last executing test programs: 3.738169535s ago: executing program 3 (id=851): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) fchdir(r1) poll(&(0x7f0000000000)=[{r6, 0x80}, {r5, 0x8403}, {r6, 0x80}, {r5, 0x8}], 0x4, 0x9) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r7, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) 3.700415737s ago: executing program 4 (id=853): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400000000009}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1c, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x1e, &(0x7f0000000c80)=""/30, 0x1e00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2b3d3, 0xffffffffffffffff, 0x3, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x5, 0x3, 0xb}, {0x4, 0x2, 0x1, 0x2}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) setresgid(0x0, 0xee01, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x1, 0x0) write$P9_RGETATTR(r4, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x0, {0x4, 0x4, 0x1}, 0x50, 0x0, 0x0, 0x12, 0x0, 0xa, 0x8, 0x9, 0x3, 0x3, 0x9, 0x5, 0x8, 0x7f, 0x1, 0x209, 0x3f1, 0x2}}, 0xa0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x400, {{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x5}}, 0x1}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x4004) ioprio_set$pid(0x1, r0, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x3f) 2.732612882s ago: executing program 2 (id=856): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) 2.429248526s ago: executing program 0 (id=859): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.305579702s ago: executing program 4 (id=862): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x8000001, 0x9, 0x0, 0x7, 0x3, 0xffffffff, 0xc5f7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1}, 0x20003ff1}], 0x1, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00004c9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x4000c89f, 0xc000, 0x0, 0x3c1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r5 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffb9) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) close(0x3) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x110, 0x2, 0x0, 0x5392f5b1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 2.282298223s ago: executing program 0 (id=864): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01") 2.194426247s ago: executing program 1 (id=865): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000002540)=[{&(0x7f0000000140)=""/149, 0x95}], 0x1, 0x9, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (fail_nth: 4) 2.194135617s ago: executing program 1 (id=866): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000002540)=[{&(0x7f0000000140)=""/149, 0x95}], 0x1, 0x9, 0x8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @rand_addr=' \x01\x00'}}}}}}, 0x0) syz_clone(0xbb083000, 0x0, 0xdcbd779fe612d4ee, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000008) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) 2.192192737s ago: executing program 3 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x31d141, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0xfffffbcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x48}, {0x6, 0xba, 0x2, 0x5}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cb3368129330fc3f083308bc7dcf800"}) sendmsg(r4, 0x0, 0x48814) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) socket(0x15, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x0, 0x7, 0x1) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xdffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029bc0a092f330d17d2fffffb00000000"], 0x18}, 0xc4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 2.191821367s ago: executing program 4 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.142200039s ago: executing program 0 (id=869): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff}, 0x0, 0x10000, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000001800)='4\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = gettid() tkill(r7, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 2.12060498s ago: executing program 4 (id=870): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x5, 0xff, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3fffffffc}, 0x904, 0x10000000, 0x0, 0x1, 0x2000000fff, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3fd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f0000000580)=@raw=[@exit, @ldst={0x3, 0x1, 0xd0d4b0d3b0ccdae, 0x9, 0xb, 0x9, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2c}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x6, 0x800005, 0x1000, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 2.058230233s ago: executing program 1 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}], {0x14}}, 0x54}}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x2, 0x7ff, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x649}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x8001) 1.961499918s ago: executing program 1 (id=872): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000001c0)='(', 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x4048001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xc74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048864}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000) socket$nl_audit(0x10, 0x3, 0x9) 1.587276515s ago: executing program 2 (id=873): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x2, 0x9, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r1 = accept$inet(r0, 0x0, &(0x7f0000000200)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000240), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@random="bf2419fa617c", @dev={0xac, 0x14, 0x14, 0x31}, @empty, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @loopback, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local, @rand_addr=0x64010101, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x2000000, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000000)) utimensat(r0, &(0x7f0000000140)='./tracing\x00', &(0x7f00000001c0)={{r3, r4/1000+60000}, {0x0, 0x2710}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x401, 0x2167, 0x5, 0xfffffffe, 0x2, 0x0, 0x0, 0xffffdffe}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)) write(r7, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) 1.385199125s ago: executing program 1 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0xf8c8, 0x0, 0x2000000, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x113663, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xc, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x100000000}, 0x11ecca, 0x4001224, 0xfffffffb, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r5, 0x89f3, 0x20001116) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x54}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfe4) io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.305518419s ago: executing program 2 (id=875): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x5, 0xff, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3fffffffc}, 0x904, 0x10000000, 0x0, 0x1, 0x2000000fff, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3fd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x6, 0x800005, 0x1000, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.292396719s ago: executing program 3 (id=876): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1.171106165s ago: executing program 2 (id=877): getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getgroups(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x81, 0x4) readv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0xfdef}, {0x0, 0x4000}], 0x2) getpid() 1.169535235s ago: executing program 4 (id=878): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xae}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x240001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x12, "ec28a144f13d7607"}) (async) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x12, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="bd78ef47de7f0f54279f22dfdb9ebd599da44a76429537bf881cde24a0c484641b3d3f36f914d790b48838ae4388fbbec7b21b155864530e15b368ea7bfc780c81721a76befb56498c228aab22faff5ff7ada40e579c839cc3a836dfdc6eef6968552987a975285f69cbdc79c9d75a54248e62f5b53d647578183886d7840fc5b451d3173d7e0150b1bd27ebd5398a8a5312429b343b61e17e9d13c230fcf6c5"], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7c, 0x0, 0x2, 0x10, "1b09000440800000000004e678000003101000"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7c, 0x0, 0x2, 0x10, "1b09000440800000000004e678000003101000"}) r5 = syz_open_pts(r4, 0x20800) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$eJzs289qE10Yx/Ff+/a1tbWd+K/agvigG90MbbyCIC2IAaU2ooLC1E40ZExKZqhExHbnVvAuikt3ingD3bjyAtx1I7jpQhzJZNombUS6sIP2+9mcp5z+wjk5T8JZZDbuvHpSLYdu2YvU32fql1a1KeVaVaovHfuT+og6rery62+fz926e+96oVicmTObLcxfyZvZ2PkPT5+/ufAxGrn9duzdoNZzDza+5r+sj69PbPyYf1wJrRJarR6ZZwv1euQtBL4tVsKqa3Yz8L3Qt0ot9Btd8+WgvrTUNK+2ODq81PDD0Lxa06p+06K6RY2meY+8Ss1c17XRYeF3Smtzc14h61Xgz2o0Ct6MpMk9M6W1TBYEAAAyxf3/MOP+fxi07v/3089vN+7/AAAAAAAAAAAAAAAAAAAAAAD8DTbj2Inj2Nka/5eSJ3zi9O+jkoYljUg6JmlU0pgkR1JO0nFJJySdlHRK0mlJ45LOSDoraaLjtbLeK/bi/A+3jgf3hqTg5XJpudQe2/OFsioK5GtKjr4nZ5lq17PXijNTlsjpfbCS5leWS/9156fltBqmV366nbfu/GDSd9v5vJxWg/XK53vmh3TpYkfelaNPD1VXoMWkJ3fyL6bNrt4o7spPJv/3r3NtW8/zc91fzbfz++iPXe/vgCYHst07pLD5rOoFgd+goKCg2C6y/mbCQdg59KxXAgAAAAAAAAAAAAAAAADYj4P4OWHWewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/AwAAP//cgEz4A==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) (async) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x0, 0x0, &(0x7f000000abc0)) (async) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x0, 0x0, &(0x7f000000abc0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02f44cc97389614eed6040ce1521e3bd39de8c57a558e91f"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x8080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000180)=0x8003, 0x12) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) 1.087799359s ago: executing program 0 (id=879): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="040000000200000000000000") 1.0491754s ago: executing program 3 (id=880): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x4}, 0x8) 1.040160901s ago: executing program 2 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x80000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="020000c8d791e75e7de78300040006000000000008000200", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x80, 0xffffffff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1008000e0e) 1.022525332s ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}], {0x14}}, 0x54}}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x2, 0x7ff, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) 938.415146ms ago: executing program 3 (id=883): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) 201.0355ms ago: executing program 4 (id=884): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x5, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0xb, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000004400128009000100766c616e00000000340002800600010004000000280003800c00010001800000ffff00000c00010001000000040000000c000100010001000700000008000500", @ANYRES32=r4, @ANYBLOB="4fb2cc9f37b3608d37e797c29eb4c609a1bf234d6a7635aa9e46efb62b0d9d578f57a1d5d6369dd864ab70d3584bc143aa161ff6"], 0x6c}, 0x1, 0x0, 0x0, 0x6c051}, 0x8000) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 112.119074ms ago: executing program 0 (id=885): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x1000, 0xef, 0x3, 0xc, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x49}}], 0x88, 0x4008090}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 46.300438ms ago: executing program 3 (id=886): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x1000, 0xef, 0x3, 0xc, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x49}}], 0x88, 0x4008090}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 30.436408ms ago: executing program 1 (id=887): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x5, 0xff, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3fffffffc}, 0x904, 0x10000000, 0x0, 0x1, 0x2000000fff, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3fd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x6, 0x800005, 0x1000, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30041002}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r5 = io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x181200, 0xd) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") stat(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) recvmmsg(r6, &(0x7f0000002b00)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001380)}, 0x200}, {{&(0x7f00000013c0)=@nfc, 0x80, &(0x7f0000002840)=[{&(0x7f0000001440)}, {&(0x7f0000001480)=""/128, 0x80}, {&(0x7f0000001500)=""/181, 0xb5}, {&(0x7f0000001780)=""/164, 0xa4}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5}, 0x10}, {{&(0x7f00000015c0)=@isdn, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002940)=""/50, 0x32}, {&(0x7f0000002980)=""/30, 0x1e}, {&(0x7f00000029c0)=""/61, 0x3d}, {&(0x7f0000002a00)=""/101, 0x65}], 0x4, &(0x7f0000002ac0)}, 0x8}], 0x3, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) kernel console output (not intermixed with test programs): b [ 82.068770][ T4511] should_fail_ex+0x262/0x280 [ 82.068793][ T4511] ? skb_clone+0x151/0x1f0 [ 82.068852][ T4511] should_failslab+0x8c/0xb0 [ 82.068880][ T4511] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.068937][ T4511] ? skb_clone+0x151/0x1f0 [ 82.068961][ T4511] skb_clone+0x151/0x1f0 [ 82.069047][ T4511] __netlink_deliver_tap+0x2be/0x510 [ 82.069079][ T4511] netlink_sendskb+0x126/0x150 [ 82.069163][ T4511] netlink_unicast+0x287/0x680 [ 82.069205][ T4511] netlink_ack+0x4fe/0x530 [ 82.069240][ T4511] netlink_rcv_skb+0x18d/0x220 [ 82.069284][ T4511] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 82.069313][ T4511] nfnetlink_rcv+0x15f/0x1740 [ 82.069342][ T4511] ? kmem_cache_free+0x106/0x3b0 [ 82.069379][ T4511] ? __kfree_skb+0x109/0x150 [ 82.069435][ T4511] ? nlmon_xmit+0x4f/0x60 [ 82.069475][ T4511] ? consume_skb+0x4b/0x130 [ 82.069503][ T4511] ? nlmon_xmit+0x4f/0x60 [ 82.069525][ T4511] ? dev_hard_start_xmit+0x34e/0x380 [ 82.069579][ T4511] ? __dev_queue_xmit+0x1361/0x1e90 [ 82.069601][ T4511] ? __dev_queue_xmit+0x151/0x1e90 [ 82.069627][ T4511] ? ref_tracker_free+0x380/0x3f0 [ 82.069650][ T4511] ? skb_clone+0x151/0x1f0 [ 82.069729][ T4511] ? __netlink_deliver_tap+0x4e6/0x510 [ 82.069766][ T4511] netlink_unicast+0x5a9/0x680 [ 82.069826][ T4511] netlink_sendmsg+0x5be/0x6f0 [ 82.069856][ T4511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.069890][ T4511] ____sys_sendmsg+0x532/0x580 [ 82.069948][ T4511] ___sys_sendmsg+0x195/0x1e0 [ 82.070066][ T4511] __x64_sys_sendmsg+0xd4/0x160 [ 82.070090][ T4511] x64_sys_call+0x22ab/0x2550 [ 82.070190][ T4511] do_syscall_64+0x112/0x360 [ 82.070249][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.070336][ T4511] RIP: 0033:0x7fabbbb8e159 [ 82.070353][ T4511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.070373][ T4511] RSP: 002b:00007fabba5e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.070397][ T4511] RAX: ffffffffffffffda RBX: 00007fabbbe15fa0 RCX: 00007fabbbb8e159 [ 82.070412][ T4511] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 82.070497][ T4511] RBP: 00007fabba5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.070509][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.070522][ T4511] R13: 00007fabbbe16038 R14: 00007fabbbe15fa0 R15: 00007ffcf9352cd8 [ 82.070631][ T4511] [ 82.219007][ T4513] FAULT_INJECTION: forcing a failure. [ 82.219007][ T4513] name failslab, interval 1, probability 0, space 0, times 0 [ 82.219052][ T4513] CPU: 0 UID: 0 PID: 4513 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.219141][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.219153][ T4513] Call Trace: [ 82.219160][ T4513] [ 82.219168][ T4513] __dump_stack+0x1d/0x30 [ 82.219250][ T4513] dump_stack_lvl+0x95/0xd0 [ 82.219307][ T4513] dump_stack+0x15/0x1b [ 82.219328][ T4513] should_fail_ex+0x262/0x280 [ 82.219354][ T4513] ? do_getname+0x2e/0x1c0 [ 82.219375][ T4513] should_failslab+0x8c/0xb0 [ 82.219419][ T4513] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.219448][ T4513] ? __pfx_futex_wake_mark+0x10/0x10 [ 82.219494][ T4513] ? do_getname+0x2e/0x1c0 [ 82.219516][ T4513] do_getname+0x2e/0x1c0 [ 82.219537][ T4513] getname_flags+0x1d/0x30 [ 82.219599][ T4513] __se_sys_newlstat+0x48/0x3f0 [ 82.219628][ T4513] ? __se_sys_futex+0x2f6/0x370 [ 82.219656][ T4513] ? xfd_validate_state+0x45/0xf0 [ 82.219685][ T4513] ? restore_fpregs_from_fpstate+0x61/0x110 [ 82.219736][ T4513] __x64_sys_newlstat+0x31/0x40 [ 82.219814][ T4513] x64_sys_call+0x23ea/0x2550 [ 82.219840][ T4513] do_syscall_64+0x112/0x360 [ 82.219942][ T4513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.219965][ T4513] RIP: 0033:0x7f2288b4e159 [ 82.220001][ T4513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.220020][ T4513] RSP: 002b:00007f22875a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 82.220043][ T4513] RAX: ffffffffffffffda RBX: 00007f2288dd5fa0 RCX: 00007f2288b4e159 [ 82.220058][ T4513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 82.220072][ T4513] RBP: 00007f2288be506b R08: 0000000000000000 R09: 0000000000000000 [ 82.220086][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.220132][ T4513] R13: 00007f2288dd6038 R14: 00007f2288dd5fa0 R15: 00007ffd506e3f98 [ 82.220215][ T4513] [ 82.346633][ T4493] loop1: detected capacity change from 0 to 1024 [ 82.495479][ T4520] loop0: detected capacity change from 0 to 764 [ 82.495855][ T4520] iso9660: Unknown parameter 'uidZ$ßW¾? 4|4Äïêš|' [ 82.602711][ T4528] FAT-fs (loop0): bogus sectors per cluster 7 [ 82.602733][ T4528] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 82.602823][ T4528] FAT-fs (loop0): Can't find a valid FAT filesystem [ 82.641091][ T4528] netlink: 'syz.0.283': attribute type 3 has an invalid length. [ 82.732723][ T4537] tipc: Enabling of bearer rejected, failed to enable media [ 82.775859][ T4537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.775950][ T4537] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.884133][ T4534] netlink: 48 bytes leftover after parsing attributes in process `syz.4.284'. [ 83.131552][ T4493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.323198][ T4553] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 83.323272][ T4553] File: /55/file1/file1 PID: 4553 Comm: syz.1.267 [ 83.350332][ T4548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.288'. [ 83.471333][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.541164][ T4564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.290'. [ 83.658810][ T4567] set_capacity_and_notify: 2 callbacks suppressed [ 83.658832][ T4567] loop1: detected capacity change from 0 to 1024 [ 83.682910][ T4567] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 83.683064][ T4567] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.684871][ T4567] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.293: iget: special inode unallocated [ 83.684901][ T4567] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 83.686324][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.686354][ C1] EXT4-fs (loop1): initial error at time 1789513414: ext4_get_journal_inode:5927: inode 32 [ 83.686386][ C1] EXT4-fs (loop1): last error at time 1789513414: ext4_get_journal_inode:5927: inode 32 [ 83.688948][ T4567] EXT4-fs (loop1): Remounting filesystem read-only [ 83.689049][ T4567] EXT4-fs (loop1): no journal found [ 83.689061][ T4567] EXT4-fs (loop1): can't get journal size [ 83.689531][ T4567] EXT4-fs (loop1): filesystem is read-only [ 83.689967][ T4567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.846739][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.876221][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 83.876239][ T29] audit: type=1400 audit(1789513415.051:594): avc: denied { create } for pid=4577 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.889192][ T29] audit: type=1400 audit(1789513415.071:595): avc: denied { connect } for pid=4577 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.893938][ T29] audit: type=1400 audit(1789513415.071:596): avc: denied { setopt } for pid=4577 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.905469][ T4578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.298'. [ 84.160173][ T4588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.300'. [ 84.379451][ T4590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.738929][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 84.894094][ T29] audit: type=1400 audit(1789513416.071:597): avc: denied { mounton } for pid=4604 comm="syz.1.309" path="/60/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.894616][ T29] audit: type=1400 audit(1789513416.071:598): avc: denied { write } for pid=4604 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.927927][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.358546][ T4608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.310'. [ 85.633329][ T4625] FAULT_INJECTION: forcing a failure. [ 85.633329][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 85.633371][ T4625] CPU: 0 UID: 0 PID: 4625 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.633398][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.633412][ T4625] Call Trace: [ 85.633469][ T4625] [ 85.633479][ T4625] __dump_stack+0x1d/0x30 [ 85.633514][ T4625] dump_stack_lvl+0x95/0xd0 [ 85.633538][ T4625] dump_stack+0x15/0x1b [ 85.633561][ T4625] should_fail_ex+0x262/0x280 [ 85.633589][ T4625] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 85.633616][ T4625] should_failslab+0x8c/0xb0 [ 85.633648][ T4625] __kmalloc_noprof+0xd0/0x4d0 [ 85.633761][ T4625] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 85.633789][ T4625] kernfs_fop_write_iter+0xd4/0x2e0 [ 85.633815][ T4625] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 85.633853][ T4625] vfs_write+0x57f/0x9a0 [ 85.633894][ T4625] ksys_write+0xdc/0x1a0 [ 85.633925][ T4625] __x64_sys_write+0x40/0x50 [ 85.633955][ T4625] x64_sys_call+0x154e/0x2550 [ 85.633994][ T4625] do_syscall_64+0x112/0x360 [ 85.634037][ T4625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.634061][ T4625] RIP: 0033:0x7fb0f14de159 [ 85.634079][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.634170][ T4625] RSP: 002b:00007fb0eff37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.634194][ T4625] RAX: ffffffffffffffda RBX: 00007fb0f1765fa0 RCX: 00007fb0f14de159 [ 85.634210][ T4625] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 85.634224][ T4625] RBP: 00007fb0eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 85.634239][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.634252][ T4625] R13: 00007fb0f1766038 R14: 00007fb0f1765fa0 R15: 00007fffa848ff38 [ 85.634341][ T4625] [ 85.683845][ T29] audit: type=1400 audit(1789513416.861:599): avc: denied { perfmon } for pid=4626 comm="syz.3.315" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.689800][ T29] audit: type=1400 audit(1789513416.871:600): avc: denied { bpf } for pid=4626 comm="syz.3.315" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.719869][ T29] audit: type=1400 audit(1789513416.901:601): avc: denied { write } for pid=4604 comm="syz.1.309" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.934064][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 86.013757][ T29] audit: type=1400 audit(1789513417.191:602): avc: denied { append } for pid=4640 comm="syz.1.320" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.021607][ T29] audit: type=1400 audit(1789513417.201:603): avc: denied { read write } for pid=4640 comm="syz.1.320" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.022977][ T4641] WARNING! power/level is deprecated; use power/control instead [ 87.099546][ T4638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.115670][ T4638] bridge1: left promiscuous mode [ 87.115693][ T4638] bridge1: left allmulticast mode [ 87.218017][ T4667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.323'. [ 87.222405][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 88.393221][ T4685] loop2: detected capacity change from 0 to 512 [ 88.404967][ T4686] loop1: detected capacity change from 0 to 512 [ 88.420647][ T4685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.420739][ T4685] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.453153][ T4686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.453212][ T4686] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.518225][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.559567][ T4693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 88.561492][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.592318][ T4693] veth3: entered allmulticast mode [ 88.855004][ T4703] loop0: detected capacity change from 0 to 512 [ 88.855655][ T4703] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.855728][ T4703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.857246][ T4703] EXT4-fs (loop0): 1 truncate cleaned up [ 88.857751][ T4703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.909360][ T4703] EXT4-fs (loop0): shut down requested (0) [ 88.917415][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 88.917431][ T29] audit: type=1400 audit(1789513420.101:609): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.917472][ T29] audit: type=1400 audit(1789513420.101:610): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.917495][ T29] audit: type=1400 audit(1789513420.101:611): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.917522][ T29] audit: type=1400 audit(1789513420.101:612): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.917589][ T29] audit: type=1400 audit(1789513420.101:613): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.917611][ T29] audit: type=1400 audit(1789513420.101:614): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.917717][ T29] audit: type=1400 audit(1789513420.101:615): avc: denied { getattr } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.976211][ T4703] FAULT_INJECTION: forcing a failure. [ 88.976211][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 88.976241][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.976324][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.976337][ T4703] Call Trace: [ 88.976408][ T4703] [ 88.976417][ T4703] __dump_stack+0x1d/0x30 [ 88.976443][ T4703] dump_stack_lvl+0x95/0xd0 [ 88.976466][ T4703] dump_stack+0x15/0x1b [ 88.976493][ T4703] should_fail_ex+0x262/0x280 [ 88.976518][ T4703] ? do_getname+0x2e/0x1c0 [ 88.976538][ T4703] should_failslab+0x8c/0xb0 [ 88.976568][ T4703] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 88.976642][ T4703] ? __fget_files+0x184/0x1c0 [ 88.976663][ T4703] ? do_getname+0x2e/0x1c0 [ 88.976684][ T4703] do_getname+0x2e/0x1c0 [ 88.976745][ T4703] __se_sys_mknod+0x21/0xf0 [ 88.976774][ T4703] __x64_sys_mknod+0x43/0x50 [ 88.976804][ T4703] x64_sys_call+0x14db/0x2550 [ 88.976908][ T4703] do_syscall_64+0x112/0x360 [ 88.977018][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.977057][ T4703] RIP: 0033:0x7f21d66ee159 [ 88.977074][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.977093][ T4703] RSP: 002b:00007f21d5147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 88.977115][ T4703] RAX: ffffffffffffffda RBX: 00007f21d6975fa0 RCX: 00007f21d66ee159 [ 88.977130][ T4703] RDX: 0000000000000700 RSI: 0000000000000004 RDI: 00002000000001c0 [ 88.977144][ T4703] RBP: 00007f21d5147090 R08: 0000000000000000 R09: 0000000000000000 [ 88.977195][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.977209][ T4703] R13: 00007f21d6976038 R14: 00007f21d6975fa0 R15: 00007ffe295cdb18 [ 88.977228][ T4703] [ 89.089009][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.216766][ T4713] loop1: detected capacity change from 0 to 512 [ 89.236543][ T4713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.246933][ T29] audit: type=1400 audit(1789513420.431:616): avc: denied { connect } for pid=4706 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.255162][ T4713] EXT4-fs (loop1): 1 truncate cleaned up [ 89.255741][ T4713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.275318][ T29] audit: type=1400 audit(1789513420.461:617): avc: denied { watch watch_reads } for pid=4705 comm="syz.1.338" path="/proc/223" dev="proc" ino=9353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.294596][ T29] audit: type=1400 audit(1789513420.481:618): avc: denied { shutdown } for pid=4706 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.407321][ T4722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.340'. [ 89.505525][ T4726] loop4: detected capacity change from 0 to 512 [ 89.506328][ T4721] EXT4-fs (loop1): shut down requested (0) [ 89.535524][ T4726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.535648][ T4726] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.583698][ T4732] capability: warning: `syz.0.345' uses deprecated v2 capabilities in a way that may be insecure [ 89.644417][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.064203][ T4740] bond1: left promiscuous mode [ 90.064707][ T4740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.070582][ T4740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.074840][ T4740] veth3: left allmulticast mode [ 90.384399][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.571575][ T4749] loop2: detected capacity change from 0 to 1024 [ 90.576447][ T4749] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.576505][ T4749] EXT4-fs: Ignoring removed oldalloc option [ 90.587990][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.588052][ T4749] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.905164][ T4765] veth5: entered allmulticast mode [ 91.040183][ T4771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.355'. [ 91.078695][ T4758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.349: bg 0: block 112: padding at end of block bitmap is not set [ 91.083777][ T4773] loop3: detected capacity change from 0 to 512 [ 91.121699][ T4773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.121769][ T4773] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.211654][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.339054][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.676009][ T4806] ./dev/sda1: Can't lookup blockdev [ 91.725448][ T4806] FAULT_INJECTION: forcing a failure. [ 91.725448][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 91.725480][ T4806] CPU: 0 UID: 0 PID: 4806 Comm: syz.2.361 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.725507][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.725521][ T4806] Call Trace: [ 91.725528][ T4806] [ 91.725537][ T4806] __dump_stack+0x1d/0x30 [ 91.725569][ T4806] dump_stack_lvl+0x95/0xd0 [ 91.725595][ T4806] dump_stack+0x15/0x1b [ 91.725618][ T4806] should_fail_ex+0x262/0x280 [ 91.725645][ T4806] ? alloc_pipe_info+0xad/0x340 [ 91.725737][ T4806] should_failslab+0x8c/0xb0 [ 91.725783][ T4806] __kmalloc_cache_noprof+0x7a/0x400 [ 91.725899][ T4806] ? alloc_pipe_info+0xad/0x340 [ 91.725934][ T4806] alloc_pipe_info+0xad/0x340 [ 91.725962][ T4806] splice_direct_to_actor+0x593/0x680 [ 91.725982][ T4806] ? kstrtouint_from_user+0xa8/0xf0 [ 91.726082][ T4806] ? __pfx_direct_splice_actor+0x10/0x10 [ 91.726105][ T4806] ? __rcu_read_unlock+0x4e/0x70 [ 91.726186][ T4806] ? get_pid_task+0x92/0xc0 [ 91.726209][ T4806] ? avc_policy_seqno+0x15/0x30 [ 91.726276][ T4806] do_splice_direct+0x119/0x1a0 [ 91.726299][ T4806] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 91.726327][ T4806] do_sendfile+0x37d/0x640 [ 91.726353][ T4806] __x64_sys_sendfile64+0x105/0x150 [ 91.726468][ T4806] x64_sys_call+0x1015/0x2550 [ 91.726514][ T4806] do_syscall_64+0x112/0x360 [ 91.726559][ T4806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.726584][ T4806] RIP: 0033:0x7fabbbb8e159 [ 91.726604][ T4806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.726644][ T4806] RSP: 002b:00007fabba5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.726748][ T4806] RAX: ffffffffffffffda RBX: 00007fabbbe16090 RCX: 00007fabbbb8e159 [ 91.726765][ T4806] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 91.726780][ T4806] RBP: 00007fabba5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.726795][ T4806] R10: 0000040000000800 R11: 0000000000000246 R12: 0000000000000001 [ 91.726818][ T4806] R13: 00007fabbbe16128 R14: 00007fabbbe16090 R15: 00007ffcf9352cd8 [ 91.726909][ T4806] [ 92.327710][ T4816] loop2: detected capacity change from 0 to 128 [ 92.342177][ T4816] FAT-fs (loop2): bogus sectors per cluster 7 [ 92.342211][ T4816] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 92.342239][ T4816] FAT-fs (loop2): Can't find a valid FAT filesystem [ 92.487441][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.364'. [ 92.718888][ T4824] loop0: detected capacity change from 0 to 512 [ 92.735291][ T4822] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 92.735336][ T4822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 92.741835][ T4824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.741909][ T4824] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.784303][ T4826] loop3: detected capacity change from 0 to 512 [ 92.810208][ T4826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.810351][ T4826] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.846152][ T4822] bridge0: port 3(team0) entered blocking state [ 92.846657][ T4822] bridge0: port 3(team0) entered disabled state [ 92.846904][ T4822] team0: entered allmulticast mode [ 92.846939][ T4822] team_slave_0: entered allmulticast mode [ 92.846970][ T4822] team_slave_1: entered allmulticast mode [ 92.863988][ T4822] team0: entered promiscuous mode [ 92.864036][ T4822] team_slave_0: entered promiscuous mode [ 92.864255][ T4822] team_slave_1: entered promiscuous mode [ 92.902145][ T4822] bridge0: port 3(team0) entered blocking state [ 92.902292][ T4822] bridge0: port 3(team0) entered forwarding state [ 93.009557][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.043863][ T4750] loop1: detected capacity change from 0 to 1024 [ 93.136510][ T4838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 93.196542][ T4838] veth5: entered allmulticast mode [ 93.411570][ T4750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.516353][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.762472][ T4855] netlink: 'syz.1.374': attribute type 3 has an invalid length. [ 93.762619][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 94.150071][ T4861] loop4: detected capacity change from 0 to 128 [ 94.150555][ T4861] FAT-fs (loop4): bogus sectors per cluster 7 [ 94.150575][ T4861] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 94.150591][ T4861] FAT-fs (loop4): Can't find a valid FAT filesystem [ 94.347345][ T4861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.375'. [ 94.759035][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 94.759062][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 94.925946][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 94.925975][ T29] audit: type=1400 audit(1789513426.101:632): avc: denied { create } for pid=4876 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.961712][ T29] audit: type=1400 audit(1789513426.141:633): avc: denied { setopt } for pid=4876 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.815608][ T4918] netlink: 392 bytes leftover after parsing attributes in process `syz.1.393'. [ 96.867961][ T29] audit: type=1400 audit(1789513428.051:634): avc: denied { kexec_image_load } for pid=4917 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.341125][ T4929] FAULT_INJECTION: forcing a failure. [ 97.341125][ T4929] name failslab, interval 1, probability 0, space 0, times 0 [ 97.341318][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: syz.4.397 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.341352][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.341366][ T4929] Call Trace: [ 97.341374][ T4929] [ 97.341383][ T4929] __dump_stack+0x1d/0x30 [ 97.341455][ T4929] dump_stack_lvl+0x95/0xd0 [ 97.341482][ T4929] dump_stack+0x15/0x1b [ 97.341507][ T4929] should_fail_ex+0x262/0x280 [ 97.341535][ T4929] ? do_getname+0x2e/0x1c0 [ 97.341557][ T4929] should_failslab+0x8c/0xb0 [ 97.341684][ T4929] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 97.341711][ T4929] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.341741][ T4929] ? do_getname+0x2e/0x1c0 [ 97.341831][ T4929] do_getname+0x2e/0x1c0 [ 97.341851][ T4929] getname_flags+0x1d/0x30 [ 97.341869][ T4929] __se_sys_newlstat+0x48/0x3f0 [ 97.341971][ T4929] ? __se_sys_futex+0x2f6/0x370 [ 97.341998][ T4929] ? xfd_validate_state+0x45/0xf0 [ 97.342031][ T4929] ? restore_fpregs_from_fpstate+0x61/0x110 [ 97.342105][ T4929] __x64_sys_newlstat+0x31/0x40 [ 97.342196][ T4929] x64_sys_call+0x23ea/0x2550 [ 97.342228][ T4929] do_syscall_64+0x112/0x360 [ 97.342262][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.342346][ T4929] RIP: 0033:0x7f2288b4e159 [ 97.342363][ T4929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.342383][ T4929] RSP: 002b:00007f22875a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 97.342405][ T4929] RAX: ffffffffffffffda RBX: 00007f2288dd5fa0 RCX: 00007f2288b4e159 [ 97.342418][ T4929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 97.342434][ T4929] RBP: 00007f2288be506b R08: 0000000000000000 R09: 0000000000000000 [ 97.342450][ T4929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.342466][ T4929] R13: 00007f2288dd6038 R14: 00007f2288dd5fa0 R15: 00007ffd506e3f98 [ 97.342490][ T4929] [ 97.488344][ T4935] loop2: detected capacity change from 0 to 512 [ 97.567431][ T4935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.567606][ T4935] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.689604][ T29] audit: type=1400 audit(1789513428.871:635): avc: denied { write } for pid=4934 comm="syz.2.398" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.939787][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.244031][ T4949] tipc: Enabling of bearer rejected, failed to enable media [ 98.258563][ T4949] loop2: detected capacity change from 0 to 512 [ 98.281130][ T4949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.281209][ T4949] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.532460][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.133469][ T4968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.407'. [ 99.310215][ T4972] IPv6: sit1: Disabled Multicast RS [ 99.740442][ T4982] veth5: left allmulticast mode [ 100.897755][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.117380][ T5016] smc: net device vlan1 applied user defined pnetid SYZ2 [ 102.120616][ T5018] smc: net device vlan1 erased user defined pnetid SYZ2 [ 102.287707][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.421'. [ 102.394330][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.395137][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.081450][ T5044] loop2: detected capacity change from 0 to 1024 [ 104.232174][ T5044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.280858][ T29] audit: type=1400 audit(1789513435.461:636): avc: denied { write } for pid=5042 comm="syz.2.424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.280892][ T29] audit: type=1400 audit(1789513435.461:637): avc: denied { create } for pid=5042 comm="syz.2.424" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.781412][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.973109][ T5057] IPv6: sit1: Disabled Multicast RS [ 105.101519][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.101568][ T5060] bridge0: port 2(bridge_slave_1) entered listening state [ 105.101774][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.101805][ T5060] bridge0: port 1(bridge_slave_0) entered listening state [ 105.508821][ T29] audit: type=1400 audit(1789513436.691:638): avc: denied { create } for pid=5061 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.509516][ T29] audit: type=1400 audit(1789513436.691:639): avc: denied { getopt } for pid=5061 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.819583][ T5070] loop0: detected capacity change from 0 to 512 [ 105.850227][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.850397][ T5070] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.897538][ T29] audit: type=1400 audit(1789513437.081:640): avc: denied { write } for pid=5069 comm="syz.0.432" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.995741][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.028788][ T5079] loop0: detected capacity change from 0 to 512 [ 106.035279][ T5079] batadv_slave_0: entered promiscuous mode [ 106.049385][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 106.049470][ T5079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.075353][ T5079] batadv_slave_0 (unregistering): left promiscuous mode [ 106.075395][ T5079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.148402][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.198899][ T5082] veth3: entered allmulticast mode [ 106.478514][ T5095] loop4: detected capacity change from 0 to 1024 [ 106.499892][ T5095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.502572][ T29] audit: type=1400 audit(1789513437.681:641): avc: denied { write } for pid=5090 comm="syz.4.438" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.511168][ T5097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.439'. [ 106.731025][ T5092] loop2: detected capacity change from 0 to 1024 [ 106.947475][ T5103] loop0: detected capacity change from 0 to 1024 [ 107.008510][ T5092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.037216][ T29] audit: type=1400 audit(1789513438.221:642): avc: denied { write } for pid=5088 comm="syz.2.436" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.077281][ T5103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.104459][ T29] audit: type=1400 audit(1789513438.281:643): avc: denied { write } for pid=5099 comm="syz.0.440" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.156348][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 107.156437][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 107.209453][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.286935][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.595205][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.749393][ T5121] loop4: detected capacity change from 0 to 512 [ 107.822360][ T5121] loop4: detected capacity change from 0 to 512 [ 107.833797][ T5121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.833896][ T5121] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.950993][ T29] audit: type=1400 audit(1789513439.131:644): avc: denied { block_suspend } for pid=5120 comm="syz.4.445" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.183372][ T5147] loop0: detected capacity change from 0 to 1024 [ 108.193209][ T5147] EXT4-fs: Ignoring removed bh option [ 108.241935][ T5147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.667078][ T5160] loop2: detected capacity change from 0 to 1024 [ 108.706378][ T5160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.725689][ T29] audit: type=1400 audit(1789513439.901:645): avc: denied { write } for pid=5154 comm="syz.2.455" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.236358][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.236383][ C1] bridge0: topology change detected, propagating [ 109.236459][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.236489][ C1] bridge0: topology change detected, propagating [ 109.349893][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.464905][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.564663][ T5167] loop1: detected capacity change from 0 to 1024 [ 109.621343][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.628102][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 109.628119][ T29] audit: type=1400 audit(1789513440.811:650): avc: denied { write } for pid=5165 comm="syz.1.456" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.811340][ T5183] loop0: detected capacity change from 0 to 128 [ 109.817442][ T5181] loop2: detected capacity change from 0 to 1024 [ 109.847281][ T5183] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.847862][ T5183] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.860119][ T29] audit: type=1400 audit(1789513441.041:651): avc: denied { write } for pid=5182 comm="syz.0.460" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.870422][ T29] audit: type=1400 audit(1789513441.051:652): avc: denied { read write open } for pid=5182 comm="syz.0.460" path="/82/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.871320][ T29] audit: type=1400 audit(1789513441.051:653): avc: denied { setattr } for pid=5182 comm="syz.0.460" path="/82/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.873558][ T29] audit: type=1400 audit(1789513441.051:654): avc: denied { map } for pid=5182 comm="syz.0.460" path="/82/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.873706][ T29] audit: type=1400 audit(1789513441.051:655): avc: denied { execute } for pid=5182 comm="syz.0.460" path="/82/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.892688][ T5181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.963211][ T29] audit: type=1400 audit(1789513441.141:656): avc: denied { ioctl } for pid=5182 comm="syz.0.460" path="/82/file1/file1" dev="loop0" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.982461][ T29] audit: type=1400 audit(1789513441.141:657): avc: denied { write } for pid=5175 comm="syz.2.459" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.100343][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.124050][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.170455][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 110.216716][ T5195] veth7: entered allmulticast mode [ 110.217895][ T5195] bond2: (slave veth7): Enslaving as an active interface with an up link [ 110.277882][ T5198] IPv6: sit1: Disabled Multicast RS [ 110.511823][ T5209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.467'. [ 110.511996][ T5209] bridge0: port 3(team0) entered disabled state [ 110.512077][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.512286][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.573941][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.007623][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.313811][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 111.411593][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 111.499975][ T5234] veth5: entered allmulticast mode [ 111.532894][ T5223] loop4: detected capacity change from 0 to 1024 [ 111.608563][ T5239] bonding: bond0 is being created... [ 111.608766][ T5239] bonding: bond0 already exists [ 111.701361][ T5242] loop0: detected capacity change from 0 to 128 [ 111.714601][ T5242] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.733397][ T5242] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.766433][ T29] audit: type=1400 audit(1789513442.941:658): avc: denied { write } for pid=5241 comm="syz.0.479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.788440][ T29] audit: type=1400 audit(1789513442.961:659): avc: denied { mount } for pid=5235 comm="syz.2.477" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.887770][ T5223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.093711][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.201845][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.272640][ T5255] FAULT_INJECTION: forcing a failure. [ 112.272640][ T5255] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.272676][ T5255] CPU: 0 UID: 0 PID: 5255 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.272718][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.272732][ T5255] Call Trace: [ 112.272742][ T5255] [ 112.272751][ T5255] __dump_stack+0x1d/0x30 [ 112.272785][ T5255] dump_stack_lvl+0x95/0xd0 [ 112.272878][ T5255] dump_stack+0x15/0x1b [ 112.272903][ T5255] should_fail_ex+0x262/0x280 [ 112.272933][ T5255] should_fail+0xb/0x20 [ 112.273041][ T5255] should_fail_usercopy+0x1a/0x20 [ 112.273115][ T5255] _copy_from_iter+0x20c/0xe70 [ 112.273140][ T5255] ? __sk_mem_schedule+0x80/0xc0 [ 112.273239][ T5255] tcp_sendmsg_locked+0x1650/0x2ad0 [ 112.273270][ T5255] ? __pfx_tcp_sendmsg+0x10/0x10 [ 112.273292][ T5255] tcp_sendmsg+0x2f/0x50 [ 112.273309][ T5255] inet_sendmsg+0x76/0xd0 [ 112.273334][ T5255] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.273426][ T5255] ____sys_sendmsg+0x4e8/0x580 [ 112.273454][ T5255] ___sys_sendmsg+0x195/0x1e0 [ 112.273485][ T5255] __sys_sendmmsg+0x185/0x320 [ 112.273513][ T5255] __x64_sys_sendmmsg+0x57/0x70 [ 112.273540][ T5255] x64_sys_call+0x1fb4/0x2550 [ 112.273572][ T5255] do_syscall_64+0x112/0x360 [ 112.273613][ T5255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.273651][ T5255] RIP: 0033:0x7fb0f14de159 [ 112.273669][ T5255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.273686][ T5255] RSP: 002b:00007fb0eff37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.273707][ T5255] RAX: ffffffffffffffda RBX: 00007fb0f1765fa0 RCX: 00007fb0f14de159 [ 112.273725][ T5255] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000005 [ 112.273742][ T5255] RBP: 00007fb0f157506b R08: 0000000000000000 R09: 0000000000000000 [ 112.273758][ T5255] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.273775][ T5255] R13: 00007fb0f1766038 R14: 00007fb0f1765fa0 R15: 00007fffa848ff38 [ 112.273796][ T5255] [ 112.662466][ T5278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.486'. [ 112.665761][ T5277] loop1: detected capacity change from 0 to 512 [ 112.709076][ T5277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.709160][ T5277] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.216522][ T5297] loop3: detected capacity change from 0 to 1024 [ 113.221200][ T5297] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.221229][ T5297] EXT4-fs: Ignoring removed oldalloc option [ 113.244317][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.244387][ T5297] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.406330][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.582720][ T5310] loop2: detected capacity change from 0 to 1024 [ 113.585013][ T5310] EXT4-fs: Ignoring removed bh option [ 113.618109][ T5310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.648220][ T5304] loop0: detected capacity change from 0 to 128 [ 113.703248][ T5304] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.121627][ T5324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.506'. [ 114.312926][ T5328] loop0: detected capacity change from 0 to 512 [ 114.324101][ T5328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.324126][ T5328] EXT4-fs (loop0): invalid #clusters per group: 1023 [ 114.477908][ T5336] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.477941][ T5336] EXT4-fs: Ignoring removed oldalloc option [ 114.519836][ T5336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.520033][ T5336] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.579873][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.839907][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 114.839926][ T29] audit: type=1400 audit(1789513446.021:674): avc: denied { write } for pid=5309 comm="syz.2.501" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.839953][ T29] audit: type=1400 audit(1789513446.021:675): avc: denied { setattr } for pid=5309 comm="syz.2.501" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.161546][ T5357] set_capacity_and_notify: 2 callbacks suppressed [ 115.161566][ T5357] loop0: detected capacity change from 0 to 128 [ 115.186112][ T5357] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.187763][ T5357] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.218639][ T29] audit: type=1400 audit(1789513446.401:676): avc: denied { write } for pid=5356 comm="syz.0.516" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.218674][ T29] audit: type=1400 audit(1789513446.401:677): avc: denied { add_name } for pid=5356 comm="syz.0.516" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.310509][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.334655][ T29] audit: type=1400 audit(1789513446.511:678): avc: denied { mmap_zero } for pid=5359 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 115.393596][ T5366] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 116.659205][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.167930][ T5390] loop3: detected capacity change from 0 to 512 [ 117.173739][ T5390] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 117.173859][ T5390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 117.173897][ T5390] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 117.173924][ T5390] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 117.173938][ T5390] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.524: bad orphan inode 768 [ 117.174020][ T5390] loop3: lost filesystem error report for type 5 error -117 [ 117.174975][ T5390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.183821][ T5391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'. [ 117.280155][ T5390] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 117.341929][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.374981][ T5397] loop4: detected capacity change from 0 to 128 [ 117.387674][ T5397] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.387807][ T5397] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.390779][ T29] audit: type=1400 audit(1789513448.571:679): avc: denied { write } for pid=5395 comm="syz.4.528" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.584411][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.736600][ T5414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 117.945153][ T5419] bridge0: port 3(team0) entered blocking state [ 117.945193][ T5419] bridge0: port 3(team0) entered listening state [ 117.945342][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.945372][ T5419] bridge0: port 2(bridge_slave_1) entered listening state [ 117.945459][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.945493][ T5419] bridge0: port 1(bridge_slave_0) entered listening state [ 118.237495][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 118.402325][ T5425] veth5: entered allmulticast mode [ 118.403416][ T5425] bond3: (slave veth5): Enslaving as an active interface with an up link [ 118.781648][ T5412] loop2: detected capacity change from 0 to 1024 [ 119.007648][ T5412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.007864][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.012934][ T29] audit: type=1400 audit(1789513450.191:680): avc: denied { write } for pid=5406 comm="syz.2.532" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.093317][ T5447] loop1: detected capacity change from 0 to 128 [ 119.114100][ T5447] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.114525][ T5447] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.120812][ T29] audit: type=1400 audit(1789513450.301:681): avc: denied { write } for pid=5446 comm="syz.1.541" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.227608][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.424007][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.493188][ T29] audit: type=1400 audit(1789513450.671:682): avc: denied { create } for pid=5458 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.523248][ T29] audit: type=1400 audit(1789513450.701:683): avc: denied { bind } for pid=5458 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.708737][ T5465] loop4: detected capacity change from 0 to 128 [ 119.740804][ T5465] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.743849][ T5465] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.797442][ T5460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.544'. [ 119.873904][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 119.873923][ T29] audit: type=1400 audit(1789513451.051:685): avc: denied { ioctl } for pid=5464 comm="syz.4.549" path="socket:[11233]" dev="sockfs" ino=11233 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.941656][ T5470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.548'. [ 119.956385][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 119.956449][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 119.956523][ C1] bridge0: port 3(team0) entered learning state [ 120.296411][ T5474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.550'. [ 120.615519][ T5480] loop2: detected capacity change from 0 to 128 [ 120.619442][ T5480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.619765][ T5480] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.621305][ T29] audit: type=1400 audit(1789513451.801:686): avc: denied { write } for pid=5479 comm="syz.2.552" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.802439][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.921774][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.033824][ T5491] FAULT_INJECTION: forcing a failure. [ 121.033824][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 121.033990][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.034019][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.034032][ T5491] Call Trace: [ 121.034041][ T5491] [ 121.034050][ T5491] __dump_stack+0x1d/0x30 [ 121.034077][ T5491] dump_stack_lvl+0x95/0xd0 [ 121.034098][ T5491] dump_stack+0x15/0x1b [ 121.034120][ T5491] should_fail_ex+0x262/0x280 [ 121.034148][ T5491] ? mas_alloc_nodes+0x1a2/0x210 [ 121.034180][ T5491] should_failslab+0x8c/0xb0 [ 121.034210][ T5491] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 121.034241][ T5491] ? mas_alloc_nodes+0x1a2/0x210 [ 121.034275][ T5491] mas_alloc_nodes+0x1a2/0x210 [ 121.034304][ T5491] mas_preallocate+0x2ca/0x500 [ 121.034340][ T5491] __split_vma+0x299/0x720 [ 121.034369][ T5491] ? irqentry_exit+0x7d/0x610 [ 121.034398][ T5491] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 121.034423][ T5491] vms_gather_munmap_vmas+0x176/0x7f0 [ 121.034447][ T5491] do_vmi_align_munmap+0x1e1/0x400 [ 121.034475][ T5491] do_vmi_munmap+0x1da/0x220 [ 121.034501][ T5491] mremap_at+0x10f/0x640 [ 121.034532][ T5491] __se_sys_mremap+0x720/0xc40 [ 121.034566][ T5491] ? schedule+0x5b/0xa0 [ 121.034585][ T5491] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 121.034616][ T5491] ? ksys_write+0x161/0x1a0 [ 121.034648][ T5491] __x64_sys_mremap+0x67/0x80 [ 121.034677][ T5491] x64_sys_call+0x1072/0x2550 [ 121.034704][ T5491] do_syscall_64+0x112/0x360 [ 121.034735][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.034756][ T5491] RIP: 0033:0x7f21d66ee159 [ 121.034772][ T5491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.034789][ T5491] RSP: 002b:00007f21d5105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 121.034809][ T5491] RAX: ffffffffffffffda RBX: 00007f21d6976180 RCX: 00007f21d66ee159 [ 121.034823][ T5491] RDX: 0000000000002000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 121.034835][ T5491] RBP: 00007f21d5105090 R08: 0000200000c87000 R09: 0000000000000000 [ 121.034850][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.034864][ T5491] R13: 00007f21d6976218 R14: 00007f21d6976180 R15: 00007ffe295cdb18 [ 121.034885][ T5491] [ 121.445382][ T5477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.474671][ T5477] veth7: left allmulticast mode [ 121.548973][ T29] audit: type=1400 audit(1789513452.731:687): avc: denied { read } for pid=5495 comm="syz.4.557" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.549259][ T29] audit: type=1400 audit(1789513452.731:688): avc: denied { open } for pid=5495 comm="syz.4.557" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.631652][ T5496] loop4: detected capacity change from 0 to 512 [ 121.659651][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.659719][ T5496] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.694158][ T5493] loop2: detected capacity change from 0 to 1024 [ 121.703400][ T29] audit: type=1400 audit(1789513452.944:689): avc: denied { write } for pid=5495 comm="syz.4.557" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.737045][ T29] audit: type=1400 audit(1789513452.984:690): avc: denied { name_bind } for pid=5495 comm="syz.4.557" src=19970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.812205][ T5493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.843796][ T29] audit: type=1400 audit(1789513453.084:691): avc: denied { write } for pid=5489 comm="syz.2.555" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.899080][ T5490] syz.2.555 (5490) used greatest stack depth: 6728 bytes left [ 121.918242][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.956731][ T29] audit: type=1400 audit(1789513453.204:692): avc: denied { create } for pid=5502 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.958992][ T5503] loop2: detected capacity change from 0 to 128 [ 121.995953][ T5503] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.996108][ T5503] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.020253][ T29] audit: type=1400 audit(1789513453.264:693): avc: denied { write } for pid=5502 comm="syz.2.558" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.036318][ C1] bridge0: port 3(team0) entered forwarding state [ 122.036346][ C1] bridge0: topology change detected, propagating [ 122.036418][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.036434][ C1] bridge0: topology change detected, propagating [ 122.036475][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.036490][ C1] bridge0: topology change detected, propagating [ 122.145572][ T29] audit: type=1400 audit(1789513453.384:694): avc: denied { write } for pid=5502 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.250147][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.401877][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.565003][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 122.639406][ T5510] veth3: entered allmulticast mode [ 122.660692][ T5510] bond1: (slave veth3): Enslaving as an active interface with an up link [ 122.764735][ T5517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 122.764901][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.765067][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.904499][ T5523] FAULT_INJECTION: forcing a failure. [ 122.904499][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 122.904532][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.904619][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.904650][ T5523] Call Trace: [ 122.904659][ T5523] [ 122.904675][ T5523] __dump_stack+0x1d/0x30 [ 122.904736][ T5523] dump_stack_lvl+0x95/0xd0 [ 122.904767][ T5523] dump_stack+0x15/0x1b [ 122.904834][ T5523] should_fail_ex+0x262/0x280 [ 122.904861][ T5523] ? skb_clone+0x151/0x1f0 [ 122.904883][ T5523] should_failslab+0x8c/0xb0 [ 122.904913][ T5523] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 122.904952][ T5523] ? skb_clone+0x151/0x1f0 [ 122.905027][ T5523] skb_clone+0x151/0x1f0 [ 122.905059][ T5523] __netlink_deliver_tap+0x2be/0x510 [ 122.905096][ T5523] netlink_unicast+0x656/0x680 [ 122.905133][ T5523] netlink_sendmsg+0x5be/0x6f0 [ 122.905169][ T5523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.905250][ T5523] ____sys_sendmsg+0x532/0x580 [ 122.905276][ T5523] ___sys_sendmsg+0x195/0x1e0 [ 122.905307][ T5523] __x64_sys_sendmsg+0xd4/0x160 [ 122.905353][ T5523] x64_sys_call+0x22ab/0x2550 [ 122.905399][ T5523] do_syscall_64+0x112/0x360 [ 122.905435][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.905460][ T5523] RIP: 0033:0x7fabbbb8e159 [ 122.905490][ T5523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.905511][ T5523] RSP: 002b:00007fabba5e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.905576][ T5523] RAX: ffffffffffffffda RBX: 00007fabbbe15fa0 RCX: 00007fabbbb8e159 [ 122.905593][ T5523] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 122.905615][ T5523] RBP: 00007fabba5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.905630][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.905645][ T5523] R13: 00007fabbbe16038 R14: 00007fabbbe15fa0 R15: 00007ffcf9352cd8 [ 122.905665][ T5523] [ 122.940965][ T5526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.565'. [ 123.043707][ T5530] netlink: 'syz.1.569': attribute type 126 has an invalid length. [ 123.304746][ T5532] loop0: detected capacity change from 0 to 1024 [ 123.483211][ T5532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.893443][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.989745][ T5562] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 124.622067][ T5574] loop2: detected capacity change from 0 to 512 [ 124.652284][ T5574] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 124.652541][ T5574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.652779][ T5574] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.652970][ T5574] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 124.653634][ T5574] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.581: bg 0: block 15: invalid block bitmap [ 124.653685][ T5574] loop2: lost filesystem error report for type 5 error -117 [ 124.653920][ T5574] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 124.653939][ T5574] loop2: lost filesystem error report for type 5 error -117 [ 124.654386][ T5574] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #16: comm syz.2.581: data will be lost [ 124.654532][ T5574] EXT4-fs (loop2): 1 truncate cleaned up [ 124.655037][ T5574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.842263][ T5578] loop1: detected capacity change from 0 to 1024 [ 124.868417][ T5578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.298763][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.298825][ T5584] bridge0: port 2(bridge_slave_1) entered listening state [ 125.298988][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.299063][ T5584] bridge0: port 1(bridge_slave_0) entered listening state [ 125.701613][ T5574] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 125.701723][ T5574] SELinux: failed to load policy [ 125.746156][ T5586] loop0: detected capacity change from 0 to 128 [ 125.766108][ T5586] FAT-fs (loop0): bogus sectors per cluster 7 [ 125.766130][ T5586] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 125.766147][ T5586] FAT-fs (loop0): Can't find a valid FAT filesystem [ 125.795158][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.820294][ T5586] netlink: 100 bytes leftover after parsing attributes in process `syz.0.584'. [ 125.991345][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.074709][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 126.263178][ T5593] loop0: detected capacity change from 0 to 1024 [ 126.356683][ T5593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.370498][ T5596] veth3: entered allmulticast mode [ 126.377998][ T5596] bond5: (slave veth3): Enslaving as an active interface with an up link [ 126.600187][ T5612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.604922][ T5612] veth3: left allmulticast mode [ 126.677086][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 126.677122][ T29] audit: type=1400 audit(1789513457.884:698): avc: denied { write } for pid=5589 comm="syz.0.586" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.030925][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.066177][ T5622] loop0: detected capacity change from 0 to 512 [ 127.078411][ T5622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.078493][ T5622] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.316334][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 127.316399][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 128.692432][ T5631] loop4: detected capacity change from 0 to 2048 [ 128.719736][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.843958][ T29] audit: type=1400 audit(1789513460.084:699): avc: denied { setopt } for pid=5634 comm="syz.1.596" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.878134][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.999948][ T5643] loop1: detected capacity change from 0 to 512 [ 129.026038][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.026111][ T5643] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.155606][ T5649] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 129.196022][ T5649] bond6: (slave bridge1): making interface the new active one [ 129.205616][ T5649] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 129.228023][ T5649] Cannot find add_set index 0 as target [ 129.228201][ T5649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 129.290597][ T5653] loop2: detected capacity change from 0 to 512 [ 129.349647][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.349738][ T5653] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.391420][ T29] audit: type=1400 audit(1789513460.634:700): avc: denied { write } for pid=5652 comm="syz.2.601" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.396344][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.396369][ C1] bridge0: topology change detected, propagating [ 129.396448][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.396465][ C1] bridge0: topology change detected, propagating [ 129.930631][ T29] audit: type=1326 audit(1789513461.174:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.930667][ T29] audit: type=1326 audit(1789513461.174:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.933565][ T29] audit: type=1326 audit(1789513461.174:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.933598][ T29] audit: type=1326 audit(1789513461.174:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.933657][ T29] audit: type=1326 audit(1789513461.174:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.933686][ T29] audit: type=1326 audit(1789513461.174:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 129.933775][ T29] audit: type=1326 audit(1789513461.174:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.3.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f14de159 code=0x7ffc0000 [ 130.455274][ T5682] loop3: detected capacity change from 0 to 512 [ 130.495670][ T5685] loop1: detected capacity change from 0 to 512 [ 130.505007][ T5682] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.525826][ T5682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.611: bg 0: block 448: padding at end of block bitmap is not set [ 130.526133][ T5682] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.611: Failed to acquire dquot type 1 [ 130.572494][ T5685] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.915958][ T5702] FAULT_INJECTION: forcing a failure. [ 130.915958][ T5702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.915992][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.2.615 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.916026][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.916038][ T5702] Call Trace: [ 130.916046][ T5702] [ 130.916054][ T5702] __dump_stack+0x1d/0x30 [ 130.916080][ T5702] dump_stack_lvl+0x95/0xd0 [ 130.916107][ T5702] dump_stack+0x15/0x1b [ 130.916131][ T5702] should_fail_ex+0x262/0x280 [ 130.916234][ T5702] should_fail+0xb/0x20 [ 130.916259][ T5702] should_fail_usercopy+0x1a/0x20 [ 130.916292][ T5702] _copy_from_user+0x1c/0xb0 [ 130.916343][ T5702] kstrtouint_from_user+0x69/0xf0 [ 130.916368][ T5702] ? 0xffffffff81000000 [ 130.916384][ T5702] ? avc_policy_seqno+0x15/0x30 [ 130.916408][ T5702] proc_fail_nth_write+0x50/0x160 [ 130.916455][ T5702] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.916494][ T5702] vfs_write+0x254/0x9a0 [ 130.916526][ T5702] ? __fget_files+0x184/0x1c0 [ 130.916591][ T5702] ? mutex_lock+0x57/0x90 [ 130.916649][ T5702] ksys_write+0xdc/0x1a0 [ 130.916676][ T5702] __x64_sys_write+0x40/0x50 [ 130.916729][ T5702] x64_sys_call+0x154e/0x2550 [ 130.916753][ T5702] do_syscall_64+0x112/0x360 [ 130.916833][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.916864][ T5702] RIP: 0033:0x7fabbbb4e98e [ 130.916917][ T5702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.916936][ T5702] RSP: 002b:00007fabba5e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.917000][ T5702] RAX: ffffffffffffffda RBX: 00007fabba5e76c0 RCX: 00007fabbbb4e98e [ 130.917045][ T5702] RDX: 0000000000000001 RSI: 00007fabba5e70a0 RDI: 0000000000000003 [ 130.917061][ T5702] RBP: 00007fabba5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.917144][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.917159][ T5702] R13: 00007fabbbe16038 R14: 00007fabbbe15fa0 R15: 00007ffcf9352cd8 [ 130.917222][ T5702] [ 131.062332][ T5713] FAULT_INJECTION: forcing a failure. [ 131.062332][ T5713] name failslab, interval 1, probability 0, space 0, times 0 [ 131.062365][ T5713] CPU: 0 UID: 0 PID: 5713 Comm: syz.2.618 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.062421][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.062433][ T5713] Call Trace: [ 131.062442][ T5713] [ 131.062450][ T5713] __dump_stack+0x1d/0x30 [ 131.062477][ T5713] dump_stack_lvl+0x95/0xd0 [ 131.062501][ T5713] dump_stack+0x15/0x1b [ 131.062533][ T5713] should_fail_ex+0x262/0x280 [ 131.062558][ T5713] ? getname_long+0x32/0x100 [ 131.062609][ T5713] should_failslab+0x8c/0xb0 [ 131.062662][ T5713] __kmalloc_cache_noprof+0x7a/0x400 [ 131.062694][ T5713] ? getname_long+0x32/0x100 [ 131.062716][ T5713] ? should_fail_usercopy+0x1a/0x20 [ 131.062743][ T5713] getname_long+0x32/0x100 [ 131.062914][ T5713] do_getname+0x12e/0x1c0 [ 131.062935][ T5713] getname_flags+0x1d/0x30 [ 131.062953][ T5713] __se_sys_mq_unlink+0x68/0x220 [ 131.063054][ T5713] ? switch_fpu_return+0xe7/0x1b0 [ 131.063079][ T5713] __x64_sys_mq_unlink+0x1f/0x30 [ 131.063099][ T5713] x64_sys_call+0x1f93/0x2550 [ 131.063141][ T5713] do_syscall_64+0x112/0x360 [ 131.063203][ T5713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.063227][ T5713] RIP: 0033:0x7fabbbb8e159 [ 131.063245][ T5713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.063306][ T5713] RSP: 002b:00007fabba5c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 131.063330][ T5713] RAX: ffffffffffffffda RBX: 00007fabbbe16090 RCX: 00007fabbbb8e159 [ 131.063345][ T5713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 131.063359][ T5713] RBP: 00007fabbbc2506b R08: 0000000000000000 R09: 0000000000000000 [ 131.063373][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.063387][ T5713] R13: 00007fabbbe16128 R14: 00007fabbbe16090 R15: 00007ffcf9352cd8 [ 131.063407][ T5713] [ 131.127649][ T5713] SELinux: policydb magic number 0x76656437 does not match expected magic number 0xf97cff8c [ 131.127675][ T5713] SELinux: failed to load policy [ 131.242414][ T5719] loop2: detected capacity change from 0 to 128 [ 131.264180][ T5719] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.773498][ T5730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.622'. [ 132.063777][ T5739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.068286][ T5739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.073108][ T5739] veth3: left allmulticast mode [ 132.076149][ T5739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.525256][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 132.525320][ T29] audit: type=1400 audit(1789513463.764:727): avc: denied { write } for pid=5742 comm="syz.3.628" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.657424][ T5754] loop3: detected capacity change from 0 to 1024 [ 132.683043][ T5754] EXT4-fs: Ignoring removed orlov option [ 132.683326][ T5754] EXT4-fs: Ignoring removed orlov option [ 132.775094][ T5765] loop4: detected capacity change from 0 to 128 [ 132.796842][ T5765] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.822377][ T29] audit: type=1400 audit(1789513464.064:728): avc: denied { write } for pid=5764 comm="syz.4.633" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.121197][ T5776] loop2: detected capacity change from 0 to 1024 [ 133.460889][ T5787] loop0: detected capacity change from 0 to 512 [ 133.488190][ T5787] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.504150][ T29] audit: type=1400 audit(1789513464.734:729): avc: denied { write } for pid=5786 comm="syz.0.640" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.504188][ T29] audit: type=1400 audit(1789513464.734:730): avc: denied { write } for pid=5786 comm="syz.0.640" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.504215][ T29] audit: type=1400 audit(1789513464.734:731): avc: denied { write } for pid=5786 comm="syz.0.640" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.504249][ T29] audit: type=1400 audit(1789513464.734:732): avc: denied { mounton } for pid=5786 comm="syz.0.640" path="/120/file0/debug" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 134.185961][ T29] audit: type=1400 audit(1789513465.424:733): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.185995][ T29] audit: type=1400 audit(1789513465.424:734): avc: denied { remove_name } for pid=3300 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.186102][ T29] audit: type=1400 audit(1789513465.424:735): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.187660][ T29] audit: type=1400 audit(1789513465.434:736): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.713256][ T5800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.726553][ T5800] veth5: left allmulticast mode [ 134.956111][ T5809] ip6gre1: entered allmulticast mode [ 134.999308][ T5814] loop3: detected capacity change from 0 to 128 [ 135.036390][ T5814] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.316504][ T5826] IPv6: sit1: Disabled Multicast RS [ 135.372595][ T5829] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 135.480072][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 135.480092][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 135.569656][ T5841] FAULT_INJECTION: forcing a failure. [ 135.569656][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 135.569690][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.1.654 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.569725][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.569738][ T5841] Call Trace: [ 135.569745][ T5841] [ 135.569753][ T5841] __dump_stack+0x1d/0x30 [ 135.569800][ T5841] dump_stack_lvl+0x95/0xd0 [ 135.569826][ T5841] dump_stack+0x15/0x1b [ 135.569849][ T5841] should_fail_ex+0x262/0x280 [ 135.569878][ T5841] should_failslab+0x8c/0xb0 [ 135.569914][ T5841] __kmalloc_node_noprof+0xdb/0x500 [ 135.570031][ T5841] ? qdisc_alloc+0x65/0x410 [ 135.570052][ T5841] ? qdisc_alloc+0x65/0x410 [ 135.570099][ T5841] qdisc_alloc+0x65/0x410 [ 135.570130][ T5841] qdisc_create+0xf0/0x9c0 [ 135.570166][ T5841] tc_modify_qdisc+0x102a/0x1550 [ 135.570209][ T5841] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 135.570263][ T5841] rtnetlink_rcv_msg+0x6a7/0x720 [ 135.570294][ T5841] netlink_rcv_skb+0x11e/0x220 [ 135.570327][ T5841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.570388][ T5841] rtnetlink_rcv+0x1c/0x30 [ 135.570516][ T5841] netlink_unicast+0x5a9/0x680 [ 135.570546][ T5841] netlink_sendmsg+0x5be/0x6f0 [ 135.570647][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.570680][ T5841] ____sys_sendmsg+0x532/0x580 [ 135.570708][ T5841] ___sys_sendmsg+0x195/0x1e0 [ 135.570749][ T5841] __x64_sys_sendmsg+0xd4/0x160 [ 135.570799][ T5841] x64_sys_call+0x22ab/0x2550 [ 135.570823][ T5841] do_syscall_64+0x112/0x360 [ 135.570925][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.571009][ T5841] RIP: 0033:0x7f113237e159 [ 135.571026][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.571116][ T5841] RSP: 002b:00007f1130dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.571137][ T5841] RAX: ffffffffffffffda RBX: 00007f1132605fa0 RCX: 00007f113237e159 [ 135.571168][ T5841] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000003 [ 135.571184][ T5841] RBP: 00007f1130dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.571268][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.571285][ T5841] R13: 00007f1132606038 R14: 00007f1132605fa0 R15: 00007ffee903e878 [ 135.571307][ T5841] [ 135.750776][ T5845] FAULT_INJECTION: forcing a failure. [ 135.750776][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 135.750807][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.750833][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.750845][ T5845] Call Trace: [ 135.750899][ T5845] [ 135.750908][ T5845] __dump_stack+0x1d/0x30 [ 135.750934][ T5845] dump_stack_lvl+0x95/0xd0 [ 135.750970][ T5845] dump_stack+0x15/0x1b [ 135.751050][ T5845] should_fail_ex+0x262/0x280 [ 135.751074][ T5845] ? __nf_conntrack_alloc+0xba/0x2b0 [ 135.751100][ T5845] should_failslab+0x8c/0xb0 [ 135.751154][ T5845] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 135.751189][ T5845] ? __nf_conntrack_alloc+0xba/0x2b0 [ 135.751222][ T5845] __nf_conntrack_alloc+0xba/0x2b0 [ 135.751248][ T5845] nf_conntrack_alloc+0x38/0x50 [ 135.751308][ T5845] ctnetlink_new_conntrack+0x3a5/0x15c0 [ 135.751337][ T5845] ? __nla_parse+0x40/0x60 [ 135.751364][ T5845] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 135.751421][ T5845] netlink_rcv_skb+0x11e/0x220 [ 135.751450][ T5845] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 135.751482][ T5845] nfnetlink_rcv+0x15f/0x1740 [ 135.751507][ T5845] ? kmem_cache_free+0x106/0x3b0 [ 135.751572][ T5845] ? __kfree_skb+0x109/0x150 [ 135.751665][ T5845] ? nlmon_xmit+0x4f/0x60 [ 135.751750][ T5845] ? consume_skb+0x4b/0x130 [ 135.751791][ T5845] ? nlmon_xmit+0x4f/0x60 [ 135.751816][ T5845] ? dev_hard_start_xmit+0x34e/0x380 [ 135.751914][ T5845] ? __dev_queue_xmit+0x1361/0x1e90 [ 135.751933][ T5845] ? __dev_queue_xmit+0x151/0x1e90 [ 135.752022][ T5845] ? ref_tracker_free+0x380/0x3f0 [ 135.752047][ T5845] ? skb_clone+0x151/0x1f0 [ 135.752088][ T5845] ? __netlink_deliver_tap+0x4e6/0x510 [ 135.752183][ T5845] netlink_unicast+0x5a9/0x680 [ 135.752219][ T5845] netlink_sendmsg+0x5be/0x6f0 [ 135.752253][ T5845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.752297][ T5845] ____sys_sendmsg+0x532/0x580 [ 135.752320][ T5845] ___sys_sendmsg+0x195/0x1e0 [ 135.752350][ T5845] __x64_sys_sendmsg+0xd4/0x160 [ 135.752425][ T5845] x64_sys_call+0x22ab/0x2550 [ 135.752452][ T5845] do_syscall_64+0x112/0x360 [ 135.752484][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.752529][ T5845] RIP: 0033:0x7f2288b4e159 [ 135.752547][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.752567][ T5845] RSP: 002b:00007f22875a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.752626][ T5845] RAX: ffffffffffffffda RBX: 00007f2288dd5fa0 RCX: 00007f2288b4e159 [ 135.752642][ T5845] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 135.752656][ T5845] RBP: 00007f22875a7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.752670][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.752734][ T5845] R13: 00007f2288dd6038 R14: 00007f2288dd5fa0 R15: 00007ffd506e3f98 [ 135.752753][ T5845] [ 136.230983][ T5863] loop1: detected capacity change from 0 to 128 [ 136.244996][ T5863] EXT4-fs mount: 17 callbacks suppressed [ 136.245017][ T5863] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.247723][ T5863] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.351307][ T5869] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.351355][ T3480] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.684446][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.757553][ T5880] FAULT_INJECTION: forcing a failure. [ 136.757553][ T5880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.757587][ T5880] CPU: 1 UID: 0 PID: 5880 Comm: syz.4.664 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.757748][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.757762][ T5880] Call Trace: [ 136.757768][ T5880] [ 136.757776][ T5880] __dump_stack+0x1d/0x30 [ 136.757801][ T5880] dump_stack_lvl+0x95/0xd0 [ 136.757827][ T5880] dump_stack+0x15/0x1b [ 136.757928][ T5880] should_fail_ex+0x262/0x280 [ 136.757954][ T5880] should_fail+0xb/0x20 [ 136.757974][ T5880] should_fail_usercopy+0x1a/0x20 [ 136.757998][ T5880] _copy_from_user+0x1c/0xb0 [ 136.758077][ T5880] kstrtouint_from_user+0x69/0xf0 [ 136.758103][ T5880] ? 0xffffffff81000000 [ 136.758120][ T5880] ? avc_policy_seqno+0x15/0x30 [ 136.758180][ T5880] proc_fail_nth_write+0x50/0x160 [ 136.758205][ T5880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.758234][ T5880] vfs_write+0x254/0x9a0 [ 136.758279][ T5880] ? __fget_files+0x184/0x1c0 [ 136.758299][ T5880] ? mutex_lock+0x57/0x90 [ 136.758324][ T5880] ksys_write+0xdc/0x1a0 [ 136.758387][ T5880] __x64_sys_write+0x40/0x50 [ 136.758414][ T5880] x64_sys_call+0x154e/0x2550 [ 136.758439][ T5880] do_syscall_64+0x112/0x360 [ 136.758578][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.758603][ T5880] RIP: 0033:0x7f2288b0e98e [ 136.758620][ T5880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.758638][ T5880] RSP: 002b:00007f2287585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.758720][ T5880] RAX: ffffffffffffffda RBX: 00007f22875866c0 RCX: 00007f2288b0e98e [ 136.758738][ T5880] RDX: 0000000000000001 RSI: 00007f22875860a0 RDI: 0000000000000007 [ 136.758751][ T5880] RBP: 00007f2287586090 R08: 0000000000000000 R09: 0000000000000000 [ 136.758766][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.758780][ T5880] R13: 00007f2288dd6128 R14: 00007f2288dd6090 R15: 00007ffd506e3f98 [ 136.758798][ T5880] [ 137.680646][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 137.703858][ T5917] loop4: detected capacity change from 0 to 512 [ 137.726931][ T5917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.726996][ T5917] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.762224][ T5914] veth9: entered allmulticast mode [ 137.763840][ T5914] bond3: (slave veth9): Enslaving as an active interface with an up link [ 138.603468][ T5908] loop0: detected capacity change from 0 to 1024 [ 138.977888][ T5908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.263759][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 139.263780][ T29] audit: type=1400 audit(1789513470.504:753): avc: denied { write } for pid=5905 comm="syz.0.675" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.510440][ T5940] FAULT_INJECTION: forcing a failure. [ 139.510440][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.510553][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.1.683 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.510623][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.510636][ T5940] Call Trace: [ 139.510644][ T5940] [ 139.510653][ T5940] __dump_stack+0x1d/0x30 [ 139.510679][ T5940] dump_stack_lvl+0x95/0xd0 [ 139.510719][ T5940] dump_stack+0x15/0x1b [ 139.510744][ T5940] should_fail_ex+0x262/0x280 [ 139.510832][ T5940] should_fail+0xb/0x20 [ 139.510857][ T5940] should_fail_usercopy+0x1a/0x20 [ 139.510887][ T5940] _copy_from_iter+0x20c/0xe70 [ 139.510918][ T5940] ? __sk_mem_schedule+0x80/0xc0 [ 139.511008][ T5940] tcp_sendmsg_locked+0x1650/0x2ad0 [ 139.511035][ T5940] ? __pfx_tcp_sendmsg+0x10/0x10 [ 139.511075][ T5940] tcp_sendmsg+0x2f/0x50 [ 139.511096][ T5940] inet_sendmsg+0x76/0xd0 [ 139.511118][ T5940] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.511221][ T5940] ____sys_sendmsg+0x4e8/0x580 [ 139.511243][ T5940] ___sys_sendmsg+0x195/0x1e0 [ 139.511278][ T5940] __sys_sendmmsg+0x185/0x320 [ 139.511344][ T5940] __x64_sys_sendmmsg+0x57/0x70 [ 139.511447][ T5940] x64_sys_call+0x1fb4/0x2550 [ 139.511545][ T5940] do_syscall_64+0x112/0x360 [ 139.511576][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.511601][ T5940] RIP: 0033:0x7f113237e159 [ 139.511629][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.511652][ T5940] RSP: 002b:00007f1130dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.511700][ T5940] RAX: ffffffffffffffda RBX: 00007f1132605fa0 RCX: 00007f113237e159 [ 139.511718][ T5940] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000004 [ 139.511785][ T5940] RBP: 00007f113241506b R08: 0000000000000000 R09: 0000000000000000 [ 139.511798][ T5940] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.511879][ T5940] R13: 00007f1132606038 R14: 00007f1132605fa0 R15: 00007ffee903e878 [ 139.511902][ T5940] [ 139.562276][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.657275][ T29] audit: type=1400 audit(1789513470.904:754): avc: denied { read } for pid=5948 comm="syz.1.688" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.901140][ T5956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 140.461777][ T5962] loop1: detected capacity change from 0 to 1024 [ 140.567510][ T5957] loop0: detected capacity change from 0 to 1024 [ 140.600728][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.807402][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.172521][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.285534][ T29] audit: type=1400 audit(1789513472.524:755): avc: denied { write } for pid=5954 comm="syz.0.690" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.338976][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.375638][ T29] audit: type=1400 audit(1789513472.614:756): avc: denied { write } for pid=5958 comm="syz.1.691" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.628562][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.662411][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.722778][ T29] audit: type=1400 audit(1789513472.964:757): avc: denied { mount } for pid=5979 comm="syz.0.695" name="/" dev="ramfs" ino=12961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.913487][ T5985] loop0: detected capacity change from 0 to 4096 [ 142.057772][ T6007] netlink: 48 bytes leftover after parsing attributes in process `syz.4.702'. [ 142.148002][ T6011] tipc: Enabling of bearer rejected, failed to enable media [ 142.192343][ T6011] loop0: detected capacity change from 0 to 512 [ 142.385033][ T6011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.385543][ T6011] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.758966][ T6024] ip6gre1: left allmulticast mode [ 143.237282][ T5680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.237356][ T5680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.273813][ T29] audit: type=1400 audit(1789513474.514:758): avc: denied { name_bind } for pid=6032 comm="syz.3.711" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 143.276399][ T870] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.356770][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 143.426746][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.428610][ T6029] veth5: entered allmulticast mode [ 143.430041][ T6029] bond7: (slave veth5): Enslaving as an active interface with an up link [ 143.480479][ T29] audit: type=1400 audit(1789513474.724:759): avc: denied { write } for pid=6034 comm="syz.4.712" name="event2" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.480565][ T29] audit: type=1400 audit(1789513474.724:760): avc: denied { open } for pid=6034 comm="syz.4.712" path="/dev/input/event2" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.596213][ T29] audit: type=1400 audit(1789513474.804:761): avc: denied { ioctl } for pid=6034 comm="syz.4.712" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.634703][ T6044] 9p: Could not find request transport: f [ 143.712987][ T29] audit: type=1400 audit(1789513474.954:762): avc: denied { ioctl } for pid=6034 comm="syz.4.712" path="/dev/input/event2" dev="devtmpfs" ino=251 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.749838][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.865116][ T6046] loop2: detected capacity change from 0 to 1024 [ 144.171234][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.342686][ T6066] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 144.795003][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 144.795022][ T29] audit: type=1400 audit(1789513476.034:764): avc: denied { ioctl } for pid=6070 comm="syz.4.724" path="socket:[13067]" dev="sockfs" ino=13067 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.843511][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.878820][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.210427][ T6095] loop1: detected capacity change from 0 to 128 [ 145.223091][ T6095] EXT4-fs error (device loop1): __ext4_fill_super:5621: inode #2: comm syz.1.734: iget: checksum invalid [ 145.223121][ T6095] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 145.223358][ T6095] EXT4-fs (loop1): get root inode failed [ 145.223374][ T6095] EXT4-fs (loop1): mount failed [ 145.230665][ T29] audit: type=1400 audit(1789513476.474:765): avc: denied { create } for pid=6097 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.285278][ T29] audit: type=1400 audit(1789513476.524:766): avc: denied { unmount } for pid=6094 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.618930][ T29] audit: type=1400 audit(1789513476.864:767): avc: denied { create } for pid=6111 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 145.727230][ T29] audit: type=1400 audit(1789513476.974:768): avc: denied { wake_alarm } for pid=6111 comm="syz.0.742" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.981346][ T6145] FAULT_INJECTION: forcing a failure. [ 145.981346][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.981447][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.981475][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.981560][ T6145] Call Trace: [ 145.981567][ T6145] [ 145.981576][ T6145] __dump_stack+0x1d/0x30 [ 145.981600][ T6145] dump_stack_lvl+0x95/0xd0 [ 145.981627][ T6145] dump_stack+0x15/0x1b [ 145.981651][ T6145] should_fail_ex+0x262/0x280 [ 145.981722][ T6145] should_fail+0xb/0x20 [ 145.981762][ T6145] should_fail_usercopy+0x1a/0x20 [ 145.981787][ T6145] _copy_from_user+0x1c/0xb0 [ 145.981816][ T6145] get_itimerspec64+0x4c/0x1b0 [ 145.981848][ T6145] __x64_sys_timer_settime+0x9a/0x160 [ 145.981957][ T6145] x64_sys_call+0x158e/0x2550 [ 145.981981][ T6145] do_syscall_64+0x112/0x360 [ 145.982065][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.982171][ T6145] RIP: 0033:0x7fb0f14de159 [ 145.982187][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.982255][ T6145] RSP: 002b:00007fb0eff37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 145.982316][ T6145] RAX: ffffffffffffffda RBX: 00007fb0f1765fa0 RCX: 00007fb0f14de159 [ 145.982332][ T6145] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.982349][ T6145] RBP: 00007fb0eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 145.982365][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.982378][ T6145] R13: 00007fb0f1766038 R14: 00007fb0f1765fa0 R15: 00007fffa848ff38 [ 145.982404][ T6145] [ 145.983118][ T6143] loop4: detected capacity change from 0 to 512 [ 146.194658][ T6147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.200057][ T6147] veth9: left allmulticast mode [ 146.557221][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 146.593118][ T6154] veth5: entered allmulticast mode [ 146.594351][ T6154] bond2: (slave veth5): Enslaving as an active interface with an up link [ 146.640385][ T6159] FAULT_INJECTION: forcing a failure. [ 146.640385][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 146.640419][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.0.755 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.640448][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.640462][ T6159] Call Trace: [ 146.640471][ T6159] [ 146.640480][ T6159] __dump_stack+0x1d/0x30 [ 146.640526][ T6159] dump_stack_lvl+0x95/0xd0 [ 146.640588][ T6159] dump_stack+0x15/0x1b [ 146.640611][ T6159] should_fail_ex+0x262/0x280 [ 146.640660][ T6159] ? security_sk_alloc+0x52/0x120 [ 146.640768][ T6159] should_failslab+0x8c/0xb0 [ 146.640800][ T6159] __kmalloc_noprof+0xd0/0x4d0 [ 146.640832][ T6159] ? security_sk_alloc+0x52/0x120 [ 146.640921][ T6159] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 146.640994][ T6159] security_sk_alloc+0x52/0x120 [ 146.641025][ T6159] sk_prot_alloc+0xc2/0x180 [ 146.641099][ T6159] sk_alloc+0x34/0x3e0 [ 146.641132][ T6159] inet6_create+0x3af/0x860 [ 146.641159][ T6159] __sock_create+0x2e5/0x580 [ 146.641259][ T6159] __sys_socket+0xaf/0x180 [ 146.641290][ T6159] __x64_sys_socket+0x3f/0x50 [ 146.641341][ T6159] x64_sys_call+0x246e/0x2550 [ 146.641372][ T6159] do_syscall_64+0x112/0x360 [ 146.641440][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.641465][ T6159] RIP: 