last executing test programs: 1m29.314724864s ago: executing program 1 (id=147): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) listen(r0, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x8, 0x0, 0x4}}}}}}}, 0x0) 1m29.271027475s ago: executing program 1 (id=150): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1m28.646783061s ago: executing program 1 (id=164): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x567, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000e80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.583209093s ago: executing program 1 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@quota}, {@data_err_ignore}]}, 0xfe, 0x570, &(0x7f00000003c0)="$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") open(&(0x7f0000000dc0)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000e00)='./bus\x00', 0x0) mount(&(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000ec0)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m28.142560124s ago: executing program 1 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000380)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000003200)=0x7, 0x4) 1m27.799211413s ago: executing program 1 (id=186): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0802, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) 1m27.656271107s ago: executing program 32 (id=186): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0802, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) 2.495880177s ago: executing program 5 (id=1595): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x605, 0x80010000, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x1, 0xc, &(0x7f0000000340)=0x80010001, 0x4) sendto$packet(r3, &(0x7f0000000380)="05", 0x1, 0x0, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.495714577s ago: executing program 2 (id=1596): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)=""/152, 0x98}], 0x2) 2.451173288s ago: executing program 5 (id=1598): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2000b}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="02", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.450301988s ago: executing program 2 (id=1601): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 2.40035173s ago: executing program 2 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600008af6280004000040ff0f00000736273294efa4f9de730201855136a28b31"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc) 2.316564052s ago: executing program 2 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x7) r0 = syz_create_resource$futex(&(0x7f00000009c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000a00)) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r1, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) 2.240204363s ago: executing program 4 (id=1607): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x4008, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0xf6) write$selinux_access(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73656e646d61696c5f657865635f743a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a9430203030"], 0x58) 2.211901054s ago: executing program 4 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x400c000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0xfff1, 0xfff3}, {0x300, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40845}, 0x20000010) 2.141338806s ago: executing program 4 (id=1614): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.082211287s ago: executing program 4 (id=1619): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000003c0)="4367e316062a89f1", &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) 2.006980829s ago: executing program 4 (id=1621): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x2, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f00000002c0)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.834881144s ago: executing program 3 (id=1627): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x9, 0xffffffff}, 0x28) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x0, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x3, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.494510682s ago: executing program 3 (id=1630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x158, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 1.494248672s ago: executing program 3 (id=1631): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x9902) 1.326916786s ago: executing program 2 (id=1632): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.136907131s ago: executing program 4 (id=1634): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x14a00, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1, &(0x7f0000000580), 0x0, 0x5ad, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDv7G4LpWorMSoeTKMhkCgtLWDwxwHuhOCPmxcrLQRZfoTWaNHEkuDFxHDxQOLJg/hfKNGrJxMPHrx4MiRoDBeN0TWzO7ss7W67LV2mdj6fZLrvzZvuewP97ns7895uAIU1lv4oReyKiItJxEhbWSWywrHGcXf++PBkuiVRq73+exJJtq95fJI9DkfEtYj4ZyTih2+T2FleXu/cwuWz09Xq7KUsPzF/7uLE3MLlfWfOTZ+ePT17fuqFqcOHDh46PLn/vs7vkbb0savvvDfyyfE3v/z872Tyq5+PJ3EkfjvVKGs/j40yFmPxZ6320dL96b/r4Y2uLCfl1t/JXcnSHWxalUaEx2BEPBEjUW773xyJj1/NtXFAX9WSiBpQUIn4h4JqjgOa7+17ex9c6vOoBHgQbh9Nfw50iP9K49pgjMZAROxe8nsdLumtS1rH998dv5pu0afrcEBni1e2Zaml8Z/UY3M0ttdzO+6U7rnOm44ATmSP6f7X1ln/2JK8+IcHZ/FKRDzZafy/evy/1Rb/b6+zfvEPAAAAAAAAG+fm0Yh4vtP9v1J2b257PFO//5c07v/9eHeF4JENqH/1+3+lWxtQDdDB7aMRr3Sc/9ua4ztaznIPN2YDJqfOVGf3Z2tr98bAtjQ/uUId+z7deb1bWfv8v3RL62/OBczacauy7d7fmZmen76fcwYabl+JeKrSff5P2v8n7f1/Jn09uNhjHTt33zjRrWz1+Af6pfZFxJ6O/X/SOiZZ+fM5JurjgYnmqGC5pz+49nW3+sU/5Cft/3esHP+jSfvn9cyt7fkHI+LAQqXWrXy94//B5I1y8/lT70/Pz1+ajBhMji3fP7W2NsNW1YyHZryk8b/32ZWv/7XG/21xOBQRiz3W+fi/w790K9P/Q37S+J9ZU/+/9sTUjdFvutXfW/9/sN6n7832uP4HK+s1QPNuJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8H5Ui4qFISuOtdKk0Ph4xHBGPxY5S9cLc/HOnLrx7fiYtq3//f6n5Tb8jjXzS/P7/0bb81JL8gYh4NCI+Kw/V8+MnL1Rn8j55AAAAAAAAAAAAAAAAAAAA2CSGu6z/T/1azrt1QN9VskfxDsVTybsBQG7EPxSX+IfiEv9QXOIfimud8e92AWwB+n8oqoHeDtve73YAedD/AwAAAADAlnLz5RevJxGx+NJQfUsNZmWtG4NDebUO6KdS3g0AcmMOLxSXqT9QXD1O/gW2sKSV+qvWqbz77P+kPw0CAAAAAAAAAAAAAJbZs+vmT6uu/we2JOv/obis/4fisv4fist7fGC1VfzW/wMAAAAAAAAAAABA/uYWLp+drlZnL0lIbLbEQERsgmbkkBjMPzxzfmECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa/gsAAP//+2IllA==") gettid() timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001400090003000000ffdbdf250500000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x0) 1.106533932s ago: executing program 3 (id=1635): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.082223183s ago: executing program 5 (id=1637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fchmod(r2, 0x0) 1.067565143s ago: executing program 3 (id=1638): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000680)=0x79, 0x4) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000780)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='cdg', 0x3) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="c8b7df938dc9dffcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b3ff61e7d0101b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd4662a22f180e5eb042a742acfe546daedbd31cd4b5cda70186dd7ec449ea7026a8d7090c085a769e47294e", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="b8", 0x1}], 0x1}}], 0x2, 0x0) sendmsg(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="385eab4f254e5a5c492c82d7a6cb15c97b4de4a0b5092720b7ebefc2d3df7a66ce924b3780b96e046163f5aa0f201cebe27b121e79e27ba6efae9a7e6b36cee37fc3449d8ac5ededbf212f5b55001f13c3b1407b01ba0dee4deba035d6ed5f5b74676f8d6db7925354e02c0ab329b80ca2e0ce7298587db2c7c3ebd37ada39c4963113e7bd2deeff49781bf9afc9683b7a56b01fdd29fb063e018a1624fef60e7567ab60504cda0dbf99088d3907b6e5aca46471aa135eb3634067655df131b9759a1d31a9c80dec265cfb740d2b8762cf0af6a8596e5e", 0xd7}, {&(0x7f00000011c0)="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", 0x14b}], 0x2}, 0x0) 971.025816ms ago: executing program 0 (id=1640): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x9, 0xffffffff}, 0x28) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x0, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x3, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 635.396735ms ago: executing program 0 (id=1641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0800080006000600080014000020450a0014"], 0x22) 597.203105ms ago: executing program 0 (id=1642): r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 514.564087ms ago: executing program 2 (id=1643): setpriority(0x0, 0x0, 0x5) r0 = socket$kcm(0xa, 0x3, 0x3a) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002340)='ext4\x00', &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f00000023c0)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000002400)="$eJzs3c1rXOUaAPBnZpo0SdPbj3u5tL1wW+iF3g+aTy5N7r2bu1IXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLOzLTJJBMHTTM25/eD07znY+Z53w7Py3veOWdOAJl1JvknFzEYEZ9ExJH66uYDztT/rN+7MZ0suajVLn2dS49L1pcP1w9tvu5QRKxFRF9EPPVYxPO5rXErK6tzU6VScamxPlydXxyurKyevzo/NVucLS6MTlyYnJwYGR+b3LW23nr1xVsX33+i973vX7l757UPP0iqNdjYl7Rj1wJtUG96TxzbsO1ARPzvYQTrgkKjPf3drgi/SvL5/TEizqb5fyQK6acJZEGtVqv9VDvYbvdaDdi38ukYOJcfioh6OZ8fGqqP4f8UA/lSuVL915Xy8sJMfax8NHryV66WiiNRSM8VjkZPLlkfTcsP1sda1scj0jHw64X+dH1oulya2duuDmhxqCX/vyvU8x/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+QyY9efFistSa97/PXFtZnitfOz9TrMwNzS9PD02XlxaHZsvl2fSenflfer9Subw4+u9Yvj5cLVaqw5WV1cvz5eWF6uX0vv7LxZ49aRXQiWOnb3+Wi4i1//SnS6K3sU+uwv5Wq+Wi2/cgA91R6HYHBHSNqT/ILuf4QOtP9LaOC/ravXDxwXwh8GjJd7sCQNecO+n7P8gq8/+QXeb/IbuM8YFtHtG3yU7z/8Cjyfw/ZNdgm+d/Hd7w7K6RiPhDRHxa6DnYfNYXsB/kv8w1xv/njvxtsHVvb+6H9CuC3oh46e1Lb16fqlaXRpPt39zfXn2rsX1swwvbnjAA3dLM02YeAwDZtX7vxnRz2cu4X/2/fhHC1vgHGnOTfel3lAPruU3XKuR26dqFtZsRcWK7+LnG887rJzID64Ut8Y83/ubqb5HW90D63PS9iX9yQ/y/boh/6jf/r0A23E76n5Ht8i+f5nTcz7/N/c/gLl070b7/y9/v/wpt+r/THcZ44Z2Xv2gb/2bEqW3jN+P1pbFa4yd1O9dh/LvPPv3ndvtq79bfZ7v4TUmprzq/OFxZWT2f/o7cbHFhdOLC5OTEyPjY5HA6Rz3cnKne6r8nPr6zU/sH2sTfqf3Jtn902P4f//LRM2d2iP/3s9t//sd3iN8fEf/sMP63Y58/125fEn+mTfvzO8RPto13GL/yxuMHOzwUANgDlZXVualSqbikoKDQlcLN30c1Wgrd7pmAh62ykpyaJ0nf7ZoAAAAAAAAAAAAAndqLy4m73UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3g5wAAAP//WvrVLg==") sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000001640)={0xa, 0x4e22, 0x39c1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb3d}, 0x1c) 496.206128ms ago: executing program 0 (id=1644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93", 0x2}], 0x1}}], 0x1, 0x60cd894) close_range(r0, 0xffffffffffffffff, 0x0) 455.963699ms ago: executing program 0 (id=1645): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 323.209883ms ago: executing program 0 (id=1646): syz_mount_image$vfat(&(0x7f0000003080), &(0x7f00000030c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000032c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000035c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003600)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000003640)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 197.050416ms ago: executing program 3 (id=1647): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000400), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x90000005}) epoll_pwait(r2, &(0x7f0000000480)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000004c0)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) close(r0) 144.612827ms ago: executing program 5 (id=1648): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1117a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f611}, 0xb093, 0x800000, 0x2, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = io_uring_setup(0x3760, &(0x7f0000000540)={0x0, 0x8458, 0x40, 0x2, 0x36c}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000600)=[@ioring_restriction_register_op={0x0, 0xf}], 0x1) syz_open_dev$sg(0x0, 0x8c, 0x20402) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 13.1894ms ago: executing program 5 (id=1649): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000180)=0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) 0s ago: executing program 5 (id=1650): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x28020480) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 64.018969][ T5295] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.026119][ T5295] EXT4-fs warning (device loop3): ext4_enable_quotas:7314: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 64.026408][ T5295] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 64.027398][ T5295] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.612: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.027523][ T5295] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.027698][ T5295] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.612: couldn't read orphan inode 13 (err -117) [ 64.027729][ T5295] loop3: lost filesystem error report for type 5 error -117 [ 64.028367][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.094288][ T3289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.224248][ T5308] FAULT_INJECTION: forcing a failure. [ 64.224248][ T5308] name failslab, interval 1, probability 0, space 0, times 0 [ 64.224290][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.4.629 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 64.224327][ T5308] Tainted: [Y]=FORCED_BIND [ 64.224337][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.224352][ T5308] Call Trace: [ 64.224422][ T5308] [ 64.224430][ T5308] __dump_stack+0x1d/0x30 [ 64.224454][ T5308] dump_stack_lvl+0x95/0xd0 [ 64.224474][ T5308] dump_stack+0x15/0x1b [ 64.224493][ T5308] should_fail_ex+0x262/0x280 [ 64.224514][ T5308] ? __memcg_list_lru_alloc+0x288/0x470 [ 64.224617][ T5308] should_failslab+0x8c/0xb0 [ 64.224674][ T5308] __kmalloc_noprof+0xb6/0x4b0 [ 64.224699][ T5308] ? __memcg_list_lru_alloc+0x288/0x470 [ 64.224725][ T5308] ? __schedule+0x7a9/0xd40 [ 64.224749][ T5308] __memcg_list_lru_alloc+0x288/0x470 [ 64.224848][ T5308] memcg_list_lru_alloc+0x88/0xa0 [ 64.224913][ T5308] __memcg_slab_post_alloc_hook+0x23f/0x8d0 [ 64.224949][ T5308] ? should_fail_ex+0xdb/0x280 [ 64.224970][ T5308] kmem_cache_alloc_lru_noprof+0x1d6/0x3e0 [ 64.225072][ T5308] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 64.225091][ T5308] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 64.225111][ T5308] hugetlbfs_alloc_inode+0xbc/0x100 [ 64.225192][ T5308] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 64.225211][ T5308] alloc_inode+0x40/0x170 [ 64.225246][ T5308] new_inode+0x1d/0xe0 [ 64.225354][ T5308] hugetlbfs_get_inode+0x7b/0x330 [ 64.225389][ T5308] ? xfd_validate_state+0x45/0xf0 [ 64.225475][ T5308] hugetlb_file_setup+0x192/0x3d0 [ 64.225509][ T5308] ksys_mmap_pgoff+0x13f/0x310 [ 64.225535][ T5308] x64_sys_call+0x23b3/0x2550 [ 64.225618][ T5308] do_syscall_64+0x112/0x360 [ 64.225644][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.225670][ T5308] RIP: 0033:0x7fe15a5ff559 [ 64.225690][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.225712][ T5308] RSP: 002b:00007fe15904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 64.225787][ T5308] RAX: ffffffffffffffda RBX: 00007fe15a885fa0 RCX: 00007fe15a5ff559 [ 64.225804][ T5308] RDX: 0000000002000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 64.225821][ T5308] RBP: 00007fe15a696b20 R08: ffffffffffffffff R09: 0000000000000000 [ 64.225838][ T5308] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 64.225853][ T5308] R13: 00007fe15a886038 R14: 00007fe15a885fa0 R15: 00007ffd2f8122d8 [ 64.225896][ T5308] [ 64.258366][ T5310] FAULT_INJECTION: forcing a failure. [ 64.258366][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 64.258400][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.5.620 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 64.258433][ T5310] Tainted: [Y]=FORCED_BIND [ 64.258441][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.258511][ T5310] Call Trace: [ 64.258519][ T5310] [ 64.258527][ T5310] __dump_stack+0x1d/0x30 [ 64.258553][ T5310] dump_stack_lvl+0x95/0xd0 [ 64.258577][ T5310] dump_stack+0x15/0x1b [ 64.258678][ T5310] should_fail_ex+0x262/0x280 [ 64.258703][ T5310] should_failslab+0x8c/0xb0 [ 64.258736][ T5310] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 64.258815][ T5310] ? set_normalized_timespec64+0xe0/0x110 [ 64.258843][ T5310] ? __d_alloc+0x34/0x320 [ 64.258863][ T5310] ? __d_alloc+0x34/0x320 [ 64.258882][ T5310] ? inode_doinit_with_dentry+0x98/0x7b0 [ 64.258967][ T5310] __d_alloc+0x34/0x320 [ 64.258988][ T5310] __d_alloc_parallel+0x4f/0xd80 [ 64.259012][ T5310] ? d_splice_alias_ops+0xe3/0x3b0 [ 64.259038][ T5310] ? __rcu_read_unlock+0x4e/0x70 [ 64.259128][ T5310] ? __d_lookup+0x30c/0x340 [ 64.259177][ T5310] d_alloc_parallel+0x1f/0x30 [ 64.259276][ T5310] lookup_open+0x21d/0x1010 [ 64.259310][ T5310] path_openat+0x492/0x11c0 [ 64.259336][ T5310] do_file_open+0x16c/0x290 [ 64.259430][ T5310] ? __pfx_kfree_link+0x10/0x10 [ 64.259464][ T5310] do_sys_openat2+0xa1/0x140 [ 64.259571][ T5310] __x64_sys_openat+0xf2/0x120 [ 64.259604][ T5310] x64_sys_call+0x1f72/0x2550 [ 64.259630][ T5310] do_syscall_64+0x112/0x360 [ 64.259654][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.259786][ T5310] RIP: 0033:0x7f13c404fd8e [ 64.259804][ T5310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.259824][ T5310] RSP: 002b:00007f13c2adeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.259847][ T5310] RAX: ffffffffffffffda RBX: 00007f13c2adf6c0 RCX: 00007f13c404fd8e [ 64.259863][ T5310] RDX: 0000000000000002 RSI: 00007f13c2adef90 RDI: ffffffffffffff9c [ 64.259877][ T5310] RBP: 00007f13c4126b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.259968][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.259982][ T5310] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 64.260043][ T5310] [ 64.383112][ T5321] loop2: detected capacity change from 0 to 1024 [ 64.401030][ T5321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.437640][ T29] audit: type=1400 audit(1792718613.622:1666): avc: denied { write } for pid=5318 comm="syz.2.634" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.463778][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.685108][ T5337] netlink: 7 bytes leftover after parsing attributes in process `syz.2.630'. [ 64.811145][ T5345] loop4: detected capacity change from 0 to 2048 [ 64.837511][ T5345] loop4: p1 < > p4 [ 64.839480][ T5345] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.843029][ T29] audit: type=1400 audit(1792718614.042:1667): avc: denied { setopt } for pid=5350 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 64.869852][ T29] audit: type=1400 audit(1792718614.062:1668): avc: denied { read write } for pid=5340 comm="syz.4.632" name="loop4p4" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.869887][ T29] audit: type=1400 audit(1792718614.062:1669): avc: denied { open } for pid=5340 comm="syz.4.632" path="/dev/loop4p4" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.240395][ T5372] netlink: 7 bytes leftover after parsing attributes in process `syz.3.645'. [ 65.436176][ T5379] netlink: 196 bytes leftover after parsing attributes in process `syz.4.648'. [ 67.216013][ T5436] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 67.227638][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 67.227662][ T29] audit: type=1400 audit(1792718616.422:1671): avc: denied { read } for pid=5435 comm="syz.2.679" name="trace_pipe" dev="tracefs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.227691][ T29] audit: type=1400 audit(1792718616.422:1672): avc: denied { open } for pid=5435 comm="syz.2.679" path="/105/debug/tracing/trace_pipe" dev="tracefs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.123417][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 68.208633][ T5491] loop2: detected capacity change from 0 to 512 [ 68.243156][ T5491] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.269815][ T5483] veth0_to_team: entered promiscuous mode [ 68.272833][ T5491] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.693: bad orphan inode 13 [ 68.273016][ T5491] loop2: lost filesystem error report for type 5 error -117 [ 68.273226][ T5491] ext4_test_bit(bit=12, block=18) = 1 [ 68.273244][ T5491] is_bad_inode(inode)=0 [ 68.273252][ T5491] NEXT_ORPHAN(inode)=0 [ 68.273261][ T5491] max_ino=32 [ 68.273268][ T5491] i_nlink=1 [ 68.273631][ T5491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 68.517585][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 68.687310][ T5530] FAULT_INJECTION: forcing a failure. [ 68.687310][ T5530] name failslab, interval 1, probability 0, space 0, times 0 [ 68.687353][ T5530] CPU: 1 UID: 0 PID: 5530 Comm: syz.5.706 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 68.687388][ T5530] Tainted: [Y]=FORCED_BIND [ 68.687398][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.687413][ T5530] Call Trace: [ 68.687422][ T5530] [ 68.687430][ T5530] __dump_stack+0x1d/0x30 [ 68.687459][ T5530] dump_stack_lvl+0x95/0xd0 [ 68.687490][ T5530] dump_stack+0x15/0x1b [ 68.687514][ T5530] should_fail_ex+0x262/0x280 [ 68.687541][ T5530] ? mempool_alloc_slab+0x1a/0x30 [ 68.687569][ T5530] should_failslab+0x8c/0xb0 [ 68.687597][ T5530] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 68.687642][ T5530] ? mempool_alloc_slab+0x1a/0x30 [ 68.687676][ T5530] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 68.687735][ T5530] mempool_alloc_slab+0x1a/0x30 [ 68.687759][ T5530] mempool_init_node+0x139/0x260 [ 68.687833][ T5530] ? __pfx_mempool_free_slab+0x10/0x10 [ 68.687860][ T5530] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 68.687887][ T5530] mempool_init_noprof+0x3a/0x50 [ 68.687976][ T5530] bioset_init+0x177/0x480 [ 68.688002][ T5530] ? __alloc_disk_node+0x3c/0x2f0 [ 68.688048][ T5530] __alloc_disk_node+0x59/0x2f0 [ 68.688142][ T5530] __blk_alloc_disk+0x68/0xd0 [ 68.688180][ T5530] dm_create+0x36d/0x850 [ 68.688275][ T5530] dev_create+0x141/0x290 [ 68.688300][ T5530] dm_ctl_ioctl+0x80b/0xad0 [ 68.688367][ T5530] ? __pfx_dev_create+0x10/0x10 [ 68.688439][ T5530] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 68.688466][ T5530] __se_sys_ioctl+0xce/0x140 [ 68.688495][ T5530] __x64_sys_ioctl+0x43/0x50 [ 68.688521][ T5530] x64_sys_call+0x239d/0x2550 [ 68.688553][ T5530] do_syscall_64+0x112/0x360 [ 68.688579][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.688622][ T5530] RIP: 0033:0x7f13c408f559 [ 68.688641][ T5530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.688694][ T5530] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.688718][ T5530] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 68.688736][ T5530] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 68.688752][ T5530] RBP: 00007f13c4126b20 R08: 0000000000000000 R09: 0000000000000000 [ 68.688768][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.688784][ T5530] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 68.688867][ T5530] [ 68.734381][ T29] audit: type=1400 audit(1792718617.932:1673): avc: denied { shutdown } for pid=5527 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.779550][ T29] audit: type=1400 audit(1792718617.982:1674): avc: denied { cmd } for pid=5534 comm="syz.0.710" path="socket:[9929]" dev="sockfs" ino=9929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.913768][ T29] audit: type=1400 audit(1792718618.112:1675): avc: denied { ioctl } for pid=5541 comm="syz.0.712" path="socket:[9973]" dev="sockfs" ino=9973 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.994988][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'. [ 69.142718][ T5577] loop3: detected capacity change from 0 to 2048 [ 69.189708][ T5577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.195886][ T5577] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 69.217156][ T29] audit: type=1400 audit(1792718618.402:1676): avc: denied { mac_admin } for pid=5576 comm="syz.3.721" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.217268][ T29] audit: type=1400 audit(1792718618.402:1677): avc: denied { relabelto } for pid=5576 comm="syz.3.721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 69.267284][ T3289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.418962][ T5604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.426047][ T29] audit: type=1400 audit(1792718618.632:1678): avc: denied { read } for pid=5602 comm="syz.0.726" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.480852][ T5610] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 69.567117][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 69.567841][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 69.961122][ T5690] netlink: 'syz.0.743': attribute type 16 has an invalid length. [ 69.961145][ T5690] netlink: 'syz.0.743': attribute type 17 has an invalid length. [ 70.012773][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 70.064890][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.079162][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.293436][ T5722] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 70.329652][ T5690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.345839][ T5690] gretap1: left allmulticast mode [ 70.361186][ T5727] tipc: Enabling of bearer rejected, failed to enable media [ 70.426234][ T5714] loop2: detected capacity change from 0 to 128 [ 70.427887][ T5722] bond1: entered promiscuous mode [ 70.442866][ T5722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.444237][ T5714] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.478557][ T5713] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.485664][ T5714] FAT-fs (loop2): IO charset š‡/}ôU„A¹ž)utf8 not found [ 70.645263][ T29] audit: type=1400 audit(1792718619.852:1679): avc: denied { unmount } for pid=4073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.748753][ T29] audit: type=1400 audit(1792718619.952:1680): avc: denied { read } for pid=5749 comm="syz.4.763" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.402315][ T5821] netlink: 'syz.3.782': attribute type 2 has an invalid length. [ 71.641589][ T5847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.902204][ T5887] netlink: 'syz.4.802': attribute type 4 has an invalid length. [ 71.916544][ T5887] netlink: 'syz.4.802': attribute type 4 has an invalid length. [ 72.031015][ T5904] FAULT_INJECTION: forcing a failure. [ 72.031015][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 72.031061][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.5.807 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 72.031190][ T5904] Tainted: [Y]=FORCED_BIND [ 72.031200][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.031215][ T5904] Call Trace: [ 72.031224][ T5904] [ 72.031233][ T5904] __dump_stack+0x1d/0x30 [ 72.031319][ T5904] dump_stack_lvl+0x95/0xd0 [ 72.031339][ T5904] dump_stack+0x15/0x1b [ 72.031394][ T5904] should_fail_ex+0x262/0x280 [ 72.031417][ T5904] should_failslab+0x8c/0xb0 [ 72.031440][ T5904] __kvmalloc_node_noprof+0x14f/0x5b0 [ 72.031471][ T5904] ? __se_sys_setgroups+0xd4/0x310 [ 72.031543][ T5904] ? __se_sys_setgroups+0xd4/0x310 [ 72.031574][ T5904] __se_sys_setgroups+0xd4/0x310 [ 72.031599][ T5904] ? switch_fpu_return+0xe7/0x1b0 [ 72.031724][ T5904] __x64_sys_setgroups+0x31/0x40 [ 72.031750][ T5904] x64_sys_call+0x1916/0x2550 [ 72.031776][ T5904] do_syscall_64+0x112/0x360 [ 72.031800][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.031869][ T5904] RIP: 0033:0x7f13c408f559 [ 72.031943][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.031962][ T5904] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 72.031988][ T5904] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 72.032007][ T5904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.032029][ T5904] RBP: 00007f13c4126b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.032045][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.032139][ T5904] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 72.032159][ T5904] [ 72.246475][ T5919] loop3: detected capacity change from 0 to 7 [ 