last executing test programs: 44.606170344s ago: executing program 1 (id=14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) 44.586259815s ago: executing program 1 (id=15): r0 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x11, r0) 44.37575808s ago: executing program 2 (id=22): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000000)) 44.338972971s ago: executing program 2 (id=23): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0xc, 0x1}, 0x48) 44.193693854s ago: executing program 2 (id=27): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x805}, @void, @x25={0x0, 0xfd, 0x1}}, 0x7) 44.073438277s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 44.027404448s ago: executing program 2 (id=30): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$xdp(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x5, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.723584166s ago: executing program 1 (id=34): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 42.584503493s ago: executing program 1 (id=59): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, 0x0) 42.480022745s ago: executing program 2 (id=62): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 42.479919705s ago: executing program 32 (id=62): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 42.465692496s ago: executing program 1 (id=64): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x3, &(0x7f0000000900)=@raw=[@generic={0x2, 0x0, 0x4, 0x33, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 42.377939578s ago: executing program 1 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x19, 0x0, @void}, 0x30) 42.362257948s ago: executing program 33 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x19, 0x0, @void}, 0x30) 5.119301446s ago: executing program 3 (id=943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d086}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0x0) 3.651590712s ago: executing program 3 (id=976): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r0, 0x3a, 0x4001, @val=@tracing={0x0, 0xfffffffffffffff8}}, 0x20) 3.623661322s ago: executing program 3 (id=977): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$l2tp6(r1, 0x0, 0x0, 0x20, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.341667709s ago: executing program 6 (id=986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000ffffffff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 3.289136981s ago: executing program 6 (id=987): io_uring_setup(0x6284, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x4, @perf_bp={0x0, 0x4}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/187, 0xbb) 3.284620541s ago: executing program 5 (id=988): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 3.210642223s ago: executing program 5 (id=989): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) 3.205643543s ago: executing program 6 (id=990): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, [0x5, 0x100000000, 0x5, 0x0, 0x1, 0x8, 0x10, 0x101, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x2, 0x0, 0x200]}, &(0x7f0000000840)=0x100) 3.160648924s ago: executing program 6 (id=991): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000940)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x5, @b={0x4, 0x2, 0x1, 0x1, {0x4, "6397b982"}}}, 0xd) 3.158408664s ago: executing program 5 (id=992): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) 2.766682253s ago: executing program 3 (id=996): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, @perf_bp={0x0, 0x3}, 0x8, 0x7, 0x0, 0x9, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 2.726633324s ago: executing program 3 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000980)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4b2}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) 1.627252531s ago: executing program 4 (id=1016): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) close(r1) close_range(r1, r0, 0x0) 1.606880791s ago: executing program 4 (id=1017): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0xb, @remote, 0x1}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x22f}, {0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, r3, 0x7}}, 0x48) 1.592941231s ago: executing program 4 (id=1019): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0xc499, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000003, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0xa, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(0x0, 0x100) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.552160672s ago: executing program 4 (id=1021): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 730.647012ms ago: executing program 0 (id=1022): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x278, 0x5802, 0x294, 0x278, 0x294, 0x390, 0x325, 0x378, 0x390, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0xfffffff7, 0x6, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0xffff, 0x2000, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d99be899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000000c2f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 730.493582ms ago: executing program 4 (id=1023): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x7, 0x0, 0x0, 0x1e00}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) 716.473223ms ago: executing program 4 (id=1024): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) 696.917163ms ago: executing program 0 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 664.629954ms ago: executing program 0 (id=1026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) close_range(r0, r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 643.629154ms ago: executing program 0 (id=1027): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b006cff8570768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) 617.034235ms ago: executing program 0 (id=1028): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd24, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 125.931457ms ago: executing program 5 (id=1029): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x200003e}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 124.986957ms ago: executing program 0 (id=1030): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 111.858257ms ago: executing program 6 (id=1031): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) setpgid(r0, r0) 50.204949ms ago: executing program 6 (id=1032): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/19, 0x13}, 0xe3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 46.798288ms ago: executing program 3 (id=1042): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400004ad"], 0x14) 17.58433ms ago: executing program 5 (id=1033): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000019580)=""/102385, &(0x7f00000000c0)=0x18ff1) 0s ago: executing program 5 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) kernel console output (not intermixed with test programs): 0.504061][ T3960] name failslab, interval 1, probability 0, space 0, times 0 [ 40.504100][ T3960] CPU: 0 UID: 0 PID: 3960 Comm: syz.4.115 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.504189][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.504204][ T3960] Call Trace: [ 40.504212][ T3960] [ 40.504221][ T3960] __dump_stack+0x1d/0x30 [ 40.504316][ T3960] dump_stack_lvl+0x95/0xd0 [ 40.504341][ T3960] dump_stack+0x15/0x1b [ 40.504366][ T3960] should_fail_ex+0x262/0x280 [ 40.504393][ T3960] should_failslab+0x8c/0xb0 [ 40.504448][ T3960] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 40.504487][ T3960] ? kstrdup_const+0x3e/0x50 [ 40.504511][ T3960] ? kstrdup_const+0x3e/0x50 [ 40.504537][ T3960] kstrdup+0x3e/0xd0 [ 40.504587][ T3960] kstrdup_const+0x3e/0x50 [ 40.504610][ T3960] alloc_vfsmnt+0xe2/0x2f0 [ 40.504642][ T3960] clone_mnt+0x30/0x5d0 [ 40.504705][ T3960] ? copy_tree+0xa3/0x890 [ 40.504762][ T3960] copy_tree+0xb9/0x890 [ 40.504789][ T3960] ? proc_alloc_inum+0x4f/0x70 [ 40.504825][ T3960] ? __ns_common_init+0xd7/0x120 [ 40.504845][ T3960] ? __ns_tree_gen_id+0x48/0x60 [ 40.504928][ T3960] copy_mnt_ns+0x1d2/0x720 [ 40.504966][ T3960] create_new_namespaces+0x7f/0x420 [ 40.505004][ T3960] unshare_nsproxy_namespaces+0x115/0x150 [ 40.505109][ T3960] ksys_unshare+0x42b/0x710 [ 40.505214][ T3960] __x64_sys_unshare+0x1f/0x30 [ 40.505291][ T3960] x64_sys_call+0x1e33/0x2550 [ 40.505320][ T3960] do_syscall_64+0x112/0x360 [ 40.505354][ T3960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.505381][ T3960] RIP: 0033:0x7fca1ceee159 [ 40.505467][ T3960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.505531][ T3960] RSP: 002b:00007fca1b947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 40.505554][ T3960] RAX: ffffffffffffffda RBX: 00007fca1d175fa0 RCX: 00007fca1ceee159 [ 40.505570][ T3960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 40.505584][ T3960] RBP: 00007fca1cf85024 R08: 0000000000000000 R09: 0000000000000000 [ 40.505600][ T3960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.505615][ T3960] R13: 00007fca1d176038 R14: 00007fca1d175fa0 R15: 00007ffe60629748 [ 40.505636][ T3960] [ 40.539468][ T3958] IPv6: Can't replace route, no match found [ 40.549472][ T29] audit: type=1400 audit(1788681206.334:319): avc: denied { watch } for pid=3961 comm="syz.4.116" path="/35" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.549812][ T3962] process 'syz.4.116' launched './file1' with NULL argv: empty string added [ 40.554056][ T29] audit: type=1400 audit(1788681206.334:320): avc: denied { execute } for pid=3961 comm="syz.4.116" name="file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.554090][ T29] audit: type=1400 audit(1788681206.334:321): avc: denied { execute_no_trans } for pid=3961 comm="syz.4.116" path="/35/file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.622866][ T3966] loop5: detected capacity change from 0 to 128 [ 40.623228][ T3966] EXT4-fs: test_dummy_encryption option not supported [ 40.838134][ T29] audit: type=1400 audit(1788681206.624:322): avc: denied { mount } for pid=3970 comm="syz.6.120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.869499][ T29] audit: type=1400 audit(1788681206.634:323): avc: denied { search } for pid=3970 comm="syz.6.120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.909071][ T3976] zero sized request [ 40.988932][ T3983] loop5: detected capacity change from 0 to 7 [ 41.089449][ T3989] SELinux: failed to load policy [ 41.264902][ T4015] loop5: detected capacity change from 0 to 512 [ 41.267256][ T4015] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.440611][ T4023] FAULT_INJECTION: forcing a failure. [ 41.440611][ T4023] name failslab, interval 1, probability 0, space 0, times 0 [ 41.440659][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.5.143 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.440691][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.440757][ T4023] Call Trace: [ 41.440764][ T4023] [ 41.440773][ T4023] __dump_stack+0x1d/0x30 [ 41.440799][ T4023] dump_stack_lvl+0x95/0xd0 [ 41.440826][ T4023] dump_stack+0x15/0x1b [ 41.440849][ T4023] should_fail_ex+0x262/0x280 [ 41.440872][ T4023] ? skb_clone+0x151/0x1f0 [ 41.440905][ T4023] should_failslab+0x8c/0xb0 [ 41.440936][ T4023] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 41.441032][ T4023] ? skb_clone+0x151/0x1f0 [ 41.441060][ T4023] skb_clone+0x151/0x1f0 [ 41.441089][ T4023] bpf_clone_redirect+0xed/0x280 [ 41.441157][ T4023] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 41.441180][ T4023] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 41.441205][ T4023] ? perf_cgroup_switch+0x10c/0x480 [ 41.441228][ T4023] ? xfd_validate_state+0x45/0xf0 [ 41.441260][ T4023] ? _raw_spin_unlock+0x9/0x30 [ 41.441305][ T4023] ? finish_task_switch+0x121/0x340 [ 41.441333][ T4023] ? __schedule+0x79e/0xd20 [ 41.441367][ T4023] ? is_bpf_text_address+0x141/0x160 [ 41.441406][ T4023] ? preempt_schedule_common+0x12/0x40 [ 41.441443][ T4023] ? preempt_schedule_thunk+0x16/0x40 [ 41.441478][ T4023] ? bpf_test_timer_continue+0xac/0x350 [ 41.441568][ T4023] bpf_test_run+0x29b/0x620 [ 41.441596][ T4023] ? __list_add_valid_or_report+0x38/0xe0 [ 41.441634][ T4023] ? bpf_test_run+0x198/0x620 [ 41.441738][ T4023] bpf_prog_test_run_skb+0xe67/0x11b0 [ 41.441770][ T4023] ? __rcu_read_unlock+0x4e/0x70 [ 41.441805][ T4023] ? __fget_files+0x184/0x1c0 [ 41.441829][ T4023] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 41.441875][ T4023] bpf_prog_test_run+0x208/0x340 [ 41.441905][ T4023] __sys_bpf+0x8da/0xc30 [ 41.441933][ T4023] ? do_futex+0x350/0x460 [ 41.441969][ T4023] __x64_sys_bpf+0x69/0x80 [ 41.442007][ T4023] x64_sys_call+0xf26/0x2550 [ 41.442035][ T4023] do_syscall_64+0x112/0x360 [ 41.442068][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.442138][ T4023] RIP: 0033:0x7ff42553e159 [ 41.442198][ T4023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.442219][ T4023] RSP: 002b:00007ff423f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.442282][ T4023] RAX: ffffffffffffffda RBX: 00007ff4257c5fa0 RCX: 00007ff42553e159 [ 41.442321][ T4023] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 41.442336][ T4023] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 41.442351][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.442365][ T4023] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 41.442387][ T4023] [ 42.201296][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.210035][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.474875][ T4054] Cannot find set identified by id 0 to match [ 42.483807][ T3880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.487480][ T4041] fido_id[4041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.494051][ T4058] FAULT_INJECTION: forcing a failure. [ 42.494051][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 42.494081][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.5.158 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.494109][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.494124][ T4058] Call Trace: [ 42.494132][ T4058] [ 42.494142][ T4058] __dump_stack+0x1d/0x30 [ 42.494187][ T4058] dump_stack_lvl+0x95/0xd0 [ 42.494219][ T4058] dump_stack+0x15/0x1b [ 42.494242][ T4058] should_fail_ex+0x262/0x280 [ 42.494296][ T4058] should_failslab+0x8c/0xb0 [ 42.494328][ T4058] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 42.494427][ T4058] ? proc_alloc_inode+0x34/0x90 [ 42.494452][ T4058] ? proc_alloc_inode+0x34/0x90 [ 42.494476][ T4058] ? __pfx_proc_alloc_inode+0x10/0x10 [ 42.494590][ T4058] proc_alloc_inode+0x34/0x90 [ 42.494613][ T4058] alloc_inode+0x40/0x170 [ 42.494714][ T4058] new_inode+0x1d/0xe0 [ 42.494737][ T4058] proc_setup_self+0x3e/0x110 [ 42.494821][ T4058] proc_fill_super+0x314/0x3c0 [ 42.494847][ T4058] ? __pfx_proc_fill_super+0x10/0x10 [ 42.494876][ T4058] get_tree_nodev+0x83/0x100 [ 42.494945][ T4058] proc_get_tree+0x1c/0x30 [ 42.495031][ T4058] vfs_get_tree+0x57/0x1d0 [ 42.495062][ T4058] do_new_mount+0x288/0x8d0 [ 42.495097][ T4058] ? security_capable+0x7b/0x90 [ 42.495120][ T4058] path_mount+0x4ad/0xb90 [ 42.495175][ T4058] __se_sys_mount+0x28c/0x2e0 [ 42.495272][ T4058] __x64_sys_mount+0x67/0x80 [ 42.495307][ T4058] x64_sys_call+0xc3b/0x2550 [ 42.495383][ T4058] do_syscall_64+0x112/0x360 [ 42.495415][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.495448][ T4058] RIP: 0033:0x7ff42553e159 [ 42.495467][ T4058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.495487][ T4058] RSP: 002b:00007ff423f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.495549][ T4058] RAX: ffffffffffffffda RBX: 00007ff4257c5fa0 RCX: 00007ff42553e159 [ 42.495562][ T4058] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000000000000000 [ 42.495576][ T4058] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 42.495619][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.495633][ T4058] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 42.495655][ T4058] [ 42.508059][ T4058] proc_fill_super: can't allocate /proc/self [ 42.814745][ T4085] loop3: detected capacity change from 0 to 256 [ 42.840962][ T4086] tipc: Started in network mode [ 42.841035][ T4086] tipc: Node identity aa3a, cluster identity 4711 [ 42.841048][ T4086] tipc: Node number set to 43578 [ 43.055082][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 43.316881][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 43.399189][ T4142] FAULT_INJECTION: forcing a failure. [ 43.399189][ T4142] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.399307][ T4142] CPU: 0 UID: 0 PID: 4142 Comm: syz.4.179 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.399384][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.399424][ T4142] Call Trace: [ 43.399432][ T4142] [ 43.399442][ T4142] __dump_stack+0x1d/0x30 [ 43.399480][ T4142] dump_stack_lvl+0x95/0xd0 [ 43.399504][ T4142] dump_stack+0x15/0x1b [ 43.399592][ T4142] should_fail_ex+0x262/0x280 [ 43.399616][ T4142] should_fail+0xb/0x20 [ 43.399637][ T4142] get_futex_key+0x12d/0xb10 [ 43.399669][ T4142] futex_wake+0x89/0x400 [ 43.399715][ T4142] do_futex+0x3f8/0x460 [ 43.399748][ T4142] __se_sys_futex+0x2f6/0x370 [ 43.399781][ T4142] ? xfd_validate_state+0x45/0xf0 [ 43.399843][ T4142] __x64_sys_futex+0x78/0x90 [ 43.399874][ T4142] x64_sys_call+0x22e2/0x2550 [ 43.399970][ T4142] do_syscall_64+0x112/0x360 [ 43.399999][ T4142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.400020][ T4142] RIP: 0033:0x7fca1ceee159 [ 43.400036][ T4142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.400113][ T4142] RSP: 002b:00007fca1b947028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.400135][ T4142] RAX: ffffffffffffffda RBX: 00007fca1d175fa0 RCX: 00007fca1ceee159 [ 43.400152][ T4142] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 43.400166][ T4142] RBP: 00007fca1cf85024 R08: 0000000000000000 R09: 0000000000000002 [ 43.400212][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.400226][ T4142] R13: 00007fca1d176038 R14: 00007fca1d175fa0 R15: 00007ffe60629748 [ 43.400248][ T4142] [ 43.577577][ T4153] capability: warning: `syz.5.182' uses 32-bit capabilities (legacy support in use) [ 43.577722][ T4153] Falling back ldisc for ptm0. [ 43.732504][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 43.732564][ T4164] loop4: detected capacity change from 0 to 128 [ 43.806813][ T4164] syz.4.185: attempt to access beyond end of device [ 43.806813][ T4164] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 43.977968][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 44.075073][ T4191] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 44.090089][ T4191] bond1: (slave lo): Enslaving as an active interface with an up link [ 44.110953][ T4191] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 44.446437][ T4184] netlink: 5 bytes leftover after parsing attributes in process `syz.3.188'. [ 44.446507][ T4184] 0{X功: renamed from gretap0 [ 44.467876][ T4184] 0{X功: entered allmulticast mode [ 44.467906][ T4184] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 44.477803][ T4232] loop5: detected capacity change from 0 to 128 [ 44.500632][ T4232] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.500914][ T4232] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.744502][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.858651][ T4257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.212'. [ 45.264573][ T4274] netlink: 5 bytes leftover after parsing attributes in process `syz.5.218'. [ 45.264610][ T4274] 0{X功: renamed from gretap0 [ 45.352252][ T4274] 0{X功: entered allmulticast mode [ 45.352289][ T4274] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 45.551232][ T4293] loop5: detected capacity change from 0 to 512 [ 45.579560][ T4293] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 45.579587][ T4293] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 45.579638][ T4293] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.579772][ T4293] EXT4-fs (loop5): orphan cleanup on readonly fs [ 45.579804][ T4293] __quota_error: 70 callbacks suppressed [ 45.579818][ T4293] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 45.579889][ T4293] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.579922][ T4293] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 45.648061][ T4293] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.225: bad orphan inode 16 [ 45.648097][ T4293] loop5: lost filesystem error report for type 5 error -117 [ 45.658280][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 45.658306][ C0] EXT4-fs (loop5): initial error at time 1788681211: ext4_orphan_get:1429 [ 45.658330][ C0] EXT4-fs (loop5): last error at time 1788681211: ext4_orphan_get:1429 [ 45.674595][ T4293] ext4_test_bit(bit=15, block=18) = 1 [ 45.674613][ T4293] is_bad_inode(inode)=0 [ 45.674621][ T4293] NEXT_ORPHAN(inode)=0 [ 45.674628][ T4293] max_ino=32 [ 45.674635][ T4293] i_nlink=2 [ 45.675086][ T4293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.770771][ T4293] SELinux: failed to load policy [ 45.816983][ T4307] netlink: 'syz.0.229': attribute type 7 has an invalid length. [ 45.817165][ T4307] netlink: 'syz.0.229': attribute type 7 has an invalid length. [ 45.834454][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.248734][ T4330] netlink: 5 bytes leftover after parsing attributes in process `syz.6.236'. [ 46.248781][ T4330] 0{X功: renamed from gretap0 [ 46.267222][ T4330] 0{X功: entered allmulticast mode [ 46.267249][ T4330] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 46.384882][ T4333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 46.488873][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.249'. [ 46.715043][ T29] audit: type=1400 audit(1788681212.504:394): avc: denied { write } for pid=4361 comm="syz.6.251" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.719372][ T29] audit: type=1400 audit(1788681212.504:395): avc: denied { read } for pid=4361 comm="syz.6.251" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.890799][ T29] audit: type=1400 audit(1788681212.674:396): avc: denied { create } for pid=4375 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.893298][ T4377] netlink: 'syz.0.255': attribute type 6 has an invalid length. [ 46.893329][ T29] audit: type=1400 audit(1788681212.674:397): avc: denied { write } for pid=4375 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.988762][ T29] audit: type=1400 audit(1788681212.774:398): avc: denied { write } for pid=4382 comm="syz.6.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.149772][ T29] audit: type=1400 audit(1788681212.934:399): avc: denied { write } for pid=4391 comm="syz.6.262" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.150695][ T29] audit: type=1400 audit(1788681212.934:400): avc: denied { bind } for pid=4389 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.160463][ T29] audit: type=1400 audit(1788681212.934:401): avc: denied { allowed } for pid=4391 comm="syz.6.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.200246][ T29] audit: type=1400 audit(1788681212.984:402): avc: denied { listen } for pid=4389 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.306686][ T4385] netlink: 5 bytes leftover after parsing attributes in process `syz.0.258'. [ 47.306727][ T4385] 0{X功: renamed from gretap0 [ 47.321914][ T4385] 0{X功: entered allmulticast mode [ 47.321943][ T4385] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 47.409120][ T4408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.266'. [ 47.514043][ T4415] bridge_slave_0: left allmulticast mode [ 47.514078][ T4415] bridge_slave_0: left promiscuous mode [ 47.514261][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.527672][ T4415] bridge_slave_1: left allmulticast mode [ 47.527816][ T4415] bridge_slave_1: left promiscuous mode [ 47.527895][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.539331][ T4420] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 47.545386][ T4415] bond0: (slave bond_slave_0): Releasing backup interface [ 47.560852][ T4415] bond0: (slave bond_slave_1): Releasing backup interface [ 47.580352][ T4415] team0: Port device team_slave_0 removed [ 47.597520][ T4415] team0: Port device team_slave_1 removed [ 47.598547][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.598561][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.620918][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.620959][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.625199][ T4415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.666808][ T4420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 48.273332][ T4461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.479802][ T4467] netlink: 5 bytes leftover after parsing attributes in process `syz.4.279'. [ 48.479860][ T4467] 0{X功: renamed from gretap0 [ 48.496408][ T4467] 0{X功: entered allmulticast mode [ 48.496436][ T4467] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 49.060546][ T4491] loop4: detected capacity change from 0 to 2048 [ 49.085025][ T4491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.188912][ T4500] serio: Serial port ptm0 [ 49.247428][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.277361][ T4505] loop4: detected capacity change from 0 to 512 [ 49.290121][ T4505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.293908][ T4505] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 49.294860][ T4505] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 49.295539][ T4505] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.293: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.295647][ T4505] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 49.296147][ T4505] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.293: couldn't read orphan inode 13 (err -117) [ 49.296197][ T4505] loop4: lost filesystem error report for type 5 error -117 [ 49.302424][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.379759][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.549014][ T4508] netlink: 5 bytes leftover after parsing attributes in process `syz.4.294'. [ 49.549060][ T4508] 0{X功: renamed from gretap0 [ 49.566855][ T4516] netlink: 'syz.5.297': attribute type 1 has an invalid length. [ 49.567489][ T4508] 0{X功: entered allmulticast mode [ 49.567507][ T4508] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 49.609875][ T4516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.766966][ T4529] FAULT_INJECTION: forcing a failure. [ 49.766966][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 49.767008][ T4529] CPU: 0 UID: 0 PID: 4529 Comm: syz.4.301 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.767102][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.767130][ T4529] Call Trace: [ 49.767138][ T4529] [ 49.767147][ T4529] __dump_stack+0x1d/0x30 [ 49.767251][ T4529] dump_stack_lvl+0x95/0xd0 [ 49.767276][ T4529] dump_stack+0x15/0x1b [ 49.767324][ T4529] should_fail_ex+0x262/0x280 [ 49.767348][ T4529] ? __kernfs_new_node+0x70/0x440 [ 49.767530][ T4529] should_failslab+0x8c/0xb0 [ 49.767565][ T4529] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 49.767639][ T4529] ? __kernfs_new_node+0x70/0x440 [ 49.767659][ T4529] __kernfs_new_node+0x70/0x440 [ 49.767692][ T4529] ? rb_insert_color+0x6e/0x2a0 [ 49.767708][ T4529] ? __rcu_read_unlock+0x4e/0x70 [ 49.767726][ T4529] ? __rcu_read_unlock+0x4e/0x70 [ 49.767820][ T4529] ? kernfs_activate_one+0x10c/0x140 [ 49.767832][ T4529] ? __rcu_read_unlock+0x4e/0x70 [ 49.767948][ T4529] ? up_write+0x19/0x60 [ 49.767989][ T4529] kernfs_new_node+0xcf/0xf0 [ 49.768009][ T4529] __kernfs_create_file+0x4b/0x180 [ 49.768024][ T4529] ? __pfx_drv_attr_show+0x10/0x10 [ 49.768037][ T4529] ? __pfx_drv_attr_store+0x10/0x10 [ 49.768085][ T4529] sysfs_add_file_mode_ns+0x132/0x1b0 [ 49.768102][ T4529] sysfs_create_file_ns+0xd9/0x120 [ 49.768119][ T4529] driver_create_file+0x39/0x50 [ 49.768153][ T4529] bus_add_driver+0x347/0x450 [ 49.768173][ T4529] driver_register+0x162/0x220 [ 49.768189][ T4529] usb_gadget_register_driver_owner+0x92/0x1a0 [ 49.768247][ T4529] raw_ioctl+0xc5b/0x1df0 [ 49.768266][ T4529] ? ioctl_has_perm+0x273/0x2c0 [ 49.768334][ T4529] ? do_vfs_ioctl+0x848/0xe50 [ 49.768353][ T4529] ? selinux_file_ioctl+0x33c/0x3c0 [ 49.768376][ T4529] ? __fget_files+0x184/0x1c0 [ 49.768401][ T4529] ? __pfx_raw_ioctl+0x10/0x10 [ 49.768415][ T4529] __se_sys_ioctl+0xce/0x140 [ 49.768433][ T4529] __x64_sys_ioctl+0x43/0x50 [ 49.768554][ T4529] x64_sys_call+0x239d/0x2550 [ 49.768571][ T4529] do_syscall_64+0x112/0x360 [ 49.768589][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.768604][ T4529] RIP: 0033:0x7fca1ceeddeb [ 49.768725][ T4529] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 49.768737][ T4529] RSP: 002b:00007fca1b944f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.768752][ T4529] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fca1ceeddeb [ 49.768765][ T4529] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 49.768843][ T4529] RBP: 00007fca1b945fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 49.768852][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.768865][ T4529] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 49.768876][ T4529] [ 49.772563][ T4529] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 49.772627][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.772785][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.883159][ T4531] loop5: detected capacity change from 0 to 2048 [ 49.904227][ T4531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.932003][ T4531] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 49.932097][ T4531] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 49.932182][ T4531] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.932182][ T4531] [ 49.932244][ T4531] EXT4-fs (loop5): Total free blocks count 0 [ 49.932259][ T4531] EXT4-fs (loop5): Free/Dirty block details [ 49.932272][ T4531] EXT4-fs (loop5): free_blocks=4096 [ 49.932325][ T4531] EXT4-fs (loop5): dirty_blocks=64 [ 49.932344][ T4531] EXT4-fs (loop5): Block reservation details [ 49.932356][ T4531] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 49.938043][ T4530] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 4 with error 28 [ 50.081315][ T4540] loop3: detected capacity change from 0 to 512 [ 50.085362][ T4540] EXT4-fs: inline encryption not supported [ 50.085385][ T4540] EXT4-fs: inline encryption not supported [ 50.085412][ T4540] EXT4-fs: Ignoring removed oldalloc option [ 50.096252][ T4540] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84cc018, mo2=0002] [ 50.096290][ T4540] System zones: 0-5 [ 50.096735][ T4540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.097267][ T4540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.219568][ T4395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.385705][ T4568] gre2: entered promiscuous mode [ 50.385744][ T4568] gre2: entered allmulticast mode [ 50.389126][ T4567] netlink: 'syz.4.313': attribute type 14 has an invalid length. [ 50.389147][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 50.418984][ T4567] netlink: 'syz.4.313': attribute type 14 has an invalid length. [ 50.419011][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 50.432755][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.432841][ T51] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.432894][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.432937][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.441448][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 50.537592][ T4582] netlink: 'syz.4.319': attribute type 4 has an invalid length. [ 50.549227][ T4582] netlink: 'syz.4.319': attribute type 4 has an invalid length. [ 50.605474][ T4588] tls_set_device_offload_rx: netdev not found [ 50.660159][ T4593] loop3: detected capacity change from 0 to 164 [ 50.671148][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 50.671164][ T29] audit: type=1400 audit(1788681216.454:459): avc: denied { mount } for pid=4592 comm="syz.3.324" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.682400][ T29] audit: type=1400 audit(1788681216.464:460): avc: denied { watch } for pid=4592 comm="syz.3.324" path="/53/file1" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 50.697197][ T4555] netlink: 5 bytes leftover after parsing attributes in process `syz.6.310'. [ 50.697235][ T4555] 0{X功: renamed from gretap0 [ 50.705155][ T4555] 0{X功: entered allmulticast mode [ 50.705177][ T4555] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 50.735135][ T29] audit: type=1400 audit(1788681216.524:461): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.808225][ T4595] tipc: Started in network mode [ 50.808264][ T4595] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 50.808320][ T4595] tipc: Enabled bearer , priority 0 [ 50.811758][ T4595] tipc: Resetting bearer [ 50.823017][ T4595] tipc: Disabling bearer [ 50.860219][ T29] audit: type=1400 audit(1788681216.644:462): avc: denied { read write } for pid=4597 comm="syz.0.326" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 50.860268][ T29] audit: type=1400 audit(1788681216.644:463): avc: denied { open } for pid=4597 comm="syz.0.326" path="/73/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 51.131020][ T29] audit: type=1400 audit(1788681216.914:464): avc: denied { ioctl } for pid=4606 comm="syz.5.329" path="socket:[9097]" dev="sockfs" ino=9097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.197470][ T4609] loop5: detected capacity change from 0 to 4096 [ 51.200296][ T4609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.219338][ T29] audit: type=1400 audit(1788681217.004:465): avc: denied { write } for pid=4608 comm="syz.5.330" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.568893][ T29] audit: type=1400 audit(1788681217.354:466): avc: denied { mounton } for pid=4615 comm="syz.3.332" path="/proc/131/task" dev="proc" ino=9115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.707443][ T29] audit: type=1400 audit(1788681217.494:467): avc: denied { create } for pid=4628 comm="syz.6.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.707928][ T29] audit: type=1400 audit(1788681217.494:468): avc: denied { setopt } for pid=4628 comm="syz.6.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.763516][ T4633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.777563][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.940628][ T4631] netlink: 5 bytes leftover after parsing attributes in process `syz.6.338'. [ 51.940711][ T4631] 0{X功: renamed from gretap0 [ 51.958645][ T4631] 0{X功: entered allmulticast mode [ 51.958674][ T4631] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 52.116055][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.156038][ T4668] loop4: detected capacity change from 0 to 512 [ 52.178711][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.5.350'. [ 52.178760][ T4669] netlink: 'syz.5.350': attribute type 3 has an invalid length. [ 52.205068][ T4673] netlink: 'syz.3.352': attribute type 20 has an invalid length. [ 52.205167][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 52.215770][ T4673] netlink: 'syz.3.352': attribute type 20 has an invalid length. [ 52.222617][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.222738][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.222818][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.222863][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.318056][ T4681] netlink: 'syz.6.357': attribute type 2 has an invalid length. [ 52.379744][ T4693] syz.4.359 uses obsolete (PF_INET,SOCK_PACKET) [ 52.456398][ T3379] kernel write not supported for file /input/event0 (pid: 3379 comm: kworker/1:5) [ 52.470371][ T4697] FAULT_INJECTION: forcing a failure. [ 52.470371][ T4697] name failslab, interval 1, probability 0, space 0, times 0 [ 52.470470][ T4697] CPU: 1 UID: 0 PID: 4697 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.470499][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.470513][ T4697] Call Trace: [ 52.470591][ T4697] [ 52.470600][ T4697] __dump_stack+0x1d/0x30 [ 52.470625][ T4697] dump_stack_lvl+0x95/0xd0 [ 52.470647][ T4697] dump_stack+0x15/0x1b [ 52.470747][ T4697] should_fail_ex+0x262/0x280 [ 52.470769][ T4697] ? security_inode_alloc+0x37/0x100 [ 52.470794][ T4697] should_failslab+0x8c/0xb0 [ 52.470821][ T4697] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 52.470900][ T4697] ? security_inode_alloc+0x37/0x100 [ 52.470968][ T4697] security_inode_alloc+0x37/0x100 [ 52.470993][ T4697] inode_init_always_gfp+0x495/0x4e0 [ 52.471111][ T4697] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 52.471142][ T4697] alloc_inode+0x58/0x170 [ 52.471177][ T4697] new_inode+0x1d/0xe0 [ 52.471256][ T4697] __debugfs_create_file+0x97/0x2b0 [ 52.471281][ T4697] debugfs_create_file_full+0x3f/0x60 [ 52.471338][ T4697] ? __pfx_br_dev_setup+0x10/0x10 [ 52.471359][ T4697] ref_tracker_dir_debugfs+0x10e/0x220 [ 52.471397][ T4697] alloc_netdev_mqs+0x1a9/0xa90 [ 52.471433][ T4697] br_add_bridge+0x35/0xc0 [ 52.471463][ T4697] br_ioctl_stub+0x3e3/0x8f0 [ 52.471561][ T4697] ? __pfx_br_ioctl_stub+0x10/0x10 [ 52.471597][ T4697] ? sock_ioctl+0x389/0x610 [ 52.471621][ T4697] ? __pfx_br_ioctl_stub+0x10/0x10 [ 52.471654][ T4697] sock_ioctl+0x39a/0x610 [ 52.471728][ T4697] ? __pfx_sock_ioctl+0x10/0x10 [ 52.471758][ T4697] __se_sys_ioctl+0xce/0x140 [ 52.471789][ T4697] __x64_sys_ioctl+0x43/0x50 [ 52.471898][ T4697] x64_sys_call+0x239d/0x2550 [ 52.471961][ T4697] do_syscall_64+0x112/0x360 [ 52.471995][ T4697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.472067][ T4697] RIP: 0033:0x7f998ec2e159 [ 52.472100][ T4697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.472121][ T4697] RSP: 002b:00007f998d687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.472149][ T4697] RAX: ffffffffffffffda RBX: 00007f998eeb5fa0 RCX: 00007f998ec2e159 [ 52.472166][ T4697] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 52.472181][ T4697] RBP: 00007f998ecc5024 R08: 0000000000000000 R09: 0000000000000000 [ 52.472197][ T4697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.472212][ T4697] R13: 00007f998eeb6038 R14: 00007f998eeb5fa0 R15: 00007fff16fdd7d8 [ 52.472233][ T4697] [ 52.479885][ T4697] debugfs: out of free dentries, can not create file 'netdev@ffff88811b7485e0' [ 52.880742][ T4710] loop5: detected capacity change from 0 to 256 [ 52.892334][ T4710] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.020074][ T4714] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 53.020132][ T4714] FAT-fs (loop5): Filesystem has been set read-only [ 53.020232][ T4714] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 53.146982][ T4689] 0{X功: renamed from gretap0 [ 53.158455][ T4689] 0{X功: entered allmulticast mode [ 53.158522][ T4689] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 53.277661][ T4733] FAULT_INJECTION: forcing a failure. [ 53.277661][ T4733] name failslab, interval 1, probability 0, space 0, times 0 [ 53.277715][ T4733] CPU: 1 UID: 0 PID: 4733 Comm: syz.6.375 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.277743][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.277757][ T4733] Call Trace: [ 53.277771][ T4733] [ 53.277780][ T4733] __dump_stack+0x1d/0x30 [ 53.277805][ T4733] dump_stack_lvl+0x95/0xd0 [ 53.277895][ T4733] dump_stack+0x15/0x1b [ 53.277919][ T4733] should_fail_ex+0x262/0x280 [ 53.277943][ T4733] ? do_getname+0x2e/0x1c0 [ 53.277981][ T4733] should_failslab+0x8c/0xb0 [ 53.278012][ T4733] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 53.278043][ T4733] ? do_getname+0x2e/0x1c0 [ 53.278112][ T4733] do_getname+0x2e/0x1c0 [ 53.278162][ T4733] __se_sys_linkat+0x3e/0x1d0 [ 53.278211][ T4733] __x64_sys_linkat+0x67/0x80 [ 53.278248][ T4733] x64_sys_call+0x21e5/0x2550 [ 53.278277][ T4733] do_syscall_64+0x112/0x360 [ 53.278336][ T4733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.278362][ T4733] RIP: 0033:0x7fd41b1de159 [ 53.278436][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.278457][ T4733] RSP: 002b:00007fd419c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 53.278582][ T4733] RAX: ffffffffffffffda RBX: 00007fd41b465fa0 RCX: 00007fd41b1de159 [ 53.278599][ T4733] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 53.278616][ T4733] RBP: 00007fd41b275024 R08: 0000000000000400 R09: 0000000000000000 [ 53.278632][ T4733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.278646][ T4733] R13: 00007fd41b466038 R14: 00007fd41b465fa0 R15: 00007ffe12de6d18 [ 53.278667][ T4733] [ 53.638930][ T4754] loop6: detected capacity change from 0 to 4096 [ 53.655119][ T4754] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 53.655155][ T4754] EXT4-fs (loop6): mount failed [ 53.911656][ T4765] 0{X功: renamed from gretap0 [ 53.940743][ T4765] 0{X功: entered allmulticast mode [ 53.940773][ T4765] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 53.970191][ T4778] loop5: detected capacity change from 0 to 256 [ 54.397219][ T4820] loop5: detected capacity change from 0 to 128 [ 54.409559][ T4820] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.409815][ T4820] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.460753][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.545317][ T4837] bridge1: entered promiscuous mode [ 54.545394][ T4837] bridge1: entered allmulticast mode [ 54.832809][ T4892] FAULT_INJECTION: forcing a failure. [ 54.832809][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 54.832870][ T4892] CPU: 1 UID: 0 PID: 4892 Comm: syz.5.435 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.832898][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.832910][ T4892] Call Trace: [ 54.832917][ T4892] [ 54.832923][ T4892] __dump_stack+0x1d/0x30 [ 54.833027][ T4892] dump_stack_lvl+0x95/0xd0 [ 54.833053][ T4892] dump_stack+0x15/0x1b [ 54.833079][ T4892] should_fail_ex+0x262/0x280 [ 54.833100][ T4892] ? sk_prot_alloc+0xa8/0x180 [ 54.833170][ T4892] should_failslab+0x8c/0xb0 [ 54.833202][ T4892] __kmalloc_noprof+0xd0/0x4d0 [ 54.833237][ T4892] ? sk_prot_alloc+0xa8/0x180 [ 54.833271][ T4892] sk_prot_alloc+0xa8/0x180 [ 54.833304][ T4892] sk_alloc+0x34/0x3e0 [ 54.833352][ T4892] pppoe_create+0x32/0x180 [ 54.833438][ T4892] pppox_create+0xd3/0x120 [ 54.833459][ T4892] __sock_create+0x2e5/0x580 [ 54.833487][ T4892] __sys_socket+0xaf/0x180 [ 54.833591][ T4892] __x64_sys_socket+0x3f/0x50 [ 54.833619][ T4892] x64_sys_call+0x246e/0x2550 [ 54.833690][ T4892] do_syscall_64+0x112/0x360 [ 54.833724][ T4892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.833790][ T4892] RIP: 0033:0x7ff42553e159 [ 54.833808][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.833835][ T4892] RSP: 002b:00007ff423f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 54.833864][ T4892] RAX: ffffffffffffffda RBX: 00007ff4257c5fa0 RCX: 00007ff42553e159 [ 54.833934][ T4892] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 54.833982][ T4892] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 54.833998][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.834013][ T4892] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 54.834034][ T4892] [ 54.962930][ T4902] loop5: detected capacity change from 0 to 128 [ 54.987293][ T4902] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.987455][ T4902] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.988244][ T4902] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 55.017874][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.117718][ T4914] FAULT_INJECTION: forcing a failure. [ 55.117718][ T4914] name failslab, interval 1, probability 0, space 0, times 0 [ 55.117764][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.5.441 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.117790][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.117803][ T4914] Call Trace: [ 55.117811][ T4914] [ 55.117820][ T4914] __dump_stack+0x1d/0x30 [ 55.117890][ T4914] dump_stack_lvl+0x95/0xd0 [ 55.117914][ T4914] dump_stack+0x15/0x1b [ 55.117980][ T4914] should_fail_ex+0x262/0x280 [ 55.118006][ T4914] should_failslab+0x8c/0xb0 [ 55.118037][ T4914] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 55.118070][ T4914] ? ktime_get_coarse_real_ts64_mg+0x17c/0x1a0 [ 55.118137][ T4914] ? __d_alloc+0x34/0x320 [ 55.118162][ T4914] ? __d_alloc+0x34/0x320 [ 55.118189][ T4914] __d_alloc+0x34/0x320 [ 55.118214][ T4914] ? d_alloc_anon+0xd/0x20 [ 55.118273][ T4914] d_alloc_anon+0x17/0x20 [ 55.118299][ T4914] path_from_stashed+0x1cf/0x330 [ 55.118390][ T4914] ? __pfx_proc_ns_get_link+0x10/0x10 [ 55.118427][ T4914] ns_get_path+0x62/0x80 [ 55.118483][ T4914] proc_ns_get_link+0xdd/0x1c0 [ 55.118549][ T4914] pick_link+0x4b1/0x8e0 [ 55.118575][ T4914] step_into_slowpath+0x36a/0x4c0 [ 55.118712][ T4914] path_openat+0x665/0x10d0 [ 55.118750][ T4914] do_file_open+0x16c/0x290 [ 55.118847][ T4914] do_sys_openat2+0xa0/0x130 [ 55.118873][ T4914] __x64_sys_openat+0xf2/0x120 [ 55.118932][ T4914] x64_sys_call+0x1f72/0x2550 [ 55.118962][ T4914] do_syscall_64+0x112/0x360 [ 55.118996][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.119021][ T4914] RIP: 0033:0x7ff4254fe98e [ 55.119078][ T4914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.119099][ T4914] RSP: 002b:00007ff423f96ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.119198][ T4914] RAX: ffffffffffffffda RBX: 00007ff423f976c0 RCX: 00007ff4254fe98e [ 55.119214][ T4914] RDX: 0000000000000000 RSI: 00007ff423f96f90 RDI: ffffffffffffff9c [ 55.119230][ T4914] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 55.119249][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.119321][ T4914] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 55.119343][ T4914] [ 55.734671][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 55.734696][ T29] audit: type=1400 audit(1788681221.524:510): avc: denied { read } for pid=4974 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.100647][ T29] audit: type=1400 audit(1788681221.884:511): avc: denied { write } for pid=4982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.137598][ T29] audit: type=1400 audit(1788681221.924:512): avc: denied { write } for pid=4993 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.219806][ T29] audit: type=1400 audit(1788681222.004:513): avc: denied { write } for pid=4996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.244734][ T29] audit: type=1400 audit(1788681222.034:514): avc: denied { write } for pid=5007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.435562][ T29] audit: type=1400 audit(1788681222.224:515): avc: denied { bind } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.467742][ T29] audit: type=1400 audit(1788681222.254:516): avc: denied { append } for pid=5021 comm="syz.4.461" name="sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.052029][ T5049] mmap: syz.5.472 (5049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.093222][ T5051] loop5: detected capacity change from 0 to 4096 [ 57.102343][ T5051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.113709][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.473: corrupted inode contents [ 57.113967][ T5051] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #15: comm syz.5.473: mark_inode_dirty error [ 57.114160][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.473: corrupted inode contents [ 57.114340][ T5051] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.473: mark_inode_dirty error [ 57.114476][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.473: corrupted inode contents [ 57.114592][ T5051] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.473: mark_inode_dirty error [ 57.114793][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.473: corrupted inode contents [ 57.114928][ T5051] EXT4-fs error (device loop5): ext4_truncate:4721: inode #15: comm syz.5.473: mark_inode_dirty error [ 57.115121][ T5051] EXT4-fs error (device loop5) in ext4_setattr:6247: Corrupt filesystem [ 57.115872][ T29] audit: type=1400 audit(1788681222.904:517): avc: denied { write } for pid=5050 comm="syz.5.473" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.143948][ T29] audit: type=1400 audit(1788681222.934:518): avc: denied { write } for pid=5050 comm="syz.5.473" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.143979][ T29] audit: type=1400 audit(1788681222.934:519): avc: denied { write } for pid=5050 comm="syz.5.473" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.163930][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.473: corrupted inode contents [ 57.306188][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.430905][ T5065] pim6reg1: entered promiscuous mode [ 57.430940][ T5065] pim6reg1: entered allmulticast mode [ 57.440251][ T5074] FAULT_INJECTION: forcing a failure. [ 57.440251][ T5074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.440341][ T5074] CPU: 1 UID: 0 PID: 5074 Comm: syz.6.478 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.440370][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.440383][ T5074] Call Trace: [ 57.440391][ T5074] [ 57.440400][ T5074] __dump_stack+0x1d/0x30 [ 57.440493][ T5074] dump_stack_lvl+0x95/0xd0 [ 57.440518][ T5074] dump_stack+0x15/0x1b [ 57.440541][ T5074] should_fail_ex+0x262/0x280 [ 57.440567][ T5074] should_fail+0xb/0x20 [ 57.440586][ T5074] should_fail_usercopy+0x1a/0x20 [ 57.440670][ T5074] _copy_from_user+0x1c/0xb0 [ 57.440698][ T5074] get_timespec64+0x4c/0x100 [ 57.440735][ T5074] __x64_sys_utimensat+0xd7/0x190 [ 57.440794][ T5074] x64_sys_call+0x20d2/0x2550 [ 57.440822][ T5074] do_syscall_64+0x112/0x360 [ 57.440906][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.440932][ T5074] RIP: 0033:0x7fd41b1de159 [ 57.441103][ T5074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.441124][ T5074] RSP: 002b:00007fd419c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 57.441147][ T5074] RAX: ffffffffffffffda RBX: 00007fd41b465fa0 RCX: 00007fd41b1de159 [ 57.441169][ T5074] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.441184][ T5074] RBP: 00007fd41b275024 R08: 0000000000000000 R09: 0000000000000000 [ 57.441199][ T5074] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 57.441256][ T5074] R13: 00007fd41b466038 R14: 00007fd41b465fa0 R15: 00007ffe12de6d18 [ 57.441277][ T5074] [ 57.455087][ T5073] loop4: detected capacity change from 0 to 1024 [ 57.457638][ T5073] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 57.461944][ T5073] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.479: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.462007][ T5073] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.462091][ T5073] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.479: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.462125][ T5073] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.462186][ T5073] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.479: Failed to acquire dquot type 0 [ 57.462210][ T5073] loop4: lost filesystem error report for type 5 error -117 [ 57.462276][ T5073] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 57.462296][ T5073] loop4: lost filesystem error report for type 5 error -117 [ 57.462416][ T5073] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.479: mark_inode_dirty error [ 57.462470][ C1] EXT4-fs (loop4): error count since last fsck: 4 [ 57.462486][ C1] EXT4-fs (loop4): initial error at time 1788681223: ext4_map_blocks:790: inode 3: block 2 [ 57.462530][ C1] EXT4-fs (loop4): last error at time 1788681223: ext4_reserve_inode_write:6517 [ 57.462599][ T5073] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.462905][ T5073] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 57.462975][ T5073] EXT4-fs (loop4): 1 orphan inode deleted [ 57.463396][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.590973][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.598867][ T42] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.598904][ T42] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.599118][ T42] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 57.599144][ T42] loop4: lost filesystem error report for type 5 error -117 [ 57.599515][ T3297] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.599541][ T3297] loop4: lost filesystem error report for type 5 error -117 [ 57.599597][ T3297] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 57.599663][ T3297] loop4: lost filesystem error report for type 5 error -117 [ 57.599761][ T3297] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 57.599785][ T3297] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.599918][ T3297] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.599943][ T3297] loop4: lost filesystem error report for type 5 error -117 [ 57.802730][ T4881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.249437][ T5128] Invalid argument reading file caps for ./file0 [ 58.379167][ T5148] sd 0:0:1:0: PR command failed: 1026 [ 58.379203][ T5148] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 58.379228][ T5148] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 58.400878][ T5153] loop6: detected capacity change from 0 to 128 [ 58.555655][ T5155] loop5: detected capacity change from 0 to 32768 [ 58.606869][ T5155] loop5: p1 p3 < > [ 58.855928][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 58.856579][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 58.926743][ T5180] loop4: detected capacity change from 0 to 764 [ 58.950822][ T5180] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 59.062164][ T5216] __nla_validate_parse: 3 callbacks suppressed [ 59.062193][ T5216] netlink: 14 bytes leftover after parsing attributes in process `syz.4.537'. [ 59.113213][ T5221] loop3: detected capacity change from 0 to 512 [ 59.122810][ T5221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.122833][ T5221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.125617][ T5221] EXT4-fs (loop3): 1 truncate cleaned up [ 59.126171][ T5221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.214563][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.238388][ T5228] loop6: detected capacity change from 0 to 2048 [ 59.264469][ T5228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.264536][ T5228] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.305462][ T3689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.528225][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.581880][ T5250] FAULT_INJECTION: forcing a failure. [ 59.581880][ T5250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.581995][ T5250] CPU: 0 UID: 0 PID: 5250 Comm: syz.4.552 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.582027][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.582044][ T5250] Call Trace: [ 59.582125][ T5250] [ 59.582135][ T5250] __dump_stack+0x1d/0x30 [ 59.582166][ T5250] dump_stack_lvl+0x95/0xd0 [ 59.582194][ T5250] dump_stack+0x15/0x1b [ 59.582220][ T5250] should_fail_ex+0x262/0x280 [ 59.582247][ T5250] should_fail+0xb/0x20 [ 59.582307][ T5250] should_fail_usercopy+0x1a/0x20 [ 59.582334][ T5250] _copy_to_user+0x20/0xa0 [ 59.582434][ T5250] bpf_verifier_vlog+0x3c5/0x5a0 [ 59.582477][ T5250] __btf_verifier_log+0x7f/0xb0 [ 59.582508][ T5250] btf_verifier_log_vsi+0x13a/0x1f0 [ 59.582614][ T5250] btf_datasec_check_meta+0x5a8/0x640 [ 59.582668][ T5250] btf_parse_type_sec+0x291/0x1520 [ 59.582705][ T5250] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 59.582788][ T5250] ? btf_parse_hdr+0x43a/0x440 [ 59.582821][ T5250] ? btf_parse_str_sec+0x1ae/0x1b0 [ 59.582856][ T5250] btf_new_fd+0x2ec/0x670 [ 59.582970][ T5250] bpf_btf_load+0x116/0x130 [ 59.583000][ T5250] __sys_bpf+0xbce/0xc30 [ 59.583027][ T5250] ? do_futex+0x350/0x460 [ 59.583113][ T5250] __x64_sys_bpf+0x69/0x80 [ 59.583136][ T5250] x64_sys_call+0xf26/0x2550 [ 59.583165][ T5250] do_syscall_64+0x112/0x360 [ 59.583199][ T5250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.583281][ T5250] RIP: 0033:0x7fca1ceee159 [ 59.583300][ T5250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.583320][ T5250] RSP: 002b:00007fca1b947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.583342][ T5250] RAX: ffffffffffffffda RBX: 00007fca1d175fa0 RCX: 00007fca1ceee159 [ 59.583397][ T5250] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 59.583410][ T5250] RBP: 00007fca1cf85024 R08: 0000000000000000 R09: 0000000000000000 [ 59.583423][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.583435][ T5250] R13: 00007fca1d176038 R14: 00007fca1d175fa0 R15: 00007ffe60629748 [ 59.583455][ T5250] [ 59.648324][ T5252] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 59.660842][ T5252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.896911][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.985756][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.083144][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.099634][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.099704][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.118460][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.118486][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.250197][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.250238][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.250373][ T5253] bridge_slave_0: entered allmulticast mode [ 60.251126][ T5253] bridge_slave_0: entered promiscuous mode [ 60.252056][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.252086][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.252148][ T5253] bridge_slave_1: entered allmulticast mode [ 60.253018][ T5253] bridge_slave_1: entered promiscuous mode [ 60.264913][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.266080][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.276885][ T5253] team0: Port device team_slave_0 added [ 60.278399][ T5253] team0: Port device team_slave_1 added [ 60.289074][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.289088][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.289178][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.289769][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.289782][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.289812][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.307232][ T5253] hsr_slave_0: entered promiscuous mode [ 60.307730][ T5253] hsr_slave_1: entered promiscuous mode [ 60.546955][ T12] bridge_slave_1: left allmulticast mode [ 60.547010][ T12] bridge_slave_1: left promiscuous mode [ 60.547212][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.573421][ T5337] loop5: detected capacity change from 0 to 1024 [ 60.597439][ T12] bridge_slave_0: left allmulticast mode [ 60.597466][ T12] bridge_slave_0: left promiscuous mode [ 60.597637][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.619183][ T5337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.619333][ T5337] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.653441][ T5337] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.581: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.667862][ T5337] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.667892][ T5337] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.667892][ T5337] [ 60.706198][ T5337] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm syz.5.581: lblock 8 mapped to illegal pblock 8 (length 8) [ 60.706471][ T5337] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 60.706498][ T5337] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.706498][ T5337] [ 60.742748][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 60.742771][ T29] audit: type=1400 audit(1788681226.494:552): avc: denied { setattr } for pid=5336 comm="syz.5.581" path="/120/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.772114][ T29] audit: type=1400 audit(1788681226.534:553): avc: denied { watch_reads } for pid=5359 comm="syz.4.586" path="/137/control" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.799024][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.815375][ T29] audit: type=1400 audit(1788681226.604:554): avc: denied { write } for pid=5356 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.853988][ T5367] loop5: detected capacity change from 0 to 512 [ 60.889099][ T5367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.889173][ T5367] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.901943][ T29] audit: type=1400 audit(1788681226.674:555): avc: denied { write } for pid=5365 comm="syz.5.587" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.934283][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.944209][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.954885][ T12] bond0 (unregistering): Released all slaves [ 60.963378][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.992899][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 61.015105][ T12] hsr_slave_0: left promiscuous mode [ 61.020743][ T12] hsr_slave_1: left promiscuous mode [ 61.021506][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.021612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.026410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.026426][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.056335][ T12] veth1_macvtap: left promiscuous mode [ 61.056376][ T12] veth0_macvtap: left promiscuous mode [ 61.056446][ T12] veth1_vlan: left promiscuous mode [ 61.056480][ T12] veth0_vlan: left promiscuous mode [ 61.116275][ T29] audit: type=1326 audit(1788681226.904:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.5.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7fc00000 [ 61.173519][ T12] team0 (unregistering): Port device team_slave_1 removed [ 61.183501][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.360461][ T29] audit: type=1400 audit(1788681227.144:557): avc: denied { write } for pid=5401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.397788][ T5415] loop3: detected capacity change from 0 to 128 [ 61.398087][ T5415] EXT4-fs: Ignoring removed bh option [ 61.406967][ T5415] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.411908][ T5415] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.442300][ T29] audit: type=1400 audit(1788681227.224:558): avc: denied { write } for pid=5418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.447806][ T5419] bridge1: entered promiscuous mode [ 61.447826][ T5419] bridge1: entered allmulticast mode [ 61.483347][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.520408][ T29] audit: type=1400 audit(1788681227.304:559): avc: denied { append } for pid=5424 comm="syz.3.601" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.592476][ T29] audit: type=1400 audit(1788681227.374:560): avc: denied { create } for pid=5427 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.674734][ T5438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.685742][ T5438] EXT4-fs (loop4): 1 truncate cleaned up [ 61.693223][ T5438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.702270][ T5438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 61.702353][ T5438] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.736616][ T29] audit: type=1400 audit(1788681227.484:561): avc: denied { write } for pid=5437 comm="syz.4.605" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.737973][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.773063][ T5253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 61.788189][ T5253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.791544][ T5253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 61.798424][ T5253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.799244][ T5253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 61.816650][ T5253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.817357][ T5253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 61.838170][ T5253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.909779][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.923399][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.936064][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.936108][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.958970][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.959011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.192871][ T5503] set_capacity_and_notify: 2 callbacks suppressed [ 62.192958][ T5503] loop5: detected capacity change from 0 to 128 [ 62.212200][ T5506] xt_hashlimit: size too large, truncated to 1048576 [ 62.229652][ T5503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 62.251308][ T5503] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.314812][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.340914][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.361269][ T5525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 62.375891][ T5525] team1: entered promiscuous mode [ 62.375917][ T5525] team1: entered allmulticast mode [ 62.376104][ T5525] 8021q: adding VLAN 0 to HW filter on device team1 [ 62.462106][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 62.462142][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 62.499659][ T5544] loop2: detected capacity change from 0 to 16384 [ 62.703294][ T5253] veth0_vlan: entered promiscuous mode [ 62.705802][ T5253] veth1_vlan: entered promiscuous mode [ 62.725757][ T5253] veth0_macvtap: entered promiscuous mode [ 62.729049][ T5253] veth1_macvtap: entered promiscuous mode [ 62.739230][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.745776][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.763826][ T3425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.763982][ T3425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.764161][ T3425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.764351][ T3425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.764637][ T5550] loop2: detected capacity change from 16384 to 0 [ 62.876914][ T5582] loop5: detected capacity change from 0 to 512 [ 62.884618][ T5582] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 62.894667][ T5582] EXT4-fs (loop5): invalid journal inode [ 62.894758][ T5582] EXT4-fs (loop5): can't get journal size [ 62.905433][ T5582] EXT4-fs (loop5): 1 truncate cleaned up [ 62.905886][ T5582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.986787][ T3673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.024035][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.650'. [ 63.134731][ T5602] 9pnet: p9_errstr2errno: server reported unknown error tun [ 63.469990][ T5631] FAULT_INJECTION: forcing a failure. [ 63.469990][ T5631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.470100][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: syz.3.663 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.470129][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.470142][ T5631] Call Trace: [ 63.470169][ T5631] [ 63.470179][ T5631] __dump_stack+0x1d/0x30 [ 63.470207][ T5631] dump_stack_lvl+0x95/0xd0 [ 63.470231][ T5631] dump_stack+0x15/0x1b [ 63.470303][ T5631] should_fail_ex+0x262/0x280 [ 63.470356][ T5631] should_fail+0xb/0x20 [ 63.470380][ T5631] should_fail_usercopy+0x1a/0x20 [ 63.470409][ T5631] _copy_from_user+0x1c/0xb0 [ 63.470562][ T5631] bpf_vlog_reverse_ubuf+0xed/0x360 [ 63.470604][ T5631] bpf_vlog_finalize+0x147/0x200 [ 63.470643][ T5631] bpf_log_attr_finalize+0x33/0x100 [ 63.470669][ T5631] btf_new_fd+0x34a/0x670 [ 63.470714][ T5631] bpf_btf_load+0x116/0x130 [ 63.470762][ T5631] __sys_bpf+0xbce/0xc30 [ 63.470792][ T5631] ? do_futex+0x350/0x460 [ 63.470830][ T5631] __x64_sys_bpf+0x69/0x80 [ 63.470851][ T5631] x64_sys_call+0xf26/0x2550 [ 63.470878][ T5631] do_syscall_64+0x112/0x360 [ 63.470919][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.470960][ T5631] RIP: 0033:0x7f998ec2e159 [ 63.470978][ T5631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.471000][ T5631] RSP: 002b:00007f998d687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.471022][ T5631] RAX: ffffffffffffffda RBX: 00007f998eeb5fa0 RCX: 00007f998ec2e159 [ 63.471036][ T5631] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 63.471117][ T5631] RBP: 00007f998ecc5024 R08: 0000000000000000 R09: 0000000000000000 [ 63.471132][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.471146][ T5631] R13: 00007f998eeb6038 R14: 00007f998eeb5fa0 R15: 00007fff16fdd7d8 [ 63.471164][ T5631] [ 63.699080][ T5639] FAULT_INJECTION: forcing a failure. [ 63.699080][ T5639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.699144][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.3.666 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.699182][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.699198][ T5639] Call Trace: [ 63.699207][ T5639] [ 63.699216][ T5639] __dump_stack+0x1d/0x30 [ 63.699310][ T5639] dump_stack_lvl+0x95/0xd0 [ 63.699332][ T5639] dump_stack+0x15/0x1b [ 63.699354][ T5639] should_fail_ex+0x262/0x280 [ 63.699382][ T5639] should_fail_alloc_page+0xf2/0x100 [ 63.699419][ T5639] __alloc_frozen_pages_noprof+0x157/0x400 [ 63.699550][ T5639] alloc_pages_mpol+0xaf/0x1d0 [ 63.699578][ T5639] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 63.699608][ T5639] migrate_pages_batch+0x371/0x1c20 [ 63.699641][ T5639] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 63.699683][ T5639] ? __walk_page_range+0x323/0x340 [ 63.699712][ T5639] ? migrate_pages+0x178/0x1890 [ 63.699810][ T5639] migrate_pages+0x1073/0x1890 [ 63.699851][ T5639] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 63.699884][ T5639] ? mas_next_slot+0x833/0x880 [ 63.699921][ T5639] ? mbind_range+0x169/0x430 [ 63.699945][ T5639] __se_sys_mbind+0xc9c/0xdd0 [ 63.700077][ T5639] __x64_sys_mbind+0x78/0x90 [ 63.700110][ T5639] x64_sys_call+0x1d78/0x2550 [ 63.700135][ T5639] do_syscall_64+0x112/0x360 [ 63.700242][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.700269][ T5639] RIP: 0033:0x7f998ec2e159 [ 63.700288][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.700360][ T5639] RSP: 