0033:0x7f21d66ee159 [ 146.641484][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.641584][ T6159] RSP: 002b:00007f21d5147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 146.641609][ T6159] RAX: ffffffffffffffda RBX: 00007f21d6975fa0 RCX: 00007f21d66ee159 [ 146.641647][ T6159] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 146.641663][ T6159] RBP: 00007f21d5147090 R08: 0000000000000000 R09: 0000000000000000 [ 146.641753][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.641769][ T6159] R13: 00007f21d6976038 R14: 00007f21d6975fa0 R15: 00007ffe295cdb18 [ 146.641830][ T6159] [ 146.916358][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.943906][ T6167] tipc: Enabling of bearer rejected, failed to enable media [ 146.960237][ T6167] loop2: detected capacity change from 0 to 512 [ 146.985808][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.985881][ T6167] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.225200][ T29] audit: type=1400 audit(1789513478.464:769): avc: denied { write } for pid=6183 comm="syz.0.764" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 147.316580][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.766'. [ 147.933471][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.658513][ T29] audit: type=1400 audit(1789513479.904:770): avc: denied { read write } for pid=6230 comm="syz.2.779" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.658586][ T29] audit: type=1400 audit(1789513479.904:771): avc: denied { open } for pid=6230 comm="syz.2.779" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.721999][ T29] audit: type=1400 audit(1789513479.964:772): avc: denied { create } for pid=6222 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.746517][ T29] audit: type=1400 audit(1789513479.984:773): avc: denied { write } for pid=6222 comm="syz.0.777" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.808963][ T6239] netlink: 80 bytes leftover after parsing attributes in process `syz.4.781'. [ 149.080557][ T6250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.787'. [ 149.385774][ T6260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.391476][ T6260] veth5: left allmulticast mode [ 149.738639][ T6269] netlink: 80 bytes leftover after parsing attributes in process `syz.3.794'. [ 149.836153][ T6246] loop4: detected capacity change from 0 to 1024 [ 149.838488][ T6267] wireguard0: entered promiscuous mode [ 149.838520][ T6267] wireguard0: entered allmulticast mode [ 149.858595][ T6280] FAULT_INJECTION: forcing a failure. [ 149.858595][ T6280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.858661][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.3.795 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.858687][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.858699][ T6280] Call Trace: [ 149.858706][ T6280] [ 149.858715][ T6280] __dump_stack+0x1d/0x30 [ 149.858742][ T6280] dump_stack_lvl+0x95/0xd0 [ 149.858812][ T6280] dump_stack+0x15/0x1b [ 149.858835][ T6280] should_fail_ex+0x262/0x280 [ 149.858861][ T6280] should_fail+0xb/0x20 [ 149.858884][ T6280] should_fail_usercopy+0x1a/0x20 [ 149.858958][ T6280] _copy_to_user+0x20/0xa0 [ 149.858989][ T6280] bpf_prog_test_run_syscall+0x25b/0x310 [ 149.859112][ T6280] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 149.859192][ T6280] bpf_prog_test_run+0x208/0x340 [ 149.859224][ T6280] __sys_bpf+0x8da/0xc30 [ 149.859259][ T6280] __x64_sys_bpf+0x69/0x80 [ 149.859305][ T6280] x64_sys_call+0xf26/0x2550 [ 149.859334][ T6280] do_syscall_64+0x112/0x360 [ 149.859367][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.859393][ T6280] RIP: 0033:0x7fb0f14de159 [ 149.859412][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.859483][ T6280] RSP: 002b:00007fb0eff16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.859572][ T6280] RAX: ffffffffffffffda RBX: 00007fb0f1766090 RCX: 00007fb0f14de159 [ 149.859587][ T6280] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a [ 149.859601][ T6280] RBP: 00007fb0eff16090 R08: 0000000000000000 R09: 0000000000000000 [ 149.859613][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.859625][ T6280] R13: 00007fb0f1766128 R14: 00007fb0f1766090 R15: 00007fffa848ff38 [ 149.859650][ T6280] [ 149.878720][ T6246] ext4: Bad value for 'journal_dev' [ 149.898156][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 149.898175][ T29] audit: type=1400 audit(1789513481.144:779): avc: denied { create } for pid=6245 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.908609][ T29] audit: type=1400 audit(1789513481.144:780): avc: denied { allowed } for pid=6245 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.161037][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 150.199339][ T6291] loop0: detected capacity change from 0 to 512 [ 150.234470][ T29] audit: type=1400 audit(1789513481.474:781): avc: denied { map } for pid=6292 comm="syz.1.802" path="socket:[14443]" dev="sockfs" ino=14443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 150.427771][ T6299] loop4: detected capacity change from 0 to 1024 [ 150.448328][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.448390][ T6299] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.570125][ T29] audit: type=1400 audit(1789513481.814:782): avc: denied { connect } for pid=6298 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.571507][ T29] audit: type=1400 audit(1789513481.814:783): avc: denied { write } for pid=6298 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.647529][ T6306] 8021q: adding VLAN 0 to HW filter on device bond7 [ 150.652148][ T6306] veth5: left allmulticast mode [ 150.758448][ T3502] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.848261][ T6305] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.852841][ T29] audit: type=1400 audit(1789513482.094:784): avc: denied { setopt } for pid=6298 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.889117][ T29] audit: type=1400 audit(1789513482.134:785): avc: denied { write } for pid=6298 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.958398][ T29] audit: type=1400 audit(1789513482.144:786): avc: denied { write } for pid=6289 comm="syz.4.801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.130838][ T6290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.801: bg 0: block 112: padding at end of block bitmap is not set [ 151.135548][ T6290] EXT4-fs (loop4): Remounting filesystem read-only [ 151.194514][ T6308] netlink: 80 bytes leftover after parsing attributes in process `syz.1.805'. [ 151.260379][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.433391][ T29] audit: type=1400 audit(1789513482.624:787): avc: denied { mount } for pid=6317 comm="syz.2.810" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.491262][ T6322] loop0: detected capacity change from 0 to 128 [ 151.491583][ T6322] EXT4-fs: Ignoring removed nobh option [ 151.502475][ T6322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.502635][ T6322] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.509557][ T29] audit: type=1400 audit(1789513482.744:788): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.796796][ T3604] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.224421][ T6336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6336 comm=syz.0.811 [ 152.315714][ T6339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.817'. [ 152.611236][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.689471][ T6331] loop2: detected capacity change from 0 to 512 [ 153.184661][ T6331] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.203191][ T6331] ext4: Bad value for 'max_dir_size_kb' [ 153.845335][ T6368] loop4: detected capacity change from 0 to 512 [ 153.845855][ T6368] EXT4-fs: dax option not supported [ 153.986606][ T6373] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(79872.65540.65536), cmd(6) [ 154.042077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.126921][ T6381] netlink: 80 bytes leftover after parsing attributes in process `syz.0.829'. [ 154.262441][ T6384] FAULT_INJECTION: forcing a failure. [ 154.262441][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 154.262519][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.830 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.262590][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.262605][ T6384] Call Trace: [ 154.262613][ T6384] [ 154.262621][ T6384] __dump_stack+0x1d/0x30 [ 154.262650][ T6384] dump_stack_lvl+0x95/0xd0 [ 154.262674][ T6384] dump_stack+0x15/0x1b [ 154.262714][ T6384] should_fail_ex+0x262/0x280 [ 154.262750][ T6384] ? __alloc_skb+0x2e0/0x6f0 [ 154.262898][ T6384] should_failslab+0x8c/0xb0 [ 154.262932][ T6384] kmem_cache_alloc_node_noprof+0x82/0x400 [ 154.262967][ T6384] ? should_fail_ex+0xdb/0x280 [ 154.263023][ T6384] ? __alloc_skb+0x2e0/0x6f0 [ 154.263058][ T6384] __alloc_skb+0x2e0/0x6f0 [ 154.263165][ T6384] ? __alloc_skb+0x209/0x6f0 [ 154.263195][ T6384] audit_log_start+0x3aa/0x730 [ 154.263271][ T6384] ? lapic_next_event+0x11/0x20 [ 154.263292][ T6384] ? clockevents_program_event+0x2fd/0x340 [ 154.263328][ T6384] audit_seccomp+0x49/0x110 [ 154.263359][ T6384] ? _raw_spin_unlock+0x9/0x30 [ 154.263383][ T6384] __seccomp_filter+0x909/0x1360 [ 154.263412][ T6384] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 154.263441][ T6384] __seccomp_permit_syscall+0x7d/0x150 [ 154.263535][ T6384] do_syscall_64+0xca/0x360 [ 154.263592][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.263679][ T6384] RIP: 0033:0x7fb0f14de159 [ 154.263698][ T6384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.263718][ T6384] RSP: 002b:00007fb0eff37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.263783][ T6384] RAX: ffffffffffffffda RBX: 00007fb0f1765fa0 RCX: 00007fb0f14de159 [ 154.263801][ T6384] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 154.263818][ T6384] RBP: 00007fb0eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 154.263835][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.263909][ T6384] R13: 00007fb0f1766038 R14: 00007fb0f1765fa0 R15: 00007fffa848ff38 [ 154.263945][ T6384] [ 154.408417][ T6387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.831'. [ 154.513168][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 154.563081][ T6390] veth11: entered allmulticast mode [ 154.655480][ T6402] loop3: detected capacity change from 0 to 512 [ 155.154212][ T6416] loop2: detected capacity change from 0 to 256 [ 155.375279][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 155.375298][ T29] audit: type=1400 audit(1789513486.614:935): avc: denied { ioctl } for pid=6431 comm="syz.1.843" path="socket:[14694]" dev="sockfs" ino=14694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.554254][ T6434] loop2: detected capacity change from 0 to 1024 [ 155.617333][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.619133][ T6430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.842'. [ 155.651994][ T29] audit: type=1400 audit(1789513486.894:936): avc: denied { write } for pid=6427 comm="syz.2.841" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.692473][ T6438] netlink: 80 bytes leftover after parsing attributes in process `syz.0.844'. [ 155.706306][ T29] audit: type=1400 audit(1789513486.944:937): avc: denied { bind } for pid=6442 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.812477][ T12] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.853666][ T6449] FAULT_INJECTION: forcing a failure. [ 155.853666][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.853744][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.0.847 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.853823][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.853838][ T6449] Call Trace: [ 155.853846][ T6449] [ 155.853854][ T6449] __dump_stack+0x1d/0x30 [ 155.853920][ T6449] dump_stack_lvl+0x95/0xd0 [ 155.853942][ T6449] dump_stack+0x15/0x1b [ 155.854062][ T6449] should_fail_ex+0x262/0x280 [ 155.854087][ T6449] should_fail+0xb/0x20 [ 155.854262][ T6449] should_fail_usercopy+0x1a/0x20 [ 155.854286][ T6449] _copy_from_iter+0xcc/0xe70 [ 155.854335][ T6449] ? selinux_socket_sendmsg+0x2e2/0x410 [ 155.854370][ T6449] bcm_sendmsg+0xb4/0x4c0 [ 155.854402][ T6449] ? __pfx_bcm_sendmsg+0x10/0x10 [ 155.854432][ T6449] ____sys_sendmsg+0x532/0x580 [ 155.854535][ T6449] ___sys_sendmsg+0x195/0x1e0 [ 155.854572][ T6449] __sys_sendmmsg+0x185/0x320 [ 155.854609][ T6449] __x64_sys_sendmmsg+0x57/0x70 [ 155.854629][ T6449] x64_sys_call+0x1fb4/0x2550 [ 155.854705][ T6449] do_syscall_64+0x112/0x360 [ 155.854738][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.854898][ T6449] RIP: 0033:0x7f21d66ee159 [ 155.854919][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.854945][ T6449] RSP: 002b:00007f21d5147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.854972][ T6449] RAX: ffffffffffffffda RBX: 00007f21d6975fa0 RCX: 00007f21d66ee159 [ 155.854990][ T6449] RDX: 0000000000000001 RSI: 0000200000001000 RDI: 0000000000000003 [ 155.855004][ T6449] RBP: 00007f21d5147090 R08: 0000000000000000 R09: 0000000000000000 [ 155.855017][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.855029][ T6449] R13: 00007f21d6976038 R14: 00007f21d6975fa0 R15: 00007ffe295cdb18 [ 155.855107][ T6449] [ 156.128167][ T6459] tipc: Enabling of bearer rejected, failed to enable media [ 156.153069][ T6459] loop3: detected capacity change from 0 to 512 [ 156.171346][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.171411][ T6459] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.205938][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.358525][ T6466] loop4: detected capacity change from 0 to 512 [ 156.670642][ T3502] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.836758][ T3604] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.099578][ T6466] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.104578][ T6466] ext4: Bad value for 'max_dir_size_kb' [ 157.183541][ T6483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.857'. [ 157.183663][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.183895][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.503680][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 157.539860][ T6491] veth7: entered allmulticast mode [ 157.599326][ T29] audit: type=1400 audit(1789513488.844:938): avc: denied { write } for pid=6504 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.601254][ T29] audit: type=1400 audit(1789513488.844:939): avc: denied { setopt } for pid=6504 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.601655][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 157.601673][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 157.669320][ T6511] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 157.694151][ T29] audit: type=1400 audit(1789513488.934:940): avc: denied { create } for pid=6513 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 157.696044][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.710705][ T6516] netlink: 64 bytes leftover after parsing attributes in process `syz.4.868'. [ 157.710914][ T6516] bridge0: port 3(team0) entered disabled state [ 157.711164][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.711380][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.725740][ T29] audit: type=1400 audit(1789513488.964:941): avc: denied { sys_admin } for pid=6513 comm="syz.1.866" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 158.160453][ T6534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.430856][ T6536] netlink: 'syz.2.873': attribute type 21 has an invalid length. [ 158.507777][ T29] audit: type=1400 audit(1789513489.754:942): avc: denied { append } for pid=6535 comm="syz.2.873" name="uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 158.507807][ T29] audit: type=1400 audit(1789513489.754:943): avc: denied { open } for pid=6535 comm="syz.2.873" path="/172/tracing/uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 158.653855][ T6546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.697248][ T6545] veth7: entered allmulticast mode [ 158.829494][ T6553] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 