last executing test programs: 1m45.788899467s ago: executing program 1 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/fail_iommufd/times\x00', 0x1, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1,timeo=10,retrans=1\x00', 0x41}]}) 1m44.685530394s ago: executing program 1 (id=94): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2090100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m44.666929995s ago: executing program 1 (id=95): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='re', 0x2) 1m44.07582886s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 1m43.974282972s ago: executing program 1 (id=105): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) 1m41.759330246s ago: executing program 1 (id=114): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x3dc}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000740)) 1m41.695842238s ago: executing program 32 (id=114): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x3dc}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000740)) 6.694620905s ago: executing program 2 (id=664): socket$packet(0x11, 0xa, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500002012340000"], 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400d4) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004002}, 0x0) 5.722205789s ago: executing program 2 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5.652704871s ago: executing program 0 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000"], 0x4a) 5.535179884s ago: executing program 0 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0352d1000811002eafeab39d8272640000000000000001200100000000000000000000000000024e224e2200089078"], 0x30) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 4.906227969s ago: executing program 5 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d7fff000000e40316", @ANYRES32=r0], 0x40c}}, 0x0) 4.746187484s ago: executing program 2 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4c0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0352d1000811002eafeab39d8272640000000000000001200100000000000000000000000000024e224e2200089078"], 0x30) close(0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 4.745183433s ago: executing program 5 (id=681): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newchain={0x34, 0x64, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0xa}, {0x0, 0xc}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x91) 4.720790124s ago: executing program 4 (id=682): socket$packet(0x11, 0xa, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500002012340000"], 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400d4) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x0) 4.094497369s ago: executing program 0 (id=686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4894) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.049407981s ago: executing program 3 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4c0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0352d1000811002eafeab39d8272640000000000000001200100000000000000000000000000024e224e2200089078"], 0x30) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 3.867996545s ago: executing program 2 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4c0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0352d1000811002eafeab39d8272640000000000000001200100000000000000000000000000024e22"], 0x30) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) close(0x3) 3.800571347s ago: executing program 0 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 3.699492279s ago: executing program 0 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3.461028405s ago: executing program 4 (id=691): socket$packet(0x11, 0xa, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500002012"], 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400d4) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004002}, 0x0) 2.952786517s ago: executing program 5 (id=692): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='re', 0x2) 2.862720239s ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 2.758977082s ago: executing program 0 (id=694): socket$packet(0x11, 0xa, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\b\x00E\x00'], 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400d4) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004002}, 0x0) 2.724273693s ago: executing program 3 (id=695): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 2.705940953s ago: executing program 2 (id=696): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) eventfd2(0xe5c, 0x80000) eventfd2(0xe5c, 0x80000) socket$unix(0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c000180"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 2.671063784s ago: executing program 2 (id=697): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.500884298s ago: executing program 5 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4c0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, 0x0, 0x30) close(0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 2.331745243s ago: executing program 4 (id=699): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x8801) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) syz_open_dev$usbfs(0x0, 0x205, 0x2) getrandom(0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$tun(r4, 0x0, 0x30) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 1.813340556s ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.749132627s ago: executing program 3 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.640191909s ago: executing program 3 (id=702): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newchain={0x34, 0x64, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0xa}, {0x0, 0xc}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x91) 953.070897ms ago: executing program 5 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00'}) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4c0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x7, 0xf, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@typed={0xc, 0xa3, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x8801) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0352d1000811002eafeab39d8272640000000000000001200100000000000000000000000000024e224e2200089078"], 0x30) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x3) 945.930547ms ago: executing program 4 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 12.77552ms ago: executing program 4 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='27', 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 11.70705ms ago: executing program 4 (id=706): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xf9j\xa2\x02\xba\xa9m\x14\x14R_\x9a\\>4\xceO\xb7\x9a\xeci\x8d1\xf0\xa8\x8e_#\xf8D\xb1\xdep\x01\xc0:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b [ 64.560223][ T4632] __dump_stack+0x1d/0x30 [ 64.560262][ T4632] dump_stack_lvl+0x95/0xd0 [ 64.560284][ T4632] dump_stack+0x15/0x1b [ 64.560346][ T4632] should_fail_ex+0x262/0x280 [ 64.560378][ T4632] should_fail_alloc_page+0xf2/0x100 [ 64.560419][ T4632] __alloc_frozen_pages_noprof+0x157/0x400 [ 64.560454][ T4632] alloc_pages_mpol+0xaf/0x1d0 [ 64.560565][ T4632] folio_alloc_mpol_noprof+0x39/0x80 [ 64.560597][ T4632] shmem_get_folio_gfp+0x3ff/0xd90 [ 64.560647][ T4632] shmem_write_begin+0xfc/0x1f0 [ 64.560817][ T4632] generic_perform_write+0x186/0x490 [ 64.560916][ T4632] shmem_file_write_iter+0xc5/0xf0 [ 64.560950][ T4632] do_iter_readv_writev+0x4f6/0x5a0 [ 64.561000][ T4632] vfs_writev+0x2d3/0x8c0 [ 64.561082][ T4632] do_writev+0xe9/0x210 [ 64.561115][ T4632] __x64_sys_writev+0x45/0x50 [ 64.561161][ T4632] x64_sys_call+0x23c9/0x2550 [ 64.561197][ T4632] do_syscall_64+0x112/0x360 [ 64.561299][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.561330][ T4632] RIP: 0033:0x7fa7a715e159 [ 64.561430][ T4632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.561455][ T4632] RSP: 002b:00007fa7a5bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 64.561483][ T4632] RAX: ffffffffffffffda RBX: 00007fa7a73e5fa0 RCX: 00007fa7a715e159 [ 64.561504][ T4632] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 64.561572][ T4632] RBP: 00007fa7a71f506b R08: 0000000000000000 R09: 0000000000000000 [ 64.561590][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.561607][ T4632] R13: 00007fa7a73e6038 R14: 00007fa7a73e5fa0 R15: 00007ffefbf91798 [ 64.561633][ T4632] [ 64.905024][ T4634] loop4: detected capacity change from 0 to 2048 [ 64.955821][ T4634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.958463][ T29] audit: type=1400 audit(1791118533.164:236): avc: denied { setattr } for pid=4633 comm="syz.4.172" path="/44/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.157498][ T4646] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.159720][ T4646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.162564][ T4646] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.171587][ T4646] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 65.184797][ T4646] EXT4-fs error (device loop0): __ext4_iget:5592: inode #16: block 127754: comm syz.0.173: invalid block [ 65.185015][ T4646] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.188287][ T4646] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.173: couldn't read orphan inode 16 (err -117) [ 65.188481][ T4646] loop0: lost filesystem error report for type 5 error -117 [ 65.200944][ T4646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.718426][ T4654] set_capacity_and_notify: 1 callbacks suppressed [ 65.718484][ T4654] loop5: detected capacity change from 0 to 512 [ 65.927411][ T4654] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 65.929368][ T4654] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.933260][ T4654] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.934773][ T4654] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 65.937551][ T4654] EXT4-fs error (device loop5): __ext4_iget:5592: inode #16: block 127754: comm syz.5.177: invalid block [ 65.937697][ T4654] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.939242][ T4654] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.177: couldn't read orphan inode 16 (err -117) [ 65.939326][ T4654] loop5: lost filesystem error report for type 5 error -117 [ 65.951100][ T4654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.241760][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.260995][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.319370][ T4652] loop3: detected capacity change from 0 to 512 [ 66.361284][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.410478][ T4668] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 66.410478][ T4668] program syz.3.181 not setting count and/or reply_len properly [ 66.564375][ T4679] loop4: detected capacity change from 0 to 164 [ 66.813622][ T4672] loop3: detected capacity change from 0 to 512 [ 67.249382][ T4672] loop3: detected capacity change from 0 to 512 [ 67.261055][ T4672] EXT4-fs: Ignoring removed bh option [ 67.375124][ T4699] loop0: detected capacity change from 0 to 128 [ 67.392004][ T4699] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.407741][ T4699] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.475386][ T4672] EXT4-fs: quotafile must be on filesystem root [ 67.527644][ T4677] syz.4.179 (4677) used greatest stack depth: 10056 bytes left [ 67.593457][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.745883][ T4711] loop0: detected capacity change from 0 to 512 [ 68.914168][ T4720] loop2: detected capacity change from 0 to 512 [ 68.936679][ T4720] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.938527][ T4720] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.951088][ T4720] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.959239][ T4720] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 68.962125][ T4720] EXT4-fs error (device loop2): __ext4_iget:5592: inode #16: block 127754: comm syz.2.190: invalid block [ 68.962515][ T4720] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 68.974913][ T4717] loop3: detected capacity change from 0 to 512 [ 68.977835][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 68.977859][ C1] EXT4-fs (loop2): initial error at time 1791118537: __ext4_iget:5592: inode 16: block 127754 [ 68.977904][ C1] EXT4-fs (loop2): last error at time 1791118537: __ext4_iget:5592: inode 16: block 127754 [ 69.014260][ T4720] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.190: couldn't read orphan inode 16 (err -117) [ 69.014329][ T4720] loop2: lost filesystem error report for type 5 error -117 [ 69.022267][ T4717] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.027745][ T4717] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.029236][ T4720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.033828][ T4717] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.035653][ T4717] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 69.038131][ T4717] EXT4-fs error (device loop3): __ext4_iget:5592: inode #16: block 127754: comm syz.3.192: invalid block [ 69.038264][ T4717] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.039291][ T4717] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.192: couldn't read orphan inode 16 (err -117) [ 69.039325][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 69.047681][ T4717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.300753][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.329951][ T4731] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 69.329951][ T4731] program syz.4.194 not setting count and/or reply_len properly [ 69.621093][ T4752] loop4: detected capacity change from 0 to 512 [ 69.960816][ T4759] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.961714][ T4759] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.972369][ T4759] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.974158][ T4759] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 69.977028][ T4759] EXT4-fs error (device loop3): __ext4_iget:5592: inode #16: block 127754: comm syz.3.197: invalid block [ 69.977195][ T4759] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.984703][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 69.984730][ C0] EXT4-fs (loop3): initial error at time 1791118538: __ext4_iget:5592: inode 16: block 127754 [ 69.984773][ C0] EXT4-fs (loop3): last error at time 1791118538: __ext4_iget:5592: inode 16: block 127754 [ 69.985567][ T4759] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.197: couldn't read orphan inode 16 (err -117) [ 69.985733][ T4759] loop3: lost filesystem error report for type 5 error -117 [ 70.000075][ T4759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.115442][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.342843][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.550951][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 70.582999][ T4802] EXT4-fs: Ignoring removed oldalloc option [ 70.630028][ T4802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.746200][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.960032][ T29] audit: type=1400 audit(1791118539.164:237): avc: denied { write } for pid=4812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.016938][ T29] audit: type=1400 audit(1791118539.224:238): avc: denied { write } for pid=4828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.281904][ T29] audit: type=1400 audit(1791118539.484:239): avc: denied { write } for pid=4833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.363947][ T29] audit: type=1400 audit(1791118539.574:240): avc: denied { write } for pid=4847 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.443789][ T4854] syz.2.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.507324][ T29] audit: type=1400 audit(1791118539.714:241): avc: denied { write } for pid=4852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.551240][ T29] audit: type=1400 audit(1791118539.754:242): avc: denied { write } for pid=4865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.625374][ T29] audit: type=1400 audit(1791118539.834:243): avc: denied { watch } for pid=4870 comm="syz.3.214" path="/36" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.013817][ T29] audit: type=1400 audit(1791118540.204:244): avc: denied { setopt } for pid=4873 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.013846][ T29] audit: type=1400 audit(1791118540.214:245): avc: denied { create } for pid=4873 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.013877][ T29] audit: type=1400 audit(1791118540.214:246): avc: denied { write } for pid=4873 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.429101][ T4884] syzkaller0: entered promiscuous mode [ 72.429348][ T4884] syzkaller0: entered allmulticast mode [ 72.635270][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.219'. [ 73.008005][ T4910] set_capacity_and_notify: 3 callbacks suppressed [ 73.010909][ T4910] loop3: detected capacity change from 0 to 164 [ 73.110809][ T4905] loop2: detected capacity change from 0 to 512 [ 73.129877][ T4905] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 73.215507][ T4924] loop4: detected capacity change from 0 to 512 [ 73.217401][ T4924] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 73.357742][ T4925] loop2: detected capacity change from 0 to 1024 [ 73.366473][ T4925] EXT4-fs: Ignoring removed orlov option [ 73.400823][ T4925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.595264][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.891439][ T4920] loop4: detected capacity change from 0 to 1024 [ 73.897589][ T4920] EXT4-fs: Ignoring removed orlov option [ 73.958298][ T4920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.090620][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.206675][ T4976] syzkaller0: entered promiscuous mode [ 74.206698][ T4976] syzkaller0: entered allmulticast mode [ 74.651965][ T4995] loop4: detected capacity change from 0 to 512 [ 74.870983][ T4995] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.873639][ T4995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.879440][ T4995] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.882277][ T4995] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 74.884716][ T4995] EXT4-fs error (device loop4): __ext4_iget:5592: inode #16: block 127754: comm syz.4.231: invalid block [ 74.885021][ T4995] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.886948][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.231: couldn't read orphan inode 16 (err -117) [ 74.887054][ T4995] loop4: lost filesystem error report for type 5 error -117 [ 74.899100][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.225841][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.254231][ T5006] loop3: detected capacity change from 0 to 512 [ 75.336576][ T4994] loop5: detected capacity change from 0 to 164 [ 76.051963][ T5037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 76.379736][ T5002] loop3: detected capacity change from 0 to 512 [ 76.430568][ T5002] EXT4-fs: Ignoring removed bh option [ 76.436827][ T5041] loop4: detected capacity change from 0 to 164 [ 76.458506][ T5002] EXT4-fs: quotafile must be on filesystem root [ 77.038107][ T5073] syzkaller0: entered promiscuous mode [ 77.038150][ T5073] syzkaller0: entered allmulticast mode [ 77.044227][ T5056] RIP_1991A [ 77.281997][ T5101] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 77.487093][ T5101] EXT4-fs: Ignoring removed orlov option [ 77.519784][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.574782][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 77.574861][ T29] audit: type=1400 audit(1791118545.774:258): avc: denied { write } for pid=5089 comm="syz.4.247" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.704207][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.914975][ T5128] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 78.011616][ T5126] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 78.397501][ T5130] set_capacity_and_notify: 8 callbacks suppressed [ 78.397648][ T5130] loop0: detected capacity change from 0 to 164 [ 78.535850][ T5095] loop5: detected capacity change from 0 to 512 [ 78.562234][ T5095] EXT4-fs: Ignoring removed bh option [ 78.571070][ T5095] EXT4-fs: quotafile must be on filesystem root [ 78.666474][ T5135] loop2: detected capacity change from 0 to 1024 [ 78.666841][ T5135] EXT4-fs: Ignoring removed orlov option [ 78.708210][ T5135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.721881][ T5132] loop3: detected capacity change from 0 to 512 [ 78.728411][ T5132] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 78.840245][ T29] audit: type=1400 audit(1791118547.044:259): avc: denied { write } for pid=5125 comm="syz.2.251" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.915677][ T5146] loop3: detected capacity change from 0 to 1024 [ 78.919168][ T5146] EXT4-fs: Ignoring removed orlov option [ 78.930028][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.091360][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.127282][ T5148] loop5: detected capacity change from 0 to 512 [ 79.137082][ T5157] syzkaller0: entered promiscuous mode [ 79.137147][ T5157] syzkaller0: entered allmulticast mode [ 79.175290][ T5148] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 79.190246][ T29] audit: type=1400 audit(1791118547.394:260): avc: denied { write } for pid=5131 comm="syz.3.253" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.258235][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.458060][ T5194] loop3: detected capacity change from 0 to 512 [ 80.462014][ T5194] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 80.495210][ T5195] loop2: detected capacity change from 0 to 512 [ 80.495515][ T5195] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 80.619440][ T5195] loop2: detected capacity change from 0 to 1024 [ 80.620048][ T5195] EXT4-fs: Ignoring removed orlov option [ 80.658326][ T5195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.731054][ T29] audit: type=1400 audit(1791118548.934:261): avc: denied { write } for pid=5189 comm="syz.2.264" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.788537][ T5194] loop3: detected capacity change from 0 to 1024 [ 80.795113][ T5194] EXT4-fs: Ignoring removed orlov option [ 80.836884][ T5194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.885310][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.927609][ T5148] EXT4-fs: Ignoring removed orlov option [ 81.019666][ T29] audit: type=1400 audit(1791118549.204:262): avc: denied { write } for pid=5187 comm="syz.3.263" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.182870][ T5216] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 81.209062][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.228424][ T5148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.358521][ T5244] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 81.364743][ T29] audit: type=1400 audit(1791118549.534:263): avc: denied { write } for pid=5147 comm="syz.5.256" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.399553][ T5241] EXT4-fs: Ignoring removed orlov option [ 81.414882][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.457930][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.497413][ T29] audit: type=1400 audit(1791118549.704:264): avc: denied { write } for pid=5212 comm="syz.0.266" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.617451][ T5261] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 81.722895][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.788305][ T5267] syzkaller0: entered promiscuous mode [ 81.788329][ T5267] syzkaller0: entered allmulticast mode [ 82.185538][ T5291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.240249][ T5291] EXT4-fs (loop4): 1 orphan inode deleted [ 82.240755][ T5291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.240905][ T5291] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.272700][ T4268] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 82.272795][ T4268] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 82.283694][ T5256] EXT4-fs: Ignoring removed orlov option [ 82.362478][ T5232] EXT4-fs: Ignoring removed bh option [ 82.362601][ T5232] EXT4-fs: quotafile must be on filesystem root [ 82.435203][ T29] audit: type=1400 audit(1791118550.644:265): avc: denied { create } for pid=5297 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.435534][ T29] audit: type=1400 audit(1791118550.644:266): avc: denied { bind } for pid=5297 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.455707][ T5256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.596414][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.601380][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 82.601399][ T29] audit: type=1400 audit(1791118550.804:269): avc: denied { write } for pid=5288 comm="syz.4.273" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.719940][ T5294] EXT4-fs (loop0): 1 orphan inode deleted [ 82.732658][ T4264] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 82.732706][ T4264] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 82.732735][ T4264] loop0: lost filesystem error report for type 5 error -117 [ 82.776764][ T5294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.781984][ T5294] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.841246][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.064248][ T5308] EXT4-fs: Ignoring removed bh option [ 83.066746][ T5318] syzkaller0: entered promiscuous mode [ 83.066770][ T5318] syzkaller0: entered allmulticast mode [ 83.068241][ T5308] EXT4-fs: quotafile must be on filesystem root [ 83.198751][ T5312] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 