147526][ T29] audit: type=1400 audit(1789836836.328:941): avc: denied { write } for pid=5691 comm="syz.5.544" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.174725][ T5731] geneve2: entered promiscuous mode [ 118.213977][ T330] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52653 - 0 [ 118.215164][ T31] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52653 - 0 [ 118.215202][ T31] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52653 - 0 [ 118.215235][ T31] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 52653 - 0 [ 118.256857][ T29] audit: type=1400 audit(1789836836.438:942): avc: denied { write } for pid=5716 comm="syz.1.547" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.369809][ T29] audit: type=1326 audit(1789836836.558:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.3.554" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 118.434442][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.554987][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.652436][ T5749] loop5: detected capacity change from 0 to 512 [ 118.657795][ T5749] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 118.814631][ T5757] sd 0:0:1:0: PR command failed: 1026 [ 118.814654][ T5757] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 118.814677][ T5757] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 119.434679][ T5763] loop5: detected capacity change from 0 to 2048 [ 119.476873][ T5763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.615124][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 119.615149][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 119.647645][ T5773] loop2: detected capacity change from 0 to 128 [ 119.713580][ T5773] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 119.954839][ T5784] nfs4: Unknown parameter 'retra' [ 120.067505][ T5788] loop1: detected capacity change from 0 to 512 [ 120.074780][ T5788] EXT4-fs: Ignoring removed nobh option [ 120.208005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.722204][ T5788] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.563: corrupted inode contents [ 120.722237][ T5788] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.722550][ T5788] EXT4-fs (loop1): Remounting filesystem read-only [ 120.723193][ T5788] EXT4-fs (loop1): 1 truncate cleaned up [ 120.723689][ T5788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.723836][ T5788] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.724252][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.728983][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.276291][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 121.459670][ T5773] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.461144][ T5810] FAULT_INJECTION: forcing a failure. [ 121.461144][ T5810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.461169][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.461268][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.461279][ T5810] Call Trace: [ 121.461288][ T5810] [ 121.461297][ T5810] __dump_stack+0x1d/0x30 [ 121.461336][ T5810] dump_stack_lvl+0x95/0xd0 [ 121.461359][ T5810] dump_stack+0x15/0x1b [ 121.461378][ T5810] should_fail_ex+0x262/0x280 [ 121.461456][ T5810] should_fail+0xb/0x20 [ 121.461476][ T5810] should_fail_usercopy+0x1a/0x20 [ 121.461584][ T5810] _copy_to_user+0x20/0xa0 [ 121.461614][ T5810] simple_read_from_buffer+0xb5/0x130 [ 121.461655][ T5810] proc_fail_nth_read+0x10e/0x150 [ 121.461692][ T5810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.461744][ T5810] vfs_read+0x18e/0x7c0 [ 121.461848][ T5810] ? proc_control_compat+0xb9/0xe0 [ 121.461874][ T5810] ? __rcu_read_unlock+0x4e/0x70 [ 121.461910][ T5810] ? __fget_files+0x184/0x1c0 [ 121.461959][ T5810] ? mutex_lock+0x57/0x90 [ 121.461991][ T5810] ksys_read+0xdc/0x1a0 [ 121.462025][ T5810] __x64_sys_read+0x40/0x50 [ 121.462092][ T5810] x64_sys_call+0x2135/0x2550 [ 121.462155][ T5810] do_syscall_64+0x112/0x360 [ 121.462196][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.462255][ T5810] RIP: 0033:0x7ff093fbe98e [ 121.462272][ T5810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.462289][ T5810] RSP: 002b:00007ff092a56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.462311][ T5810] RAX: ffffffffffffffda RBX: 00007ff092a576c0 RCX: 00007ff093fbe98e [ 121.462340][ T5810] RDX: 000000000000000f RSI: 00007ff092a570a0 RDI: 0000000000000004 [ 121.462434][ T5810] RBP: 00007ff092a57090 R08: 0000000000000000 R09: 0000000000000000 [ 121.462450][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.462464][ T5810] R13: 00007ff094286038 R14: 00007ff094285fa0 R15: 00007ffe79267218 [ 121.462483][ T5810] [ 121.651250][ T5773] ext2 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.743482][ T5812] loop1: detected capacity change from 0 to 512 [ 121.760453][ T5812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.767378][ T5812] EXT4-fs (loop1): 1 truncate cleaned up [ 121.767839][ T5812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.769479][ T5812] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.580: Logical block already allocated [ 121.769635][ T5812] EXT4-fs (loop1): Remounting filesystem read-only [ 121.775351][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 121.775365][ T29] audit: type=1400 audit(1789836839.958:961): avc: denied { write } for pid=5811 comm="syz.1.580" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.882349][ T5801] loop5: detected capacity change from 0 to 128 [ 121.918702][ T29] audit: type=1400 audit(1789836840.098:962): avc: denied { write } for pid=5772 comm="syz.2.568" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.975092][ T5818] loop3: detected capacity change from 0 to 2048 [ 122.002877][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.185483][ T29] audit: type=1400 audit(1789836840.368:963): avc: denied { create } for pid=5826 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.209347][ T5827] lo speed is unknown, defaulting to 1000 [ 122.209430][ T5827] lo speed is unknown, defaulting to 1000 [ 122.211759][ T5827] lo speed is unknown, defaulting to 1000 [ 122.214763][ T5827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.224051][ T5827] infiniband syzþ: RDMA CMA: cma_listen_on_dev, error -98 [ 122.325099][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.334044][ T5827] lo speed is unknown, defaulting to 1000 [ 122.348129][ T5801] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 122.399638][ T5827] lo speed is unknown, defaulting to 1000 [ 122.413178][ T5827] lo speed is unknown, defaulting to 1000 [ 122.421217][ T5827] lo speed is unknown, defaulting to 1000 [ 122.426469][ T5827] lo speed is unknown, defaulting to 1000 [ 122.455695][ T5801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.460311][ T5801] ext2 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.668821][ T29] audit: type=1400 audit(1789836840.858:964): avc: denied { write } for pid=5800 comm="syz.5.573" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.749391][ T5827] syz.4.582 (5827) used greatest stack depth: 9672 bytes left [ 122.751025][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.975700][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.020373][ T5840] loop1: detected capacity change from 0 to 128 [ 123.073670][ T5840] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 123.211864][ T5840] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.230748][ T5840] ext2 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.328854][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.437594][ T29] audit: type=1400 audit(1789836841.618:965): avc: denied { write } for pid=5839 comm="syz.1.585" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.475921][ T5853] loop5: detected capacity change from 0 to 512 [ 123.481299][ T5853] EXT4-fs: Ignoring removed nobh option [ 123.538163][ T5853] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #3: comm syz.5.588: corrupted inode contents [ 123.538208][ T5853] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.538324][ T5853] EXT4-fs (loop5): Remounting filesystem read-only [ 123.538618][ T5853] Quota error (device loop5): write_blk: dquota write failed [ 123.538642][ T5853] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 123.542058][ T5853] EXT4-fs (loop5): 1 truncate cleaned up [ 123.542469][ T5853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.542533][ T5853] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.543029][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.642675][ T5850] lo speed is unknown, defaulting to 1000 [ 123.749899][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.803466][ T5863] loop5: detected capacity change from 0 to 1024 [ 123.823439][ T5863] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 123.830052][ T5863] JBD2: no valid journal superblock found [ 123.830066][ T5863] EXT4-fs (loop5): Could not load journal inode [ 123.844236][ T5866] syz_tun: entered allmulticast mode [ 123.855175][ T5866] syz_tun: left allmulticast mode [ 124.005400][ T5871] loop4: detected capacity change from 0 to 128 [ 124.023664][ T5871] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.024410][ T5871] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.108955][ T29] audit: type=1400 audit(1789836842.298:966): avc: denied { write } for pid=5870 comm="syz.4.594" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.355443][ T5881] FAULT_INJECTION: forcing a failure. [ 124.355443][ T5881] name failslab, interval 1, probability 0, space 0, times 0 [ 124.355480][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.355507][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.355574][ T5881] Call Trace: [ 124.355581][ T5881] [ 124.355589][ T5881] __dump_stack+0x1d/0x30 [ 124.355689][ T5881] dump_stack_lvl+0x95/0xd0 [ 124.355715][ T5881] dump_stack+0x15/0x1b [ 124.355817][ T5881] should_fail_ex+0x262/0x280 [ 124.355849][ T5881] ? skb_clone+0x151/0x1f0 [ 124.355868][ T5881] should_failslab+0x8c/0xb0 [ 124.356053][ T5881] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 124.356086][ T5881] ? skb_clone+0x151/0x1f0 [ 124.356109][ T5881] ? ipt_do_table+0xa87/0xb40 [ 124.356130][ T5881] skb_clone+0x151/0x1f0 [ 124.356192][ T5881] raw_local_deliver+0x5fc/0x700 [ 124.356244][ T5881] ip_protocol_deliver_rcu+0x2d/0x7a0 [ 124.356270][ T5881] ip_local_deliver_finish+0x1f0/0x2e0 [ 124.356300][ T5881] ip_local_deliver+0xe8/0x1e0 [ 124.356343][ T5881] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 124.356376][ T5881] ? __pfx_ip_local_deliver+0x10/0x10 [ 124.356405][ T5881] ip_rcv_finish+0x188/0x1a0 [ 124.356502][ T5881] ip_rcv+0x62/0x160 [ 124.356530][ T5881] ? __pfx_ip_rcv_finish+0x10/0x10 [ 124.356578][ T5881] ? __pfx_ip_rcv+0x10/0x10 [ 124.356600][ T5881] netif_receive_skb+0x137/0x4c0 [ 124.356635][ T5881] ? tun_rx_batched+0xca/0x430 [ 124.356668][ T5881] tun_rx_batched+0x101/0x430 [ 124.356774][ T5881] tun_get_user+0x1fd6/0x2870 [ 124.356805][ T5881] ? ref_tracker_alloc+0x1eb/0x2f0 [ 124.356841][ T5881] tun_chr_write_iter+0x15a/0x210 [ 124.356885][ T5881] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 124.356942][ T5881] vfs_write+0x57f/0x9a0 [ 124.357014][ T5881] ksys_write+0xdc/0x1a0 [ 124.357041][ T5881] __x64_sys_write+0x40/0x50 [ 124.357124][ T5881] x64_sys_call+0x154e/0x2550 [ 124.357153][ T5881] do_syscall_64+0x112/0x360 [ 124.357188][ T5881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.357210][ T5881] RIP: 0033:0x7ff093fbe98e [ 124.357246][ T5881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.357265][ T5881] RSP: 002b:00007ff0929d2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.357286][ T5881] RAX: ffffffffffffffda RBX: 00007ff0929d36c0 RCX: 00007ff093fbe98e [ 124.357301][ T5881] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 124.357314][ T5881] RBP: 00007ff0929d3090 R08: 0000000000000000 R09: 0000000000000000 [ 124.357380][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.357395][ T5881] R13: 00007ff0942863f8 R14: 00007ff094286360 R15: 00007ffe79267218 [ 124.357414][ T5881] [ 124.531122][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 124.570089][ T5876] batman_adv: batadv0: Adding interface: veth0 [ 124.570104][ T5876] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.570136][ T5876] batman_adv: batadv0: Interface activated: veth0 [ 124.733090][ T29] audit: type=1326 audit(1789836842.918:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5874 comm="syz.3.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 124.733131][ T29] audit: type=1326 audit(1789836842.918:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5874 comm="syz.3.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471006e159 code=0x7ffc0000 [ 124.988703][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 125.031112][ T5892] loop5: detected capacity change from 0 to 512 [ 125.065124][ T5892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.597: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 125.065200][ T5892] loop5: lost filesystem error report for type 5 error -117 [ 125.067991][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.068016][ C0] EXT4-fs (loop5): initial error at time 1789836843: ext4_xattr_inode_iget:473 [ 125.068043][ C0] EXT4-fs (loop5): last error at time 1789836843: ext4_xattr_inode_iget:473 [ 125.069737][ T5892] EXT4-fs (loop5): 1 orphan inode deleted [ 125.070241][ T5892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.212533][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.261443][ T5896] usb usb7: usbfs: process 5896 (syz.3.598) did not claim interface 0 before use [ 125.269320][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.269495][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.322230][ T5898] futex_wake_op: syz.5.599 tries to shift op by 144; fix this program [ 125.339325][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.441789][ T5906] loop5: detected capacity change from 0 to 1024 [ 125.452679][ T5906] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 125.453711][ T5906] JBD2: no valid journal superblock found [ 125.453724][ T5906] EXT4-fs (loop5): Could not load journal inode [ 126.583215][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 126.584029][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 126.608665][ T5928] bond1: entered promiscuous mode [ 126.608784][ T5928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.820401][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 127.077442][ T5949] nfs4: Unknown parameter 'retra' [ 127.670956][ T5956] loop1: detected capacity change from 0 to 128 [ 127.754135][ T5956] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 127.844747][ T5956] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.864107][ T5956] ext2 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.095917][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 128.095938][ T29] audit: type=1400 audit(1789836846.278:979): avc: denied { write } for pid=5955 comm="syz.1.608" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.295765][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.050439][ T5982] loop5: detected capacity change from 0 to 128 [ 129.114306][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 129.227215][ T5982] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 129.401452][ T5995] lo speed is unknown, defaulting to 1000 [ 129.417423][ T29] audit: type=1326 audit(1789836847.598:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.1.621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff093ffe159 code=0x7fc00000 [ 129.471091][ T5982] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.512201][ T5982] ext2 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.673280][ T29] audit: type=1400 audit(1789836847.858:981): avc: denied { write } for pid=5981 comm="syz.5.626" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.784073][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.861328][ T6014] syz_tun: entered allmulticast mode [ 129.861644][ T6014] syz_tun: left allmulticast mode [ 129.890076][ T6016] rdma_rxe: rxe_newlink: failed to add syz_tun [ 129.966381][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.113497][ T6016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.327426][ T6028] ipt_rpfilter: unknown options [ 130.822640][ T29] audit: type=1326 audit(1789836849.008:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6003 comm="syz.1.640" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff093ffe159 code=0x7fc00000 [ 130.901418][ T6033] vhci_hcd vhci_hcd.4: invalid port number 236 [ 130.901499][ T6033] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 130.960248][ T6038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'. [ 131.463346][ T6043] bridge_slave_0: left allmulticast mode [ 131.463425][ T6043] bridge_slave_0: left promiscuous mode [ 131.463556][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.490633][ T6043] bridge_slave_1: left allmulticast mode [ 131.490658][ T6043] bridge_slave_1: left promiscuous mode [ 131.490801][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.512761][ T6043] bond0: (slave bond_slave_0): Releasing backup interface [ 131.525914][ T6043] bond0: (slave bond_slave_1): Releasing backup interface [ 131.539797][ T6043] team0: Port device team_slave_0 removed [ 131.542764][ T6043] team0: Port device team_slave_1 removed [ 131.543831][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.543845][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.545190][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.545206][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.547841][ T6043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.787550][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 131.968777][ T3521] Bluetooth: hci0: command 0x1003 tx timeout [ 131.968817][ T4676] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.298804][ T6058] loop3: detected capacity change from 0 to 512 [ 132.417720][ T6058] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.644: iget: bad i_size value: 38620345925642 [ 132.419044][ T6058] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.424695][ T6058] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.644: couldn't read orphan inode 15 (err -117) [ 132.424875][ T6058] loop3: lost filesystem error report for type 5 error -117 [ 132.499625][ T6058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.851775][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 133.031844][ T29] audit: type=1400 audit(1789836851.218:983): avc: denied { write } for pid=6057 comm="syz.3.644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.129870][ T6075] syz_tun: entered allmulticast mode [ 133.131159][ T6075] syz_tun: left allmulticast mode [ 133.201006][ T29] audit: type=1400 audit(1789836851.348:984): avc: denied { bind } for pid=6057 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.216148][ T29] audit: type=1400 audit(1789836851.398:985): avc: denied { listen } for pid=6057 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.319908][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.362158][ T6087] netlink: 72 bytes leftover after parsing attributes in process `syz.3.652'. [ 133.718603][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.718690][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.023419][ T29] audit: type=1326 audit(1789836852.188:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.4.649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7fc00000 [ 134.250779][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 134.412714][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 134.979500][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 134.981278][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 135.020577][ T6113] bond1: entered promiscuous mode [ 135.021027][ T6113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.379468][ T29] audit: type=1326 audit(1789836853.568:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.1.650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff093ffe159 code=0x7fc00000 [ 135.525538][ T6122] syz_tun: entered allmulticast mode [ 135.525788][ T6122] syz_tun: left allmulticast mode [ 135.755574][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 136.265362][ T6138] lo speed is unknown, defaulting to 1000 [ 136.528603][ T6144] loop2: detected capacity change from 0 to 128 [ 137.048586][ T6152] loop5: detected capacity change from 0 to 512 [ 137.128629][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 