002b:00007f998d687028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 63.700384][ T5639] RAX: ffffffffffffffda RBX: 00007f998eeb5fa0 RCX: 00007f998ec2e159 [ 63.700399][ T5639] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 63.700412][ T5639] RBP: 00007f998ecc5024 R08: 0000000000000000 R09: 0000000000000002 [ 63.700496][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.700511][ T5639] R13: 00007f998eeb6038 R14: 00007f998eeb5fa0 R15: 00007fff16fdd7d8 [ 63.700595][ T5639] [ 64.001985][ T3405] kernel read not supported for file /regulator/regulator_summary (pid: 3405 comm: kworker/0:3) [ 64.129628][ T5663] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 64.218266][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 64.229930][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 64.322880][ T5691] FAULT_INJECTION: forcing a failure. [ 64.322880][ T5691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.322925][ T5691] CPU: 1 UID: 0 PID: 5691 Comm: syz.6.691 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.322954][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.322998][ T5691] Call Trace: [ 64.323006][ T5691] [ 64.323013][ T5691] __dump_stack+0x1d/0x30 [ 64.323108][ T5691] dump_stack_lvl+0x95/0xd0 [ 64.323130][ T5691] dump_stack+0x15/0x1b [ 64.323151][ T5691] should_fail_ex+0x262/0x280 [ 64.323177][ T5691] should_fail+0xb/0x20 [ 64.323212][ T5691] should_fail_usercopy+0x1a/0x20 [ 64.323235][ T5691] _copy_to_user+0x20/0xa0 [ 64.323259][ T5691] bpf_verifier_vlog+0x36e/0x5a0 [ 64.323332][ T5691] __btf_verifier_log+0x7f/0xb0 [ 64.323433][ T5691] btf_verifier_log_vsi+0x13a/0x1f0 [ 64.323471][ T5691] btf_datasec_check_meta+0x5a8/0x640 [ 64.323505][ T5691] btf_parse_type_sec+0x291/0x1520 [ 64.323586][ T5691] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 64.323621][ T5691] ? btf_parse_hdr+0x43a/0x440 [ 64.323702][ T5691] ? btf_parse_str_sec+0x1ae/0x1b0 [ 64.323858][ T5691] btf_new_fd+0x2ec/0x670 [ 64.323893][ T5691] bpf_btf_load+0x116/0x130 [ 64.323942][ T5691] __sys_bpf+0xbce/0xc30 [ 64.323996][ T5691] ? do_futex+0x350/0x460 [ 64.324095][ T5691] __x64_sys_bpf+0x69/0x80 [ 64.324117][ T5691] x64_sys_call+0xf26/0x2550 [ 64.324147][ T5691] do_syscall_64+0x112/0x360 [ 64.324181][ T5691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.324217][ T5691] RIP: 0033:0x7fa47992e159 [ 64.324237][ T5691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.324258][ T5691] RSP: 002b:00007fa478387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.324294][ T5691] RAX: ffffffffffffffda RBX: 00007fa479bb5fa0 RCX: 00007fa47992e159 [ 64.324309][ T5691] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 64.324322][ T5691] RBP: 00007fa4799c5024 R08: 0000000000000000 R09: 0000000000000000 [ 64.324336][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.324402][ T5691] R13: 00007fa479bb6038 R14: 00007fa479bb5fa0 R15: 00007fff599fe1c8 [ 64.324425][ T5691] [ 64.377612][ T5695] veth0: entered promiscuous mode [ 64.382958][ T5693] loop3: detected capacity change from 0 to 2048 [ 64.412269][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.414679][ T5693] EXT4-fs (loop3): shut down requested (1) [ 64.437892][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.445091][ T5694] veth0: left promiscuous mode [ 64.604622][ T5703] loop6: detected capacity change from 0 to 512 [ 64.617043][ T5703] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 64.635006][ T5703] EXT4-fs (loop6): 1 truncate cleaned up [ 64.635516][ T5703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.670655][ T5703] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 64.703281][ T5253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.766094][ T5718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 64.814979][ T5721] netlink: 104 bytes leftover after parsing attributes in process `syz.3.703'. [ 65.379069][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 65.399997][ T5770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.427053][ T5770] bond2: (slave batadv1): Opening slave failed [ 65.894209][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.733'. [ 66.048784][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 66.048810][ T29] audit: type=1400 audit(1788681231.834:591): avc: denied { setopt } for pid=5809 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.053128][ T5811] FAULT_INJECTION: forcing a failure. [ 66.053128][ T5811] name failslab, interval 1, probability 0, space 0, times 0 [ 66.053158][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: syz.4.740 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.053185][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.053199][ T5811] Call Trace: [ 66.053207][ T5811] [ 66.053215][ T5811] __dump_stack+0x1d/0x30 [ 66.053243][ T5811] dump_stack_lvl+0x95/0xd0 [ 66.053267][ T5811] dump_stack+0x15/0x1b [ 66.053289][ T5811] should_fail_ex+0x262/0x280 [ 66.053312][ T5811] ? __mpol_dup+0x42/0x1c0 [ 66.053334][ T5811] should_failslab+0x8c/0xb0 [ 66.053364][ T5811] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 66.053393][ T5811] ? __mpol_dup+0x42/0x1c0 [ 66.053415][ T5811] __mpol_dup+0x42/0x1c0 [ 66.053436][ T5811] ? mas_find+0x3b7/0x450 [ 66.053468][ T5811] __se_sys_set_mempolicy_home_node+0x281/0x4f0 [ 66.053510][ T5811] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 66.053547][ T5811] x64_sys_call+0x218/0x2550 [ 66.053575][ T5811] do_syscall_64+0x112/0x360 [ 66.053609][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.053634][ T5811] RIP: 0033:0x7fca1ceee159 [ 66.053651][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.053670][ T5811] RSP: 002b:00007fca1b947028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 66.053692][ T5811] RAX: ffffffffffffffda RBX: 00007fca1d175fa0 RCX: 00007fca1ceee159 [ 66.053707][ T5811] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 66.053722][ T5811] RBP: 00007fca1cf85024 R08: 0000000000000000 R09: 0000000000000000 [ 66.053742][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.053756][ T5811] R13: 00007fca1d176038 R14: 00007fca1d175fa0 R15: 00007ffe60629748 [ 66.053776][ T5811] [ 66.136727][ T5813] gtp0: entered allmulticast mode [ 66.189958][ T29] audit: type=1400 audit(1788681231.974:592): avc: denied { setopt } for pid=5814 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.224548][ T29] audit: type=1326 audit(1788681232.014:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.225197][ T29] audit: type=1326 audit(1788681232.014:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.225455][ T29] audit: type=1326 audit(1788681232.014:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.225707][ T29] audit: type=1326 audit(1788681232.014:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.225927][ T29] audit: type=1326 audit(1788681232.014:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.226174][ T29] audit: type=1326 audit(1788681232.014:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.228303][ T29] audit: type=1326 audit(1788681232.014:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.5.744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42553e159 code=0x7ffc0000 [ 66.267188][ T5819] netlink: 316 bytes leftover after parsing attributes in process `syz.3.743'. [ 66.308899][ T29] audit: type=1400 audit(1788681232.074:600): avc: denied { read } for pid=5823 comm="syz.6.747" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.571638][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.751'. [ 66.635020][ T5842] FAULT_INJECTION: forcing a failure. [ 66.635020][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 66.635059][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.6.753 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.635088][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.635119][ T5842] Call Trace: [ 66.635126][ T5842] [ 66.635134][ T5842] __dump_stack+0x1d/0x30 [ 66.635217][ T5842] dump_stack_lvl+0x95/0xd0 [ 66.635243][ T5842] dump_stack+0x15/0x1b [ 66.635268][ T5842] should_fail_ex+0x262/0x280 [ 66.635293][ T5842] ? public_key_verify_signature+0x198/0x4e0 [ 66.635341][ T5842] should_failslab+0x8c/0xb0 [ 66.635369][ T5842] __kmalloc_noprof+0xd0/0x4d0 [ 66.635404][ T5842] ? crypto_alloc_tfm_node+0x24f/0x280 [ 66.635444][ T5842] ? public_key_verify_signature+0x198/0x4e0 [ 66.635480][ T5842] public_key_verify_signature+0x198/0x4e0 [ 66.635540][ T5842] ? should_fail_ex+0xdb/0x280 [ 66.635566][ T5842] x509_check_for_self_signed+0x1c4/0x250 [ 66.635605][ T5842] x509_cert_parse+0x3bf/0x450 [ 66.635723][ T5842] x509_key_preparse+0x3c/0x420 [ 66.635766][ T5842] asymmetric_key_preparse+0x68/0xb0 [ 66.635883][ T5842] __key_create_or_update+0x2df/0x840 [ 66.635925][ T5842] key_create_or_update+0x42/0x60 [ 66.635959][ T5842] __se_sys_add_key+0x2a5/0x360 [ 66.636067][ T5842] __x64_sys_add_key+0x67/0x80 [ 66.636111][ T5842] x64_sys_call+0x1fa9/0x2550 [ 66.636166][ T5842] do_syscall_64+0x112/0x360 [ 66.636202][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.636231][ T5842] RIP: 0033:0x7fa47992e159 [ 66.636250][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.636273][ T5842] RSP: 002b:00007fa478387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 66.636360][ T5842] RAX: ffffffffffffffda RBX: 00007fa479bb5fa0 RCX: 00007fa47992e159 [ 66.636376][ T5842] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 66.636391][ T5842] RBP: 00007fa4799c5024 R08: ffffffffffffffff R09: 0000000000000000 [ 66.636405][ T5842] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 66.636487][ T5842] R13: 00007fa479bb6038 R14: 00007fa479bb5fa0 R15: 00007fff599fe1c8 [ 66.636510][ T5842] [ 66.708675][ T5849] loop3: detected capacity change from 0 to 512 [ 66.756920][ T5849] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.754: inode has both inline data and extents flags [ 66.756953][ T5849] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.757149][ T5849] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.754: couldn't read orphan inode 15 (err -117) [ 66.757178][ T5849] loop3: lost filesystem error report for type 5 error -117 [ 66.757506][ T5849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.945124][ T5860] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.945248][ T5860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.945262][ T5860] IPv6: NLM_F_CREATE should be set when creating new route [ 66.955345][ T5860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.955359][ T5860] IPv6: NLM_F_CREATE should be set when creating new route [ 66.972744][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.068591][ T5858] loop6: detected capacity change from 0 to 8192 [ 67.461383][ T5888] FAULT_INJECTION: forcing a failure. [ 67.461383][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.461422][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: syz.0.771 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.461528][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.461544][ T5888] Call Trace: [ 67.461552][ T5888] [ 67.461561][ T5888] __dump_stack+0x1d/0x30 [ 67.461665][ T5888] dump_stack_lvl+0x95/0xd0 [ 67.461687][ T5888] dump_stack+0x15/0x1b [ 67.461707][ T5888] should_fail_ex+0x262/0x280 [ 67.461773][ T5888] should_fail+0xb/0x20 [ 67.461796][ T5888] should_fail_usercopy+0x1a/0x20 [ 67.461869][ T5888] fpu__restore_sig+0x12a/0xad0 [ 67.461900][ T5888] ? x86_task_fpu+0x36/0x60 [ 67.461932][ T5888] __ia32_sys_rt_sigreturn+0x29b/0x350 [ 67.462005][ T5888] x64_sys_call+0x1532/0x2550 [ 67.462109][ T5888] do_syscall_64+0x112/0x360 [ 67.462145][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.462174][ T5888] RIP: 0033:0x7f9c5dd3e159 [ 67.462192][ T5888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.462209][ T5888] RSP: 002b:00007f9c5c797028 EFLAGS: 00000246 [ 67.462235][ T5888] RAX: 0000000000000000 RBX: 00007f9c5dfc5fa0 RCX: 00007f9c5dd3e159 [ 67.462250][ T5888] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000002 [ 67.462265][ T5888] RBP: 00007f9c5ddd5024 R08: 0000200000003140 R09: 0000000000000000 [ 67.462281][ T5888] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 67.462368][ T5888] R13: 00007f9c5dfc6038 R14: 00007f9c5dfc5fa0 R15: 00007ffc7b20e858 [ 67.462390][ T5888] [ 67.518894][ T5904] smc: net device vlan1 applied user defined pnetid SYZ2 [ 67.518998][ T5904] smc: net device vlan1 erased user defined pnetid SYZ2 [ 67.718676][ T5912] FAULT_INJECTION: forcing a failure. [ 67.718676][ T5912] name failslab, interval 1, probability 0, space 0, times 0 [ 67.718717][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.4.780 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.718773][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.718789][ T5912] Call Trace: [ 67.718798][ T5912] [ 67.718808][ T5912] __dump_stack+0x1d/0x30 [ 67.718834][ T5912] dump_stack_lvl+0x95/0xd0 [ 67.718917][ T5912] dump_stack+0x15/0x1b [ 67.718944][ T5912] should_fail_ex+0x262/0x280 [ 67.718971][ T5912] ? radix_tree_node_alloc+0xa0/0x200 [ 67.719001][ T5912] should_failslab+0x8c/0xb0 [ 67.719068][ T5912] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 67.719160][ T5912] ? radix_tree_node_alloc+0xa0/0x200 [ 67.719191][ T5912] radix_tree_node_alloc+0xa0/0x200 [ 67.719218][ T5912] idr_get_free+0x1fc/0x560 [ 67.719247][ T5912] idr_alloc_u32+0xe9/0x1a0 [ 67.719314][ T5912] idr_alloc_cyclic+0x7b/0x140 [ 67.719350][ T5912] map_create+0x332/0xfe0 [ 67.719380][ T5912] __sys_bpf+0x99a/0xc30 [ 67.719461][ T5912] ? do_futex+0x350/0x460 [ 67.719498][ T5912] __x64_sys_bpf+0x69/0x80 [ 67.719522][ T5912] x64_sys_call+0xf26/0x2550 [ 67.719628][ T5912] do_syscall_64+0x112/0x360 [ 67.719661][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.719721][ T5912] RIP: 0033:0x7fca1ceee159 [ 67.719739][ T5912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.719759][ T5912] RSP: 002b:00007fca1b947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.719822][ T5912] RAX: ffffffffffffffda RBX: 00007fca1d175fa0 RCX: 00007fca1ceee159 [ 