83.241349][ T29] audit: type=1400 audit(1791118551.444:270): avc: denied { write } for pid=5293 comm="syz.0.275" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.311264][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.578582][ T5333] set_capacity_and_notify: 14 callbacks suppressed [ 83.578605][ T5333] loop5: detected capacity change from 0 to 512 [ 83.619522][ T5330] loop3: detected capacity change from 0 to 164 [ 83.652418][ T5320] loop2: detected capacity change from 0 to 512 [ 83.797473][ T5333] loop5: detected capacity change from 0 to 512 [ 83.799267][ T5333] EXT4-fs: Ignoring removed bh option [ 83.799402][ T5333] EXT4-fs: quotafile must be on filesystem root [ 83.914373][ T5332] loop0: detected capacity change from 0 to 164 [ 84.003425][ T5339] batman_adv: batadv0: Adding interface: syzkaller0 [ 84.003444][ T5339] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.012372][ T5339] batman_adv: batadv0: Interface activated: syzkaller0 [ 84.249147][ T5338] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 84.257693][ T5338] batman_adv: batadv0: Removing interface: syzkaller0 [ 84.273161][ T5320] EXT4-fs (loop2): 1 orphan inode deleted [ 84.275943][ T4264] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.275977][ T4264] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 84.276034][ T4264] loop2: lost filesystem error report for type 5 error -117 [ 84.289559][ T5312] loop4: detected capacity change from 0 to 1024 [ 84.294672][ T5312] EXT4-fs: Ignoring removed orlov option [ 84.317910][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.318393][ T5320] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.354850][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.412659][ T29] audit: type=1400 audit(1791118552.614:271): avc: denied { write } for pid=5311 comm="syz.4.279" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.479115][ T5347] loop5: detected capacity change from 0 to 512 [ 84.488119][ T5347] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 84.592116][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.624907][ T5355] loop0: detected capacity change from 0 to 512 [ 84.665061][ T5355] EXT4-fs (loop0): 1 orphan inode deleted [ 84.665486][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.666730][ T5355] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.708506][ T3716] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.708618][ T3716] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:26: Failed to release dquot type 1 [ 84.708718][ T5357] loop3: detected capacity change from 0 to 164 [ 84.719166][ T5358] loop4: detected capacity change from 0 to 164 [ 84.927101][ T29] audit: type=1400 audit(1791118552.994:272): avc: denied { write } for pid=5319 comm="syz.2.283" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.126540][ T29] audit: type=1400 audit(1791118553.324:273): avc: denied { write } for pid=5352 comm="syz.0.290" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.220309][ T5373] syzkaller0: entered promiscuous mode [ 85.220334][ T5373] syzkaller0: entered allmulticast mode [ 85.327521][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.608446][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.811414][ T5381] EXT4-fs (loop4): 1 orphan inode deleted [ 85.827960][ T3713] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.827998][ T3713] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 85.828023][ T3713] loop4: lost filesystem error report for type 5 error -117 [ 85.972474][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.973744][ T5381] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.088007][ T5427] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 86.516191][ T5410] EXT4-fs (loop2): 1 orphan inode deleted [ 86.540141][ T3713] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.540179][ T3713] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 86.540267][ T3713] loop2: lost filesystem error report for type 5 error -117 [ 86.601854][ T5410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.633804][ T5410] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.808192][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.058918][ T5472] EXT4-fs (loop3): 1 orphan inode deleted [ 87.059318][ T5472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.059520][ T5472] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.087745][ T5465] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 87.091688][ T4268] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 87.135960][ T5478] EXT4-fs (loop5): 1 orphan inode deleted [ 87.136337][ T5478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.136549][ T5478] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.161430][ T3709] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:22: Failed to release dquot type 1 [ 87.738641][ T5483] EXT4-fs: Ignoring removed orlov option [ 87.755392][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.785426][ T5483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.989289][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 87.989317][ T29] audit: type=1400 audit(1791118556.194:277): avc: denied { write } for pid=5470 comm="syz.5.306" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.136034][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.137987][ T5516] syzkaller0: entered promiscuous mode [ 88.138011][ T5516] syzkaller0: entered allmulticast mode [ 88.140584][ T5516] tipc: Enabling of bearer rejected, failed to enable media [ 88.942569][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.234552][ T29] audit: type=1400 audit(1791118557.444:278): avc: denied { write } for pid=5552 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.237146][ T5557] set_capacity_and_notify: 10 callbacks suppressed [ 89.237168][ T5557] loop4: detected capacity change from 0 to 512 [ 89.253859][ T5557] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 89.269175][ T5553] loop3: detected capacity change from 0 to 164 [ 89.279190][ T5550] loop2: detected capacity change from 0 to 512 [ 89.291563][ T5550] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 89.341196][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.590682][ T5560] loop5: detected capacity change from 0 to 164 [ 89.886009][ T5570] loop2: detected capacity change from 0 to 1024 [ 90.351347][ T5575] loop3: detected capacity change from 0 to 512 [ 90.400566][ T5586] syzkaller0: entered promiscuous mode [ 90.400589][ T5586] syzkaller0: entered allmulticast mode [ 90.408320][ T5586] tipc: Enabling of bearer rejected, failed to enable media [ 90.636697][ T5556] loop4: detected capacity change from 0 to 1024 [ 90.714696][ T5556] EXT4-fs: Ignoring removed orlov option [ 90.732410][ T5575] loop3: detected capacity change from 0 to 512 [ 90.735733][ T5579] loop0: detected capacity change from 0 to 512 [ 90.834917][ T5575] EXT4-fs: Ignoring removed bh option [ 90.834991][ T5575] EXT4-fs: quotafile must be on filesystem root [ 90.903820][ T5556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.937405][ T5588] loop5: detected capacity change from 0 to 512 [ 91.027155][ T29] audit: type=1400 audit(1791118559.234:279): avc: denied { write } for pid=5554 comm="syz.4.316" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.041056][ T5579] EXT4-fs (loop0): 1 orphan inode deleted [ 91.043449][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.047119][ T5579] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.057300][ T4268] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.057335][ T4268] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 91.071142][ T5590] EXT4-fs (loop2): 1 orphan inode deleted [ 91.077097][ T5590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.080009][ T5590] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.085864][ T3616] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.085967][ T3616] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 91.176917][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.542653][ T4264] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.542701][ T4264] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 91.542727][ T4264] loop5: lost filesystem error report for type 5 error -117 [ 91.552393][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 91.552417][ C0] EXT4-fs (loop5): initial error at time 1791118559: ext4_release_dquot:7105 [ 91.552453][ C0] EXT4-fs (loop5): last error at time 1791118559: ext4_release_dquot:7105 [ 91.555383][ T5588] EXT4-fs (loop5): 1 orphan inode deleted [ 91.556965][ T5588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.558008][ T5588] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.605842][ T29] audit: type=1400 audit(1791118559.814:280): avc: denied { write } for pid=5589 comm="syz.2.322" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.697034][ T5613] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 91.704547][ T29] audit: type=1400 audit(1791118559.884:281): avc: denied { write } for pid=5577 comm="syz.0.319" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.986772][ T29] audit: type=1400 audit(1791118560.194:282): avc: denied { write } for pid=5587 comm="syz.5.321" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.213027][ T5612] EXT4-fs: Ignoring removed bh option [ 92.214194][ T5612] EXT4-fs: quotafile must be on filesystem root [ 92.504850][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.874859][ T5634] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 92.938981][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.960079][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.408909][ T5613] EXT4-fs: Ignoring removed orlov option [ 93.526278][ T5633] EXT4-fs (loop0): 1 orphan inode deleted [ 93.537422][ T5633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.556263][ T5613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.559080][ T5633] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.569743][ T3616] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 93.569843][ T3616] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 93.577672][ T5636] EXT4-fs (loop5): 1 orphan inode deleted [ 93.595151][ T5636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.596298][ T5636] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.607915][ T3616] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 93.607994][ T3616] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 93.731720][ T29] audit: type=1400 audit(1791118561.934:283): avc: denied { write } for pid=5610 comm="syz.4.327" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.773902][ T5645] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 93.918893][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.159741][ T29] audit: type=1400 audit(1791118562.364:284): avc: denied { write } for pid=5630 comm="syz.0.329" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.531611][ T5645] set_capacity_and_notify: 11 callbacks suppressed [ 94.531636][ T5645] loop3: detected capacity change from 0 to 1024 [ 94.540879][ T29] audit: type=1400 audit(1791118562.744:285): avc: denied { write } for pid=5635 comm="syz.5.331" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.547519][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.602543][ T5654] EXT4-fs (loop4): 1 orphan inode deleted [ 94.612377][ T5645] EXT4-fs: Ignoring removed orlov option [ 94.623611][ T4264] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.623647][ T4264] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 94.623813][ T4264] loop4: lost filesystem error report for type 5 error -117 [ 94.642635][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.644995][ T5654] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.646351][ T5670] sg_write: data in/out 44544/136 bytes for SCSI command 0x0-- guessing data in; [ 94.646351][ T5670] program syz.0.338 not setting count and/or reply_len properly [ 94.693566][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.716636][ T29] audit: type=1400 audit(1791118562.924:286): avc: denied { write } for pid=5644 comm="syz.3.333" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.913027][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.996335][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.146793][ T5686] loop5: detected capacity change from 0 to 512 [ 95.147223][ T5686] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 95.182261][ T5678] loop0: detected capacity change from 0 to 512 [ 95.228772][ T5685] loop3: detected capacity change from 0 to 164 [ 95.338540][ T5689] loop2: detected capacity change from 0 to 512 [ 95.368117][ T5689] EXT4-fs (loop2): 1 orphan inode deleted [ 95.368574][ T5689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.368740][ T5689] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.393775][ T3616] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.393917][ T3616] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 95.502761][ T5686] loop5: detected capacity change from 0 to 1024 [ 95.511184][ T5686] EXT4-fs: Ignoring removed orlov option [ 95.533444][ T29] audit: type=1400 audit(1791118563.744:287): avc: denied { write } for pid=5687 comm="syz.2.342" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.575809][ T5686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.601224][ T29] audit: type=1400 audit(1791118563.784:288): avc: denied { write } for pid=5653 comm="syz.4.335" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.622688][ T5678] loop0: detected capacity change from 0 to 512 [ 95.623824][ T5678] EXT4-fs: Ignoring removed bh option [ 95.630314][ T5678] EXT4-fs: quotafile must be on filesystem root [ 95.778891][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.831175][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.962712][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.093991][ T5720] tipc: Started in network mode [ 96.094011][ T5720] tipc: Node identity 4, cluster identity 4711 [ 96.094064][ T5720] tipc: Node number set to 4 [ 96.121814][ T5721] sg_write: data in/out 44544/136 bytes for SCSI command 0x0-- guessing data in; [ 96.121814][ T5721] program syz.3.349 not setting count and/or reply_len properly [ 96.210528][ T5713] loop0: detected capacity change from 0 to 512 [ 96.367069][ T5732] loop4: detected capacity change from 0 to 1024 [ 96.370979][ T5732] EXT4-fs: Ignoring removed orlov option [ 96.407877][ T5732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.438132][ T5713] EXT4-fs (loop0): 1 orphan inode deleted [ 96.459104][ T4268] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 96.459139][ T4268] loop0: lost filesystem error report for type 5 error -117 [ 96.475929][ T5713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.480003][ T5713] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.645258][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.654406][ T5718] loop2: detected capacity change from 0 to 512 [ 96.917746][ T5718] EXT4-fs (loop2): 1 orphan inode deleted [ 96.924926][ T5718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.927208][ T5718] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.949144][ T4268] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 97.047948][ T5748] ip_tables: iptables: counters copy to user failed while replacing table [ 97.542439][ T5743] EXT4-fs (loop3): 1 orphan inode deleted [ 97.550776][ T5743] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.588222][ T3616] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 97.831247][ T5762] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.831264][ T5762] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.831294][ T5762] batman_adv: batadv0: Interface activated: syzkaller0 [ 97.872796][ T5761] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 98.088570][ T5761] batman_adv: batadv0: Removing interface: syzkaller0 [ 98.469926][ T5774] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 98.775231][ T5774] EXT4-fs: Ignoring removed orlov option [ 99.051925][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 99.051943][ T29] audit: type=1400 audit(1791118567.254:325): avc: denied { bind } for pid=5788 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.114234][ T5767] EXT4-fs (loop5): 1 orphan inode deleted [ 99.128190][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 99.128224][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 99.128247][ T12] loop5: lost filesystem error report for type 5 error -117 [ 99.179732][ T5767] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.208369][ T5794] ip_tables: iptables: counters copy to user failed while replacing table [ 99.215064][ T29] audit: type=1400 audit(1791118567.414:326): avc: denied { write } for pid=5772 comm="syz.4.362" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.263517][ T5790] EXT4-fs: test_dummy_encryption option not supported [ 99.303391][ T29] audit: type=1400 audit(1791118567.514:327): avc: denied { write } for pid=5788 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.329717][ T5796] ip_tables: iptables: counters copy to user failed while replacing table [ 99.547978][ T29] audit: type=1400 audit(1791118567.754:328): avc: denied { write } for pid=5766 comm="syz.5.359" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.252877][ T5829] set_capacity_and_notify: 5 callbacks suppressed [ 100.252929][ T5829] loop0: detected capacity change from 0 to 164 [ 100.257649][ T5829] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ‘obq(´š Z;€(@Õ¯¿T”þ¥äLP€EnÏsè•Ðé]+—8õÂù/à$5@ϯ:^á|dǹÕPΨøQòKKph|Â|)cžä¿TiîYB%5ž-7¢Ÿ“'`LŠô†l;…·Ùú·ê] ;~ùð²6Îòû}Zö*ŒqÜã9' [ 100.756141][ T5836] loop2: detected capacity change from 0 to 4096 [ 100.774014][ T5836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.802205][ T29] audit: type=1400 audit(1791118569.004:329): avc: denied { write } for pid=5835 comm="syz.2.379" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.834291][ T29] audit: type=1400 audit(1791118569.044:330): avc: denied { write } for pid=5835 comm="syz.2.379" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.834325][ T29] audit: type=1400 audit(1791118569.044:331): avc: denied { remove_name } for pid=5835 comm="syz.2.379" name="proc" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.834352][ T29] audit: type=1400 audit(1791118569.044:332): avc: denied { rmdir } for pid=5835 comm="syz.2.379" name="proc" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.842356][ T5841] loop5: detected capacity change from 0 to 164 [ 100.847062][ T5841] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff01777777777777777777777ÿ‘obq(´š Z;€(@Õ¯¿T”þ¥äLP€EnÏsè•Ðé]+—8õÂù/à$5@ϯ:^á|dǹÕPΨøQòKKph|Â|)cžä¿TiîYB%5ž-7¢Ÿ“'`LŠô†l;…·Ùú·ê] ;~ùð²6Îòû}Zö*ŒqÜã9' [ 101.016544][ T29] audit: type=1326 audit(1791118569.214:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.3.382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 101.096038][ T5849] ip_tables: iptables: counters copy to user failed while replacing table [ 101.489138][ T5856] loop3: detected capacity change from 0 to 512 [ 101.504082][ T5856] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 101.530158][ T5862] loop2: detected capacity change from 0 to 164 [ 102.161409][ T5856] loop3: detected capacity change from 0 to 1024 [ 102.180107][ T5856] EXT4-fs: Ignoring removed orlov option [ 102.227259][ T5881] syzkaller0: entered promiscuous mode [ 102.227288][ T5881] syzkaller0: entered allmulticast mode Ý$Æšg¢ºJu—ôpcÚË]ᔺX" ^æNÖOý©a*Ââ¦/H ýlˆ´Ì2„<â6x7Ê1X=ÁSšln¯à¯&*i'¨¥‚‚·¦‘{8cÁö@p²Uèð„[ 102.591878][ T5898] syzkaller0: entered promiscuous mode [ 102.591904][ T5898] syzkaller0: entered allmulticast mode [ 102.604711][ T5900] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 102.604711][ T5900] program syz.5.395 not setting count and/or reply_len properly [ 102.694001][ T5899] loop4: detected capacity change from 0 to 164 [ 102.817208][ T5906] loop0: detected capacity change from 0 to 512 [ 102.850344][ T5906] EXT4-fs (loop0): 1 orphan inode deleted [ 102.851323][ T5906] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.885426][ T3713] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 103.281975][ T5918] loop5: detected capacity change from 0 to 512 [ 103.515670][ T5918] EXT4-fs (loop5): 1 orphan inode deleted [ 103.532610][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 103.532639][ T12] loop5: lost filesystem error report for type 5 error -117 [ 103.546055][ T5918] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.616491][ T5922] loop4: detected capacity change from 0 to 512 [ 103.645877][ T5922] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 104.340455][ T5932] EXT4-fs (loop2): 1 orphan inode deleted [ 104.403795][ T5932] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.510178][ T3616] __quota_error: 82 callbacks suppressed [ 104.510196][ T3616] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.510219][ T3616] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:16: Failed to release dquot type 1 [ 104.663951][ T5946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.690871][ T29] audit: type=1400 audit(1791118572.904:414): avc: denied { write } for pid=5945 comm="syz.3.410" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.732840][ T29] audit: type=1400 audit(1791118572.944:415): avc: denied { write } for pid=5945 comm="syz.3.410" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.029313][ T29] audit: type=1400 audit(1791118573.234:416): avc: denied { write } for pid=5931 comm="syz.2.408" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.091589][ T5956] EXT4-fs (loop3): 1 orphan inode deleted [ 105.093411][ T5922] EXT4-fs: Ignoring removed orlov option [ 105.098579][ T5956] EXT4-fs mount: 19 callbacks suppressed [ 105.098630][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.101125][ T5956] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.112988][ T3713] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.113073][ T3713] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 105.335379][ T29] audit: type=1400 audit(1791118573.534:417): avc: denied { write } for pid=5954 comm="syz.3.414" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.520841][ T5949] EXT4-fs (loop0): 1 orphan inode deleted [ 106.612569][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.635950][ T5949] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.657375][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.657414][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 106.680676][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.915831][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.939872][ T29] audit: type=1400 audit(1791118575.134:418): avc: denied { write } for pid=5948 comm="syz.0.412" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.189612][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.313794][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.506876][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.642737][ T5985] set_capacity_and_notify: 5 callbacks suppressed [ 107.642754][ T5985] loop4: detected capacity change from 0 to 512 [ 107.711274][ T5985] EXT4-fs (loop4): 1 orphan inode deleted [ 107.726072][ T3713] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.726110][ T3713] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 107.726131][ T3713] loop4: lost filesystem error report for type 5 error -117 [ 107.758359][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.762080][ T5985] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.885623][ T5999] loop2: detected capacity change from 0 to 164 [ 108.018849][ T29] audit: type=1400 audit(1791118576.224:419): avc: denied { write } for pid=5984 comm="syz.4.419" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.327594][ T6009] ip_tables: iptables: counters copy to user failed while replacing table [ 108.737682][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.797617][ T6012] FAULT_INJECTION: forcing a failure. [ 108.797617][ T6012] name fail_futex, interval 1, probability 0, space 0, times 1 [ 108.797670][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.4.424 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.797704][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.797721][ T6012] Call Trace: [ 108.797730][ T6012] [ 108.797785][ T6012] __dump_stack+0x1d/0x30 [ 108.797820][ T6012] dump_stack_lvl+0x95/0xd0 [ 108.797851][ T6012] dump_stack+0x15/0x1b [ 108.797876][ T6012] should_fail_ex+0x262/0x280 [ 108.797925][ T6012] should_fail+0xb/0x20 [ 108.797958][ T6012] get_futex_key+0x12d/0xb10 [ 108.797993][ T6012] futex_wait_setup+0x49/0x3e0 [ 108.798022][ T6012] ? __rcu_read_unlock+0x4e/0x70 [ 108.798122][ T6012] __futex_wait+0xa9/0x260 [ 108.798146][ T6012] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.798219][ T6012] futex_wait+0x98/0x1c0 [ 108.798253][ T6012] do_futex+0x391/0x460 [ 108.798318][ T6012] __se_sys_futex+0x2f6/0x370 [ 108.798365][ T6012] __x64_sys_futex+0x78/0x90 [ 108.798449][ T6012] x64_sys_call+0x22e2/0x2550 [ 108.798485][ T6012] do_syscall_64+0x112/0x360 [ 108.798521][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.798602][ T6012] RIP: 0033:0x7f12dd89e159 [ 108.798619][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.798642][ T6012] RSP: 002b:00007f12dc2f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.798790][ T6012] RAX: ffffffffffffffda RBX: 00007f12ddb25fa8 RCX: 00007f12dd89e159 [ 108.798810][ T6012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f12ddb25fa8 [ 108.798957][ T6012] RBP: 00007f12ddb25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.799043][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.799056][ T6012] R13: 00007f12ddb26038 R14: 00007ffeecefa570 R15: 00007ffeecefa658 [ 108.799188][ T6012] [ 109.875524][ T6024] syzkaller0: entered promiscuous mode [ 109.875550][ T6024] syzkaller0: entered allmulticast mode [ 109.920858][ T6025] loop4: detected capacity change from 0 to 164 [ 110.056113][ T6027] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 110.056113][ T6027] program syz.5.428 not setting count and/or reply_len properly [ 110.540567][ T5989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 Ý$Æšg¢ºJu—ôpcÚË]ᔺX" ^æNÖOý©a*Ââ¦/H ýlˆ´Ì2„<â6x7Ê1X=ÁSšln¯à¯&*i'¨¥‚‚·¦‘{8cÁö@p²Uèð„ÜN’)Æ='¨Š(À@B‚R«8G¿^OõF)‹éòrmÏÑ„)ôÆbð’‹ešÜš?