137.684444][ T6176] loop2: detected capacity change from 0 to 1024 [ 137.696123][ T6176] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 137.696716][ T6176] JBD2: no valid journal superblock found [ 137.696727][ T6176] EXT4-fs (loop2): Could not load journal inode [ 138.884514][ T6195] lo speed is unknown, defaulting to 1000 [ 139.960716][ T29] audit: type=1400 audit(1789836858.148:988): avc: denied { mounton } for pid=6199 comm="syz.1.683" path="/146/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 139.961805][ T6206] sd 0:0:1:0: PR command failed: 1026 [ 139.961827][ T6206] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 139.961874][ T6206] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 140.382958][ T6152] EXT4-fs: error -4 creating inode table initialization thread [ 140.395008][ T6152] EXT4-fs (loop5): mount failed [ 140.875060][ T6216] loop5: detected capacity change from 0 to 128 [ 140.886426][ T6216] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 141.264289][ T6216] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.264628][ T6216] ext2 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.347705][ T6218] loop1: detected capacity change from 0 to 128 [ 141.485930][ T29] audit: type=1400 audit(1789836859.618:989): avc: denied { write } for pid=6214 comm="syz.5.698" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.645946][ T6228] loop2: detected capacity change from 0 to 164 [ 141.694392][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.862397][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 143.049707][ T6245] nfs4: Unknown parameter 'retra' [ 143.518514][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 143.601209][ T6255] loop4: detected capacity change from 0 to 256 [ 143.768754][ T6258] loop3: detected capacity change from 0 to 128 [ 143.793340][ T6266] sd 0:0:1:0: PR command failed: 1026 [ 143.793366][ T6266] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 143.793391][ T6266] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 143.808820][ T6258] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 143.851418][ T6262] loop5: detected capacity change from 0 to 128 [ 143.857094][ T29] audit: type=1326 audit(1789836862.038:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.1.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff093ffe159 code=0x7fc00000 [ 143.864918][ T6262] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 143.923529][ T6262] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.923852][ T6258] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.924054][ T6258] ext2 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.939167][ T6262] ext2 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.012192][ T29] audit: type=1400 audit(1789836862.198:991): avc: denied { write } for pid=6261 comm="syz.5.704" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.082003][ T29] audit: type=1400 audit(1789836862.268:992): avc: denied { write } for pid=6257 comm="syz.3.701" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.185709][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.187188][ T6275] loop1: detected capacity change from 0 to 128 [ 144.262723][ T6277] loop5: detected capacity change from 0 to 128 [ 144.288537][ T6275] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.298669][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.345957][ T6280] loop4: detected capacity change from 0 to 512 [ 144.348002][ T6280] EXT4-fs: Ignoring removed nobh option [ 144.368876][ T6275] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.368972][ T6277] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 144.392563][ T6275] ext2 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.414284][ T6280] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.710: corrupted inode contents [ 144.414318][ T6280] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 144.414453][ T6280] EXT4-fs (loop4): Remounting filesystem read-only [ 144.414714][ T6280] Quota error (device loop4): write_blk: dquota write failed [ 144.414741][ T6280] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 144.415826][ T6280] EXT4-fs (loop4): 1 truncate cleaned up [ 144.416084][ T6280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.420247][ T6280] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.469605][ T6280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.578583][ T29] audit: type=1400 audit(1789836862.758:993): avc: denied { write } for pid=6274 comm="syz.1.707" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.663328][ T6293] loop4: detected capacity change from 0 to 512 [ 144.666935][ T6293] EXT4-fs: Ignoring removed nobh option [ 144.667304][ T6277] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.667527][ T6277] ext2 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.778713][ T6293] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.712: corrupted inode contents [ 144.778746][ T6293] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 144.778944][ T6293] EXT4-fs (loop4): Remounting filesystem read-only [ 144.779298][ T6293] Quota error (device loop4): write_blk: dquota write failed [ 144.779369][ T6293] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 144.779617][ T6293] EXT4-fs (loop4): 1 truncate cleaned up [ 144.779974][ T6293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.780076][ T6293] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.781912][ T6293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.881094][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.549930][ T6309] FAULT_INJECTION: forcing a failure. [ 145.549930][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 145.549971][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.4.717 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.549999][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.550015][ T6309] Call Trace: [ 145.550023][ T6309] [ 145.550032][ T6309] __dump_stack+0x1d/0x30 [ 145.550069][ T6309] dump_stack_lvl+0x95/0xd0 [ 145.550095][ T6309] dump_stack+0x15/0x1b [ 145.550117][ T6309] should_fail_ex+0x262/0x280 [ 145.550160][ T6309] ? rtnl_newlink+0x5c/0x1510 [ 145.550189][ T6309] should_failslab+0x8c/0xb0 [ 145.550221][ T6309] __kmalloc_cache_noprof+0x7a/0x400 [ 145.550335][ T6309] ? rtnl_newlink+0x5c/0x1510 [ 145.550365][ T6309] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.550440][ T6309] rtnl_newlink+0x5c/0x1510 [ 145.550557][ T6309] ? __memcg_slab_free_hook+0x154/0x340 [ 145.550581][ T6309] ? __rcu_read_unlock+0x4e/0x70 [ 145.550685][ T6309] ? avc_has_perm_noaudit+0xa3/0x120 [ 145.550734][ T6309] ? cred_has_capability+0x224/0x2a0 [ 145.550767][ T6309] ? selinux_capable+0x31/0x40 [ 145.550794][ T6309] ? security_capable+0x7b/0x90 [ 145.550815][ T6309] ? ns_capable+0x80/0xb0 [ 145.550918][ T6309] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.551031][ T6309] rtnetlink_rcv_msg+0x64b/0x720 [ 145.551128][ T6309] netlink_rcv_skb+0x11e/0x220 [ 145.551163][ T6309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.551261][ T6309] rtnetlink_rcv+0x1c/0x30 [ 145.551284][ T6309] netlink_unicast+0x5a9/0x680 [ 145.551323][ T6309] netlink_sendmsg+0x5be/0x6f0 [ 145.551372][ T6309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.551407][ T6309] ____sys_sendmsg+0x532/0x580 [ 145.551435][ T6309] ___sys_sendmsg+0x195/0x1e0 [ 145.551498][ T6309] __x64_sys_sendmsg+0xd4/0x160 [ 145.551523][ T6309] x64_sys_call+0x22ab/0x2550 [ 145.551568][ T6309] do_syscall_64+0x112/0x360 [ 145.551605][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.551633][ T6309] RIP: 0033:0x7efeffa3e159 [ 145.551653][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.551674][ T6309] RSP: 002b:00007efefe497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.551767][ T6309] RAX: ffffffffffffffda RBX: 00007efeffcc5fa0 RCX: 00007efeffa3e159 [ 145.551785][ T6309] RDX: 000000000404c840 RSI: 0000200000000280 RDI: 0000000000000003 [ 145.551799][ T6309] RBP: 00007efefe497090 R08: 0000000000000000 R09: 0000000000000000 [ 145.551845][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.551860][ T6309] R13: 00007efeffcc6038 R14: 00007efeffcc5fa0 R15: 00007ffc7e365ab8 [ 145.551883][ T6309] [ 145.606134][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.956718][ T6319] loop2: detected capacity change from 0 to 256 [ 145.971978][ T6322] loop5: detected capacity change from 0 to 1024 [ 145.973135][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 145.985331][ T6322] EXT4-fs: Ignoring removed oldalloc option [ 145.985700][ T6322] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.066653][ T6327] FAULT_INJECTION: forcing a failure. [ 146.066653][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 146.066685][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.2.725 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.066713][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.066799][ T6327] Call Trace: [ 146.066808][ T6327] [ 146.066817][ T6327] __dump_stack+0x1d/0x30 [ 146.066838][ T6327] dump_stack_lvl+0x95/0xd0 [ 146.066923][ T6327] dump_stack+0x15/0x1b [ 146.066937][ T6327] should_fail_ex+0x262/0x280 [ 146.066953][ T6327] should_failslab+0x8c/0xb0 [ 146.066974][ T6327] __kmalloc_node_noprof+0xdb/0x500 [ 146.067141][ T6327] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 146.067193][ T6327] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 146.067254][ T6327] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 146.067279][ T6327] ? __d_rehash+0x124/0x1d0 [ 146.067303][ T6327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 146.067382][ T6327] __vmalloc_noprof+0xa4/0xf0 [ 146.067420][ T6327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 146.067445][ T6327] bpf_prog_alloc_no_stats+0x47/0x390 [ 146.067484][ T6327] ? bpf_prog_alloc+0x2a/0x150 [ 146.067499][ T6327] bpf_prog_alloc+0x3c/0x150 [ 146.067513][ T6327] bpf_prog_load+0x54b/0x1060 [ 146.067530][ T6327] ? avc_has_perm_noaudit+0xa3/0x120 [ 146.067551][ T6327] ? vfs_write+0x820/0x9a0 [ 146.067576][ T6327] __sys_bpf+0xbae/0xc30 [ 146.067593][ T6327] ? vfs_write+0x820/0x9a0 [ 146.067632][ T6327] ? vfs_write+0x820/0x9a0 [ 146.067654][ T6327] __x64_sys_bpf+0x69/0x80 [ 146.067669][ T6327] x64_sys_call+0xf26/0x2550 [ 146.067686][ T6327] do_syscall_64+0x112/0x360 [ 146.067794][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.067809][ T6327] RIP: 0033:0x7f257a18e159 [ 146.067883][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.067902][ T6327] RSP: 002b:00007f2578be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.067928][ T6327] RAX: ffffffffffffffda RBX: 00007f257a415fa0 RCX: 00007f257a18e159 [ 146.067958][ T6327] RDX: 0000000000000094 RSI: 0000200000001d80 RDI: 0000000000000005 [ 146.067971][ T6327] RBP: 00007f2578be7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.067986][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.068059][ T6327] R13: 00007f257a416038 R14: 00007f257a415fa0 R15: 00007ffde5a8b758 [ 146.068078][ T6327] [ 146.069795][ T6327] syz.2.725: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 146.069926][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.2.725 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.069950][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.069963][ T6327] Call Trace: [ 146.069969][ T6327] [ 146.069977][ T6327] __dump_stack+0x1d/0x30 [ 146.070058][ T6327] dump_stack_lvl+0x95/0xd0 [ 146.070081][ T6327] dump_stack+0x15/0x1b [ 146.070102][ T6327] warn_alloc+0x146/0x1c0 [ 146.070166][ T6327] ? should_failslab+0x8c/0xb0 [ 146.070195][ T6327] ? __kmalloc_node_noprof+0xdb/0x500 [ 146.070236][ T6327] __vmalloc_node_range_noprof+0x70d/0x1000 [ 146.070333][ T6327] ? __d_rehash+0x124/0x1d0 [ 146.070368][ T6327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 146.070406][ T6327] __vmalloc_noprof+0xa4/0xf0 [ 146.070495][ T6327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 146.070517][ T6327] bpf_prog_alloc_no_stats+0x47/0x390 [ 146.070537][ T6327] ? bpf_prog_alloc+0x2a/0x150 [ 146.070559][ T6327] bpf_prog_alloc+0x3c/0x150 [ 146.070640][ T6327] bpf_prog_load+0x54b/0x1060 [ 146.070664][ T6327] ? avc_has_perm_noaudit+0xa3/0x120 [ 146.070697][ T6327] ? vfs_write+0x820/0x9a0 [ 146.070771][ T6327] __sys_bpf+0xbae/0xc30 [ 146.070849][ T6327] ? vfs_write+0x820/0x9a0 [ 146.070943][ T6327] ? vfs_write+0x820/0x9a0 [ 146.070976][ T6327] __x64_sys_bpf+0x69/0x80 [ 146.071048][ T6327] x64_sys_call+0xf26/0x2550 [ 146.071212][ T6327] do_syscall_64+0x112/0x360 [ 146.071280][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.071344][ T6327] RIP: 0033:0x7f257a18e159 [ 146.071360][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.071486][ T6327] RSP: 002b:00007f2578be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.071507][ T6327] RAX: ffffffffffffffda RBX: 00007f257a415fa0 RCX: 00007f257a18e159 [ 146.071522][ T6327] RDX: 0000000000000094 RSI: 0000200000001d80 RDI: 0000000000000005 [ 146.071536][ T6327] RBP: 00007f2578be7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.071549][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.071581][ T6327] R13: 00007f257a416038 R14: 00007f257a415fa0 R15: 00007ffde5a8b758 [ 146.071744][ T6327] [ 146.075998][ T6327] Mem-Info: [ 146.076042][ T6327] active_anon:32358 inactive_anon:145 isolated_anon:0 [ 146.076042][ T6327] active_file:950 inactive_file:48483 isolated_file:0 [ 146.076042][ T6327] unevictable:0 dirty:12571 writeback:0 [ 146.076042][ T6327] slab_reclaimable:4086 slab_unreclaimable:19056 [ 146.076042][ T6327] mapped:36784 shmem:23174 pagetables:3680 [ 146.076042][ T6327] sec_pagetables:0 bounce:0 [ 146.076042][ T6327] kernel_misc_reclaimable:0 [ 146.076042][ T6327] free:1811608 free_pcp:11599 free_cma:0 [ 146.076100][ T6327] Node 0 active_anon:129432kB inactive_anon:580kB active_file:3800kB inactive_file:193932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147136kB dirty:50284kB writeback:0kB shmem:92696kB kernel_stack:3856kB pagetables:14720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.076212][ T6327] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.076284][ T6327] lowmem_reserve[]: 0 2878 7856 7856 [ 146.076392][ T6327] Node 0 DMA32 free:2943700kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947224kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 146.076457][ T6327] lowmem_reserve[]: 0 0 4978 4978 [ 146.076556][ T6327] Node 0 Normal free:4287372kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:129432kB inactive_anon:580kB active_file:3800kB inactive_file:193932kB unevictable:0kB writepending:50284kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:42872kB local_pcp:29308kB free_cma:0kB [ 146.076666][ T6327] lowmem_reserve[]: 0 0 0 0 [ 146.076694][ T6327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.077061][ T6327] Node 0 DMA32: 1*4kB (M) 0*8kB 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943700kB [ 146.077227][ T6327] Node 0 Normal: 24*4kB (UM) 615*8kB (UME) 712*16kB (UM) 769*32kB (UME) 389*64kB (UME) 242*128kB (UME) 47*256kB (UME) 17*512kB (UME) 6*1024kB (UME) 3*2048kB (ME) 1015*4096kB (UM) = 4287352kB [ 146.079393][ T6327] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 146.079416][ T6327] 72627 total pagecache pages [ 146.079423][ T6327] 24 pages in swap cache [ 146.079430][ T6327] Free swap = 124892kB [ 146.079437][ T6327] Total swap = 124996kB [ 146.079445][ T6327] 2097051 pages RAM [ 146.079452][ T6327] 0 pages HighMem/MovableOnly [ 146.079459][ T6327] 81848 pages reserved [ 146.414081][ T6334] EXT4-fs: Ignoring removed nobh option [ 146.445595][ T6334] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.727: corrupted inode contents [ 146.445668][ T6334] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.445777][ T6334] EXT4-fs (loop2): Remounting filesystem read-only [ 146.446074][ T6334] __quota_error: 1 callbacks suppressed [ 146.446087][ T6334] Quota error (device loop2): write_blk: dquota write failed [ 146.446109][ T6334] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 146.447921][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 146.447941][ C0] EXT4-fs (loop2): initial error at time 1789836864: ext4_do_update_inode:5801: inode 3 [ 146.447977][ C0] EXT4-fs (loop2): last error at time 1789836864: ext4_do_update_inode:5801: inode 3 [ 146.448210][ T6334] EXT4-fs (loop2): 1 truncate cleaned up [ 146.448738][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.448798][ T6334] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.454112][ T6334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.555006][ T6343] sd 0:0:1:0: PR command failed: 1026 [ 146.555032][ T6343] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 146.555149][ T6343] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 146.708086][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 146.708111][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.730'. [ 146.852258][ T6352] netlink: 'syz.5.730': attribute type 4 has an invalid length. [ 146.854311][ T6349] set_capacity_and_notify: 1 callbacks suppressed [ 146.854326][ T6349] loop4: detected capacity change from 0 to 164 [ 147.115779][ T29] audit: type=1400 audit(1789836865.298:995): avc: denied { mount } for pid=6354 comm="syz.4.732" name="/" dev="autofs" ino=15192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 147.334551][ T6358] lo speed is unknown, defaulting to 1000 [ 147.357256][ T29] audit: type=1326 audit(1789836865.538:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257a18e159 code=0x7fc00000 [ 147.520529][ T6380] loop1: detected capacity change from 0 to 256 [ 147.524028][ T6380] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.524588][ T6380] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.527591][ T6374] loop2: detected capacity change from 0 to 512 [ 147.727718][ T6385] FAULT_INJECTION: forcing a failure. [ 147.727718][ T6385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.727798][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.3.739 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.727822][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.727835][ T6385] Call Trace: [ 147.727842][ T6385] [ 147.727850][ T6385] __dump_stack+0x1d/0x30 [ 147.727962][ T6385] dump_stack_lvl+0x95/0xd0 [ 147.727987][ T6385] dump_stack+0x15/0x1b [ 147.728073][ T6385] should_fail_ex+0x262/0x280 [ 147.728114][ T6385] should_fail+0xb/0x20 [ 147.728145][ T6385] should_fail_usercopy+0x1a/0x20 [ 147.728172][ T6385] _copy_from_iter+0xcc/0xe70 [ 147.728196][ T6385] ? __alloc_skb+0x516/0x6f0 [ 147.728363][ T6385] ? __alloc_skb+0x209/0x6f0 [ 147.728399][ T6385] netlink_sendmsg+0x4a4/0x6f0 [ 147.728437][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.728542][ T6385] ____sys_sendmsg+0x532/0x580 [ 147.728638][ T6385] ___sys_sendmsg+0x195/0x1e0 [ 147.728675][ T6385] __x64_sys_sendmsg+0xd4/0x160 [ 147.728768][ T6385] x64_sys_call+0x22ab/0x2550 [ 147.728876][ T6385] do_syscall_64+0x112/0x360 [ 147.728914][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.728939][ T6385] RIP: 0033:0x7f471006e159 [ 147.728959][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.729058][ T6385] RSP: 002b:00007f470eaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.729083][ T6385] RAX: ffffffffffffffda RBX: 00007f47102f6090 RCX: 00007f471006e159 [ 147.729100][ T6385] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 147.729127][ T6385] RBP: 00007f470eaa6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.729218][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.729233][ T6385] R13: 00007f47102f6128 R14: 00007f47102f6090 R15: 00007ffcad76b928 [ 147.729255][ T6385] [ 147.903031][ T6390] loop3: detected capacity change from 0 to 512 [ 147.906238][ T6390] EXT4-fs: Ignoring removed nobh option [ 147.949119][ T6390] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.743: corrupted inode contents [ 147.949290][ T6390] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 147.949450][ T6390] EXT4-fs (loop3): Remounting filesystem read-only [ 147.949664][ T6390] Quota error (device loop3): write_blk: dquota write failed [ 147.949752][ T6390] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 147.950047][ T6390] EXT4-fs (loop3): 1 truncate cleaned up [ 147.950429][ T6390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.950549][ T6390] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.979986][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.105125][ T6399] sd 0:0:1:0: PR command failed: 1026 [ 148.105153][ T6399] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 148.105180][ T6399] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 148.322637][ T6403] nfs4: Unknown parameter 'retra' [ 148.793373][ T6414] loop2: detected capacity change from 0 to 512 [ 148.895213][ T6409] loop5: detected capacity change from 0 to 128 [ 148.967949][ T29] audit: type=1326 audit(1789836867.108:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa3e159 code=0x7fc00000 [ 149.068492][ T6409] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 149.113035][ T29] audit: type=1400 audit(1789836867.298:998): avc: denied { mounton } for pid=6413 comm="syz.2.750" path="/150/file0/bus" dev="loop2" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 149.138006][ T6409] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.157239][ T29] audit: type=1400 audit(1789836867.338:999): avc: denied { open } for pid=6416 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.157294][ T29] audit: type=1400 audit(1789836867.338:1000): avc: denied { kernel } for pid=6416 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.221033][ T6409] ext2 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.398011][ T6424] netlink: 'syz.3.753': attribute type 2 has an invalid length. [ 149.488401][ T6432] loop3: detected capacity change from 0 to 1024 [ 149.512842][ T6433] loop2: detected capacity change from 0 to 128 [ 149.524406][ T6433] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 149.524982][ T6432] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32142!