158.921376][ T6546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.977885][ T6546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.023050][ T6546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.070456][ T6554] loop4: detected capacity change from 0 to 128 [ 159.174519][ T29] audit: type=1400 audit(1789513490.414:944): avc: denied { read } for pid=3021 comm="dhcpcd" name="n25" dev="tmpfs" ino=6374 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.494475][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 159.734077][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.863849][ T6603] loop4: detected capacity change from 0 to 512 [ 159.913801][ T6603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.913868][ T6603] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.228903][ T6635] netlink: 'syz.1.889': attribute type 39 has an invalid length. [ 160.312450][ T6618] loop2: detected capacity change from 0 to 512 [ 160.325032][ T6618] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.888: inode has both inline data and extents flags [ 160.325073][ T6618] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.325338][ T6618] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.888: couldn't read orphan inode 15 (err -117) [ 160.325415][ T6618] loop2: lost filesystem error report for type 5 error -117 [ 160.326339][ T6618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.448345][ T6639] ================================================================== [ 160.448385][ T6639] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 160.448423][ T6639] [ 160.448429][ T6639] read-write to 0xffff88811b8b0908 of 8 bytes by interrupt on cpu 1: [ 160.448457][ T6639] __xa_clear_mark+0xf5/0x1e0 [ 160.448476][ T6639] __folio_end_writeback+0xe7/0x530 [ 160.448511][ T6639] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 160.448539][ T6639] folio_end_writeback+0x1c/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 160.448561][ T6639] bh_end_async_write+0x1a6/0x250 [ 160.448592][ T6639] bio_endio+0x390/0x570 [ 160.448620][ T6639] blk_update_request+0x33a/0x710 [ 160.448647][ T6639] scsi_end_request+0x4b/0x4c0 [ 160.448669][ T6639] scsi_io_completion+0x7f/0x1d0 [ 160.448693][ T6639] scsi_finish_command+0x1c7/0x1e0 [ 160.448728][ T6639] scsi_complete+0x155/0x4d0 [ 160.448756][ T6639] blk_done_softirq+0x77/0xb0 [ 160.448778][ T6639] handle_softirqs+0xcc/0x2a0 [ 160.448802][ T6639] __irq_exit_rcu+0x44/0xe0 [ 160.448824][ T6639] sysvec_apic_timer_interrupt+0x74/0x80 [ 160.448853][ T6639] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.448877][ T6639] preempt_schedule_irq+0x27/0x50 [ 160.448899][ T6639] raw_irqentry_exit_cond_resched+0x49/0x60 [ 160.448935][ T6639] irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 160.448974][ T6639] irqentry_exit+0x7d/0x610 [ 160.449001][ T6639] asm_common_interrupt+0x26/0x40 [ 160.449027][ T6639] inet6addr_event+0x0/0xa0 [ 160.449063][ T6639] atomic_notifier_call_chain+0x79/0x1a0 [ 160.449088][ T6639] inet6addr_notifier_call_chain+0x24/0x30 [ 160.449123][ T6639] addrconf_ifdown+0x915/0xf70 [ 160.449146][ T6639] addrconf_notify+0x214/0x8e0 [ 160.449174][ T6639] raw_notifier_call_chain+0x72/0x1a0 [ 160.449199][ T6639] __dev_notify_flags+0x2b4/0x490 [ 160.449230][ T6639] netif_change_flags+0xa5/0xc0 [ 160.449260][ T6639] dev_change_flags+0xbc/0x180 [ 160.449288][ T6639] devinet_ioctl+0x635/0xfa0 [ 160.449321][ T6639] inet_ioctl+0x2f8/0x3a0 [ 160.449346][ T6639] sock_do_ioctl+0x73/0x230 [ 160.449371][ T6639] sock_ioctl+0x439/0x610 [ 160.449394][ T6639] __se_sys_ioctl+0xce/0x140 [ 160.449425][ T6639] __x64_sys_ioctl+0x43/0x50 [ 160.449455][ T6639] x64_sys_call+0x239d/0x2550 [ 160.449483][ T6639] do_syscall_64+0x112/0x360 [ 160.449515][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.449539][ T6639] [ 160.449547][ T6639] read to 0xffff88811b8b0908 of 8 bytes by task 6639 on cpu 0: [ 160.449566][ T6639] xas_find_marked+0x211/0x650 [ 160.449597][ T6639] filemap_get_folios_tag+0xf7/0x400 [ 160.449620][ T6639] filemap_write_and_wait_range+0x1f5/0x370 [ 160.449660][ T6639] filemap_invalidate_pages+0xd3/0x1e0 [ 160.449693][ T6639] kiocb_invalidate_pages+0x6e/0x80 [ 160.449730][ T6639] blkdev_direct_write+0x30/0x100 [ 160.449765][ T6639] blkdev_write_iter+0x3b8/0x490 [ 160.449785][ T6639] vfs_write+0x57f/0x9a0 [ 160.449813][ T6639] ksys_write+0xdc/0x1a0 [ 160.449840][ T6639] __x64_sys_write+0x40/0x50 [ 160.449867][ T6639] x64_sys_call+0x154e/0x2550 [ 160.449894][ T6639] do_syscall_64+0x112/0x360 [ 160.449927][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.449949][ T6639] [ 160.449954][ T6639] value changed: 0xfffe000000000000 -> 0xe000000000000000 [ 160.449968][ T6639] [ 160.449973][ T6639] Reported by Kernel Concurrency Sanitizer on: [ 160.449985][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.450014][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.450027][ T6639] ================================================================== [ 160.804320][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.804339][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.822639][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.822772][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.872107][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 160.919382][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.996041][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.056865][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.077512][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 161.077628][ T29] audit: type=1400 audit(1789513492.324:959): avc: denied { write } for pid=6642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.087446][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.102020][ T29] audit: type=1400 audit(1789513492.344:960): avc: denied { write } for pid=6654 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.118780][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 161.215270][ T31] bridge_slave_1: left allmulticast mode [ 161.215365][ T31] bridge_slave_1: left promiscuous mode [ 161.215455][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.217097][ T31] bridge_slave_0: left allmulticast mode [ 161.217115][ T31] bridge_slave_0: left promiscuous mode [ 161.217276][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.242858][ T6594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.300524][ T31] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 161.311427][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.312569][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.313489][ T31] bond0 (unregistering): Released all slaves [ 161.314780][ T31] bond1 (unregistering): Released all slaves [ 161.339913][ T31] bond2 (unregistering): (slave veth5): Releasing backup interface [ 161.346781][ T31] bond2 (unregistering): Released all slaves [ 161.349684][ T31] bond3 (unregistering): Released all slaves [ 161.402578][ T31] hsr_slave_0: left promiscuous mode [ 161.402892][ T31] hsr_slave_1: left promiscuous mode [ 161.403444][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.403462][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.428100][ T29] audit: type=1400 audit(1789513492.674:961): avc: denied { write } for pid=6660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.447697][ T29] audit: type=1400 audit(1789513492.694:962): avc: denied { write } for pid=6671 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.479636][ T31] veth1_macvtap: left promiscuous mode [ 161.479708][ T31] veth0_macvtap: left promiscuous mode [ 161.479740][ T31] veth1_vlan: left promiscuous mode [ 161.479874][ T31] veth0_vlan: left promiscuous mode [ 161.536999][ T31] team0 (unregistering): Port device team_slave_1 removed [ 161.539198][ T31] team0 (unregistering): Port device team_slave_0 removed [ 161.565229][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 161.632535][ T29] audit: type=1400 audit(1789513492.874:963): avc: denied { write } for pid=6674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.668562][ T29] audit: type=1400 audit(1789513492.914:964): avc: denied { write } for pid=6685 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.702443][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 161.785681][ T29] audit: type=1400 audit(1789513493.024:965): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.812834][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.832891][ T29] audit: type=1400 audit(1789513493.074:966): avc: denied { write } for pid=6700 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.860306][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 161.875709][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.909531][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.943230][ T29] audit: type=1400 audit(1789513493.184:967): avc: denied { write } for pid=6703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.972230][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.979233][ T29] audit: type=1400 audit(1789513493.224:968): avc: denied { write } for pid=6714 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.999147][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 162.042802][ T31] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.077441][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.129838][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.169657][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.176427][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 162.209709][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.280298][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.300314][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 162.320379][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.360840][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.409710][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.410717][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 162.473165][ T31] team0: left allmulticast mode [ 162.473187][ T31] team_slave_0: left allmulticast mode [ 162.473204][ T31] team_slave_1: left allmulticast mode [ 162.473307][ T31] team0: left promiscuous mode [ 162.473324][ T31] team_slave_0: left promiscuous mode [ 162.473387][ T31] team_slave_1: left promiscuous mode [ 162.473622][ T31] bridge0: port 3(team0) entered disabled state [ 162.474338][ T31] bridge_slave_1: left allmulticast mode [ 162.474355][ T31] bridge_slave_1: left promiscuous mode [ 162.474512][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.475205][ T31] bridge_slave_0: left allmulticast mode [ 162.475243][ T31] bridge_slave_0: left promiscuous mode [ 162.475383][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.550958][ T31] bridge_slave_1: left allmulticast mode [ 162.550975][ T31] bridge_slave_1: left promiscuous mode [ 162.551117][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.551691][ T31] bridge_slave_0: left allmulticast mode [ 162.551705][ T31] bridge_slave_0: left promiscuous mode [ 162.551771][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.564192][ T31] bridge_slave_1: left allmulticast mode [ 162.564213][ T31] bridge_slave_1: left promiscuous mode [ 162.564398][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.577362][ T31] bridge_slave_0: left allmulticast mode [ 162.577385][ T31] bridge_slave_0: left promiscuous mode [ 162.577598][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.709901][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.711025][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.711744][ T31] bond0 (unregistering): Released all slaves [ 162.713725][ T31] bond1 (unregistering): (slave veth3): Releasing backup interface [ 162.714411][ T31] bond1 (unregistering): Released all slaves [ 162.757879][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.759177][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.759936][ T31] bond0 (unregistering): Released all slaves [ 162.761499][ T31] bond1 (unregistering): Released all slaves [ 162.764106][ T31] bond2 (unregistering): (slave veth3): Releasing backup interface [ 162.765135][ T31] bond2 (unregistering): Released all slaves [ 162.783854][ T31] bond3 (unregistering): (slave veth5): Releasing backup interface [ 162.791017][ T31] bond3 (unregistering): Released all slaves [ 162.824981][ T31] bond6 (unregistering): (slave bridge1): Releasing active interface [ 162.835756][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.845349][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.846171][ T31] bond0 (unregistering): Released all slaves [ 162.848300][ T31] bond1 (unregistering): Released all slaves [ 162.851105][ T31] bond2 (unregistering): Released all slaves [ 162.853906][ T31] bond3 (unregistering): Released all slaves [ 162.856653][ T31] bond4 (unregistering): Released all slaves [ 162.867068][ T31] bond5 (unregistering): (slave veth3): Releasing backup interface [ 162.880035][ T31] bond5 (unregistering): Released all slaves [ 162.882846][ T31] bond6 (unregistering): Released all slaves [ 162.899256][ T31] bond7 (unregistering): (slave veth5): Releasing backup interface [ 162.913681][ T31] bond7 (unregistering): Released all slaves [ 162.916234][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 162.959363][ T31] hsr_slave_0: left promiscuous mode [ 162.959694][ T31] hsr_slave_1: left promiscuous mode [ 162.960087][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.960099][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.960471][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.960481][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.962109][ T31] hsr_slave_0: left promiscuous mode [ 162.962421][ T31] hsr_slave_1: left promiscuous mode [ 162.962833][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.962844][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.963128][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.963141][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.964748][ T31] hsr_slave_0: left promiscuous mode [ 162.964964][ T31] hsr_slave_1: left promiscuous mode [ 162.965417][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.965427][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.965676][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.965691][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.978678][ T31] veth1_macvtap: left promiscuous mode [ 162.978703][ T31] veth0_macvtap: left promiscuous mode [ 162.978884][ T31] veth1_vlan: left promiscuous mode [ 162.978971][ T31] veth0_vlan: left promiscuous mode [ 163.000244][ T31] veth1_macvtap: left promiscuous mode [ 163.000280][ T31] veth0_macvtap: left promiscuous mode [ 163.000357][ T31] veth1_vlan: left promiscuous mode [ 163.000389][ T31] veth0_vlan: left promiscuous mode [ 163.024760][ T31] veth1_macvtap: left promiscuous mode [ 163.024831][ T31] veth0_macvtap: left promiscuous mode [ 163.024881][ T31] veth1_vlan: left promiscuous mode [ 163.024964][ T31] veth0_vlan: left promiscuous mode [ 163.179978][ T31] team0 (unregistering): Port device team_slave_1 removed [ 163.183192][ T31] team0 (unregistering): Port device team_slave_0 removed [ 163.232984][ T31] team0 (unregistering): Port device team_slave_1 removed [ 163.235217][ T31] team0 (unregistering): Port device team_slave_0 removed [ 163.286284][ T31] team0 (unregistering): Port device team_slave_1 removed [ 163.288575][ T31] team0 (unregistering): Port device team_slave_0 removed [ 163.409852][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 163.503921][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 163.613842][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 163.710911][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 163.812043][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 163.912417][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 164.007268][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 164.102811][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 164.198907][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21