Ô\Ó½¼í =ǯÐ.™96ýä°–Rèít†~·®V]Rœ¡íؤ02 [ 111.067674][ T6093] loop0: detected capacity change from 0 to 164 [ 111.131438][ T6104] loop5: detected capacity change from 0 to 512 [ 111.218512][ T6108] loop4: detected capacity change from 0 to 164 [ 111.252203][ T6107] loop2: detected capacity change from 0 to 164 [ 111.731119][ T6104] EXT4-fs (loop5): 1 orphan inode deleted [ 111.742886][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 111.742922][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 111.742952][ T12] loop5: lost filesystem error report for type 5 error -117 [ 111.795420][ T6104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.798766][ T6104] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.875944][ T6164] ip_tables: iptables: counters copy to user failed while replacing table [ 111.876085][ T29] audit: type=1400 audit(1791118580.084:420): avc: denied { name_bind } for pid=6163 comm="syz.3.435" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 111.985100][ T6169] loop3: detected capacity change from 0 to 512 [ 112.035830][ T6169] EXT4-fs (loop3): 1 orphan inode deleted [ 112.036331][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.039922][ T6169] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.056729][ T4264] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.056802][ T4264] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 112.113359][ T29] audit: type=1400 audit(1791118580.314:421): avc: denied { write } for pid=6165 comm="syz.3.436" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.084501][ T29] audit: type=1400 audit(1791118580.514:422): avc: denied { write } for pid=6103 comm="syz.5.434" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.141182][ T6168] syzkaller0: entered promiscuous mode [ 113.141255][ T6168] syzkaller0: entered allmulticast mode [ 113.202520][ T6181] tipc: Started in network mode [ 113.202541][ T6181] tipc: Node identity 4, cluster identity 4711 [ 113.202557][ T6181] tipc: Node number set to 4 [ 113.951679][ T6168] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 113.951679][ T6168] program syz.4.437 not setting count and/or reply_len properly [ 113.972885][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.351765][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.357390][ T6207] loop0: detected capacity change from 0 to 512 [ 114.405482][ T6223] ip_tables: iptables: counters copy to user failed while replacing table [ 114.606500][ T6207] EXT4-fs (loop0): 1 orphan inode deleted [ 114.624437][ T3713] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.624474][ T3713] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:24: Failed to release dquot type 1 [ 114.624501][ T3713] loop0: lost filesystem error report for type 5 error -117 [ 114.646068][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.652373][ T6207] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.665223][ T6234] loop5: detected capacity change from 0 to 512 [ 114.821368][ T6246] loop4: detected capacity change from 0 to 164 [ 114.904993][ T6234] EXT4-fs (loop5): 1 orphan inode deleted [ 114.921186][ T3709] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.921234][ T3709] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:22: Failed to release dquot type 1 [ 114.921262][ T3709] loop5: lost filesystem error report for type 5 error -117 [ 114.980145][ T6234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.995356][ T29] audit: type=1400 audit(1791118583.194:423): avc: denied { write } for pid=6206 comm="syz.0.442" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.045954][ T6234] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.121574][ T29] audit: type=1400 audit(1791118583.324:424): avc: denied { write } for pid=6232 comm="syz.5.447" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.632690][ T6300] syzkaller0: entered promiscuous mode [ 116.632712][ T6300] syzkaller0: entered allmulticast mode [ 116.920650][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.067770][ T6308] syzkaller0: entered promiscuous mode [ 117.067793][ T6308] syzkaller0: entered allmulticast mode [ 117.072529][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.215601][ T6200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.506760][ T6327] loop2: detected capacity change from 0 to 512 [ 117.535289][ T6327] EXT4-fs (loop2): 1 orphan inode deleted [ 117.535811][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.536763][ T6327] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.565542][ T4268] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.565580][ T4268] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 117.567125][ T29] audit: type=1400 audit(1791118585.774:425): avc: denied { write } for pid=6326 comm="syz.2.456" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.631666][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.668214][ T6318] loop4: detected capacity change from 0 to 512 [ 117.921780][ T6335] loop2: detected capacity change from 0 to 512 [ 117.986661][ T6318] EXT4-fs (loop4): 1 orphan inode deleted [ 118.012244][ T4268] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.012280][ T4268] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 118.012358][ T4268] loop4: lost filesystem error report for type 5 error -117 [ 118.027344][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.031954][ T6339] loop3: detected capacity change from 0 to 512 [ 118.069778][ T6318] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.221366][ T6341] loop5: detected capacity change from 0 to 512 [ 118.249401][ T29] audit: type=1400 audit(1791118586.454:426): avc: denied { write } for pid=6317 comm="syz.4.454" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.274243][ T6335] EXT4-fs (loop2): 1 orphan inode deleted [ 118.345318][ T4268] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.345349][ T4268] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 118.345375][ T4268] loop2: lost filesystem error report for type 5 error -117 [ 118.353522][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.354881][ T6335] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.360302][ T6339] EXT4-fs (loop3): 1 orphan inode deleted [ 118.361752][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.362244][ T6339] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.369298][ T6341] EXT4-fs (loop5): 1 orphan inode deleted [ 118.370915][ T6341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.371367][ T6341] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.396904][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.397020][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 118.404799][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.404827][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 118.685306][ T29] audit: type=1400 audit(1791118586.894:427): avc: denied { write } for pid=6334 comm="syz.2.458" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.700144][ T29] audit: type=1400 audit(1791118586.894:428): avc: denied { write } for pid=6340 comm="syz.5.460" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.467054][ T6358] loop0: detected capacity change from 0 to 512 [ 119.506560][ T29] audit: type=1400 audit(1791118587.714:429): avc: denied { write } for pid=6338 comm="syz.3.459" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.546563][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.656557][ T6358] EXT4-fs (loop0): 1 orphan inode deleted [ 119.657065][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.657247][ T6358] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.681821][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 120.243131][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.393955][ T6387] syzkaller0: entered promiscuous mode [ 120.393980][ T6387] syzkaller0: entered allmulticast mode [ 120.525094][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.558220][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.604866][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.906161][ T6410] loop3: detected capacity change from 0 to 164 [ 121.375333][ T6447] syzkaller0: entered promiscuous mode [ 121.375358][ T6447] syzkaller0: entered allmulticast mode [ 121.597720][ T6467] syzkaller0: entered promiscuous mode [ 121.597745][ T6467] syzkaller0: entered allmulticast mode [ 121.707016][ T6447] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 121.707016][ T6447] program syz.2.471 not setting count and/or reply_len properly [ 121.875042][ T6477] loop5: detected capacity change from 0 to 512 [ 122.145192][ T6477] EXT4-fs (loop5): 1 orphan inode deleted [ 122.152429][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 122.152463][ T12] loop5: lost filesystem error report for type 5 error -117 [ 122.154630][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.156507][ T6492] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 122.156507][ T6492] program syz.3.477 not setting count and/or reply_len properly [ 122.179198][ T6477] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.560529][ T6520] syzkaller0: entered promiscuous mode [ 122.560550][ T6520] syzkaller0: entered allmulticast mode [ 122.569616][ T6509] loop2: detected capacity change from 0 to 164 [ 122.862593][ T6528] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 122.862593][ T6528] program syz.0.479 not setting count and/or reply_len properly [ 123.290838][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.301263][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 123.301281][ T29] audit: type=1400 audit(1791118591.504:432): avc: denied { setopt } for pid=6551 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.323063][ T29] audit: type=1400 audit(1791118591.524:433): avc: denied { bind } for pid=6551 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.323167][ T29] audit: type=1400 audit(1791118591.524:434): avc: denied { connect } for pid=6551 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.398429][ T6556] syzkaller0: entered promiscuous mode [ 123.398452][ T6556] syzkaller0: entered allmulticast mode [ 123.897372][ T6566] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 123.897372][ T6566] program syz.5.482 not setting count and/or reply_len properly [ 123.898994][ T6565] syzkaller0: entered promiscuous mode [ 123.899078][ T6565] syzkaller0: entered allmulticast mode [ 124.703542][ T6569] loop4: detected capacity change from 0 to 512 [ 124.866998][ T6610] syzkaller0: entered promiscuous mode [ 124.867022][ T6610] syzkaller0: entered allmulticast mode [ 124.884765][ T6608] syzkaller0: entered promiscuous mode [ 124.884806][ T6608] syzkaller0: entered allmulticast mode [ 125.152794][ T6617] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 125.152794][ T6617] program syz.5.490 not setting count and/or reply_len properly [ 125.543219][ T6569] EXT4-fs (loop4): 1 orphan inode deleted [ 125.562586][ T4264] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.562617][ T4264] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 125.562642][ T4264] loop4: lost filesystem error report for type 5 error -117 [ 125.583469][ T6569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.584514][ T6569] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.926930][ T29] audit: type=1400 audit(1791118594.134:435): avc: denied { write } for pid=6568 comm="syz.4.485" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.007405][ T6662] syzkaller0: entered promiscuous mode [ 126.007431][ T6662] syzkaller0: entered allmulticast mode [ 126.062749][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.181480][ T6665] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 126.181480][ T6665] program syz.5.493 not setting count and/or reply_len properly [ 127.278643][ T6680] loop4: detected capacity change from 0 to 512 [ 127.286886][ T6686] loop2: detected capacity change from 0 to 512 [ 127.353482][ T6690] loop5: detected capacity change from 0 to 164 [ 127.483918][ T6684] loop3: detected capacity change from 0 to 512 [ 127.561171][ T6680] EXT4-fs (loop4): 1 orphan inode deleted [ 127.581891][ T4264] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.581930][ T4264] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 127.581969][ T4264] loop4: lost filesystem error report for