67.719838][ T5912] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000 [ 67.719853][ T5912] RBP: 00007fca1cf85024 R08: 0000000000000000 R09: 0000000000000000 [ 67.719881][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.719896][ T5912] R13: 00007fca1d176038 R14: 00007fca1d175fa0 R15: 00007ffe60629748 [ 67.719917][ T5912] [ 68.104102][ T5925] netlink: 'syz.4.784': attribute type 4 has an invalid length. [ 68.118493][ T5925] netlink: 'syz.4.784': attribute type 4 has an invalid length. [ 68.545316][ T5983] xt_ecn: cannot match TCP bits for non-tcp packets [ 68.716079][ T6012] FAULT_INJECTION: forcing a failure. [ 68.716079][ T6012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.716179][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.801 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.716211][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.716277][ T6012] Call Trace: [ 68.716285][ T6012] [ 68.716293][ T6012] __dump_stack+0x1d/0x30 [ 68.716322][ T6012] dump_stack_lvl+0x95/0xd0 [ 68.716348][ T6012] dump_stack+0x15/0x1b [ 68.716375][ T6012] should_fail_ex+0x262/0x280 [ 68.716443][ T6012] should_fail+0xb/0x20 [ 68.716466][ T6012] should_fail_usercopy+0x1a/0x20 [ 68.716493][ T6012] set_fd_set+0x29/0x90 [ 68.716589][ T6012] core_sys_select+0x569/0x730 [ 68.716632][ T6012] __se_sys_pselect6+0x23f/0x2a0 [ 68.716739][ T6012] __x64_sys_pselect6+0x78/0x90 [ 68.716848][ T6012] x64_sys_call+0x1dfc/0x2550 [ 68.716874][ T6012] do_syscall_64+0x112/0x360 [ 68.716926][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.716960][ T6012] RIP: 0033:0x7f9c5dd3e159 [ 68.716986][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.717052][ T6012] RSP: 002b:00007f9c5c797028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 68.717078][ T6012] RAX: ffffffffffffffda RBX: 00007f9c5dfc5fa0 RCX: 00007f9c5dd3e159 [ 68.717095][ T6012] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 68.717111][ T6012] RBP: 00007f9c5ddd5024 R08: 0000200000000280 R09: 0000000000000000 [ 68.717128][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.717143][ T6012] R13: 00007f9c5dfc6038 R14: 00007f9c5dfc5fa0 R15: 00007ffc7b20e858 [ 68.717215][ T6012] [ 68.920431][ T6029] No such timeout policy "syz1" [ 69.178289][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 69.198483][ T6079] loop4: detected capacity change from 0 to 128 [ 69.281899][ T6090] FAULT_INJECTION: forcing a failure. [ 69.281899][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 69.281939][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.5.813 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.281987][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.282010][ T6090] Call Trace: [ 69.282016][ T6090] [ 69.282024][ T6090] __dump_stack+0x1d/0x30 [ 69.282053][ T6090] dump_stack_lvl+0x95/0xd0 [ 69.282125][ T6090] dump_stack+0x15/0x1b [ 69.282150][ T6090] should_fail_ex+0x262/0x280 [ 69.282177][ T6090] ? sk_prot_alloc+0x3f/0x180 [ 69.282239][ T6090] should_failslab+0x8c/0xb0 [ 69.282268][ T6090] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 69.282341][ T6090] ? sk_prot_alloc+0x3f/0x180 [ 69.282396][ T6090] sk_prot_alloc+0x3f/0x180 [ 69.282433][ T6090] sk_alloc+0x34/0x3e0 [ 69.282463][ T6090] rxrpc_create+0xa4/0x350 [ 69.282555][ T6090] __sock_create+0x2e5/0x580 [ 69.282581][ T6090] __sys_socket+0xaf/0x180 [ 69.282643][ T6090] __x64_sys_socket+0x3f/0x50 [ 69.282669][ T6090] x64_sys_call+0x246e/0x2550 [ 69.282713][ T6090] do_syscall_64+0x112/0x360 [ 69.282775][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.282800][ T6090] RIP: 0033:0x7ff42553e159 [ 69.282820][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.282841][ T6090] RSP: 002b:00007ff423f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 69.282865][ T6090] RAX: ffffffffffffffda RBX: 00007ff4257c5fa0 RCX: 00007ff42553e159 [ 69.282907][ T6090] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 69.282920][ T6090] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 69.282974][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.282987][ T6090] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 69.283017][ T6090] [ 69.397069][ T6096] loop6: detected capacity change from 0 to 164 [ 69.430213][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 69.456855][ T6096] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 69.522511][ T6103] loop6: detected capacity change from 0 to 1024 [ 69.529631][ T6103] EXT4-fs: inline encryption not supported [ 69.529705][ T6103] EXT4-fs: Ignoring removed bh option [ 69.541870][ T6103] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 69.564747][ T6108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6108 comm=syz.5.820 [ 69.583785][ T6103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.630032][ T6117] netlink: 'syz.5.823': attribute type 49 has an invalid length. [ 69.660597][ T5253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.716549][ T6125] loop3: detected capacity change from 0 to 512 [ 69.740095][ T6125] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.826: Unrecognised inode hash code 255 [ 69.740128][ T6125] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.826: Corrupt directory, running e2fsck is recommended [ 69.761988][ T6125] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 69.762122][ T6125] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.826: corrupted in-inode xattr: invalid ea_ino [ 69.762150][ T6125] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.762467][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 69.762485][ C1] EXT4-fs (loop3): initial error at time 1788681235: ext4_iget_extra_inode:5210: inode 15 [ 69.762515][ C1] EXT4-fs (loop3): last error at time 1788681235: ext4_iget_extra_inode:5210: inode 15 [ 69.768135][ T6125] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.826: couldn't read orphan inode 15 (err -117) [ 69.768167][ T6125] loop3: lost filesystem error report for type 5 error -117 [ 69.768670][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.774524][ T6125] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.826: Unrecognised inode hash code 255 [ 69.774554][ T6125] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.826: Corrupt directory, running e2fsck is recommended [ 69.834746][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.866636][ T6119] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 69.909743][ T6131] ip_tables: iptables: counters copy to user failed while replacing table [ 69.961880][ T6138] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 69.982277][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.998324][ T6138] bond1: (slave geneve2): making interface the new active one [ 70.007803][ T6138] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 70.046314][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 70.046354][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 70.198624][ T6162] type: 16084 invalid [ 70.433040][ T6187] loop5: detected capacity change from 0 to 512 [ 70.439398][ T6187] ext4: Unknown parameter 'uid' [ 70.794400][ T6239] netlink: 'syz.3.875': attribute type 15 has an invalid length. [ 70.794477][ T6239] netlink: 'syz.3.875': attribute type 15 has an invalid length. [ 70.833001][ T6242] loop3: detected capacity change from 0 to 512 [ 70.853896][ T6242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.853962][ T6242] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.879169][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.904333][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 70.963364][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'. [ 71.006494][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 71.006617][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 71.010818][ T6269] geneve2: entered promiscuous mode [ 71.012288][ T6269] geneve2: entered allmulticast mode [ 71.440856][ T6301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.899'. [ 71.440886][ T6301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.899'. [ 71.601907][ T6310] syzkaller1: entered promiscuous mode [ 71.601937][ T6310] syzkaller1: entered allmulticast mode [ 72.031252][ T6334] FAULT_INJECTION: forcing a failure. [ 72.031252][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 72.031377][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.5.914 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.031409][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.031425][ T6334] Call Trace: [ 72.031433][ T6334] [ 72.031506][ T6334] __dump_stack+0x1d/0x30 [ 72.031535][ T6334] dump_stack_lvl+0x95/0xd0 [ 72.031559][ T6334] dump_stack+0x15/0x1b [ 72.031661][ T6334] should_fail_ex+0x262/0x280 [ 72.031721][ T6334] should_failslab+0x8c/0xb0 [ 72.031809][ T6334] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 72.031841][ T6334] ? kstrdup_const+0x3e/0x50 [ 72.031938][ T6334] ? kstrdup_const+0x3e/0x50 [ 72.031959][ T6334] kstrdup+0x3e/0xd0 [ 72.032039][ T6334] kstrdup_const+0x3e/0x50 [ 72.032059][ T6334] alloc_vfsmnt+0xe2/0x2f0 [ 72.032084][ T6334] clone_mnt+0x30/0x5d0 [ 72.032114][ T6334] ? copy_tree+0xa3/0x890 [ 72.032174][ T6334] copy_tree+0xb9/0x890 [ 72.032202][ T6334] ? proc_alloc_inum+0x4f/0x70 [ 72.032235][ T6334] ? __ns_common_init+0xd7/0x120 [ 72.032257][ T6334] ? __ns_tree_gen_id+0x48/0x60 [ 72.032345][ T6334] copy_mnt_ns+0x1d2/0x720 [ 72.032387][ T6334] create_new_namespaces+0x7f/0x420 [ 72.032426][ T6334] unshare_nsproxy_namespaces+0x115/0x150 [ 72.032511][ T6334] ksys_unshare+0x42b/0x710 [ 72.032637][ T6334] __x64_sys_unshare+0x1f/0x30 [ 72.032665][ T6334] x64_sys_call+0x1e33/0x2550 [ 72.032701][ T6334] do_syscall_64+0x112/0x360 [ 72.032737][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.032760][ T6334] RIP: 0033:0x7ff42553e159 [ 72.032803][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.032822][ T6334] RSP: 002b:00007ff423f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 72.032921][ T6334] RAX: ffffffffffffffda RBX: 00007ff4257c5fa0 RCX: 00007ff42553e159 [ 72.032935][ T6334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 72.033001][ T6334] RBP: 00007ff4255d5024 R08: 0000000000000000 R09: 0000000000000000 [ 72.033014][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.033026][ T6334] R13: 00007ff4257c6038 R14: 00007ff4257c5fa0 R15: 00007ffc8ae0d178 [ 72.033046][ T6334] [ 72.448294][ T6352] loop4: detected capacity change from 0 to 1024 [ 72.479498][ T6352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.487976][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 72.488010][ T29] audit: type=1400 audit(1788681238.274:670): avc: denied { write } for pid=6351 comm="syz.4.922" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.492310][ T29] audit: type=1400 audit(1788681238.274:671): avc: denied { map } for pid=6351 comm="syz.4.922" path="/210/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.492392][ T29] audit: type=1400 audit(1788681238.274:672): avc: denied { execute } for pid=6351 comm="syz.4.922" path="/210/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.621339][ T6361] IPv6: Can't replace route, no match found [ 72.625042][ T6363] FAULT_INJECTION: forcing a failure. [ 72.625042][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 72.625073][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.0.926 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.625102][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.625117][ T6363] Call Trace: [ 72.625125][ T6363] [ 72.625133][ T6363] __dump_stack+0x1d/0x30 [ 72.625242][ T6363] dump_stack_lvl+0x95/0xd0 [ 72.625350][ T6363] dump_stack+0x15/0x1b [ 72.625374][ T6363] should_fail_ex+0x262/0x280 [ 72.625399][ T6363] should_failslab+0x8c/0xb0 [ 72.625430][ T6363] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 72.625509][ T6363] ? kstrdup_const+0x3e/0x50 [ 72.625531][ T6363] ? kstrdup_const+0x3e/0x50 [ 72.625555][ T6363] kstrdup+0x3e/0xd0 [ 72.625577][ T6363] kstrdup_const+0x3e/0x50 [ 72.625655][ T6363] alloc_vfsmnt+0xe2/0x2f0 [ 72.625683][ T6363] clone_mnt+0x30/0x5d0 [ 72.625765][ T6363] ? copy_tree+0xa3/0x890 [ 72.625797][ T6363] copy_tree+0xb9/0x890 [ 72.625827][ T6363] ? proc_alloc_inum+0x4f/0x70 [ 72.625854][ T6363] ? __ns_common_init+0xd7/0x120 [ 72.625896][ T6363] ? __ns_tree_gen_id+0x48/0x60 [ 72.625934][ T6363] copy_mnt_ns+0x1d2/0x720 [ 72.626046][ T6363] create_new_namespaces+0x7f/0x420 [ 72.626129][ T6363] unshare_nsproxy_namespaces+0x115/0x150 [ 72.626166][ T6363] ksys_unshare+0x42b/0x710 [ 72.626199][ T6363] __x64_sys_unshare+0x1f/0x30 [ 72.626274][ T6363] x64_sys_call+0x1e33/0x2550 [ 72.626304][ T6363] do_syscall_64+0x112/0x360 [ 72.626426][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.626570][ T6363] RIP: 0033:0x7f9c5dd3e159 [ 72.626589][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.626610][ T6363] RSP: 002b:00007f9c5c797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 72.626637][ T6363] RAX: ffffffffffffffda RBX: 00007f9c5dfc5fa0 RCX: 00007f9c5dd3e159 [ 72.626654][ T6363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 72.626670][ T6363] RBP: 00007f9c5ddd5024 R08: 0000000000000000 R09: 0000000000000000 [ 72.626685][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.626751][ T6363] R13: 00007f9c5dfc6038 R14: 00007f9c5dfc5fa0 R15: 00007ffc7b20e858 [ 72.626770][ T6363] [ 72.630717][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.689719][ T29] audit: type=1326 audit(1788681238.474:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.689773][ T29] audit: type=1326 audit(1788681238.474:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.694977][ T29] audit: type=1326 audit(1788681238.484:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.698331][ T29] audit: type=1326 audit(1788681238.484:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.698382][ T29] audit: type=1326 audit(1788681238.484:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.698411][ T29] audit: type=1326 