=35945) [ 149.525007][ T6432] EXT4-fs (loop3): group descriptors corrupted! [ 149.526309][ T6433] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.526561][ T6433] ext2 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.670493][ T6436] tap1: tun_chr_ioctl cmd 2147767520 [ 149.882711][ T3877] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.984868][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 150.650522][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.837717][ T6474] sd 0:0:1:0: PR command failed: 1026 [ 151.837745][ T6474] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 151.837770][ T6474] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 151.902890][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.770'. [ 151.981629][ T6476] loop5: detected capacity change from 0 to 512 [ 151.994695][ T6476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.098529][ T6481] loop4: detected capacity change from 0 to 512 [ 152.117436][ T6481] EXT4-fs: Ignoring removed nobh option [ 152.150834][ T6482] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.771: Unimplemented hash flags: 0x0001 [ 152.150872][ T6482] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.771: Corrupt directory, running e2fsck is recommended [ 152.152501][ T6481] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.772: corrupted inode contents [ 152.152571][ T6481] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.152682][ T6481] EXT4-fs (loop4): Remounting filesystem read-only [ 152.153016][ T6481] __quota_error: 4 callbacks suppressed [ 152.153088][ T6481] Quota error (device loop4): write_blk: dquota write failed [ 152.153112][ T6481] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 152.153358][ T6481] EXT4-fs (loop4): 1 truncate cleaned up [ 152.153976][ T6481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.154038][ T6481] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.184208][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.366673][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 152.526720][ T29] audit: type=1400 audit(1789836870.708:1005): avc: denied { write } for pid=6496 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 152.675382][ T6502] loop2: detected capacity change from 0 to 512 [ 152.677349][ T6502] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.778: corrupted in-inode xattr: e_value out of bounds [ 152.677379][ T6502] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.677594][ T6502] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.778: couldn't read orphan inode 15 (err -117) [ 152.677675][ T6502] loop2: lost filesystem error report for type 5 error -117 [ 152.720325][ T6502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.721340][ T6502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.759336][ T6502] loop2: detected capacity change from 0 to 512 [ 152.762619][ T6502] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.778: corrupted in-inode xattr: e_value out of bounds [ 152.762647][ T6502] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.762885][ T6502] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.778: couldn't read orphan inode 15 (err -117) [ 152.762912][ T6502] loop2: lost filesystem error report for type 5 error -117 [ 152.763452][ T6502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.764610][ T6502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.843831][ T6502] loop2: detected capacity change from 0 to 512 [ 152.879044][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 153.550526][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.679688][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.781'. [ 153.761187][ T6524] loop5: detected capacity change from 0 to 164 [ 153.903867][ T29] audit: type=1400 audit(1789836872.088:1006): avc: denied { execute } for pid=6527 comm="syz.5.785" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.904062][ T6528] process 'syz.5.785' launched '/dev/fd/3' with NULL argv: empty string added [ 153.904214][ T29] audit: type=1400 audit(1789836872.088:1007): avc: denied { execute_no_trans } for pid=6527 comm="syz.5.785" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.177119][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 154.737992][ T6544] loop5: detected capacity change from 0 to 2048 [ 154.848052][ T6547] sd 0:0:1:0: PR command failed: 1026 [ 154.848079][ T6547] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 154.848107][ T6547] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 154.929771][ T6544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.933297][ T29] audit: type=1400 audit(1789836873.118:1008): avc: denied { write } for pid=6543 comm="syz.5.792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.997820][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.064426][ T29] audit: type=1400 audit(1789836873.248:1009): avc: denied { getopt } for pid=6550 comm="syz.5.794" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.122556][ T6555] loop5: detected capacity change from 0 to 128 [ 155.292235][ T6564] loop5: detected capacity change from 0 to 512 [ 155.330381][ T6564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.330500][ T6564] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.395825][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 156.000827][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 156.080667][ T6590] loop3: detected capacity change from 0 to 2048 [ 156.087945][ T6590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.091161][ T29] audit: type=1400 audit(1789836874.278:1010): avc: denied { write } for pid=6589 comm="syz.3.804" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.154097][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.223887][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 156.364051][ T29] audit: type=1400 audit(1789836874.548:1011): avc: denied { create } for pid=6602 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.707934][ T6613] sd 0:0:1:0: PR command failed: 1026 [ 156.707964][ T6613] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 156.707991][ T6613] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 156.997009][ T6618] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 156.997992][ T29] audit: type=1400 audit(1789836875.178:1012): avc: denied { write } for pid=6563 comm="syz.5.797" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.036749][ T6618] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.036975][ T6618] ext2 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.071879][ T6622] netlink: 'syz.5.797': attribute type 1 has an invalid length. [ 157.118999][ T6622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.201999][ T6624] set_capacity_and_notify: 1 callbacks suppressed [ 157.202020][ T6624] loop4: detected capacity change from 0 to 512 [ 157.207769][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.282765][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'. [ 157.286214][ T6564] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 157.325898][ T6624] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -ENXIO [ 157.353759][ T6649] FAULT_INJECTION: forcing a failure. [ 157.353759][ T6649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.353793][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.2.818 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.353873][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.353886][ T6649] Call Trace: [ 157.353894][ T6649] [ 157.353903][ T6649] __dump_stack+0x1d/0x30 [ 157.353987][ T6649] dump_stack_lvl+0x95/0xd0 [ 157.354012][ T6649] dump_stack+0x15/0x1b [ 157.354035][ T6649] should_fail_ex+0x262/0x280 [ 157.354060][ T6649] should_fail+0xb/0x20 [ 157.354152][ T6649] should_fail_usercopy+0x1a/0x20 [ 157.354231][ T6649] _copy_from_user+0x1c/0xb0 [ 157.354260][ T6649] udp_lib_setsockopt+0x148/0x470 [ 157.354299][ T6649] udpv6_setsockopt+0x67/0xa0 [ 157.354398][ T6649] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 157.354480][ T6649] sock_common_setsockopt+0x69/0x80 [ 157.354510][ T6649] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.354542][ T6649] __sys_setsockopt+0x184/0x200 [ 157.354565][ T6649] __x64_sys_setsockopt+0x64/0x80 [ 157.354689][ T6649] x64_sys_call+0x248f/0x2550 [ 157.354784][ T6649] do_syscall_64+0x112/0x360 [ 157.354822][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.354886][ T6649] RIP: 0033:0x7f257a18e159 [ 157.354906][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.354927][ T6649] RSP: 002b:00007f2578be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.354952][ T6649] RAX: ffffffffffffffda RBX: 00007f257a415fa0 RCX: 00007f257a18e159 [ 157.354981][ T6649] RDX: 0000000000000067 RSI: 0000000000000011 RDI: 0000000000000004 [ 157.355016][ T6649] RBP: 