72.257406][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 72.257620][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.257652][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 72.257795][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.257823][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 72.257944][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.257977][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 72.258293][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.258338][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 72.258645][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.258682][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 72.346603][ T5924] netlink: 'syz.5.814': attribute type 4 has an invalid length. [ 72.359542][ T5924] netlink: 'syz.5.814': attribute type 4 has an invalid length. [ 72.379825][ T5922] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 72.398396][ T5922] bond1: entered promiscuous mode [ 72.398548][ T5922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.448453][ T5922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.457278][ T5922] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 72.457301][ T5922] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 72.483067][ T5922] bond1: (slave ip6gre2): making interface the new active one [ 72.483090][ T5922] ip6gre2: entered promiscuous mode [ 72.486646][ T5922] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 72.556176][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 72.563110][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 72.590942][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.597008][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.606761][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 72.941546][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 72.941564][ T29] audit: type=1400 audit(1792718622.152:1692): avc: denied { mount } for pid=5954 comm="syz.3.826" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 73.200055][ T5965] loop3: detected capacity change from 0 to 1024 [ 73.200502][ T5965] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.205053][ T5965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.205127][ T5965] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.253900][ T5965] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.829: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 73.253964][ T5965] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.257438][ T5965] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.829: couldn't read orphan inode 11 (err -117) [ 73.257471][ T5965] loop3: lost filesystem error report for type 5 error -117 [ 73.259493][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.291237][ T29] audit: type=1400 audit(1792718622.502:1693): avc: denied { write } for pid=5964 comm="syz.3.829" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.291294][ T29] audit: type=1400 audit(1792718622.502:1694): avc: denied { create } for pid=5964 comm="syz.3.829" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.291807][ T5965] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.829: Invalid block bitmap block 0 in block_group 0 [ 73.292007][ T5965] Quota error (device loop3): write_blk: dquota write failed [ 73.292022][ T5965] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 73.292111][ T5965] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.829: Failed to acquire dquot type 0 [ 73.295523][ T29] audit: type=1400 audit(1792718622.502:1695): avc: denied { setattr } for pid=5964 comm="syz.3.829" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.297447][ T29] audit: type=1400 audit(1792718622.502:1696): avc: denied { write } for pid=5964 comm="syz.3.829" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.297550][ T5965] Quota error (device loop3): write_blk: dquota write failed [ 73.297580][ T5965] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 73.297602][ T5965] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.829: Failed to acquire dquot type 0 [ 73.362103][ T3289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.374909][ T3662] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-9 [ 73.374958][ T3662] EXT4-fs error (device loop3): ext4_release_dquot:7115: comm kworker/u8:9: Failed to release dquot type 0 [ 73.374978][ T3662] loop3: lost filesystem error report for type 5 error -117 [ 73.457197][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 73.472877][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 73.743356][ T5974] FAULT_INJECTION: forcing a failure. [ 73.743356][ T5974] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.743401][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.5.834 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 73.743486][ T5974] Tainted: [Y]=FORCED_BIND [ 73.743495][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.743597][ T5974] Call Trace: [ 73.743607][ T5974] [ 73.743617][ T5974] __dump_stack+0x1d/0x30 [ 73.743716][ T5974] dump_stack_lvl+0x95/0xd0 [ 73.743745][ T5974] dump_stack+0x15/0x1b [ 73.743771][ T5974] should_fail_ex+0x262/0x280 [ 73.743794][ T5974] should_fail+0xb/0x20 [ 73.743813][ T5974] should_fail_usercopy+0x1a/0x20 [ 73.743914][ T5974] _copy_to_user+0x20/0xa0 [ 73.743937][ T5974] do_ip6t_get_ctl+0xa11/0xcb0 [ 73.743986][ T5974] ? __rcu_read_unlock+0x4e/0x70 [ 73.744014][ T5974] nf_getsockopt+0x190/0x1b0 [ 73.744218][ T5974] ipv6_getsockopt+0x170/0x1e0 [ 73.744251][ T5974] udpv6_getsockopt+0xa5/0x230 [ 73.744283][ T5974] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 73.744319][ T5974] sock_common_getsockopt+0x60/0x70 [ 73.744353][ T5974] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 73.744387][ T5974] do_sock_getsockopt+0x2f5/0x570 [ 73.744445][ T5974] __x64_sys_getsockopt+0x11d/0x1a0 [ 73.744469][ T5974] x64_sys_call+0x1032/0x2550 [ 73.744501][ T5974] do_syscall_64+0x112/0x360 [ 73.744562][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.744592][ T5974] RIP: 0033:0x7f13c408f559 [ 73.744613][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.744639][ T5974] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 73.744702][ T5974] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 73.744769][ T5974] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 73.744784][ T5974] RBP: 00007f13c4126b20 R08: 0000200000000c00 R09: 0000000000000000 [ 73.744802][ T5974] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 73.744819][ T5974] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 73.744839][ T5974] [ 74.276970][ T5991] loop2: detected capacity change from 0 to 512 [ 74.277643][ T5991] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.277658][ T5991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.280908][ T5991] EXT4-fs (loop2): 1 truncate cleaned up [ 74.281261][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.348330][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.349177][ T5993] bridge_slave_0: left allmulticast mode [ 74.349196][ T5993] bridge_slave_0: left promiscuous mode [ 74.349512][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.390524][ T5993] bridge_slave_1: left allmulticast mode [ 74.390621][ T5993] bridge_slave_1: left promiscuous mode [ 74.390781][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.413706][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 74.438250][ T5993] bond0: (slave bond_slave_0): Releasing backup interface [ 74.452993][ T5993] bond0: (slave bond_slave_1): Releasing backup interface [ 74.488423][ T5993] team0: Port device team_slave_0 removed [ 74.503256][ T5993] team0: Port device team_slave_1 removed [ 74.504178][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.504193][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.506659][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.506677][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.548969][ T5993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.785097][ T6003] bridge0: port 3(syz_tun) entered disabled state [ 74.971399][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.001157][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.144317][ T6026] FAULT_INJECTION: forcing a failure. [ 75.144317][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 75.144352][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.3.853 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 75.144382][ T6026] Tainted: [Y]=FORCED_BIND [ 75.144390][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.144449][ T6026] Call Trace: [ 75.144457][ T6026] [ 75.144465][ T6026] __dump_stack+0x1d/0x30 [ 75.144492][ T6026] dump_stack_lvl+0x95/0xd0 [ 75.144519][ T6026] dump_stack+0x15/0x1b [ 75.144542][ T6026] should_fail_ex+0x262/0x280 [ 75.144643][ T6026] ? security_prepare_creds+0x52/0x120 [ 75.144725][ T6026] should_failslab+0x8c/0xb0 [ 75.144756][ T6026] __kmalloc_noprof+0xb6/0x4b0 [ 75.144785][ T6026] ? security_prepare_creds+0x52/0x120 [ 75.144822][ T6026] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 75.144924][ T6026] security_prepare_creds+0x52/0x120 [ 75.144968][ T6026] prepare_creds+0x385/0x550 [ 75.145005][ T6026] set_current_groups+0x1b/0x180 [ 75.145059][ T6026] __se_sys_setgroups+0x286/0x310 [ 75.145097][ T6026] __x64_sys_setgroups+0x31/0x40 [ 75.145132][ T6026] x64_sys_call+0x1916/0x2550 [ 75.145227][ T6026] do_syscall_64+0x112/0x360 [ 75.145270][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.145298][ T6026] RIP: 0033:0x7f5a5e5af559 [ 75.145318][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.145341][ T6026] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 75.145444][ T6026] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 75.145459][ T6026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.145472][ T6026] RBP: 00007f5a5e646b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.145485][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.145574][ T6026] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 75.145603][ T6026] [ 75.409159][ T6003] bond1: left promiscuous mode [ 75.409194][ T6003] ip6gre2: left promiscuous mode [ 75.475029][ T6009] bridge0: port 3(syz_tun) entered disabled state [ 75.493259][ T6009] syz_tun (unregistering): left allmulticast mode [ 75.493287][ T6009] syz_tun (unregistering): left promiscuous mode [ 75.493318][ T6009] bridge0: port 3(syz_tun) entered disabled state [ 75.584059][ T6020] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.718027][ T6023] loop5: detected capacity change from 0 to 128 [ 75.718795][ T6023] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.771254][ T6023] FAT-fs (loop5): IO charset š‡/}ôU„A¹ž)utf8 not found [ 76.403647][ T6073] validate_nla: 6 callbacks suppressed [ 76.403700][ T6073] netlink: 'syz.2.868': attribute type 16 has an invalid length. [ 76.403715][ T6073] netlink: 'syz.2.868': attribute type 17 has an invalid length. [ 76.453641][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 76.802111][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.807238][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.098479][ T6137] loop4: detected capacity change from 0 to 128 [ 77.122042][ T6137] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.138295][ T6137] FAT-fs (loop4): IO charset š‡/}ôU„A¹ž)utf8 not found [ 77.237866][ T6108] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.384064][ T6202] loop5: detected capacity change from 0 to 512 [ 78.445228][ T6202] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 78.445425][ T6202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.644919][ T6202] EXT4-fs (loop5): 1 truncate cleaned up [ 78.838555][ T6202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.909847][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 78.909866][ T29] audit: type=1400 audit(1792718628.102:1698): avc: denied { write } for pid=6201 comm="syz.5.881" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.058911][ T6228] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.163365][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.235580][ T6238] bridge_slave_0: left allmulticast mode [ 79.235604][ T6238] bridge_slave_0: left promiscuous mode [ 79.235768][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.260660][ T4099] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.261852][ T4099] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.266398][ T6238] bridge_slave_1: left allmulticast mode [ 79.266423][ T6238] bridge_slave_1: left promiscuous mode [ 79.266610][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.313469][ T6238] bond0: (slave bond_slave_0): Releasing backup interface [ 79.330978][ T6238] bond0: (slave bond_slave_1): Releasing backup interface [ 79.339011][ T6248] FAULT_INJECTION: forcing a failure. [ 79.339011][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 79.339118][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.5.900 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 79.339154][ T6248] Tainted: [Y]=FORCED_BIND [ 79.339164][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.339200][ T6248] Call Trace: [ 79.339207][ T6248] [ 79.339214][ T6248] __dump_stack+0x1d/0x30 [ 79.339240][ T6248] dump_stack_lvl+0x95/0xd0 [ 79.339263][ T6248] dump_stack+0x15/0x1b [ 79.339361][ T6248] should_fail_ex+0x262/0x280 [ 79.339409][ T6248] ? tipc_nametbl_insert_publ+0x527/0x950 [ 79.339442][ T6248] should_failslab+0x8c/0xb0 [ 79.339469][ T6248] __kmalloc_cache_noprof+0x5d/0x3e0 [ 79.339496][ T6248] ? tipc_nametbl_insert_publ+0x527/0x950 [ 79.339534][ T6248] tipc_nametbl_insert_publ+0x527/0x950 [ 79.339603][ T6248] tipc_nametbl_publish+0x155/0x210 [ 79.339637][ T6248] tipc_sk_join+0x329/0x450 [ 79.339663][ T6248] tipc_setsockopt+0x594/0x620 [ 79.339762][ T6248] ? __pfx_tipc_setsockopt+0x10/0x10 [ 79.339785][ T6248] __sys_setsockopt+0x184/0x200 [ 79.339884][ T6248] __x64_sys_setsockopt+0x64/0x80 [ 79.339964][ T6248] x64_sys_call+0x248f/0x2550 [ 79.340045][ T6248] do_syscall_64+0x112/0x360 [ 79.340068][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.340095][ T6248] RIP: 0033:0x7f13c408f559 [ 79.340113][ T6248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.340133][ T6248] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.340157][ T6248] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 79.340173][ T6248] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 79.340189][ T6248] RBP: 00007f13c4126b20 R08: 000000000000002e R09: 0000000000000000 [ 79.340204][ T6248] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 79.340218][ T6248] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 79.340271][ T6248] [ 79.340307][ T6248] tipc: Failed to bind to 66,4294966268,4294966268 [ 79.389865][ T6238] team0: Port device team_slave_0 removed [ 79.402017][ T6238] team0: Port device team_slave_1 removed [ 79.407867][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.407886][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.451649][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.451667][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.464692][ T6238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.482900][ T6250] netlink: 'syz.5.901': attribute type 4 has an invalid length. [ 79.483106][ T6250] FAULT_INJECTION: forcing a failure. [ 79.483106][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 79.483137][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.5.901 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 79.483170][ T6250] Tainted: [Y]=FORCED_BIND [ 79.483178][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.483191][ T6250] Call Trace: [ 79.483270][ T6250] [ 79.483278][ T6250] __dump_stack+0x1d/0x30 [ 79.483306][ T6250] dump_stack_lvl+0x95/0xd0 [ 79.483330][ T6250] dump_stack+0x15/0x1b [ 79.483366][ T6250] should_fail_ex+0x262/0x280 [ 79.483437][ T6250] ? nsim_fib_event_nb+0x19c/0xd90 [ 79.483462][ T6250] should_failslab+0x8c/0xb0 [ 79.483580][ T6250] __kmalloc_cache_noprof+0x5d/0x3e0 [ 79.483645][ T6250] ? nsim_fib_event_nb+0x19c/0xd90 [ 79.483746][ T6250] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 79.483776][ T6250] nsim_fib_event_nb+0x19c/0xd90 [ 79.483828][ T6250] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 79.483877][ T6250] atomic_notifier_call_chain+0x79/0x1a0 [ 79.483908][ T6250] call_fib_notifiers+0x65/0xa0 [ 79.483939][ T6250] call_fib4_notifiers+0x77/0xb0 [ 79.484041][ T6250] call_fib_entry_notifiers+0x113/0x140 [ 79.484079][ T6250] fib_table_delete+0x658/0x740 [ 79.484135][ T6250] fib_magic+0x233/0x270 [ 79.484163][ T6250] fib_del_ifaddr+0x1c6/0xa90 [ 79.484279][ T6250] ? nlmsg_notify+0xcf/0x170 [ 79.484381][ T6250] ? nlmsg_notify+0x12e/0x170 [ 79.484412][ T6250] ? addr_event+0x6d/0x270 [ 79.484513][ T6250] fib_inetaddr_event+0x76/0x1e0 [ 79.484557][ T6250] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 79.484585][ T6250] blocking_notifier_call_chain+0x9b/0x1e0 [ 79.484671][ T6250] __inet_del_ifa+0x45d/0x710 [ 79.484697][ T6250] inetdev_event+0x60b/0xb60 [ 79.484799][ T6250] ? __pfx_ib_netdevice_event+0x10/0x10 [ 79.484839][ T6250] ? ib_netdevice_event+0xeb/0x350 [ 79.484870][ T6250] ? __pfx_arp_netdev_event+0x10/0x10 [ 79.484994][ T6250] ? __pfx_inetdev_event+0x10/0x10 [ 79.485050][ T6250] raw_notifier_call_chain+0x72/0x1a0 [ 79.485102][ T6250] call_netdevice_notifiers_info+0x92/0xd0 [ 79.485134][ T6250] netif_set_mtu_ext+0x3da/0x510 [ 79.485180][ T6250] do_setlink+0x66e/0x2860 [ 79.485212][ T6250] ? cred_has_capability+0x224/0x2a0 [ 79.485247][ T6250] ? selinux_capable+0x31/0x40 [ 79.485272][ T6250] ? security_capable+0x7b/0x90 [ 79.485305][ T6250] ? ns_capable+0x80/0xb0 [ 79.485366][ T6250] ? netlink_ns_capable+0x86/0xa0 [ 79.485411][ T6250] rtnl_setlink+0x3a8/0x4f0 [ 79.485452][ T6250] ? selinux_capable+0x31/0x40 [ 79.485528][ T6250] ? security_capable+0x7b/0x90 [ 79.485635][ T6250] ? ns_capable+0x80/0xb0 [ 79.485656][ T6250] ? __pfx_rtnl_setlink+0x10/0x10 [ 79.485685][ T6250] rtnetlink_rcv_msg+0x64b/0x720 [ 79.485718][ T6250] netlink_rcv_skb+0x11e/0x220 [ 79.485837][ T6250] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.485870][ T6250] rtnetlink_rcv+0x1c/0x30 [ 79.485898][ T6250] netlink_unicast+0x665/0x740 [ 79.486011][ T6250] netlink_sendmsg+0x5ef/0x740 [ 79.486033][ T6250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.486055][ T6250] sock_write_iter+0x2c5/0x2f0 [ 79.486152][ T6250] do_iter_readv_writev+0x4f6/0x5a0 [ 79.486180][ T6250] vfs_writev+0x2ce/0x8b0 [ 79.486286][ T6250] do_writev+0xe9/0x210 [ 79.486315][ T6250] __x64_sys_writev+0x45/0x50 [ 79.486341][ T6250] x64_sys_call+0x23c9/0x2550 [ 79.486381][ T6250] do_syscall_64+0x112/0x360 [ 79.486472][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.486521][ T6250] RIP: 0033:0x7f13c408f559 [ 79.486539][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.486559][ T6250] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 79.486661][ T6250] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 79.486678][ T6250] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 79.486692][ T6250] RBP: 00007f13c4126b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.486706][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.486721][ T6250] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 79.486746][ T6250] [ 79.664448][ T6252] loop5: detected capacity change from 0 to 512 [ 79.664879][ T6252] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.673629][ T6252] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.902: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 79.673667][ T6252] loop5: lost filesystem error report for type 5 error -117 [ 79.674261][ T6252] EXT4-fs (loop5): Remounting filesystem read-only [ 79.674290][ T6252] EXT4-fs (loop5): 1 orphan inode deleted [ 79.674677][ T6252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.683765][ T3676] IPVS: starting estimator thread 0... [ 79.684407][ T6252] netlink: 232 bytes leftover after parsing attributes in process `syz.5.902'. [ 79.719447][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.790083][ T6254] IPVS: using max 2688 ests per chain, 134400 per kthread [ 80.048274][ T6266] FAULT_INJECTION: forcing a failure. [ 80.048274][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 80.048311][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.3.906 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 80.048411][ T6266] Tainted: [Y]=FORCED_BIND [ 80.048463][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.048477][ T6266] Call Trace: [ 80.048485][ T6266] [ 80.048494][ T6266] __dump_stack+0x1d/0x30 [ 80.048579][ T6266] dump_stack_lvl+0x95/0xd0 [ 80.048695][ T6266] dump_stack+0x15/0x1b [ 80.048717][ T6266] should_fail_ex+0x262/0x280 [ 80.048776][ T6266] ? __memcg_list_lru_alloc+0x288/0x470 [ 80.048806][ T6266] should_failslab+0x8c/0xb0 [ 80.048831][ T6266] __kmalloc_noprof+0xb6/0x4b0 [ 80.048920][ T6266] ? pcpu_block_update+0x310/0x3b0 [ 80.048947][ T6266] ? __memcg_list_lru_alloc+0x288/0x470 [ 80.048983][ T6266] __memcg_list_lru_alloc+0x288/0x470 [ 80.049139][ T6266] memcg_list_lru_alloc+0x88/0xa0 [ 80.049167][ T6266] __memcg_slab_post_alloc_hook+0x23f/0x8d0 [ 80.049278][ T6266] ? should_fail_ex+0xdb/0x280 [ 80.049302][ T6266] kmem_cache_alloc_lru_noprof+0x1d6/0x3e0 [ 80.049328][ T6266] ? bdev_alloc_inode+0x35/0xb0 [ 80.049357][ T6266] ? bdev_alloc_inode+0x35/0xb0 [ 80.049469][ T6266] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 80.049499][ T6266] bdev_alloc_inode+0x35/0xb0 [ 80.049567][ T6266] alloc_inode+0x40/0x170 [ 80.049596][ T6266] new_inode+0x1d/0xe0 [ 80.049695][ T6266] bdev_alloc+0x2e/0x1f0 [ 80.049721][ T6266] __alloc_disk_node+0xbb/0x2f0 [ 80.049756][ T6266] __blk_alloc_disk+0x68/0xd0 [ 80.049859][ T6266] dm_create+0x36d/0x850 [ 80.049894][ T6266] dev_create+0x141/0x290 [ 80.049919][ T6266] dm_ctl_ioctl+0x80b/0xad0 [ 80.049960][ T6266] ? __pfx_dev_create+0x10/0x10 [ 80.049992][ T6266] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 80.050016][ T6266] __se_sys_ioctl+0xce/0x140 [ 80.050041][ T6266] __x64_sys_ioctl+0x43/0x50 [ 80.050112][ T6266] x64_sys_call+0x239d/0x2550 [ 80.050139][ T6266] do_syscall_64+0x112/0x360 [ 80.050239][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.050264][ T6266] RIP: 0033:0x7f5a5e5af559 [ 80.050282][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.050381][ T6266] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.050405][ T6266] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 80.050422][ T6266] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 80.050437][ T6266] RBP: 00007f5a5e646b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.050451][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.050465][ T6266] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 80.050494][ T6266] [ 80.168385][ T6273] loop4: detected capacity change from 0 to 512 [ 80.192709][ T6273] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 80.192725][ T6273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.194125][ T6273] EXT4-fs (loop4): 1 truncate cleaned up [ 80.194586][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.258772][ T29] audit: type=1400 audit(1792718629.442:1699): avc: denied { write } for pid=6269 comm="syz.4.908" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.375921][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.414769][ T6278] loop4: detected capacity change from 0 to 1024 [ 80.430894][ T6278] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.441072][ T6278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.454244][ T29] audit: type=1400 audit(1792718629.652:1700): avc: denied { setattr } for pid=6276 comm="syz.4.911" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.454274][ T29] audit: type=1400 audit(1792718629.652:1701): avc: denied { write } for pid=6276 comm="syz.4.911" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.461217][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.473619][ T3381] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.504517][ T29] audit: type=1400 audit(1792718629.702:1702): avc: denied { write } for pid=6276 comm="syz.4.911" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.504601][ T29] audit: type=1400 audit(1792718629.702:1703): avc: denied { open } for pid=6276 comm="syz.4.911" path="/178/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.578461][ T29] audit: type=1400 audit(1792718629.762:1704): avc: denied { write } for pid=3295 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.578495][ T29] audit: type=1400 audit(1792718629.762:1705): avc: denied { remove_name } for pid=3295 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.578522][ T29] audit: type=1400 audit(1792718629.762:1706): avc: denied { rmdir } for pid=3295 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.578554][ T29] audit: type=1400 audit(1792718629.762:1707): avc: denied { write } for pid=3295 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.587902][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.741245][ T6291] loop4: detected capacity change from 0 to 512 [ 80.749895][ T6291] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.763973][ T6291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.914: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 80.764001][ T6291] loop4: lost filesystem error report for type 5 error -117 [ 80.764164][ T6291] EXT4-fs (loop4): Remounting filesystem read-only [ 80.764266][ T6291] EXT4-fs (loop4): 1 orphan inode deleted [ 80.764522][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.768361][ T6291] netlink: 232 bytes leftover after parsing attributes in process `syz.4.914'. [ 80.790447][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.862398][ T6300] netlink: 'syz.3.917': attribute type 16 has an invalid length. [ 80.862420][ T6300] netlink: 'syz.3.917': attribute type 17 has an invalid length. [ 80.916663][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 80.998496][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.010795][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.070673][ T6300] ip6gre1: left promiscuous mode [ 81.070769][ T6300] ip6gre1: left allmulticast mode [ 81.074824][ T6300] bond1: left promiscuous mode [ 83.891707][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.942'. [ 83.989081][ T6482] syzkaller1: entered promiscuous mode [ 83.989104][ T6482] syzkaller1: entered allmulticast mode [ 84.296343][ T6501] batman_adv: batadv0: Adding interface: syzkaller0 [ 84.296360][ T6501] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.296393][ T6501] batman_adv: batadv0: Interface activated: syzkaller0 [ 84.344348][ T6500] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 84.359728][ T6500] batman_adv: batadv0: Removing interface: syzkaller0 [ 84.648198][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 84.648217][ T29] audit: type=1400 audit(1792718633.852:1725): avc: denied { read } for pid=6524 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.648270][ T3381] kernel write not supported for file bpf-prog (pid: 3381 comm: kworker/1:5) [ 85.271918][ T6487] kexec: Could not allocate control_code_buffer [ 85.276070][ T6551] netlink: 'syz.5.973': attribute type 1 has an invalid length. [ 85.313780][ T6558] loop2: detected capacity change from 0 to 164 [ 85.324319][ T6558] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 85.326567][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 85.362144][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 85.367533][ T6560] gretap1: entered allmulticast mode [ 85.371955][ T6560] bond1: (slave gretap1): making interface the new active one [ 85.372333][ T6560] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 85.906242][ T6568] pimreg9: entered allmulticast mode [ 85.964494][ T6590] loop2: detected capacity change from 0 to 512 [ 85.975867][ T6590] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.005009][ T6590] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.986: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 86.005076][ T6590] loop2: lost filesystem error report for type 5 error -117 [ 86.006700][ T6590] EXT4-fs (loop2): Remounting filesystem read-only [ 86.006729][ T6590] EXT4-fs (loop2): 1 orphan inode deleted [ 86.007061][ T6590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.037200][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 86.065343][ T6590] netlink: 232 bytes leftover after parsing attributes in process `syz.2.986'. [ 86.224605][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.342094][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.345638][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.670625][ T6618] netlink: set zone limit has 4 unknown bytes [ 87.150144][ T6626] pimreg9: entered allmulticast mode [ 87.247675][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 87.391275][ T6650] netlink: set zone limit has 4 unknown bytes [ 87.548226][ T6655] loop3: detected capacity change from 0 to 2048 [ 87.618435][ T6656] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 87.685833][ T29] audit: type=1400 audit(1792718636.892:1726): avc: denied { create } for pid=6654 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.759899][ T29] audit: type=1400 audit(1792718636.972:1727): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.027585][ T6646] loop2: detected capacity change from 0 to 512 [ 88.459356][ T6668] loop3: detected capacity change from 0 to 128 [ 88.668143][ T6658] pimreg9: entered allmulticast mode [ 88.775233][ T6662] loop4: detected capacity change from 0 to 512 [ 88.873506][ T6668] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.900878][ T6668] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.092995][ T6662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.096626][ T6662] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.230026][ T6668] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.287863][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 90.047165][ T29] audit: type=1400 audit(1792718639.252:1728): avc: denied { name_bind } for pid=6754 comm="syz.3.1038" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.478471][ T29] audit: type=1400 audit(1792718639.672:1729): avc: denied { write } for pid=6661 comm="syz.4.1016" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.567661][ T29] audit: type=1400 audit(1792718639.772:1730): avc: denied { write } for pid=6661 comm="syz.4.1016" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.614356][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.653759][ T6799] loop5: detected capacity change from 0 to 128 [ 90.704983][ T6799] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.745304][ T6799] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.796429][ T6799] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.817668][ T29] audit: type=1326 audit(1792718640.022:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.820426][ T29] audit: type=1326 audit(1792718640.032:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.820922][ T29] audit: type=1326 audit(1792718640.032:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.820949][ T29] audit: type=1326 audit(1792718640.032:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.822093][ T29] audit: type=1326 audit(1792718640.032:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.845882][ T29] audit: type=1326 audit(1792718640.052:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 90.849203][ T29] audit: type=1326 audit(1792718640.052:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 91.106476][ T6814] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.447634][ T6844] loop3: detected capacity change from 0 to 512 [ 92.390206][ T6851] pimreg9: entered allmulticast mode [ 92.676761][ T6949] loop3: detected capacity change from 0 to 764 [ 93.359906][ T6963] FAULT_INJECTION: forcing a failure. [ 93.359906][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.359946][ T6963] CPU: 1 UID: 0 PID: 6963 Comm: syz.3.1065 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 93.359983][ T6963] Tainted: [Y]=FORCED_BIND [ 93.359992][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.360014][ T6963] Call Trace: [ 93.360022][ T6963] [ 93.360030][ T6963] __dump_stack+0x1d/0x30 [ 93.360098][ T6963] dump_stack_lvl+0x95/0xd0 [ 93.360123][ T6963] dump_stack+0x15/0x1b [ 93.360148][ T6963] should_fail_ex+0x262/0x280 [ 93.360175][ T6963] should_fail+0xb/0x20 [ 93.360199][ T6963] should_fail_usercopy+0x1a/0x20 [ 93.360247][ T6963] _copy_to_user+0x20/0xa0 [ 93.360340][ T6963] do_ip6t_get_ctl+0xa11/0xcb0 [ 93.360394][ T6963] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 93.360445][ T6963] ? __rcu_read_unlock+0x4e/0x70 [ 93.360473][ T6963] nf_getsockopt+0x190/0x1b0 [ 93.360618][ T6963] ipv6_getsockopt+0x170/0x1e0 [ 93.360657][ T6963] udpv6_getsockopt+0xa5/0x230 [ 93.360760][ T6963] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 93.360794][ T6963] sock_common_getsockopt+0x60/0x70 [ 93.360829][ T6963] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 93.360864][ T6963] do_sock_getsockopt+0x2f5/0x570 [ 93.360966][ T6963] __x64_sys_getsockopt+0x11d/0x1a0 [ 93.360994][ T6963] x64_sys_call+0x1032/0x2550 [ 93.361025][ T6963] do_syscall_64+0x112/0x360 [ 93.361049][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.361080][ T6963] RIP: 0033:0x7f5a5e5af559 [ 93.361100][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.361221][ T6963] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.361309][ T6963] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 93.361326][ T6963] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 93.361341][ T6963] RBP: 00007f5a5e646b20 R08: 0000200000000c00 R09: 0000000000000000 [ 93.361355][ T6963] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 93.361431][ T6963] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 93.361450][ T6963] [ 93.840226][ T6962] loop5: detected capacity change from 0 to 512 [ 94.262337][ T6962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.262872][ T6962] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.779629][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 94.779663][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 94.779695][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'. [ 94.823182][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.167743][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 95.167780][ T29] audit: type=1400 audit(1792718644.372:2161): avc: denied { write } for pid=7006 comm="syz.2.1089" path="socket:[13559]" dev="sockfs" ino=13559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.976194][ T7050] loop4: detected capacity change from 0 to 128 [ 96.118783][ T7050] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.129571][ T7050] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.162783][ T7050] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.319352][ T7096] netlink: 'syz.4.1086': attribute type 4 has an invalid length. [ 96.325453][ T7096] netlink: 'syz.4.1086': attribute type 4 has an invalid length. [ 96.357008][ T7005] loop3: detected capacity change from 0 to 512 [ 96.904352][ T7123] loop3: detected capacity change from 0 to 128 [ 97.022312][ T7123] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.027336][ T7123] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.098699][ T7123] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.195833][ T29] audit: type=1400 audit(1792718646.402:2162): avc: denied { mounton } for pid=7129 comm="syz.0.1112" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.276107][ T7133] bridge_slave_0: left allmulticast mode [ 97.276135][ T7133] bridge_slave_0: left promiscuous mode [ 97.297515][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.319894][ T7133] bridge_slave_1: left allmulticast mode [ 97.319919][ T7133] bridge_slave_1: left promiscuous mode [ 97.320056][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.366017][ T7133] bond0: (slave bond_slave_0): Releasing backup interface [ 97.386939][ T7133] bond0: (slave bond_slave_1): Releasing backup interface [ 97.416808][ T7133] team0: Port device team_slave_0 removed [ 97.453060][ T7133] team0: Port device team_slave_1 removed [ 97.453977][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.453997][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.464119][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.464137][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.505781][ T7133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.661744][ T7149] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 97.663613][ T7149] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 97.769767][ T29] audit: type=1400 audit(1792718646.972:2163): avc: denied { ioctl } for pid=7152 comm="syz.5.1122" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.932082][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'. [ 97.981862][ T7166] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 98.042414][ T7166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.072126][ T7169] bond2: (slave gretap2): making interface the new active one [ 98.073164][ T7169] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 98.319652][ T7178] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.349245][ T7172] loop4: detected capacity change from 0 to 128 [ 98.802982][ T7172] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.819240][ T7172] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.912096][ T7175] loop5: detected capacity change from 0 to 512 [ 99.032647][ T7178] loop3: detected capacity change from 0 to 128 [ 99.033334][ T7178] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.097165][ T7178] FAT-fs (loop3): IO charset š‡/}ôU„A¹ž)utf8 not found [ 99.355816][ T7172] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.616383][ T7205] bridge_slave_0: left allmulticast mode [ 99.616409][ T7205] bridge_slave_0: left promiscuous mode [ 99.616538][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.645438][ T7205] bridge_slave_1: left allmulticast mode [ 99.645461][ T7205] bridge_slave_1: left promiscuous mode [ 99.645621][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.834200][ T7205] bond0: (slave bond_slave_0): Releasing backup interface [ 99.852305][ T7205] bond0: (slave bond_slave_1): Releasing backup interface [ 99.911827][ T7205] team0: Port device team_slave_0 removed [ 99.956221][ T7205] team0: Port device team_slave_1 removed [ 99.969010][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.969032][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.994930][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.994950][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.018526][ T7205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.268426][ T7203] loop2: detected capacity change from 0 to 512 [ 100.515444][ T29] audit: type=1400 audit(1792718649.722:2164): avc: denied { read append } for pid=7231 comm="syz.3.1136" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.515480][ T29] audit: type=1400 audit(1792718649.722:2165): avc: denied { open } for pid=7231 comm="syz.3.1136" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.636184][ T7238] bridge3: entered promiscuous mode [ 100.636206][ T7238] bridge3: entered allmulticast mode [ 100.637528][ T7238] team0: Port device bridge3 added [ 100.657557][ T7238] bridge0: port 1(team0) entered blocking state [ 100.657589][ T7238] bridge0: port 1(team0) entered disabled state [ 100.657701][ T7238] team0: entered allmulticast mode [ 100.658909][ T7238] team0: entered promiscuous mode [ 100.818818][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.828643][ T7203] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.861109][ T7250] loop4: detected capacity change from 0 to 512 [ 101.273042][ T7263] syzkaller1: entered promiscuous mode [ 101.273116][ T7263] syzkaller1: entered allmulticast mode [ 101.456746][ T29] audit: type=1400 audit(1792718650.662:2166): avc: denied { write } for pid=7196 comm="syz.2.1127" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.503500][ T29] audit: type=1400 audit(1792718650.712:2167): avc: denied { write } for pid=7196 comm="syz.2.1127" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.574073][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.593701][ T29] audit: type=1326 audit(1792718650.802:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.593792][ T29] audit: type=1326 audit(1792718650.802:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.594803][ T29] audit: type=1326 audit(1792718650.802:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.594836][ T29] audit: type=1326 audit(1792718650.802:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.595637][ T29] audit: type=1326 audit(1792718650.802:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.595672][ T29] audit: type=1326 audit(1792718650.802:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7270 comm="syz.4.