audit(1788681238.484:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 72.707976][ T29] audit: type=1326 audit(1788681238.484:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.4.928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1ceee159 code=0x7ffc0000 [ 73.139129][ T6395] FAULT_INJECTION: forcing a failure. [ 73.139129][ T6395] name failslab, interval 1, probability 0, space 0, times 0 [ 73.139204][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.6.939 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.139229][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.139242][ T6395] Call Trace: [ 73.139249][ T6395] [ 73.139257][ T6395] __dump_stack+0x1d/0x30 [ 73.139307][ T6395] dump_stack_lvl+0x95/0xd0 [ 73.139336][ T6395] dump_stack+0x15/0x1b [ 73.139438][ T6395] should_fail_ex+0x262/0x280 [ 73.139466][ T6395] should_failslab+0x8c/0xb0 [ 73.139501][ T6395] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 73.139560][ T6395] ? kstrdup_const+0x3e/0x50 [ 73.139580][ T6395] ? kstrdup_const+0x3e/0x50 [ 73.139664][ T6395] kstrdup+0x3e/0xd0 [ 73.139690][ T6395] kstrdup_const+0x3e/0x50 [ 73.139709][ T6395] alloc_vfsmnt+0xe2/0x2f0 [ 73.139735][ T6395] clone_mnt+0x30/0x5d0 [ 73.139773][ T6395] ? copy_tree+0xa3/0x890 [ 73.139806][ T6395] copy_tree+0xb9/0x890 [ 73.139832][ T6395] ? proc_alloc_inum+0x4f/0x70 [ 73.139853][ T6395] ? __ns_common_init+0xd7/0x120 [ 73.139900][ T6395] ? __ns_tree_gen_id+0x48/0x60 [ 73.139943][ T6395] copy_mnt_ns+0x1d2/0x720 [ 73.140032][ T6395] create_new_namespaces+0x7f/0x420 [ 73.140068][ T6395] unshare_nsproxy_namespaces+0x115/0x150 [ 73.140110][ T6395] ksys_unshare+0x42b/0x710 [ 73.140145][ T6395] __x64_sys_unshare+0x1f/0x30 [ 73.140189][ T6395] x64_sys_call+0x1e33/0x2550 [ 73.140238][ T6395] do_syscall_64+0x112/0x360 [ 73.140275][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.140299][ T6395] RIP: 0033:0x7fa47992e159 [ 73.140319][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.140370][ T6395] RSP: 002b:00007fa478387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.140391][ T6395] RAX: ffffffffffffffda RBX: 00007fa479bb5fa0 RCX: 00007fa47992e159 [ 73.140406][ T6395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 73.140422][ T6395] RBP: 00007fa4799c5024 R08: 0000000000000000 R09: 0000000000000000 [ 73.140439][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.140455][ T6395] R13: 00007fa479bb6038 R14: 00007fa479bb5fa0 R15: 00007fff599fe1c8 [ 73.140476][ T6395] [ 73.862354][ T6403] IPv6: Can't replace route, no match found [ 73.970372][ T6419] Cannot find set identified by id 0 to match [ 73.995358][ T6422] FAULT_INJECTION: forcing a failure. [ 73.995358][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 73.995502][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.995541][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.995555][ T6422] Call Trace: [ 73.995562][ T6422] [ 73.995571][ T6422] __dump_stack+0x1d/0x30 [ 73.995605][ T6422] dump_stack_lvl+0x95/0xd0 [ 73.995678][ T6422] dump_stack+0x15/0x1b [ 73.995698][ T6422] should_fail_ex+0x262/0x280 [ 73.995726][ T6422] ? alloc_vfsmnt+0x2d/0x2f0 [ 73.995756][ T6422] should_failslab+0x8c/0xb0 [ 73.995840][ T6422] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 73.995872][ T6422] ? alloc_vfsmnt+0x2d/0x2f0 [ 73.995903][ T6422] alloc_vfsmnt+0x2d/0x2f0 [ 73.995931][ T6422] vfs_create_mount+0x3b/0x1d0 [ 73.996021][ T6422] do_new_mount+0x2e1/0x8d0 [ 73.996055][ T6422] ? security_capable+0x7b/0x90 [ 73.996079][ T6422] path_mount+0x4ad/0xb90 [ 73.996162][ T6422] __se_sys_mount+0x28c/0x2e0 [ 73.996255][ T6422] __x64_sys_mount+0x67/0x80 [ 73.996292][ T6422] x64_sys_call+0xc3b/0x2550 [ 73.996332][ T6422] do_syscall_64+0x112/0x360 [ 73.996366][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.996393][ T6422] RIP: 0033:0x7f9c5dd3e159 [ 73.996410][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.996471][ T6422] RSP: 002b:00007f9c5c797028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.996494][ T6422] RAX: ffffffffffffffda RBX: 00007f9c5dfc5fa0 RCX: 00007f9c5dd3e159 [ 73.996510][ T6422] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000000000000000 [ 73.996526][ T6422] RBP: 00007f9c5ddd5024 R08: 0000000000000000 R09: 0000000000000000 [ 73.996673][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.996687][ T6422] R13: 00007f9c5dfc6038 R14: 00007f9c5dfc5fa0 R15: 00007ffc7b20e858 [ 73.996706][ T6422] [ 74.174873][ T6433] FAULT_INJECTION: forcing a failure. [ 74.174873][ T6433] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.174904][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.6.955 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.174958][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.174972][ T6433] Call Trace: [ 74.174979][ T6433] [ 74.174987][ T6433] __dump_stack+0x1d/0x30 [ 74.175018][ T6433] dump_stack_lvl+0x95/0xd0 [ 74.175049][ T6433] dump_stack+0x15/0x1b [ 74.175093][ T6433] should_fail_ex+0x262/0x280 [ 74.175118][ T6433] should_fail+0xb/0x20 [ 74.175139][ T6433] get_futex_key+0x12d/0xb10 [ 74.175221][ T6433] futex_wake+0x89/0x400 [ 74.175259][ T6433] do_futex+0x3f8/0x460 [ 74.175291][ T6433] __se_sys_futex+0x2f6/0x370 [ 74.175320][ T6433] ? xfd_validate_state+0x45/0xf0 [ 74.175417][ T6433] __x64_sys_futex+0x78/0x90 [ 74.175526][ T6433] x64_sys_call+0x22e2/0x2550 [ 74.175556][ T6433] do_syscall_64+0x112/0x360 [ 74.175591][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.175693][ T6433] RIP: 0033:0x7fa47992e159 [ 74.175710][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.175731][ T6433] RSP: 002b:00007fa478387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.175754][ T6433] RAX: ffffffffffffffda RBX: 00007fa479bb5fa0 RCX: 00007fa47992e159 [ 74.175771][ T6433] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 74.175811][ T6433] RBP: 00007fa4799c5024 R08: 0000000000000000 R09: 0000000000000002 [ 74.175826][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.175841][ T6433] R13: 00007fa479bb6038 R14: 00007fa479bb5fa0 R15: 00007fff599fe1c8 [ 74.175862][ T6433] [ 74.389827][ T6436] FAULT_INJECTION: forcing a failure. [ 74.389827][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 74.389874][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.6.956 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.389906][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.389921][ T6436] Call Trace: [ 74.389961][ T6436] [ 74.389967][ T6436] __dump_stack+0x1d/0x30 [ 74.389993][ T6436] dump_stack_lvl+0x95/0xd0 [ 74.390075][ T6436] dump_stack+0x15/0x1b [ 74.390146][ T6436] should_fail_ex+0x262/0x280 [ 74.390172][ T6436] ? skb_clone+0x151/0x1f0 [ 74.390234][ T6436] should_failslab+0x8c/0xb0 [ 74.390264][ T6436] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.390292][ T6436] ? skb_clone+0x151/0x1f0 [ 74.390377][ T6436] skb_clone+0x151/0x1f0 [ 74.390414][ T6436] bpf_clone_redirect+0xed/0x280 [ 74.390450][ T6436] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 74.390476][ T6436] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 74.390516][ T6436] ? hrtimer_start_range_ns+0x108/0x120 [ 74.390556][ T6436] ? _raw_spin_unlock+0x9/0x30 [ 74.390615][ T6436] ? finish_task_switch+0x121/0x340 [ 74.390644][ T6436] ? __schedule+0x79e/0xd20 [ 74.390678][ T6436] ? is_bpf_text_address+0x141/0x160 [ 74.390776][ T6436] ? preempt_schedule_common+0x12/0x40 [ 74.390814][ T6436] ? preempt_schedule_thunk+0x16/0x40 [ 74.390848][ T6436] ? bpf_test_timer_continue+0xac/0x350 [ 74.390889][ T6436] bpf_test_run+0x29b/0x620 [ 74.390979][ T6436] ? __list_add_valid_or_report+0x38/0xe0 [ 74.391089][ T6436] ? bpf_test_run+0x198/0x620 [ 74.391123][ T6436] bpf_prog_test_run_skb+0xe67/0x11b0 [ 74.391155][ T6436] ? __rcu_read_unlock+0x4e/0x70 [ 74.391188][ T6436] ? __fget_files+0x184/0x1c0 [ 74.391260][ T6436] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 74.391290][ T6436] bpf_prog_test_run+0x208/0x340 [ 74.391320][ T6436] __sys_bpf+0x8da/0xc30 [ 74.391345][ T6436] ? do_futex+0x350/0x460 [ 74.391440][ T6436] __x64_sys_bpf+0x69/0x80 [ 74.391463][ T6436] x64_sys_call+0xf26/0x2550 [ 74.391520][ T6436] do_syscall_64+0x112/0x360 [ 74.391617][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.391649][ T6436] RIP: 0033:0x7fa47992e159 [ 74.391668][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.391689][ T6436] RSP: 002b:00007fa478387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.391713][ T6436] RAX: ffffffffffffffda RBX: 00007fa479bb5fa0 RCX: 00007fa47992e159 [ 74.391751][ T6436] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 74.391767][ T6436] RBP: 00007fa4799c5024 R08: 0000000000000000 R09: 0000000000000000 [ 74.391782][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.391796][ T6436] R13: 00007fa479bb6038 R14: 00007fa479bb5fa0 R15: 00007fff599fe1c8 [ 74.391817][ T6436] [ 75.254836][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.255201][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.547826][ T6501] loop5: detected capacity change from 0 to 128 [ 75.558709][ T6501] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.572547][ T6501] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.660430][ T3673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.749428][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 76.989285][ T6551] loop4: detected capacity change from 0 to 512 [ 77.016570][ T6556] FAULT_INJECTION: forcing a failure. [ 77.016570][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 77.016609][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.016640][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.016655][ T6556] Call Trace: [ 77.016664][ T6556] [ 77.016741][ T6556] __dump_stack+0x1d/0x30 [ 77.016772][ T6556] dump_stack_lvl+0x95/0xd0 [ 77.016844][ T6556] dump_stack+0x15/0x1b [ 77.016866][ T6556] should_fail_ex+0x262/0x280 [ 77.016892][ T6556] ? futex_lock_pi+0x740/0x7c0 [ 77.016930][ T6556] should_failslab+0x8c/0xb0 [ 77.017009][ T6556] __kmalloc_cache_noprof+0x7a/0x400 [ 77.017104][ T6556] ? futex_lock_pi+0x740/0x7c0 [ 77.017141][ T6556] futex_lock_pi+0x740/0x7c0 [ 77.017250][ T6556] ? futex_unqueue+0xc5/0xf0 [ 77.017279][ T6556] ? __pfx_futex_wake_mark+0x10/0x10 [ 77.017380][ T6556] do_futex+0x359/0x460 [ 77.017412][ T6556] __se_sys_futex+0x2f6/0x370 [ 77.017442][ T6556] ? xfd_validate_state+0x45/0xf0 [ 77.017475][ T6556] __x64_sys_futex+0x78/0x90 [ 77.017529][ T6556] x64_sys_call+0x22e2/0x2550 [ 77.017562][ T6556] do_syscall_64+0x112/0x360 [ 77.017595][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.017621][ T6556] RIP: 0033:0x7f9c5dd3e159 [ 77.017673][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.017727][ T6556] RSP: 002b:00007f9c5c797028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.017749][ T6556] RAX: ffffffffffffffda RBX: 00007f9c5dfc5fa0 RCX: 00007f9c5dd3e159 [ 77.017766][ T6556] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000000 [ 77.017781][ T6556] RBP: 00007f9c5ddd5024 R08: 0000000000000000 R09: 0000000000000001 [ 77.017859][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.017872][ T6556] R13: 00007f9c5dfc6038 R14: 00007f9c5dfc5fa0 R15: 00007ffc7b20e858 [ 77.017969][ T6556] [ 77.225450][ T6551] EXT4-fs (loop4): 1 orphan inode deleted [ 77.229493][ T6551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.230641][ T6551] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.244424][ T6059] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 77.255333][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.285478][ T6611] 9p: Bad value for 'wfdno' [ 78.309598][ T6613] netlink: 'syz.0.1027': attribute type 2 has an invalid length. [ 78.332407][ T6615] netlink: 'syz.0.1028': attribute type 20 has an invalid length. [ 78.332503][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 78.336346][ T6615] netlink: 'syz.0.1028': attribute type 20 has an invalid length. [ 78.336363][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 78.336458][ T138] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.336499][ T138] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.336544][ T138] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.362557][ T6063] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.797528][ T6517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.951914][ T6618] ================================================================== [ 78.951962][ T6618] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 78.952019][ T6618] [ 78.952024][ T6618] write to 0xffff8881095348e0 of 8 bytes by task 6632 on cpu 1: [ 78.952042][ T6618] shmem_file_splice_read+0x401/0x590 [ 78.952078][ T6618] splice_direct_to_actor+0x261/0x680 [ 78.952115][ T6618] do_splice_direct+0x119/0x1a0 [ 78.952148][ T6618] do_sendfile+0x37d/0x640 [ 78.952165][ T6618] __x64_sys_sendfile64+0x105/0x150 [ 78.952200][ T6618] x64_sys_call+0x1015/0x2550 [ 78.952230][ T6618] do_syscall_64+0x112/0x360 [ 78.952260][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.952286][ T6618] [ 78.952293][ T6618] write to 0xffff8881095348e0 of 8 bytes by task 6618 on cpu 0: [ 78.952313][ T6618] shmem_file_splice_read+0x401/0x590 [ 78.952351][ T6618] splice_direct_to_actor+0x261/0x680 [ 78.952390][ T6618] do_splice_direct+0x119/0x1a0 [ 78.952430][ T6618] do_sendfile+0x37d/0x640 [ 78.952447][ T6618] __x64_sys_sendfile64+0x105/0x150 [ 78.952482][ T6618] x64_sys_call+0x1015/0x2550 [ 78.952508][ T6618] do_syscall_64+0x112/0x360 [ 78.952533][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.952558][ T6618] [ 78.952562][ T6618] value changed: 0x0000000000000b27 -> 0x0000000000000b2f [ 78.952576][ T6618] [ 78.952581][ T6618] Reported by Kernel Concurrency Sanitizer on: [ 78.952594][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.1030 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.952624][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.952640][ T6618] ================================================================== [ 79.046178][ T6637] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1034'.