type 5 error -117 [ 127.583665][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.604144][ T6686] EXT4-fs (loop2): 1 orphan inode deleted [ 127.607029][ T6680] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.609372][ T6686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.611470][ T6686] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.621501][ T6684] EXT4-fs (loop3): 1 orphan inode deleted [ 127.623808][ T6684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.624487][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.624520][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 127.628919][ T6684] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.676112][ T29] audit: type=1400 audit(1791118595.884:436): avc: denied { write } for pid=6683 comm="syz.3.496" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.678587][ T29] audit: type=1400 audit(1791118595.884:437): avc: denied { write } for pid=6679 comm="syz.4.494" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.768264][ T6701] loop0: detected capacity change from 0 to 164 [ 127.902594][ T29] audit: type=1400 audit(1791118596.094:438): avc: denied { write } for pid=6685 comm="syz.2.497" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.910925][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.127618][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.172785][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.571001][ T6723] loop0: detected capacity change from 0 to 512 [ 128.685018][ T6723] EXT4-fs (loop0): 1 orphan inode deleted [ 128.709750][ T6723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.726680][ T6723] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.791733][ T29] audit: type=1400 audit(1791118596.994:439): avc: denied { write } for pid=6722 comm="syz.0.503" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.178366][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.805785][ T6743] loop0: detected capacity change from 0 to 512 [ 130.681104][ T6743] EXT4-fs (loop0): 1 orphan inode deleted [ 130.707399][ T4268] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 130.707431][ T4268] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:30: Failed to release dquot type 1 [ 130.707515][ T4268] loop0: lost filesystem error report for type 5 error -117 [ 130.714618][ T6743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.715700][ T6743] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.963445][ T29] audit: type=1400 audit(1791118599.174:440): avc: denied { write } for pid=6741 comm="syz.0.507" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.074839][ T6793] syzkaller0: entered promiscuous mode [ 131.074860][ T6793] syzkaller0: entered allmulticast mode [ 131.267467][ T6793] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 131.267467][ T6793] program syz.2.512 not setting count and/or reply_len properly [ 131.303579][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.978844][ T6829] loop0: detected capacity change from 0 to 164 [ 132.382207][ T6873] loop2: detected capacity change from 0 to 512 [ 132.433247][ T6861] loop5: detected capacity change from 0 to 512 [ 132.532442][ T6873] EXT4-fs (loop2): 1 orphan inode deleted [ 132.539329][ T4264] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.539429][ T4264] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:28: Failed to release dquot type 1 [ 132.539452][ T4264] loop2: lost filesystem error report for type 5 error -117 [ 132.586770][ T6873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.609777][ T6888] loop3: detected capacity change from 0 to 512 [ 132.614245][ T6873] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.723689][ T29] audit: type=1400 audit(1791118600.924:441): avc: denied { write } for pid=6871 comm="syz.2.515" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.815403][ T6861] EXT4-fs (loop5): 1 orphan inode deleted [ 132.833278][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.833339][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 132.833360][ T12] loop5: lost filesystem error report for type 5 error -117 [ 132.867446][ T6894] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 132.867446][ T6894] program syz.0.517 not setting count and/or reply_len properly [ 132.915440][ T6861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.923336][ T6861] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.949088][ T6888] EXT4-fs (loop3): 1 orphan inode deleted [ 132.964637][ T3612] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.964668][ T3612] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:14: Failed to release dquot type 1 [ 132.964689][ T3612] loop3: lost filesystem error report for type 5 error -117 [ 133.022222][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.044360][ T29] audit: type=1400 audit(1791118601.244:442): avc: denied { write } for pid=6859 comm="syz.5.514" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.233489][ T6888] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.363480][ T29] audit: type=1400 audit(1791118601.564:443): avc: denied { write } for pid=6887 comm="syz.3.516" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.666626][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.671312][ T6909] syzkaller0: entered promiscuous mode [ 133.671360][ T6909] syzkaller0: entered allmulticast mode [ 133.848332][ T6912] FAULT_INJECTION: forcing a failure. [ 133.848332][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 133.848362][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.520 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.848386][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.848404][ T6912] Call Trace: [ 133.848415][ T6912] [ 133.848436][ T6912] __dump_stack+0x1d/0x30 [ 133.848463][ T6912] dump_stack_lvl+0x95/0xd0 [ 133.848488][ T6912] dump_stack+0x15/0x1b [ 133.848518][ T6912] should_fail_ex+0x262/0x280 [ 133.848571][ T6912] should_failslab+0x8c/0xb0 [ 133.848606][ T6912] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 133.848654][ T6912] ? sidtab_sid2str_get+0xa0/0x130 [ 133.848691][ T6912] ? sidtab_sid2str_get+0xa0/0x130 [ 133.848717][ T6912] kmemdup_noprof+0x2b/0x70 [ 133.848754][ T6912] sidtab_sid2str_get+0xa0/0x130 [ 133.848788][ T6912] security_sid_to_context_core+0x179/0x2d0 [ 133.848823][ T6912] security_sid_to_context+0x27/0x40 [ 133.848852][ T6912] avc_audit_post_callback+0x9d/0x520 [ 133.848901][ T6912] ? audit_log_lsm_data+0x74f/0xbb0 [ 133.848931][ T6912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 133.848978][ T6912] common_lsm_audit+0x1ba/0x230 [ 133.849002][ T6912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 133.849103][ T6912] slow_avc_audit+0x14c/0x190 [ 133.849143][ T6912] avc_has_perm+0x144/0x190 [ 133.849216][ T6912] selinux_inode_init_security_anon+0x275/0x330 [ 133.849260][ T6912] security_inode_init_security_anon+0x46/0x80 [ 133.849413][ T6912] anon_inode_make_secure_inode+0xbd/0x110 [ 133.849446][ T6912] __anon_inode_getfile+0xa5/0x180 [ 133.849488][ T6912] anon_inode_create_getfile+0x38/0x50 [ 133.849564][ T6912] io_uring_create+0x3ca/0x4f0 [ 133.849670][ T6912] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 133.849714][ T6912] __x64_sys_io_uring_setup+0x31/0x40 [ 133.849755][ T6912] x64_sys_call+0x1fbf/0x2550 [ 133.849781][ T6912] do_syscall_64+0x112/0x360 [ 133.849813][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.849843][ T6912] RIP: 0033:0x7eff6147e159 [ 133.849866][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.849951][ T6912] RSP: 002b:00007eff5fed6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 133.849978][ T6912] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007eff6147e159 [ 133.849997][ T6912] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 133.850015][ T6912] RBP: 00007eff6151506b R08: 0000000000000000 R09: 0000000000000000 [ 133.850030][ T6912] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 133.850051][ T6912] R13: 0000200000000740 R14: 00002000000000c0 R15: 00007ffe97768588 [ 133.850076][ T6912] [ 133.854428][ T6910] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 133.854428][ T6910] program syz.0.519 not setting count and/or reply_len properly [ 133.969795][ T6917] syzkaller0: entered promiscuous mode [ 133.969876][ T6917] syzkaller0: entered allmulticast mode [ 134.016567][ T29] audit: type=1400 audit(1791118602.054:444): avc: denied { create } for pid=6911 comm="syz.3.520" anonclass=[io_uring] ssid=137 tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.017452][ T29] audit: type=1400 audit(1791118602.224:445): avc: denied { map } for pid=6911 comm="syz.3.520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.017536][ T29] audit: type=1400 audit(1791118602.224:446): avc: denied { read write } for pid=6911 comm="syz.3.520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.028265][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.038064][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.209639][ T6922] FAULT_INJECTION: forcing a failure. [ 134.209639][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 134.209771][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.5.522 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.209953][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.210001][ T6922] Call Trace: [ 134.210024][ T6922] [ 134.210053][ T6922] __dump_stack+0x1d/0x30 [ 134.210137][ T6922] dump_stack_lvl+0x95/0xd0 [ 134.210217][ T6922] dump_stack+0x15/0x1b [ 134.210290][ T6922] should_fail_ex+0x262/0x280 [ 134.210409][ T6922] ? security_file_alloc+0x32/0xf0 [ 134.210482][ T6922] should_failslab+0x8c/0xb0 [ 134.210593][ T6922] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.210714][ T6922] ? security_file_alloc+0x32/0xf0 [ 134.210786][ T6922] security_file_alloc+0x32/0xf0 [ 134.210849][ T6922] init_file+0x5b/0x1b0 [ 134.210918][ T6922] alloc_empty_file+0x85/0x1e0 [ 134.211054][ T6922] alloc_file_pseudo+0x92/0x120 [ 134.211141][ T6922] __anon_inode_getfile+0x105/0x180 [ 134.211223][ T6922] anon_inode_create_getfile+0x38/0x50 [ 134.211308][ T6922] io_uring_create+0x3ca/0x4f0 [ 134.211449][ T6922] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 134.211574][ T6922] __x64_sys_io_uring_setup+0x31/0x40 [ 134.211676][ T6922] x64_sys_call+0x1fbf/0x2550 [ 134.211790][ T6922] do_syscall_64+0x112/0x360 [ 134.211888][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.211962][ T6922] RIP: 0033:0x7ff358dae159 [ 134.212014][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.212116][ T6922] RSP: 002b:00007ff357806fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 134.212188][ T6922] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007ff358dae159 [ 134.212237][ T6922] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 134.212280][ T6922] RBP: 00007ff358e4506b R08: 0000000000000000 R09: 0000000000000000 [ 134.212321][ T6922] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 134.212382][ T6922] R13: 0000200000000740 R14: 00002000000000c0 R15: 00007fffa51c7888 [ 134.212445][ T6922] [ 134.633070][ T29] audit: type=1326 audit(1791118602.844:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.633944][ T29] audit: type=1326 audit(1791118602.844:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.634268][ T29] audit: type=1326 audit(1791118602.844:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.635500][ T29] audit: type=1326 audit(1791118602.844:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.638350][ T29] audit: type=1326 audit(1791118602.844:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.640088][ T29] audit: type=1326 audit(1791118602.844:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.640343][ T29] audit: type=1326 audit(1791118602.844:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff358dae159 code=0x7ffc0000 [ 134.820554][ T3616] IPVS: starting estimator thread 0... [ 135.257542][ T6938] IPVS: using max 2160 ests per chain, 108000 per kthread [ 136.012093][ T6945] l2tp_ppp: sess 2/0: no socket in recv [ 136.507106][ T6952] syzkaller0: entered promiscuous mode [ 136.507132][ T6952] syzkaller0: entered allmulticast mode [ 136.623924][ T6966] FAULT_INJECTION: forcing a failure. [ 136.623924][ T6966] name failslab, interval 1, probability 0, space 0, times 0 [ 136.623960][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.624054][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.624071][ T6966] Call Trace: [ 136.624079][ T6966] [ 136.624089][ T6966] __dump_stack+0x1d/0x30 [ 136.624123][ T6966] dump_stack_lvl+0x95/0xd0 [ 136.624155][ T6966] dump_stack+0x15/0x1b [ 136.624176][ T6966] should_fail_ex+0x262/0x280 [ 136.624287][ T6966] should_failslab+0x8c/0xb0 [ 136.624347][ T6966] __kvmalloc_node_noprof+0x168/0x5c0 [ 136.624368][ T6966] ? ip_vs_rht_alloc+0x4b1/0x780 [ 136.624414][ T6966] ? ip_vs_rht_alloc+0x4b1/0x780 [ 136.624486][ T6966] ip_vs_rht_alloc+0x4b1/0x780 [ 136.624527][ T6966] ? get_random_bytes+0x1d/0x30 [ 136.624559][ T6966] ip_vs_conn_tab_alloc+0x60/0xd0 [ 136.624603][ T6966] ip_vs_add_service+0x36e/0xea0 [ 136.624700][ T6966] ? selinux_capable+0x31/0x40 [ 136.624736][ T6966] ? __ip_vs_service_find+0x397/0x3c0 [ 136.624780][ T6966] do_ip_vs_set_ctl+0x90a/0xab0 [ 136.624847][ T6966] nf_setsockopt+0x199/0x1b0 [ 136.624890][ T6966] ip_setsockopt+0x102/0x110 [ 136.624923][ T6966] tcp_setsockopt+0x98/0xb0 [ 136.625039][ T6966] sock_common_setsockopt+0x69/0x80 [ 136.625101][ T6966] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.625147][ T6966] __sys_setsockopt+0x184/0x200 [ 136.625181][ T6966] __x64_sys_setsockopt+0x64/0x80 [ 136.625214][ T6966] x64_sys_call+0x248f/0x2550 [ 136.625321][ T6966] do_syscall_64+0x112/0x360 [ 136.625357][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.625388][ T6966] RIP: 0033:0x7f70b5d8e159 [ 136.625488][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.625513][ T6966] RSP: 002b:00007f70b47e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.625536][ T6966] RAX: ffffffffffffffda RBX: 00007f70b6015fa0 RCX: 00007f70b5d8e159 [ 136.625585][ T6966] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 136.625602][ T6966] RBP: 00007f70b5e2506b R08: 000000000000002c R09: 0000000000000000 [ 136.625677][ T6966] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 136.625694][ T6966] R13: 00007f70b6016038 R14: 00007f70b6015fa0 R15: 00007fff2fb444c8 [ 136.625747][ T6966] [ 136.630256][ T6964] syzkaller0: entered promiscuous mode [ 136.630278][ T6964] syzkaller0: entered allmulticast mode [ 136.718877][ T6968] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 136.718877][ T6968] program syz.0.535 not setting count and/or reply_len properly [ 136.997548][ T6982] FAULT_INJECTION: forcing a failure. [ 136.997548][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 136.997579][ T6982] CPU: 0 UID: 60928 PID: 6982 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.997613][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.997645][ T6982] Call Trace: [ 136.997715][ T6982] [ 136.997728][ T6982] __dump_stack+0x1d/0x30 [ 136.997837][ T6982] dump_stack_lvl+0x95/0xd0 [ 136.997869][ T6982] dump_stack+0x15/0x1b [ 136.997906][ T6982] should_fail_ex+0x262/0x280 [ 136.997945][ T6982] should_failslab+0x8c/0xb0 [ 136.997994][ T6982] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 136.998038][ T6982] ? key_alloc+0x2b2/0x940 [ 136.998070][ T6982] ? key_alloc+0x2b2/0x940 [ 136.998108][ T6982] kmemdup_noprof+0x2b/0x70 [ 136.998163][ T6982] key_alloc+0x2b2/0x940 [ 136.998212][ T6982] __key_create_or_update+0x725/0x840 [ 136.998358][ T6982] key_create_or_update+0x42/0x60 [ 136.998421][ T6982] __se_sys_add_key+0x2a5/0x360 [ 136.998456][ T6982] __x64_sys_add_key+0x67/0x80 [ 136.998479][ T6982] x64_sys_call+0x1fa9/0x2550 [ 136.998505][ T6982] do_syscall_64+0x112/0x360 [ 136.998586][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.998640][ T6982] RIP: 0033:0x7eff6147e159 [ 136.998656][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.998733][ T6982] RSP: 002b:00007eff5fed7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 136.998761][ T6982] RAX: ffffffffffffffda RBX: 00007eff61705fa0 RCX: 00007eff6147e159 [ 136.998781][ T6982] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 136.998798][ T6982] RBP: 00007eff6151506b R08: fffffffffffffffe R09: 0000000000000000 [ 136.998886][ T6982] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 136.998904][ T6982] R13: 00007eff61706038 R14: 00007eff61705fa0 R15: 00007ffe97768588 [ 136.998931][ T6982] [ 137.233054][ T6987] FAULT_INJECTION: forcing a failure. [ 137.233054][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 137.233091][ T6987] CPU: 0 UID: 60928 PID: 6987 Comm: syz.5.551 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.233117][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.233134][ T6987] Call Trace: [ 137.233151][ T6987] [ 137.233161][ T6987] __dump_stack+0x1d/0x30 [ 137.233196][ T6987] dump_stack_lvl+0x95/0xd0 [ 137.233223][ T6987] dump_stack+0x15/0x1b [ 137.233252][ T6987] should_fail_ex+0x262/0x280 [ 137.233337][ T6987] ? security_key_alloc+0x50/0x130 [ 137.233361][ T6987] should_failslab+0x8c/0xb0 [ 137.233454][ T6987] __kmalloc_noprof+0xd0/0x4d0 [ 137.233499][ T6987] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 137.233582][ T6987] ? security_key_alloc+0x50/0x130 [ 137.233624][ T6987] security_key_alloc+0x50/0x130 [ 137.233731][ T6987] key_alloc+0x44a/0x940 [ 137.233772][ T6987] __key_create_or_update+0x725/0x840 [ 137.233900][ T6987] key_create_or_update+0x42/0x60 [ 137.233946][ T6987] __se_sys_add_key+0x2a5/0x360 [ 137.234056][ T6987] __x64_sys_add_key+0x67/0x80 [ 137.234111][ T6987] x64_sys_call+0x1fa9/0x2550 [ 137.234144][ T6987] do_syscall_64+0x112/0x360 [ 137.234172][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.234252][ T6987] RIP: 0033:0x7ff358dae159 [ 137.234272][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.234295][ T6987] RSP: 002b:00007ff357807028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 137.234316][ T6987] RAX: ffffffffffffffda RBX: 00007ff359035fa0 RCX: 00007ff358dae159 [ 137.234372][ T6987] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 137.234456][ T6987] RBP: 00007ff358e4506b R08: fffffffffffffffe R09: 0000000000000000 [ 137.234471][ T6987] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 137.234484][ T6987] R13: 00007ff359036038 R14: 00007ff359035fa0 R15: 00007fffa51c7888 [ 137.234509][ T6987] [ 137.991045][ T6994] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 137.991045][ T6994] program syz.2.552 not setting count and/or reply_len properly [ 138.253763][ T7034] FAULT_INJECTION: forcing a failure. [ 138.253763][ T7034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.253800][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.253843][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.253927][ T7034] Call Trace: [ 138.253935][ T7034] [ 138.253945][ T7034] __dump_stack+0x1d/0x30 [ 138.253990][ T7034] dump_stack_lvl+0x95/0xd0 [ 138.254016][ T7034] dump_stack+0x15/0x1b [ 138.254053][ T7034] should_fail_ex+0x262/0x280 [ 138.254084][ T7034] should_fail+0xb/0x20 [ 138.254110][ T7034] get_futex_key+0x12d/0xb10 [ 138.254173][ T7034] futex_wake+0x89/0x400 [ 138.254199][ T7034] do_futex+0x3f8/0x460 [ 138.254238][ T7034] __se_sys_futex+0x2f6/0x370 [ 138.254350][ T7034] __x64_sys_futex+0x78/0x90 [ 138.254436][ T7034] x64_sys_call+0x22e2/0x2550 [ 138.254512][ T7034] do_syscall_64+0x112/0x360 [ 138.254548][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.254579][ T7034] RIP: 0033:0x7f12dd89e159 [ 138.254601][ T7034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.254626][ T7034] RSP: 002b:00007f12dc2f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.254658][ T7034] RAX: ffffffffffffffda RBX: 00007f12ddb25fa8 RCX: 00007f12dd89e159 [ 138.254678][ T7034] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12ddb25fac [ 138.254696][ T7034] RBP: 00007f12ddb25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 138.254715][ T7034] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 138.254732][ T7034] R13: 00007f12ddb26038 R14: 00007ffeecefa570 R15: 00007ffeecefa658 [ 138.254760][ T7034] [ 138.460545][ T7045] FAULT_INJECTION: forcing a failure. [ 138.460545][ T7045] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.460663][ T7045] CPU: 0 UID: 60928 PID: 7045 Comm: syz.4.565 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.460728][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.460879][ T7045] Call Trace: [ 138.460892][ T7045] [ 138.460903][ T7045] __dump_stack+0x1d/0x30 [ 138.460981][ T7045] dump_stack_lvl+0x95/0xd0 [ 138.461012][ T7045] dump_stack+0x15/0x1b [ 138.461044][ T7045] should_fail_ex+0x262/0x280 [ 138.461120][ T7045] should_fail+0xb/0x20 [ 138.461152][ T7045] get_futex_key+0x12d/0xb10 [ 138.461210][ T7045] futex_wake+0x89/0x400 [ 138.461237][ T7045] do_futex+0x3f8/0x460 [ 138.461419][ T7045] __se_sys_futex+0x2f6/0x370 [ 138.461467][ T7045] __x64_sys_futex+0x78/0x90 [ 138.461583][ T7045] x64_sys_call+0x22e2/0x2550 [ 138.461617][ T7045] do_syscall_64+0x112/0x360 [ 138.461724][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.461783][ T7045] RIP: 0033:0x7f12dd89e159 [ 138.461807][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.461834][ T7045] RSP: 002b:00007f12dc2f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.461862][ T7045] RAX: ffffffffffffffda RBX: 00007f12ddb25fa8 RCX: 00007f12dd89e159 [ 138.461883][ T7045] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12ddb25fac [ 138.461950][ T7045] RBP: 00007f12ddb25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 138.462023][ T7045] R10: 000000000c6af872 R11: 0000000000000246 R12: 0000000000000000 [ 138.462040][ T7045] R13: 00007f12ddb26038 R14: 00007ffeecefa570 R15: 00007ffeecefa658 [ 138.462064][ T7045] [ 139.356311][ T7088] FAULT_INJECTION: forcing a failure. [ 139.356311][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 139.356351][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.0.576 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.356384][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.356406][ T7088] Call Trace: [ 139.356415][ T7088] [ 139.356424][ T7088] __dump_stack+0x1d/0x30 [ 139.356460][ T7088] dump_stack_lvl+0x95/0xd0 [ 139.356491][ T7088] dump_stack+0x15/0x1b [ 139.356572][ T7088] should_fail_ex+0x262/0x280 [ 139.356610][ T7088] should_failslab+0x8c/0xb0 [ 139.356721][ T7088] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 139.356767][ T7088] ? alloc_inode+0x9a/0x170 [ 139.356794][ T7088] ? alloc_inode+0x9a/0x170 [ 139.356821][ T7088] alloc_inode+0x9a/0x170 [ 139.356857][ T7088] alloc_anon_inode+0x1e/0x170 [ 139.356991][ T7088] anon_inode_make_secure_inode+0x35/0x110 [ 139.357019][ T7088] __anon_inode_getfile+0xa5/0x180 [ 139.357101][ T7088] anon_inode_create_getfile+0x38/0x50 [ 139.357126][ T7088] io_uring_create+0x3ca/0x4f0 [ 139.357162][ T7088] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 139.357211][ T7088] __x64_sys_io_uring_setup+0x31/0x40 [ 139.357268][ T7088] x64_sys_call+0x1fbf/0x2550 [ 139.357297][ T7088] do_syscall_64+0x112/0x360 [ 139.357330][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.357356][ T7088] RIP: 0033:0x7fa7a715e159 [ 139.357375][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.357482][ T7088] RSP: 002b:00007fa7a5bb6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 139.357541][ T7088] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fa7a715e159 [ 139.357562][ T7088] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 139.357593][ T7088] RBP: 00007fa7a71f506b R08: 0000000000000000 R09: 0000000000000000 [ 139.357621][ T7088] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 139.357639][ T7088] R13: 0000200000000740 R14: 0000000000000000 R15: 00007ffefbf91798 [ 139.357666][ T7088] [ 139.561227][ T7095] syzkaller0: entered promiscuous mode [ 139.561246][ T7095] syzkaller0: entered allmulticast mode [ 139.803235][ T7101] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 139.803235][ T7101] program syz.4.580 not setting count and/or reply_len properly [ 140.011051][ T7091] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 140.011051][ T7091] program syz.5.577 not setting count and/or reply_len properly [ 140.684874][ T7151] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 140.684874][ T7151] program syz.3.585 not setting count and/or reply_len properly [ 140.749119][ T7115] loop0: detected capacity change from 0 to 512 [ 141.027742][ T7164] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 141.027742][ T7164] program syz.5.589 not setting count and/or reply_len properly [ 141.149495][ T7115] EXT4-fs (loop0): 1 orphan inode deleted [ 141.174992][ T3709] __quota_error: 284 callbacks suppressed [ 141.175031][ T3709] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 141.175089][ T3709] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:22: Failed to release dquot type 1 [ 141.175205][ T3709] loop0: lost filesystem error report for type 5 error -117 [ 141.184682][ T7115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.185365][ T7115] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.377265][ T29] audit: type=1400 audit(1791118609.584:738): avc: denied { write } for pid=7114 comm="syz.0.582" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.693347][ T7169] FAULT_INJECTION: forcing a failure. [ 141.693347][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 141.693400][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.693433][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.693459][ T7169] Call Trace: [ 141.693466][ T7169] [ 141.693474][ T7169] __dump_stack+0x1d/0x30 [ 141.693500][ T7169] dump_stack_lvl+0x95/0xd0 [ 141.693531][ T7169] dump_stack+0x15/0x1b [ 141.693560][ T7169] should_fail_ex+0x262/0x280 [ 141.693605][ T7169] should_failslab+0x8c/0xb0 [ 141.693723][ T7169] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 141.693770][ T7169] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 141.693843][ T7169] ? alloc_inode+0x9a/0x170 [ 141.693889][ T7169] ? alloc_inode+0x9a/0x170 [ 141.693921][ T7169] alloc_inode+0x9a/0x170 [ 141.693943][ T7169] alloc_anon_inode+0x1e/0x170 [ 141.693985][ T7169] anon_inode_make_secure_inode+0x35/0x110 [ 141.694024][ T7169] ? io_sq_offload_create+0xb6/0x860 [ 141.694149][ T7169] __anon_inode_getfile+0xa5/0x180 [ 141.694255][ T7169] anon_inode_create_getfile+0x38/0x50 [ 141.694326][ T7169] io_uring_create+0x3ca/0x4f0 [ 141.694374][ T7169] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 141.694418][ T7169] __x64_sys_io_uring_setup+0x31/0x40 [ 141.694503][ T7169] x64_sys_call+0x1fbf/0x2550 [ 141.694579][ T7169] do_syscall_64+0x112/0x360 [ 141.694633][ T7169] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 141.694676][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.694707][ T7169] RIP: 0033:0x7f70b5d8e159 [ 141.694729][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.694755][ T7169] RSP: 002b:00007f70b47e6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 141.694897][ T7169] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f70b5d8e159 [ 141.694916][ T7169] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 141.694935][ T7169] RBP: 00007f70b5e2506b R08: 0000000000000000 R09: 0000000000000000 [ 141.694960][ T7169] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 141.694979][ T7169] R13: 0000200000000740 R14: 0000000000000000 R15: 00007fff2fb444c8 [ 141.695005][ T7169] [ 141.946625][ T29] audit: type=1400 audit(1791118610.154:739): avc: denied { create } for pid=7172 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.232317][ T7184] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 142.232317][ T7184] program syz.2.596 not setting count and/or reply_len properly [ 142.284834][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.545439][ T7200] tipc: Enabled bearer , priority 0 [ 142.561230][ T7200] tipc: Resetting bearer [ 142.574034][ T7199] tipc: Disabling bearer [ 142.739084][ T7221] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 142.739084][ T7221] program syz.0.613 not setting count and/or reply_len properly [ 143.095496][ T7220] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 143.095496][ T7220] program syz.5.614 not setting count and/or reply_len properly [ 143.530863][ T7237] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 143.530863][ T7237] program syz.0.619 not setting count and/or reply_len properly [ 143.693228][ T7240] loop4: detected capacity change from 0 to 164 [ 143.968135][ T7265] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 143.968135][ T7265] program syz.3.629 not setting count and/or reply_len properly [ 144.040202][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 145.277749][ T7287] loop0: detected capacity change from 0 to 164 [ 146.601818][ T7243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.680172][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'. [ 146.715355][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'. [ 146.864928][ T7308] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 146.864928][ T7308] program syz.4.640 not setting count and/or reply_len properly [ 146.868934][ T7314] syzkaller0: entered promiscuous mode [ 146.868969][ T7314] syzkaller0: entered allmulticast mode [ 146.951838][ T7320] syzkaller0: entered promiscuous mode [ 146.951916][ T7320] syzkaller0: entered allmulticast mode [ 147.011551][ T7309] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 147.011551][ T7309] program syz.0.636 not setting count and/or reply_len properly [ 147.426497][ T7331] loop2: detected capacity change from 0 to 164 [ 147.552567][ T7325] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 147.552567][ T7325] program syz.5.646 not setting count and/or reply_len properly [ 147.574543][ T7324] loop3: detected capacity change from 0 to 164 [ 147.964909][ T7339] syzkaller0: entered promiscuous mode [ 147.964934][ T7339] syzkaller0: entered allmulticast mode [ 147.967421][ T7346] syzkaller0: entered promiscuous mode [ 147.967442][ T7346] syzkaller0: entered allmulticast mode [ 147.976232][ T7339] tipc: Enabled bearer , priority 0 [ 148.009606][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 148.016752][ T7339] tipc: Resetting bearer [ 148.046133][ T7337] tipc: Resetting bearer [ 148.047769][ T7337] tipc: Disabling bearer [ 148.665892][ T29] audit: type=1326 audit(1791118616.874:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.667240][ T29] audit: type=1326 audit(1791118616.874:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.669574][ T29] audit: type=1326 audit(1791118616.874:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.669934][ T29] audit: type=1326 audit(1791118616.874:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.702029][ T29] audit: type=1326 audit(1791118616.874:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.702317][ T29] audit: type=1326 audit(1791118616.914:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.704941][ T29] audit: type=1326 audit(1791118616.914:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.873799][ T29] audit: type=1326 audit(1791118617.084:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.906091][ T29] audit: type=1326 audit(1791118617.114:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 148.913755][ T29] audit: type=1326 audit(1791118617.114:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff6147e159 code=0x7ffc0000 [ 149.138839][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'. [ 149.280119][ T7385] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 149.280119][ T7385] program syz.3.662 not setting count and/or reply_len properly [ 149.311026][ T7389] batman_adv: batadv0: Adding interface: syzkaller0 [ 149.311052][ T7389] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.311094][ T7389] batman_adv: batadv0: Interface activated: syzkaller0 [ 149.317534][ T7390] loop5: detected capacity change from 0 to 164 [ 149.377378][ T7386] loop2: detected capacity change from 0 to 164 [ 149.626813][ T7390] [ 149.718692][ T7387] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 149.744596][ T7387] batman_adv: batadv0: Removing interface: syzkaller0 [ 150.212059][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 150.853774][ T7425] syzkaller0: entered promiscuous mode [ 150.853802][ T7425] syzkaller0: entered allmulticast mode [ 151.203798][ T7439] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 151.203798][ T7439] program syz.0.677 not setting count and/or reply_len properly [ 151.250840][ T7436] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 151.250840][ T7436] program syz.2.680 not setting count and/or reply_len properly [ 151.314637][ T7447] FAULT_INJECTION: forcing a failure. [ 151.314637][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 151.314667][ T7447] CPU: 0 UID: 0 PID: 7447 Comm: syz.3.683 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.314699][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.314719][ T7447] Call Trace: [ 151.314737][ T7447] [ 151.314747][ T7447] __dump_stack+0x1d/0x30 [ 151.314779][ T7447] dump_stack_lvl+0x95/0xd0 [ 151.314801][ T7447] dump_stack+0x15/0x1b [ 151.314946][ T7447] should_fail_ex+0x262/0x280 [ 151.314976][ T7447] ? __send_signal_locked+0x1ca/0x7a0 [ 151.315009][ T7447] should_failslab+0x8c/0xb0 [ 151.315107][ T7447] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 151.315140][ T7447] ? __send_signal_locked+0x1ca/0x7a0 [ 151.315225][ T7447] __send_signal_locked+0x1ca/0x7a0 [ 151.315362][ T7447] send_signal_locked+0x3b0/0x430 [ 151.315401][ T7447] force_sig_info_to_task+0x1de/0x270 [ 151.315457][ T7447] force_sig_fault+0x91/0xc0 [ 151.315502][ T7447] exc_page_fault+0x62/0xa0 [ 151.315540][ T7447] asm_exc_page_fault+0x26/0x30 [ 151.315590][ T7447] RIP: 0033:0x7eff614672df [ 151.315606][ T7447] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 151.315625][ T7447] RSP: 002b:00007eff5fed6bd8 EFLAGS: 00010283 [ 151.315642][ T7447] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 151.315655][ T7447] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007eff5fed6c00 [ 151.315674][ T7447] RBP: 00007eff5fed6c00 R08: 0000000000000000 R09: 0000000000000000 [ 151.315753][ T7447] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 151.315768][ T7447] R13: 00007eff61706038 R14: 00007eff61705fa0 R15: 00007ffe97768588 [ 151.315796][ T7447] [ 151.410276][ T7448] loop4: detected capacity change from 0 to 164 [ 151.849947][ T7470] syzkaller0: entered promiscuous mode [ 151.849974][ T7470] syzkaller0: entered allmulticast mode [ 151.897368][ T7465] syzkaller0: entered promiscuous mode [ 151.897463][ T7465] syzkaller0: entered allmulticast mode [ 151.957460][ T7475] syzkaller0: entered promiscuous mode [ 151.957492][ T7475] syzkaller0: entered allmulticast mode [ 152.003243][ T7470] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 152.003243][ T7470] program syz.3.687 not setting count and/or reply_len properly [ 152.811234][ T7486] loop4: detected capacity change from 0 to 164 [ 152.917278][ T7489] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 152.917278][ T7489] program syz.2.688 not setting count and/or reply_len properly [ 153.222369][ T7508] loop0: detected capacity change from 0 to 164 [ 154.033936][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 154.050318][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 154.104789][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 154.336805][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.699'. [ 154.934415][ T7535] syzkaller0: entered promiscuous mode [ 154.934436][ T7535] syzkaller0: entered allmulticast mode [ 155.156555][ T7535] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 155.156555][ T7535] program syz.5.703 not setting count and/or reply_len properly [ 155.817932][ T7547] ================================================================== [ 155.817989][ T7547] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 155.818051][ T7547] [ 155.818056][ T7547] write to 0xffff8881036a5c48 of 8 bytes by interrupt on cpu 0: [ 155.818077][ T7547] ps2_interrupt+0x50d/0x550 [ 155.818119][ T7547] serio_interrupt+0x66/0xf0 [ 155.818139][ T7547] i8042_handle_data+0x388/0x680 [ 155.818166][ T7547] i8042_interrupt+0x15/0x90 [ 155.818191][ T7547] __handle_irq_event_percpu+0x8b/0x480 [ 155.818225][ T7547] handle_irq_event+0x64/0xf0 [ 155.818240][ T7547] handle_edge_irq+0x155/0x440 [ 155.818268][ T7547] __common_interrupt+0x60/0xb0 [ 155.818295][ T7547] common_interrupt+0x7e/0x90 [ 155.818320][ T7547] asm_common_interrupt+0x26/0x40 [ 155.818339][ T7547] pv_native_safe_halt+0xf/0x20 [ 155.818370][ T7547] default_idle+0x9/0x20 [ 155.818388][ T7547] default_idle_call+0x3b/0x60 [ 155.818407][ T7547] do_idle+0x183/0x2d0 [ 155.818426][ T7547] cpu_startup_entry+0x24/0x30 [ 155.818447][ T7547] rest_init+0x101/0x110 [ 155.818467][ T7547] start_kernel+0x49f/0x4d0 [ 155.818495][ T7547] x86_64_start_reservations+0x24/0x30 [ 155.818514][ T7547] x86_64_start_kernel+0xfc/0x100 [ 155.818532][ T7547] common_startup_64+0x13e/0x157 [ 155.818555][ T7547] [ 155.818560][ T7547] read to 0xffff8881036a5c48 of 8 bytes by task 7547 on cpu 1: [ 155.818574][ T7547] ps2_do_sendbyte+0x10b/0x320 [ 155.818602][ T7547] __ps2_command+0x364/0xaa0 [ 155.818631][ T7547] ps2_command+0x52/0x90 [ 155.818666][ T7547] alps_identify+0x1c1/0x5e0 [ 155.818689][ T7547] alps_detect+0x31/0x250 [ 155.818711][ T7547] psmouse_extensions+0x5e6/0x960 [ 155.818741][ T7547] __psmouse_reconnect+0x3dd/0x880 [ 155.818759][ T7547] psmouse_reconnect+0x23/0x40 [ 155.818775][ T7547] drvctl_store+0x2ac/0xc20 [ 155.818796][ T7547] dev_attr_store+0x4a/0x70 [ 155.818825][ T7547] sysfs_kf_write+0xfe/0x120 [ 155.818852][ T7547] kernfs_fop_write_iter+0x1d2/0x2e0 [ 155.818876][ T7547] vfs_write+0x57f/0x9a0 [ 155.818902][ T7547] ksys_write+0xdc/0x1a0 [ 155.818929][ T7547] __x64_sys_write+0x40/0x50 [ 155.818956][ T7547] x64_sys_call+0x154e/0x2550 [ 155.818979][ T7547] do_syscall_64+0x112/0x360 [ 155.819006][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.819026][ T7547] [ 155.819029][ T7547] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 155.819040][ T7547] [ 155.819043][ T7547] Reported by Kernel Concurrency Sanitizer on: [ 155.819053][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.5.707 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.819076][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.819087][ T7547] ================================================================== [ 156.150499][ T7503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512