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15a5ff559 code=0x7ffc0000 [ 101.819330][ T7275] loop2: detected capacity change from 0 to 2048 [ 102.094939][ T7296] loop5: detected capacity change from 0 to 764 [ 102.502771][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 102.715556][ T7321] bridge_slave_0: left allmulticast mode [ 102.717177][ T7321] bridge_slave_0: left promiscuous mode [ 102.717358][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.751006][ T7321] bridge_slave_1: left allmulticast mode [ 102.754707][ T7321] bridge_slave_1: left promiscuous mode [ 102.754811][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.833224][ T7321] bond0: (slave bond_slave_0): Releasing backup interface [ 102.915133][ T7321] bond0: (slave bond_slave_1): Releasing backup interface [ 102.954250][ T7321] team0: Port device team_slave_0 removed [ 102.997843][ T7321] team0: Port device team_slave_1 removed [ 103.021987][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.022008][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.057263][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.057286][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.085455][ T7321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.254740][ T7336] loop4: detected capacity change from 0 to 764 [ 103.886796][ T7312] loop2: detected capacity change from 0 to 512 [ 104.028961][ T7326] loop5: detected capacity change from 0 to 136 [ 104.423237][ T7312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.440749][ T7312] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.828281][ T7362] bridge1: entered promiscuous mode [ 104.828304][ T7362] bridge1: entered allmulticast mode [ 104.829705][ T7362] team0: Port device bridge1 added [ 104.830505][ T7365] bridge0: port 1(team0) entered blocking state [ 104.830541][ T7365] bridge0: port 1(team0) entered disabled state [ 104.830609][ T7365] team0: entered allmulticast mode [ 104.831382][ T7365] team0: entered promiscuous mode [ 105.328744][ T7389] capability: warning: `syz.3.1196' uses 32-bit capabilities (legacy support in use) [ 105.663974][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.696102][ T7410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.704823][ T7412] FAULT_INJECTION: forcing a failure. [ 105.704823][ T7412] name failslab, interval 1, probability 0, space 0, times 0 [ 105.704859][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.2.1205 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 105.704891][ T7412] Tainted: [Y]=FORCED_BIND [ 105.704899][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.704912][ T7412] Call Trace: [ 105.704920][ T7412] [ 105.704928][ T7412] __dump_stack+0x1d/0x30 [ 105.704954][ T7412] dump_stack_lvl+0x95/0xd0 [ 105.704976][ T7412] dump_stack+0x15/0x1b [ 105.704997][ T7412] should_fail_ex+0x262/0x280 [ 105.705021][ T7412] ? vm_area_dup+0x33/0x300 [ 105.705043][ T7412] should_failslab+0x8c/0xb0 [ 105.705067][ T7412] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 105.705091][ T7412] ? vm_area_dup+0x33/0x300 [ 105.705114][ T7412] vm_area_dup+0x33/0x300 [ 105.705137][ T7412] __split_vma+0xe4/0x720 [ 105.705168][ T7412] ? __mod_memcg_lruvec_state+0x1b5/0x2a0 [ 105.705197][ T7412] vms_gather_munmap_vmas+0x176/0x7f0 [ 105.705229][ T7412] ? __rcu_read_unlock+0x4e/0x70 [ 105.705254][ T7412] do_vmi_align_munmap+0x1e1/0x400 [ 105.705292][ T7412] do_vmi_munmap+0x1da/0x220 [ 105.705327][ T7412] move_vma+0xc6a/0xf50 [ 105.705350][ T7412] ? cap_mmap_addr+0xb1/0x250 [ 105.705382][ T7412] mremap_to+0x3ef/0x450 [ 105.705417][ T7412] ? check_prep_vma+0x5b0/0x640 [ 105.705441][ T7412] __se_sys_mremap+0x727/0xc50 [ 105.705466][ T7412] ? xfd_validate_state+0x45/0xf0 [ 105.705495][ T7412] ? restore_fpregs_from_fpstate+0x61/0x110 [ 105.705529][ T7412] __x64_sys_mremap+0x67/0x80 [ 105.705550][ T7412] x64_sys_call+0x1072/0x2550 [ 105.705576][ T7412] do_syscall_64+0x112/0x360 [ 105.705600][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.705623][ T7412] RIP: 0033:0x7fefaa1af559 [ 105.705641][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.705661][ T7412] RSP: 002b:00007fefa8c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 105.705684][ T7412] RAX: ffffffffffffffda RBX: 00007fefaa435fa0 RCX: 00007fefaa1af559 [ 105.705700][ T7412] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000200000017000 [ 105.705714][ T7412] RBP: 00007fefaa246b20 R08: 00002000005d3000 R09: 0000000000000000 [ 105.705729][ T7412] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 105.705742][ T7412] R13: 00007fefaa436038 R14: 00007fefaa435fa0 R15: 00007ffe615ee3e8 [ 105.705761][ T7412] [ 105.897543][ T7407] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.458283][ T7461] FAULT_INJECTION: forcing a failure. [ 106.458283][ T7461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.458317][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.4.1211 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 106.458388][ T7461] Tainted: [Y]=FORCED_BIND [ 106.458396][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.458409][ T7461] Call Trace: [ 106.458418][ T7461] [ 106.458436][ T7461] __dump_stack+0x1d/0x30 [ 106.458483][ T7461] dump_stack_lvl+0x95/0xd0 [ 106.458510][ T7461] dump_stack+0x15/0x1b [ 106.458532][ T7461] should_fail_ex+0x262/0x280 [ 106.458607][ T7461] should_fail+0xb/0x20 [ 106.458666][ T7461] should_fail_usercopy+0x1a/0x20 [ 106.458717][ T7461] _copy_to_user+0x20/0xa0 [ 106.458740][ T7461] bpf_verifier_vlog+0x2c5/0x5a0 [ 106.458827][ T7461] __btf_verifier_log+0x7f/0xb0 [ 106.458849][ T7461] btf_datasec_check_meta+0x4e6/0x640 [ 106.458882][ T7461] btf_parse_type_sec+0x291/0x1520 [ 106.458914][ T7461] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 106.458949][ T7461] ? btf_parse_hdr+0x43a/0x440 [ 106.458975][ T7461] ? btf_parse_str_sec+0x1ae/0x1b0 [ 106.459000][ T7461] btf_new_fd+0x2ec/0x6a0 [ 106.459028][ T7461] bpf_btf_load+0x116/0x130 [ 106.459106][ T7461] __sys_bpf+0xbce/0xc30 [ 106.459148][ T7461] ? do_futex+0x310/0x460 [ 106.459172][ T7461] __x64_sys_bpf+0x69/0x80 [ 106.459254][ T7461] x64_sys_call+0xf26/0x2550 [ 106.459288][ T7461] do_syscall_64+0x112/0x360 [ 106.459314][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.459339][ T7461] RIP: 0033:0x7fe15a5ff559 [ 106.459358][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.459448][ T7461] RSP: 002b:00007fe15904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.459475][ T7461] RAX: ffffffffffffffda RBX: 00007fe15a885fa0 RCX: 00007fe15a5ff559 [ 106.459493][ T7461] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 106.459510][ T7461] RBP: 00007fe15a696b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.459585][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.459601][ T7461] R13: 00007fe15a886038 R14: 00007fe15a885fa0 R15: 00007ffd2f8122d8 [ 106.459625][ T7461] [ 106.738173][ T7471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.757004][ T7419] loop3: detected capacity change from 0 to 128 [ 107.102660][ T7507] team0: left allmulticast mode [ 107.102795][ T7507] team0: left promiscuous mode [ 107.103039][ T7507] bridge0: port 1(team0) entered disabled state [ 107.288235][ T7507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.271804][ T7574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.421217][ T7608] FAULT_INJECTION: forcing a failure. [ 108.421217][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.421253][ T7608] CPU: 0 UID: 0 PID: 7608 Comm: syz.2.1243 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 108.421334][ T7608] Tainted: [Y]=FORCED_BIND [ 108.421345][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.421359][ T7608] Call Trace: [ 108.421367][ T7608] [ 108.421377][ T7608] __dump_stack+0x1d/0x30 [ 108.421407][ T7608] dump_stack_lvl+0x95/0xd0 [ 108.421484][ T7608] dump_stack+0x15/0x1b [ 108.421506][ T7608] should_fail_ex+0x262/0x280 [ 108.421534][ T7608] should_fail+0xb/0x20 [ 108.421561][ T7608] should_fail_usercopy+0x1a/0x20 [ 108.421628][ T7608] _copy_to_user+0x20/0xa0 [ 108.421668][ T7608] bpf_verifier_vlog+0x2c5/0x5a0 [ 108.421702][ T7608] __btf_verifier_log+0x7f/0xb0 [ 108.421729][ T7608] btf_datasec_check_meta+0x4e6/0x640 [ 108.421795][ T7608] btf_parse_type_sec+0x291/0x1520 [ 108.421831][ T7608] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 108.421865][ T7608] ? btf_parse_hdr+0x43a/0x440 [ 108.421895][ T7608] ? btf_parse_str_sec+0x1ae/0x1b0 [ 108.421987][ T7608] btf_new_fd+0x2ec/0x6a0 [ 108.422096][ T7608] bpf_btf_load+0x116/0x130 [ 108.422118][ T7608] __sys_bpf+0xbce/0xc30 [ 108.422163][ T7608] ? do_futex+0x310/0x460 [ 108.422269][ T7608] __x64_sys_bpf+0x69/0x80 [ 108.422305][ T7608] x64_sys_call+0xf26/0x2550 [ 108.422369][ T7608] do_syscall_64+0x112/0x360 [ 108.422399][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.422483][ T7608] RIP: 0033:0x7fefaa1af559 [ 108.422505][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.422530][ T7608] RSP: 002b:00007fefa8c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.422554][ T7608] RAX: ffffffffffffffda RBX: 00007fefaa435fa0 RCX: 00007fefaa1af559 [ 108.422633][ T7608] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 108.422651][ T7608] RBP: 00007fefaa246b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.422667][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.422683][ T7608] R13: 00007fefaa436038 R14: 00007fefaa435fa0 R15: 00007ffe615ee3e8 [ 108.422706][ T7608] [ 108.812259][ T7641] FAULT_INJECTION: forcing a failure. [ 108.812259][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 108.812301][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.3.1246 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 108.812342][ T7641] Tainted: [Y]=FORCED_BIND [ 108.812349][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.812361][ T7641] Call Trace: [ 108.812368][ T7641] [ 108.812375][ T7641] __dump_stack+0x1d/0x30 [ 108.812470][ T7641] dump_stack_lvl+0x95/0xd0 [ 108.812498][ T7641] dump_stack+0x15/0x1b [ 108.812524][ T7641] should_fail_ex+0x262/0x280 [ 108.812553][ T7641] should_failslab+0x8c/0xb0 [ 108.812598][ T7641] __kvmalloc_node_noprof+0x14f/0x5b0 [ 108.812630][ T7641] ? __se_sys_add_key+0x1f8/0x360 [ 108.812744][ T7641] ? __se_sys_add_key+0x1f8/0x360 [ 108.812780][ T7641] __se_sys_add_key+0x1f8/0x360 [ 108.812813][ T7641] __x64_sys_add_key+0x67/0x80 [ 108.812919][ T7641] x64_sys_call+0x1fa9/0x2550 [ 108.812944][ T7641] do_syscall_64+0x112/0x360 [ 108.812966][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.813055][ T7641] RIP: 0033:0x7f5a5e5af559 [ 108.813076][ T7641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.813099][ T7641] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 108.813202][ T7641] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 108.813221][ T7641] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 00002000000001c0 [ 108.813237][ T7641] RBP: 00007f5a5e646b20 R08: fffffffffffffffe R09: 0000000000000000 [ 108.813322][ T7641] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 108.813338][ T7641] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 108.813360][ T7641] [ 109.367076][ T7650] loop3: detected capacity change from 0 to 256 [ 109.484180][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1250'. [ 109.484252][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 109.488025][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1250'. [ 109.488054][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 109.500702][ T3666] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.500745][ T3666] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.500779][ T3666] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.500838][ T3666] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.694916][ T7649] loop5: detected capacity change from 0 to 32768 [ 109.704834][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1255'. [ 109.706329][ T7668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7668 comm=syz.2.1255 [ 109.706456][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1255'. [ 109.765039][ T7649] loop5: p1 p2 p3 < p5 p6 > p4 [ 109.766027][ T7649] loop5: p2 size 16777216 extends beyond EOD, truncated [ 109.767214][ T7649] loop5: p4 start 1426063360 is beyond EOD, truncated [ 109.767752][ T7649] loop5: p6 start 4294974214 is beyond EOD, truncated [ 109.917976][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 109.917996][ T29] audit: type=1400 audit(1792718659.122:2488): avc: denied { watch } for pid=7679 comm="syz.4.1261" path="/249/file0" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.188003][ T7689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.292866][ T29] audit: type=1400 audit(1792718659.502:2489): avc: denied { create } for pid=7672 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 110.329348][ T29] audit: type=1326 audit(1792718659.532:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.329383][ T29] audit: type=1326 audit(1792718659.532:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.333818][ T29] audit: type=1326 audit(1792718659.542:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.333857][ T29] audit: type=1326 audit(1792718659.542:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.333980][ T29] audit: type=1326 audit(1792718659.542:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.369333][ T29] audit: type=1326 audit(1792718659.572:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.369368][ T29] audit: type=1326 audit(1792718659.572:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.392169][ T29] audit: type=1326 audit(1792718659.602:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.0.1265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efda793f559 code=0x7ffc0000 [ 110.865354][ T7715] FAULT_INJECTION: forcing a failure. [ 110.865354][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 110.865407][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.4.1273 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 110.865519][ T7715] Tainted: [Y]=FORCED_BIND [ 110.865528][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.865543][ T7715] Call Trace: [ 110.865550][ T7715] [ 110.865558][ T7715] __dump_stack+0x1d/0x30 [ 110.865589][ T7715] dump_stack_lvl+0x95/0xd0 [ 110.865618][ T7715] dump_stack+0x15/0x1b [ 110.865655][ T7715] should_fail_ex+0x262/0x280 [ 110.865721][ T7715] ? can_rx_register+0x104/0x4d0 [ 110.865749][ T7715] should_failslab+0x8c/0xb0 [ 110.865775][ T7715] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 110.865848][ T7715] ? can_rx_register+0x104/0x4d0 [ 110.865880][ T7715] can_rx_register+0x104/0x4d0 [ 110.865912][ T7715] ? __pfx_raw_rcv+0x10/0x10 [ 110.865955][ T7715] raw_enable_filters+0x7d/0x140 [ 110.866024][ T7715] raw_setsockopt+0xb79/0xda0 [ 110.866055][ T7715] ? __pfx_raw_setsockopt+0x10/0x10 [ 