00007f2578be7090 R08: 0000000000000004 R09: 0000000000000000 [ 157.355031][ T6649] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 157.355095][ T6649] R13: 00007f257a416038 R14: 00007f257a415fa0 R15: 00007ffde5a8b758 [ 157.355118][ T6649] [ 157.417289][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 157.417305][ T29] audit: type=1400 audit(1789836875.518:1014): avc: denied { write } for pid=6630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.555579][ T6564] bond1: entered allmulticast mode [ 157.564575][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 157.583492][ T29] audit: type=1400 audit(1789836875.768:1015): avc: denied { write } for pid=6656 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.679121][ T6622] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 157.712060][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.821287][ T6620] loop4: detected capacity change from 0 to 512 [ 157.932343][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.820'. [ 157.949564][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 157.963877][ T6683] loop3: detected capacity change from 0 to 512 [ 157.964123][ T6683] EXT4-fs: Ignoring removed nobh option [ 157.993420][ T6683] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.825: corrupted inode contents [ 157.993452][ T6683] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.993592][ T6683] EXT4-fs (loop3): Remounting filesystem read-only [ 157.993843][ T6683] Quota error (device loop3): write_blk: dquota write failed [ 157.993890][ T6683] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 157.994634][ T6683] EXT4-fs (loop3): 1 truncate cleaned up [ 157.994991][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.995200][ T6683] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.999803][ T6683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.015649][ T29] audit: type=1400 audit(1789836876.198:1016): avc: denied { write } for pid=6663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.122824][ T29] audit: type=1400 audit(1789836876.288:1017): avc: denied { write } for pid=6692 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.153409][ T6620] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.815: iget: bad i_size value: 12154757448730 [ 158.153934][ T6620] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.159154][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 158.159645][ C1] EXT4-fs (loop4): initial error at time 1789836876: ext4_orphan_get:1403: inode 13 [ 158.160128][ C1] EXT4-fs (loop4): last error at time 1789836876: ext4_orphan_get:1403: inode 13 [ 158.212577][ T6620] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.815: couldn't read orphan inode 13 (err -117) [ 158.212881][ T6620] loop4: lost filesystem error report for type 5 error -117 [ 158.258244][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.344296][ T6716] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 158.344564][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 158.344595][ T6718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.832'. [ 158.344652][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 158.350655][ T6716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.424058][ T6722] sd 0:0:1:0: PR command failed: 1026 [ 158.424086][ T6722] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 158.424110][ T6722] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 158.548482][ T29] audit: type=1400 audit(1789836876.738:1018): avc: denied { write } for pid=6724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.552348][ T6736] loop3: detected capacity change from 0 to 164 [ 158.629697][ T29] audit: type=1400 audit(1789836876.818:1019): avc: denied { write } for pid=6741 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.747283][ T29] audit: type=1400 audit(1789836876.928:1020): avc: denied { write } for pid=6619 comm="syz.4.815" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.801482][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.849548][ T29] audit: type=1400 audit(1789836877.038:1021): avc: denied { write } for pid=6744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.045337][ T6781] FAULT_INJECTION: forcing a failure. [ 159.045337][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.045440][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.5.843 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.045465][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.045477][ T6781] Call Trace: [ 159.045485][ T6781] [ 159.045495][ T6781] __dump_stack+0x1d/0x30 [ 159.045547][ T6781] dump_stack_lvl+0x95/0xd0 [ 159.045573][ T6781] dump_stack+0x15/0x1b [ 159.045598][ T6781] should_fail_ex+0x262/0x280 [ 159.045627][ T6781] should_fail+0xb/0x20 [ 159.045667][ T6781] should_fail_usercopy+0x1a/0x20 [ 159.045697][ T6781] _copy_from_user+0x1c/0xb0 [ 159.045767][ T6781] restore_altstack+0x4b/0x300 [ 159.045798][ T6781] ? __set_current_blocked+0x284/0x2e0 [ 159.045827][ T6781] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 159.045863][ T6781] ? arch_do_signal_or_restart+0x2f3/0x480 [ 159.045926][ T6781] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 159.045966][ T6781] ? __rcu_read_unlock+0x4e/0x70 [ 159.045998][ T6781] x64_sys_call+0x1532/0x2550 [ 159.046100][ T6781] do_syscall_64+0x112/0x360 [ 159.046134][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.046190][ T6781] RIP: 0033:0x7f221299f4d9 [ 159.046211][ T6781] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 159.046298][ T6781] RSP: 002b:00007f2211456a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 159.046323][ T6781] RAX: ffffffffffffffda RBX: 00007f2212c85fa0 RCX: 00007f221299f4d9 [ 159.046382][ T6781] RDX: 00007f2211456a80 RSI: 00007f2211456bb0 RDI: 0000000000000021 [ 159.046397][ T6781] RBP: 00007f2211457090 R08: 0000000000000000 R09: 0000000000000000 [ 159.046410][ T6781] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 159.046423][ T6781] R13: 00007f2212c86038 R14: 00007f2212c85fa0 R15: 00007ffd2767e528 [ 159.046461][ T6781] [ 159.203560][ T6791] FAULT_INJECTION: forcing a failure. [ 159.203560][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.203594][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.5.846 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.203622][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.203635][ T6791] Call Trace: [ 159.203698][ T6791] [ 159.203707][ T6791] __dump_stack+0x1d/0x30 [ 159.203732][ T6791] dump_stack_lvl+0x95/0xd0 [ 159.203753][ T6791] dump_stack+0x15/0x1b [ 159.203773][ T6791] should_fail_ex+0x262/0x280 [ 159.203861][ T6791] should_fail+0xb/0x20 [ 159.203882][ T6791] should_fail_usercopy+0x1a/0x20 [ 159.203976][ T6791] _copy_from_iter+0xcc/0xe70 [ 159.204005][ T6791] ? alloc_pages_mpol+0xdf/0x1d0 [ 159.204031][ T6791] copy_page_from_iter+0x15d/0x1f0 [ 159.204099][ T6791] tun_get_user+0x612/0x2870 [ 159.204166][ T6791] ? ref_tracker_alloc+0x1eb/0x2f0 [ 159.204200][ T6791] tun_chr_write_iter+0x15a/0x210 [ 159.204229][ T6791] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 159.204256][ T6791] vfs_write+0x57f/0x9a0 [ 159.204317][ T6791] ksys_write+0xdc/0x1a0 [ 159.204346][ T6791] __x64_sys_write+0x40/0x50 [ 159.204423][ T6791] x64_sys_call+0x154e/0x2550 [ 159.204448][ T6791] do_syscall_64+0x112/0x360 [ 159.204522][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.204553][ T6791] RIP: 0033:0x7f22129be98e [ 159.204571][ T6791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.204620][ T6791] RSP: 002b:00007f2211456fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.204642][ T6791] RAX: ffffffffffffffda RBX: 00007f22114576c0 RCX: 00007f22129be98e [ 159.204657][ T6791] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 159.204670][ T6791] RBP: 00007f2211457090 R08: 0000000000000000 R09: 0000000000000000 [ 159.204684][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.204697][ T6791] R13: 00007f2212c86038 R14: 00007f2212c85fa0 R15: 00007ffd2767e528 [ 159.204753][ T6791] [ 159.482355][ T6797] loop5: detected capacity change from 0 to 164 [ 159.491277][ T6797] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffff0xffffffffffffffffÿÿ' [ 159.862135][ T6813] loop2: detected capacity change from 0 to 128 [ 159.862832][ T6813] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 159.899951][ T6813] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.900169][ T6813] ext2 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.993584][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.086745][ T6823] siw: device registration error -23 [ 160.141039][ T6824] sd 0:0:1:0: PR command failed: 1026 [ 160.141062][ T6824] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 160.141084][ T6824] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 160.384207][ T6839] loop2: detected capacity change from 0 to 164 [ 160.384569][ T6839] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffff0xffffffffffffffffÿÿ' [ 161.361822][ T6856] loop1: detected capacity change from 0 to 128 [ 161.364039][ T6856] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 161.367649][ T6856] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.368014][ T6856] ext2 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.416623][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.659407][ T6865] __nla_validate_parse: 5 callbacks suppressed [ 161.659481][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 161.758027][ T6875] loop3: detected capacity change from 0 to 512 [ 161.852201][ T6881] loop2: detected capacity change from 0 to 164 [ 161.852623][ T6881] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffff0xffffffffffffffffÿÿ' [ 161.925907][ T6884] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 161.938158][ T6884] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.938406][ T6884] ext2 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.998788][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.085290][ T6873] lo speed is unknown, defaulting to 1000 [ 162.110427][ T6888] sd 0:0:1:0: PR command failed: 1026 [ 162.110454][ T6888] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.110480][ T6888] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 162.282443][ T6895] set_capacity_and_notify: 2 callbacks suppressed [ 162.282463][ T6895] loop3: detected capacity change from 0 to 512 [ 162.282855][ T6895] EXT4-fs: inline encryption not supported [ 162.285548][ T6895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.319247][ T6895] EXT4-fs (loop3): 1 truncate cleaned up [ 162.319711][ T6895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.363862][ T6899] loop1: detected capacity change from 0 to 2048 [ 162.383661][ T6899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.386464][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.415431][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.648316][ T5419] __quota_error: 50 callbacks suppressed [ 162.648455][ T5419] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.648494][ T5419] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 162.648528][ T5419] loop4: lost filesystem error report for type 5 error -117 [ 162.666483][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 162.666517][ C0] EXT4-fs (loop4): initial error at time 1789836880: ext4_release_dquot:7105 [ 162.666543][ C0] EXT4-fs (loop4): last error at time 1789836880: ext4_release_dquot:7105 [ 162.719949][ T6846] EXT4-fs (loop4): 1 orphan inode deleted [ 162.751101][ T6912] loop3: detected capacity change from 0 to 128 [ 162.756686][ T6912] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 162.796856][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 162.802862][ T6912] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.803049][ T6912] ext2 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.806657][ T29] audit: type=1400 audit(1789836880.988:1072): avc: denied { write } for pid=6904 comm="syz.3.884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.824623][ T29] audit: type=1400 audit(1789836881.008:1073): avc: denied { write } for pid=6904 comm="syz.3.884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.023936][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'. [ 163.047525][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.065752][ T6846] ext4 filesystem being mounted at /186/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.233960][ T29] audit: type=1400 audit(1789836881.418:1074): avc: denied { write } for pid=6845 comm="syz.4.865" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.234149][ T29] audit: type=1400 audit(1789836881.418:1075): avc: denied { remove_name } for pid=6845 comm="syz.4.865" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.234194][ T29] audit: type=1400 audit(1789836881.418:1076): avc: denied { rmdir } for pid=6845 comm="syz.4.865" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.234469][ T6846] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #12: block 13: comm syz.4.865: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 163.389335][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.401264][ T6582] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.401315][ T6582] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 1 [ 163.401335][ T6582] loop4: lost filesystem error report for type 5 error -117 [ 163.484220][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.147735][ T6941] lo speed is unknown, defaulting to 1000 [ 164.425751][ T6946] loop5: detected capacity change from 0 to 2048 [ 164.447407][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.461313][ T29] audit: type=1400 audit(1789836882.648:1077): avc: denied { write } for pid=6945 comm="syz.5.893" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.832972][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.895'. [ 166.640792][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.659336][ T29] audit: type=1326 audit(1789836884.838:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.1.891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff093ffe159 code=0x7fc00000 [ 166.847527][ T29] audit: type=1400 audit(1789836885.028:1079): avc: denied { accept } for pid=6962 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.934218][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 166.997147][ T6973] sd 0:0:1:0: PR command failed: 1026 [ 166.997173][ T6973] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 166.997199][ T6973] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 167.137312][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.902'. [ 167.220909][ T6982] loop5: detected capacity change from 0 to 2048 [ 167.243550][ T6982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.266488][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.428246][ T6989] loop1: detected capacity change from 0 to 1024 [ 167.430780][ T6989] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 167.431411][ T6989] JBD2: no valid journal superblock found [ 167.431421][ T6989] EXT4-fs (loop1): Could not load journal inode [ 168.310372][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 168.437072][ T7001] loop3: detected capacity change from 0 to 128 [ 168.480134][ T7001] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.481026][ T7001] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.482432][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 168.482447][ T29] audit: type=1400 audit(1789836886.664:1081): avc: denied { write } for pid=6998 comm="syz.3.909" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.483992][ T29] audit: type=1400 audit(1789836886.664:1082): avc: denied { write } for pid=6998 comm="syz.3.909" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.586480][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.912'. [ 168.663516][ T7011] loop4: detected capacity change from 0 to 512 [ 168.672252][ T7013] FAULT_INJECTION: forcing a failure. [ 168.672252][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.672282][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.1.914 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.672348][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.672363][ T7013] Call Trace: [ 168.672371][ T7013] [ 168.672379][ T7013] __dump_stack+0x1d/0x30 [ 168.672404][ T7013] dump_stack_lvl+0x95/0xd0 [ 168.672428][ T7013] dump_stack+0x15/0x1b [ 168.672569][ T7013] should_fail_ex+0x262/0x280 [ 168.672625][ T7013] should_fail+0xb/0x20 [ 168.672646][ T7013] should_fail_usercopy+0x1a/0x20 [ 168.672672][ T7013] _copy_from_user+0x1c/0xb0 [ 168.672776][ T7013] ___sys_sendmsg+0xc1/0x1e0 [ 168.672811][ T7013] __x64_sys_sendmsg+0xd4/0x160 [ 168.672837][ T7013] x64_sys_call+0x22ab/0x2550 [ 168.672921][ T7013] do_syscall_64+0x112/0x360 [ 168.672956][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.673037][ T7013] RIP: 0033:0x7ff093ffe159 [ 168.673093][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.673112][ T7013] RSP: 002b:00007ff092a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.673138][ T7013] RAX: ffffffffffffffda RBX: 00007ff094285fa0 RCX: 00007ff093ffe159 [ 168.673153][ T7013] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 168.673166][ T7013] RBP: 00007ff092a57090 R08: 0000000000000000 R09: 0000000000000000 [ 168.673184][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.673198][ T7013] R13: 00007ff094286038 R14: 00007ff094285fa0 R15: 00007ffe79267218 [ 168.673219][ T7013] [ 168.700065][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.700172][ T7011] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.705101][ T29] audit: type=1400 audit(1789836886.884:1083): avc: denied { setattr } for pid=7010 comm="syz.4.913" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.783677][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 168.805209][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.011339][ T7027] sd 0:0:1:0: PR command failed: 1026 [ 169.011375][ T7027] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 169.011401][ T7027] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 169.054939][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.208085][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 169.210907][ T7035] netlink: 'syz.5.920': attribute type 39 has an invalid length. [ 169.326966][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.920'. [ 169.327724][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.920'. [ 169.333025][ T7029] netlink: 9 bytes leftover after parsing attributes in process `syz.5.920'. [ 169.498361][ T29] audit: type=1400 audit(1789836887.664:1084): avc: denied { write } for pid=7043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.532317][ T29] audit: type=1400 audit(1789836887.694:1085): avc: denied { write } for pid=7060 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.628188][ T7049] lo speed is unknown, defaulting to 1000 [ 169.727901][ T29] audit: type=1400 audit(1789836887.904:1086): avc: denied { write } for pid=7063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.754350][ T29] audit: type=1400 audit(1789836887.914:1087): avc: denied { write } for pid=7075 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.897927][ T29] audit: type=1400 audit(1789836888.074:1088): avc: denied { write } for pid=7078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.953741][ T29] audit: type=1400 audit(1789836888.134:1089): avc: denied { write } for pid=7092 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.454344][ T7111] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 170.454407][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.933'. [ 171.046399][ T7095] loop4: detected capacity change from 0 to 128 [ 171.169247][ T7095] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 171.171248][ T7121] sd 0:0:1:0: PR command failed: 1026 [ 171.171269][ T7121] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 171.171350][ T7121] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 171.346369][ T7095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.360123][ T29] audit: type=1400 audit(1789836889.534:1090): avc: denied { associate } for pid=7124 comm="syz.2.940" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.393605][ T7095] ext2 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.988569][ T7148] nfs4: Unknown parameter 'retra' [ 172.030010][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.308264][ T7154] __nla_validate_parse: 1 callbacks suppressed [ 172.308318][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 172.308539][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 