110.866198][ T7715] __sys_setsockopt+0x184/0x200 [ 110.866225][ T7715] __x64_sys_setsockopt+0x64/0x80 [ 110.866251][ T7715] x64_sys_call+0x248f/0x2550 [ 110.866281][ T7715] do_syscall_64+0x112/0x360 [ 110.866346][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.866434][ T7715] RIP: 0033:0x7fe15a5ff559 [ 110.866453][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.866476][ T7715] RSP: 002b:00007fe15904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.866537][ T7715] RAX: ffffffffffffffda RBX: 00007fe15a885fa0 RCX: 00007fe15a5ff559 [ 110.866613][ T7715] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 110.866627][ T7715] RBP: 00007fe15a696b20 R08: 0000000000000f00 R09: 0000000000000000 [ 110.866642][ T7715] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 110.866657][ T7715] R13: 00007fe15a886038 R14: 00007fe15a885fa0 R15: 00007ffd2f8122d8 [ 110.866680][ T7715] [ 111.103656][ T7730] team0: left allmulticast mode [ 111.103746][ T7730] team0: left promiscuous mode [ 111.104014][ T7730] bridge0: port 1(team0) entered disabled state [ 111.417439][ T7730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.440572][ T7722] loop5: detected capacity change from 0 to 128 [ 111.784410][ T7722] FAT-fs (loop5): bogus number of reserved sectors [ 111.785562][ T7722] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 111.786239][ T7722] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.957580][ T7849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.104815][ T7875] loop5: detected capacity change from 0 to 512 [ 113.108212][ T7875] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 113.108236][ T7875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.108262][ T7875] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 113.213832][ T7880] loop5: detected capacity change from 0 to 1024 [ 113.215689][ T7880] EXT4-fs: Ignoring removed i_version option [ 113.247536][ T7880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.247674][ T7880] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.249783][ T7880] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.249967][ T7880] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.250252][ T7880] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.1301: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.250341][ T7880] loop5: lost filesystem error report for type 5 error -117 [ 113.250559][ T7880] EXT4-fs (loop5): Remounting filesystem read-only [ 113.250611][ T7880] EXT4-fs (loop5): 1 orphan inode deleted [ 113.250982][ T7880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.340619][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.605829][ T7819] loop4: detected capacity change from 0 to 512 [ 113.930401][ T40] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.930550][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.930611][ T40] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.930643][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.930700][ T40] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.930760][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.930796][ T40] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.930877][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.182188][ T7909] loop5: detected capacity change from 0 to 512 [ 114.198790][ T7909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.198860][ T7909] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.339473][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.367519][ T7918] loop5: detected capacity change from 0 to 512 [ 114.527277][ T7932] loop5: detected capacity change from 0 to 2048 [ 115.043542][ T7938] loop3: detected capacity change from 0 to 512 [ 115.073971][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.074040][ T7938] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.076743][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 115.076760][ T29] audit: type=1400 audit(1792718664.282:2516): avc: denied { write } for pid=7936 comm="syz.3.1325" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.079468][ T29] audit: type=1400 audit(1792718664.282:2517): avc: denied { write } for pid=7936 comm="syz.3.1325" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.079629][ T29] audit: type=1400 audit(1792718664.282:2518): avc: denied { append } for pid=7936 comm="syz.3.1325" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.082237][ T29] audit: type=1400 audit(1792718664.292:2519): avc: denied { ioctl } for pid=7936 comm="syz.3.1325" path="/283/bus/file2" dev="loop3" ino=16 ioctlcmd=0xc028660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.291155][ T3289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.633482][ T7959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.210290][ T7931] syz.2.1322 (7931) used greatest stack depth: 9032 bytes left [ 116.340261][ T29] audit: type=1400 audit(1792718665.552:2520): avc: denied { sys_module } for pid=7971 comm="syz.2.1337" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.468374][ T29] audit: type=1400 audit(1792718665.672:2521): avc: denied { setopt } for pid=7987 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.471585][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 117.393490][ T8109] ip_tables: iptables: counters copy to user failed while replacing table [ 117.599413][ T29] audit: type=1400 audit(1792718666.802:2522): avc: denied { rename } for pid=8120 comm="syz.5.1365" name="bus" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.698179][ T8126] netlink: 'syz.5.1367': attribute type 1 has an invalid length. [ 117.698268][ T8126] netlink: 'syz.5.1367': attribute type 4 has an invalid length. [ 117.698279][ T8126] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1367'. [ 117.698662][ T8126] netlink: 'syz.5.1367': attribute type 1 has an invalid length. [ 117.698679][ T8126] netlink: 'syz.5.1367': attribute type 4 has an invalid length. [ 117.698693][ T8126] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1367'. [ 117.738842][ T29] audit: type=1400 audit(1792718666.942:2523): avc: denied { listen } for pid=8127 comm="syz.5.1368" lport=35809 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.851555][ T8135] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 117.894215][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 117.953373][ T29] audit: type=1400 audit(1792718667.162:2524): avc: denied { mount } for pid=8141 comm="syz.0.1376" name="/" dev="ramfs" ino=16557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.996768][ T8143] netlink: 'syz.3.1374': attribute type 13 has an invalid length. [ 118.075522][ T7691] syz.2.1258 (7691) used greatest stack depth: 7248 bytes left [ 118.206309][ T8163] FAULT_INJECTION: forcing a failure. [ 118.206309][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 118.206347][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.2.1384 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 118.206403][ T8163] Tainted: [Y]=FORCED_BIND [ 118.206413][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.206428][ T8163] Call Trace: [ 118.206437][ T8163] [ 118.206447][ T8163] __dump_stack+0x1d/0x30 [ 118.206477][ T8163] dump_stack_lvl+0x95/0xd0 [ 118.206528][ T8163] dump_stack+0x15/0x1b [ 118.206552][ T8163] should_fail_ex+0x262/0x280 [ 118.206579][ T8163] should_failslab+0x8c/0xb0 [ 118.206607][ T8163] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 118.206682][ T8163] ? __d_alloc+0x34/0x320 [ 118.206702][ T8163] ? __d_alloc+0x34/0x320 [ 118.206725][ T8163] __d_alloc+0x34/0x320 [ 118.206746][ T8163] ? d_alloc_pseudo+0x13/0x80 [ 118.206771][ T8163] d_alloc_pseudo+0x1e/0x80 [ 118.206832][ T8163] alloc_path_pseudo+0xa4/0x140 [ 118.206880][ T8163] alloc_file_pseudo+0x55/0x120 [ 118.206913][ T8163] create_pipe_files+0x1bb/0x440 [ 118.207019][ T8163] __do_pipe_flags+0x44/0x140 [ 118.207049][ T8163] do_pipe2+0x61/0x140 [ 118.207126][ T8163] ? switch_fpu_return+0xe7/0x1b0 [ 118.207227][ T8163] __x64_sys_pipe2+0x30/0x40 [ 118.207377][ T8163] x64_sys_call+0x2085/0x2550 [ 118.207407][ T8163] do_syscall_64+0x112/0x360 [ 118.207434][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.207461][ T8163] RIP: 0033:0x7fefaa1af559 [ 118.207610][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.207632][ T8163] RSP: 002b:00007fefa8c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 118.207663][ T8163] RAX: ffffffffffffffda RBX: 00007fefaa435fa0 RCX: 00007fefaa1af559 [ 118.207681][ T8163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.207696][ T8163] RBP: 00007fefaa246b20 R08: 0000000000000000 R09: 0000000000000000 [ 118.207712][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.207728][ T8163] R13: 00007fefaa436038 R14: 00007fefaa435fa0 R15: 00007ffe615ee3e8 [ 118.207761][ T8163] [ 118.906789][ T8207] ip_tables: iptables: counters copy to user failed while replacing table [ 119.195680][ T8220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.197894][ T8218] batman_adv: batadv0: Adding interface: syzkaller0 [ 119.197909][ T8218] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.253769][ T8218] batman_adv: batadv0: Interface activated: syzkaller0 [ 119.266548][ T8217] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 119.277656][ T8217] batman_adv: batadv0: Removing interface: syzkaller0 [ 119.483907][ T29] audit: type=1400 audit(1792718668.692:2525): avc: denied { ioctl } for pid=8240 comm="syz.3.1414" path="socket:[15660]" dev="sockfs" ino=15660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.674603][ T8251] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.753840][ T8256] FAULT_INJECTION: forcing a failure. [ 119.753840][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 119.753893][ T8256] CPU: 1 UID: 0 PID: 8256 Comm: syz.3.1421 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 119.753925][ T8256] Tainted: [Y]=FORCED_BIND [ 119.753932][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.753949][ T8256] Call Trace: [ 119.753957][ T8256] [ 119.753967][ T8256] __dump_stack+0x1d/0x30 [ 119.753999][ T8256] dump_stack_lvl+0x95/0xd0 [ 119.754062][ T8256] dump_stack+0x15/0x1b [ 119.754083][ T8256] should_fail_ex+0x262/0x280 [ 119.754106][ T8256] ? alloc_empty_file+0x70/0x1e0 [ 119.754145][ T8256] should_failslab+0x8c/0xb0 [ 119.754217][ T8256] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 119.754241][ T8256] ? alloc_empty_file+0x70/0x1e0 [ 119.754272][ T8256] alloc_empty_file+0x70/0x1e0 [ 119.754328][ T8256] alloc_file_pseudo+0x92/0x120 [ 119.754368][ T8256] sock_alloc_file+0x9c/0x1e0 [ 119.754454][ T8256] xs_local_connect+0xf0/0x590 [ 119.754483][ T8256] xprt_connect+0x360/0x420 [ 119.754514][ T8256] call_connect+0x10b/0x200 [ 119.754569][ T8256] ? __pfx_call_connect+0x10/0x10 [ 119.754594][ T8256] __rpc_execute+0x252/0xa20 [ 119.754618][ T8256] rpc_execute+0x1bd/0x280 [ 119.754640][ T8256] rpc_run_task+0x34a/0x390 [ 119.754677][ T8256] rpc_create_xprt+0x279/0x620 [ 119.754717][ T8256] rpc_create+0x494/0x570 [ 119.754839][ T8256] set_gssp_clnt+0x1a9/0x250 [ 119.754870][ T8256] write_gssp+0x165/0x200 [ 119.754894][ T8256] ? hrtimer_start_range_ns+0x108/0x120 [ 119.755030][ T8256] ? __pfx_write_gssp+0x10/0x10 [ 119.755051][ T8256] proc_reg_write+0x128/0x1c0 [ 119.755075][ T8256] ? __pfx_proc_reg_write+0x10/0x10 [ 119.755172][ T8256] vfs_write+0x24f/0x990 [ 119.755196][ T8256] ? __fget_files+0x184/0x1c0 [ 119.755224][ T8256] ? mutex_lock+0x52/0x90 [ 119.755260][ T8256] ksys_write+0xdc/0x1a0 [ 119.755289][ T8256] __x64_sys_write+0x40/0x50 [ 119.755338][ T8256] x64_sys_call+0x154e/0x2550 [ 119.755376][ T8256] do_syscall_64+0x112/0x360 [ 119.755400][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.755441][ T8256] RIP: 0033:0x7f5a5e5af559 [ 119.755459][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.755478][ T8256] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.755541][ T8256] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 119.755558][ T8256] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 119.755636][ T8256] RBP: 00007f5a5e646b20 R08: 0000000000000000 R09: 0000000000000000 [ 119.755649][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.755662][ T8256] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 119.755686][ T8256] [ 120.387550][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 120.387569][ T29] audit: type=1400 audit(1792718669.592:2527): avc: denied { sys_nice } for pid=8270 comm="syz.5.1427" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 120.444183][ T29] audit: type=1400 audit(1792718669.652:2528): avc: denied { map } for pid=8272 comm="syz.5.1428" path="/253/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 120.446545][ T29] audit: type=1400 audit(1792718669.652:2529): avc: denied { ioctl } for pid=8272 comm="syz.5.1428" path="/253/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=361 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 120.747373][ T29] audit: type=1400 audit(1792718669.952:2530): avc: denied { connect } for pid=8300 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.826070][ T8303] loop3: detected capacity change from 0 to 4096 [ 120.849830][ T8303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.853525][ T8303] EXT4-fs (loop3): shut down requested (1) [ 120.860558][ T29] audit: type=1400 audit(1792718670.072:2531): avc: denied { read } for pid=2955 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.860589][ T29] audit: type=1400 audit(1792718670.072:2532): avc: denied { search } for pid=2955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.860646][ T29] audit: type=1400 audit(1792718670.072:2533): avc: denied { write search } for pid=2955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.860670][ T29] audit: type=1400 audit(1792718670.072:2534): avc: denied { add_name } for pid=2955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.860693][ T29] audit: type=1400 audit(1792718670.072:2535): avc: denied { create } for