172.308625][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 172.566866][ T7160] sd 0:0:1:0: PR command failed: 1026 [ 172.566889][ T7160] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 172.567148][ T7160] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 173.037468][ T7164] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 174.191450][ T7144] loop3: detected capacity change from 0 to 512 [ 174.196929][ T7173] nfs4: Unknown parameter 'retra' [ 174.241139][ T7171] lo speed is unknown, defaulting to 1000 [ 174.512866][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 174.512884][ T29] audit: type=1400 audit(1789836892.694:1092): avc: denied { write } for pid=7141 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.591443][ T7190] FAULT_INJECTION: forcing a failure. [ 174.591443][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 174.591476][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.2.960 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.591503][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.591517][ T7190] Call Trace: [ 174.591527][ T7190] [ 174.591541][ T7190] __dump_stack+0x1d/0x30 [ 174.591610][ T7190] dump_stack_lvl+0x95/0xd0 [ 174.591638][ T7190] dump_stack+0x15/0x1b [ 174.591743][ T7190] should_fail_ex+0x262/0x280 [ 174.591774][ T7190] ? dup_task_struct+0x5a/0x750 [ 174.591808][ T7190] should_failslab+0x8c/0xb0 [ 174.591835][ T7190] kmem_cache_alloc_node_noprof+0x82/0x400 [ 174.591869][ T7190] ? __rcu_read_unlock+0x4e/0x70 [ 174.591904][ T7190] ? dup_task_struct+0x5a/0x750 [ 174.591992][ T7190] dup_task_struct+0x5a/0x750 [ 174.592016][ T7190] copy_process+0x5a0/0x2340 [ 174.592046][ T7190] ? futex_wait+0x18f/0x1c0 [ 174.592069][ T7190] kernel_clone+0x1c0/0x5f0 [ 174.592125][ T7190] ? do_futex+0x391/0x460 [ 174.592246][ T7190] __x64_sys_clone+0x143/0x180 [ 174.592304][ T7190] x64_sys_call+0x2479/0x2550 [ 174.592328][ T7190] do_syscall_64+0x112/0x360 [ 174.592368][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.592443][ T7190] RIP: 0033:0x7f257a18e159 [ 174.592460][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.592477][ T7190] RSP: 002b:00007f2578be6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 174.592498][ T7190] RAX: ffffffffffffffda RBX: 00007f257a415fa0 RCX: 00007f257a18e159 [ 174.592513][ T7190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000201000 [ 174.592551][ T7190] RBP: 00007f257a22506b R08: 0000000000000000 R09: 0000000000000000 [ 174.592567][ T7190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.592581][ T7190] R13: 00007f257a416038 R14: 00007f257a415fa0 R15: 00007ffde5a8b758 [ 174.592603][ T7190] [ 175.075574][ T7202] loop3: detected capacity change from 0 to 1024 [ 175.077602][ T7202] ext4: Unknown parameter 'nouser_xattr' [ 176.115204][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.158038][ T29] audit: type=1400 audit(1789836894.334:1093): avc: denied { read } for pid=7215 comm="syz.5.972" lport=33830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.426025][ T7232] loop4: detected capacity change from 0 to 128 [ 176.461914][ T7232] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 176.616626][ T7232] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.616838][ T7232] ext2 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.643557][ T7236] SELinux: syz.3.978 (7236) wrote to user. This is no longer supported. [ 176.748068][ T29] audit: type=1400 audit(1789836894.934:1094): avc: denied { write } for pid=7231 comm="syz.4.977" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.792208][ T7239] FAULT_INJECTION: forcing a failure. [ 176.792208][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.792240][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.4.977 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.792267][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.792279][ T7239] Call Trace: [ 176.792285][ T7239] [ 176.792292][ T7239] __dump_stack+0x1d/0x30 [ 176.792338][ T7239] dump_stack_lvl+0x95/0xd0 [ 176.792365][ T7239] dump_stack+0x15/0x1b [ 176.792389][ T7239] should_fail_ex+0x262/0x280 [ 176.792492][ T7239] should_fail+0xb/0x20 [ 176.792512][ T7239] should_fail_usercopy+0x1a/0x20 [ 176.792542][ T7239] _copy_from_user+0x1c/0xb0 [ 176.792588][ T7239] __sys_sendto+0x1b5/0x470 [ 176.792689][ T7239] __x64_sys_sendto+0x76/0x90 [ 176.792731][ T7239] x64_sys_call+0x200c/0x2550 [ 176.792760][ T7239] do_syscall_64+0x112/0x360 [ 176.792856][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.792881][ T7239] RIP: 0033:0x7efeffa3e159 [ 176.792901][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.792923][ T7239] RSP: 002b:00007efefe476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 176.792946][ T7239] RAX: ffffffffffffffda RBX: 00007efeffcc6090 RCX: 00007efeffa3e159 [ 176.792962][ T7239] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 000000000000000d [ 176.793015][ T7239] RBP: 00007efefe476090 R08: 0000200000000240 R09: 0000000000000010 [ 176.793032][ T7239] R10: 000000000400c0c1 R11: 0000000000000246 R12: 0000000000000001 [ 176.793048][ T7239] R13: 00007efeffcc6128 R14: 00007efeffcc6090 R15: 00007ffc7e365ab8 [ 176.793076][ T7239] [ 177.081839][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.106582][ T29] audit: type=1400 audit(1789836895.284:1095): avc: denied { view } for pid=7243 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.119696][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.979'. [ 177.137669][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 177.137771][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'. [ 177.334039][ T29] audit: type=1400 audit(1789836895.514:1096): avc: denied { cpu } for pid=7261 comm="syz.5.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.334918][ T29] audit: type=1400 audit(1789836895.514:1097): avc: denied { write } for pid=7261 comm="syz.5.986" name="usb_gadget" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.335022][ T29] audit: type=1400 audit(1789836895.514:1098): avc: denied { add_name } for pid=7261 comm="syz.5.986" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.335048][ T29] audit: type=1400 audit(1789836895.514:1099): avc: denied { create } for pid=7261 comm="syz.5.986" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 177.336975][ T29] audit: type=1400 audit(1789836895.514:1100): avc: denied { write } for pid=7261 comm="syz.5.986" name="functions" dev="configfs" ino=19664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.402223][ T29] audit: type=1400 audit(1789836895.564:1101): avc: denied { write } for pid=7261 comm="syz.5.986" name="target" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.408125][ T7265] netlink: 'syz.4.982': attribute type 4 has an invalid length. [ 177.468148][ T7268] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 180.061111][ T891] lo speed is unknown, defaulting to 1000 [ 180.061133][ T891] syzþ: Port: 1 Link DOWN [ 180.247950][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 180.247970][ T29] audit: type=1400 audit(1789836898.424:1103): avc: denied { read } for pid=7278 comm="syz.5.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.697082][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.991'. [ 180.937480][ T7254] ================================================================== [ 180.937516][ T7254] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 180.937543][ T7254] [ 180.937548][ T7254] read-write to 0xffff888123a0b6b8 of 8 bytes by interrupt on cpu 1: [ 180.937567][ T7254] __xa_clear_mark+0xf5/0x1e0 [ 180.937591][ T7254] __folio_end_writeback+0xe7/0x530 [ 180.937626][ T7254] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 180.937654][ T7254] folio_end_writeback+0x1c/0x70 [ 180.937673][ T7254] bh_end_async_write+0x1a6/0x250 [ 180.937699][ T7254] bio_endio+0x390/0x570 [ 180.937727][ T7254] blk_update_request+0x33a/0x710 [ 180.937755][ T7254] scsi_end_request+0x4b/0x4c0 [ 180.937787][ T7254] scsi_io_completion+0x7f/0x1d0 [ 180.937811][ T7254] scsi_finish_command+0x1c7/0x1e0 [ 180.937840][ T7254] scsi_complete+0x155/0x4d0 [ 180.937867][ T7254] blk_done_softirq+0x77/0xb0 [ 180.937894][ T7254] handle_softirqs+0xcc/0x2a0 [ 180.937918][ T7254] __irq_exit_rcu+0x44/0xe0 [ 180.937941][ T7254] sysvec_apic_timer_interrupt+0x74/0x80 [ 180.937973][ T7254] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.937999][ T7254] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 180.938022][ T7254] try_to_wake_up+0x4ba/0x6d0 [ 180.938045][ T7254] wake_up_q+0x48/0x80 [ 180.938077][ T7254] futex_wake+0x376/0x400 [ 180.938094][ T7254] do_futex+0x3f8/0x460 [ 180.938120][ T7254] __se_sys_futex+0x2f6/0x370 [ 180.938150][ T7254] __x64_sys_futex+0x78/0x90 [ 180.938181][ T7254] x64_sys_call+0x22e2/0x2550 [ 180.938209][ T7254] do_syscall_64+0x112/0x360 [ 180.938245][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.938268][ T7254] [ 180.938275][ T7254] read to 0xffff888123a0b6b8 of 8 bytes by task 7254 on cpu 0: [ 180.938293][ T7254] xas_find_marked+0x211/0x650 [ 180.938315][ T7254] filemap_get_folios_tag+0xf7/0x400 [ 180.938341][ T7254] filemap_write_and_wait_range+0x1f5/0x370 [ 180.938380][ T7254] filemap_invalidate_pages+0xd3/0x1e0 [ 180.938408][ T7254] kiocb_invalidate_pages+0x6e/0x80 [ 180.938434][ T7254] blkdev_direct_write+0x30/0x100 [ 180.938458][ T7254] blkdev_write_iter+0x3b8/0x490 [ 180.938479][ T7254] vfs_write+0x57f/0x9a0 [ 180.938509][ T7254] ksys_write+0xdc/0x1a0 [ 180.938538][ T7254] __x64_sys_write+0x40/0x50 [ 180.938566][ T7254] x64_sys_call+0x154e/0x2550 [ 180.938595][ T7254] do_syscall_64+0x112/0x360 [ 180.938631][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.938656][ T7254] [ 180.938661][ T7254] value changed: 0xffffff8000000000 -> 0xffffc00000000000 [ 180.938674][ T7254] [ 180.938678][ T7254] Reported by Kernel Concurrency Sanitizer on: [ 180.938691][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.4.982 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.938718][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.938732][ T7254] ================================================================== [ 181.139232][ T7291] netlink: 'syz.1.992': attribute type 39 has an invalid length. [ 182.928740][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!