pid=2955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.860716][ T29] audit: type=1400 audit(1792718670.072:2536): avc: denied { append open } for pid=2955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.861470][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.861497][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.861585][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 120.861816][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 120.861927][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.862012][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 120.862030][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 120.862259][ T8303] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 120.903304][ T3289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.211516][ T8331] GUP no longer grows the stack in syz.2.1450 (8331): 200000004000-20000000a000 (200000002000) [ 121.211553][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.2.1450 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 121.211610][ T8331] Tainted: [Y]=FORCED_BIND [ 121.211618][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.211631][ T8331] Call Trace: [ 121.211638][ T8331] [ 121.211646][ T8331] __dump_stack+0x1d/0x30 [ 121.211674][ T8331] dump_stack_lvl+0x95/0xd0 [ 121.211701][ T8331] dump_stack+0x15/0x1b [ 121.211752][ T8331] __get_user_pages+0x1bd9/0x1ea0 [ 121.211819][ T8331] ? __rcu_read_unlock+0x4e/0x70 [ 121.211896][ T8331] get_user_pages_remote+0x1d0/0x6c0 [ 121.211930][ T8331] __access_remote_vm+0x156/0x4d0 [ 121.212028][ T8331] access_remote_vm+0x32/0x40 [ 121.212067][ T8331] proc_pid_cmdline_read+0x334/0x710 [ 121.212126][ T8331] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 121.212162][ T8331] vfs_readv+0x417/0x6d0 [ 121.212216][ T8331] __x64_sys_preadv+0xfd/0x1c0 [ 121.212240][ T8331] x64_sys_call+0x20e8/0x2550 [ 121.212264][ T8331] do_syscall_64+0x112/0x360 [ 121.212288][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.212313][ T8331] RIP: 0033:0x7fefaa1af559 [ 121.212329][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.212424][ T8331] RSP: 002b:00007fefa8c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 121.212445][ T8331] RAX: ffffffffffffffda RBX: 00007fefaa435fa0 RCX: 00007fefaa1af559 [ 121.212482][ T8331] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 121.212499][ T8331] RBP: 00007fefaa246b20 R08: 00000000fffffff9 R09: 0000000000000000 [ 121.212516][ T8331] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 121.212530][ T8331] R13: 00007fefaa436038 R14: 00007fefaa435fa0 R15: 00007ffe615ee3e8 [ 121.212612][ T8331] [ 121.218988][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 121.232245][ T8333] macvtap1: entered promiscuous mode [ 121.232367][ T8333] gretap0: entered promiscuous mode [ 121.232473][ T8333] macvtap1: entered allmulticast mode [ 121.232490][ T8333] gretap0: entered allmulticast mode [ 121.308484][ T8333] gretap0: left allmulticast mode [ 121.308507][ T8333] gretap0: left promiscuous mode [ 121.364767][ T8333] macvtap1: left promiscuous mode [ 121.364789][ T8333] macvtap1: left allmulticast mode [ 121.515405][ T8352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.698613][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1463'. [ 121.725892][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1463'. [ 122.653061][ T8368] loop4: detected capacity change from 0 to 128 [ 122.764491][ T8412] loop5: detected capacity change from 0 to 1024 [ 122.787201][ T8412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.806500][ T8412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.931081][ T8368] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.958785][ T8368] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.033715][ T4073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.163024][ T8368] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.242867][ T8448] syzkaller0: entered allmulticast mode [ 123.255870][ T8448] syzkaller0 (unregistering): left allmulticast mode [ 123.282255][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 123.298888][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 123.320418][ T3659] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.320490][ T3659] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.320528][ T3659] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.320629][ T3659] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.429611][ T8467] netlink: 'syz.0.1503': attribute type 8 has an invalid length. [ 123.429676][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 123.438056][ T8467] veth1_to_team: entered promiscuous mode [ 123.439051][ T8467] gretap0: entered promiscuous mode [ 123.485920][ T8467] veth1_to_team: left promiscuous mode [ 123.489910][ T8467] gretap0: left promiscuous mode [ 123.624254][ T8482] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 123.636025][ T8482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.644957][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.646383][ T8482] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 123.740643][ T3672] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 123.849363][ T116] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 123.974917][ T8528] FAULT_INJECTION: forcing a failure. [ 123.974917][ T8528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.975003][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.3.1524 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 123.975034][ T8528] Tainted: [Y]=FORCED_BIND [ 123.975044][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.975060][ T8528] Call Trace: [ 123.975068][ T8528] [ 123.975079][ T8528] __dump_stack+0x1d/0x30 [ 123.975115][ T8528] dump_stack_lvl+0x95/0xd0 [ 123.975142][ T8528] dump_stack+0x15/0x1b [ 123.975162][ T8528] should_fail_ex+0x262/0x280 [ 123.975187][ T8528] should_fail+0xb/0x20 [ 123.975238][ T8528] get_futex_key+0x87e/0xc40 [ 123.975281][ T8528] futex_wait_requeue_pi+0x162/0x730 [ 123.975338][ T8528] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.975435][ T8528] do_futex+0x146/0x460 [ 123.975460][ T8528] __se_sys_futex+0x2f6/0x370 [ 123.975486][ T8528] ? xfd_validate_state+0x45/0xf0 [ 123.975572][ T8528] __x64_sys_futex+0x78/0x90 [ 123.975618][ T8528] x64_sys_call+0x22e2/0x2550 [ 123.975647][ T8528] do_syscall_64+0x112/0x360 [ 123.975675][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.975749][ T8528] RIP: 0033:0x7f5a5e5af559 [ 123.975769][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.975791][ T8528] RSP: 002b:00007f5a5d007028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.975816][ T8528] RAX: ffffffffffffffda RBX: 00007f5a5e835fa0 RCX: 00007f5a5e5af559 [ 123.975944][ T8528] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 123.975958][ T8528] RBP: 00007f5a5e646b20 R08: 0000200000000380 R09: 0000000000000001 [ 123.975974][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.975990][ T8528] R13: 00007f5a5e836038 R14: 00007f5a5e835fa0 R15: 00007ffc05fab6d8 [ 123.976062][ T8528] [ 124.207285][ T8542] FAULT_INJECTION: forcing a failure. [ 124.207285][ T8542] name failslab, interval 1, probability 0, space 0, times 0 [ 124.207325][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.5.1531 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 124.207416][ T8542] Tainted: [Y]=FORCED_BIND [ 124.207424][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.207490][ T8542] Call Trace: [ 124.207497][ T8542] [ 124.207505][ T8542] __dump_stack+0x1d/0x30 [ 124.207532][ T8542] dump_stack_lvl+0x95/0xd0 [ 124.207561][ T8542] dump_stack+0x15/0x1b [ 124.207583][ T8542] should_fail_ex+0x262/0x280 [ 124.207611][ T8542] ? security_inode_alloc+0x37/0x100 [ 124.207718][ T8542] should_failslab+0x8c/0xb0 [ 124.207744][ T8542] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 124.207768][ T8542] ? security_inode_alloc+0x37/0x100 [ 124.207789][ T8542] security_inode_alloc+0x37/0x100 [ 124.207872][ T8542] inode_init_always_gfp+0x495/0x4e0 [ 124.207906][ T8542] ? __pfx_sock_alloc_inode+0x10/0x10 [ 124.207948][ T8542] alloc_inode+0x58/0x170 [ 124.207994][ T8542] sock_create_lite+0x79/0x290 [ 124.208031][ T8542] __netlink_kernel_create+0x8d/0x550 [ 124.208068][ T8542] ? ops_init+0x4b/0x2e0 [ 124.208150][ T8542] audit_net_init+0x8b/0x180 [ 124.208186][ T8542] ? __pfx_audit_receive+0x10/0x10 [ 124.208289][ T8542] ? __pfx_audit_multicast_bind+0x10/0x10 [ 124.208360][ T8542] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 124.208392][ T8542] ops_init+0x22a/0x2e0 [ 124.208495][ T8542] setup_net+0x9f/0x230 [ 124.208593][ T8542] copy_net_ns+0x333/0x490 [ 124.208629][ T8542] create_new_namespaces+0x1f6/0x420 [ 124.208737][ T8542] unshare_nsproxy_namespaces+0x115/0x150 [ 124.208760][ T8542] ksys_unshare+0x3a3/0x690 [ 124.208872][ T8542] __x64_sys_unshare+0x1f/0x30 [ 124.208907][ T8542] x64_sys_call+0x1e33/0x2550 [ 124.208931][ T8542] do_syscall_64+0x112/0x360 [ 124.208979][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.209005][ T8542] RIP: 0033:0x7f13c408f559 [ 124.209023][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.209131][ T8542] RSP: 002b:00007f13c2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.209154][ T8542] RAX: ffffffffffffffda RBX: 00007f13c4315fa0 RCX: 00007f13c408f559 [ 124.209169][ T8542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 124.209183][ T8542] RBP: 00007f13c4126b20 R08: 0000000000000000 R09: 0000000000000000 [ 124.209199][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.209216][ T8542] R13: 00007f13c4316038 R14: 00007f13c4315fa0 R15: 00007ffc4f3568f8 [ 124.209240][ T8542] [ 124.356613][ T8551] loop5: detected capacity change from 0 to 512 [ 124.366385][ T8551] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.381527][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 124.390725][ T8551] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1535: bad orphan inode 13 [ 124.390754][ T8551] loop5: lost filesystem error report for type 5 error -117 [ 124.390916][ T8551] ext4_test_bit(bit=12, block=18) = 1 [ 124.390931][ T8551] is_bad_inode(inode)=0 [ 124.390939][ T8551] NEXT_ORPHAN(inode)=0 [ 124.390946][ T8551] max_ino=32 [ 124.390954][ T8551] i_nlink=1 [ 124.391369][ T8551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 124.557683][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1538'. [ 124.557950][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1538'. [ 124.697170][ T8551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 124.729985][ T8569] xt_hashlimit: size too large, truncated to 1048576 [ 124.975707][ T8588] FAULT_INJECTION: forcing a failure. [ 124.975707][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 124.975746][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.2.1549 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 124.975784][ T8588] Tainted: [Y]=FORCED_BIND [ 124.975792][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.975808][ T8588] Call Trace: [ 124.975815][ T8588] [ 124.975826][ T8588] __dump_stack+0x1d/0x30 [ 124.975863][ T8588] dump_stack_lvl+0x95/0xd0 [ 124.975895][ T8588] dump_stack+0x15/0x1b [ 124.975919][ T8588] should_fail_ex+0x262/0x280 [ 124.975983][ T8588] should_failslab+0x8c/0xb0 [ 124.976013][ T8588] __kvmalloc_node_noprof+0x14f/0x5b0 [ 124.976064][ T8588] ? nf_hook_entries_grow+0x1cb/0x460 [ 124.976185][ T8588] ? __css_rstat_updated+0xbb/0x280 [ 124.976218][ T8588] ? nf_hook_entries_grow+0x1cb/0x460 [ 124.976246][ T8588] nf_hook_entries_grow+0x1cb/0x460 [ 124.976273][ T8588] ? xa_load+0xb1/0xe0 [ 124.976300][ T8588] __nf_register_net_hook+0x187/0x480 [ 124.976413][ T8588] ? __rcu_read_unlock+0x4e/0x70 [ 124.976513][ T8588] nf_register_net_hook+0x88/0x130 [ 124.976539][ T8588] nf_register_net_hooks+0x44/0x150 [ 124.976609][ T8588] nf_ct_netns_do_get+0x2b1/0x3a0 [ 124.976639][ T8588] nf_ct_netns_get+0xf1/0x2c0 [ 124.976665][ T8588] conntrack_mt_check+0x35/0xa0 [ 124.976723][ T8588] xt_check_match+0x3b7/0x5e0 [ 124.976763][ T8588] ? xt_find_match+0x208/0x240 [ 124.976810][ T8588] ? xt_find_match+0x1e4/0x240 [ 124.976914][ T8588] translate_table+0xb13/0x1120 [ 124.977015][ T8588] do_ipt_set_ctl+0x735/0x970 [ 124.977044][ T8588] ? _raw_spin_lock_bh+0x57/0xb0 [ 124.977076][ T8588] nf_setsockopt+0x199/0x1b0 [ 124.977102][ T8588] ip_setsockopt+0x102/0x110 [ 124.977153][ T8588] tcp_setsockopt+0x98/0xb0 [ 124.977209][ T8588] sock_common_setsockopt+0x69/0x80 [ 124.977245][ T8588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 124.977356][ T8588] __sys_setsockopt+0x184/0x200 [ 124.977382][ T8588] __x64_sys_setsockopt+0x64/0x80 [ 124.977409][ T8588] x64_sys_call+0x248f/0x2550 [ 124.977436][ T8588] do_syscall_64+0x112/0x360 [ 124.977499][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.977527][ T8588] RIP: 0033:0x7fefaa1af559 [ 124.977549][ T8588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.977624][ T8588] RSP: 002b:00007fefa8c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.977651][ T8588] RAX: ffffffffffffffda RBX: 00007fefaa435fa0 RCX: 00007fefaa1af559 [ 124.977671][ T8588] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 124.977686][ T8588] RBP: 00007fefaa246b20 R08: 0000000000000ae0 R09: 0000000000000000 [ 124.977791][ T8588] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 124.977808][ T8588] R13: 00007fefaa436038 R14: 00007fefaa435fa0 R15: 00007ffe615ee3e8 [ 124.977826][ T8588] [ 124.977950][ T8588] xt_conntrack: cannot load conntrack support for proto=2 [ 125.304431][ T8601] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.389907][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 125.389923][ T29] audit: type=1326 audit(1792718674.602:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.391773][ T29] audit: type=1326 audit(1792718674.602:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.393478][ T29] audit: type=1326 audit(1792718674.602:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.395169][ T29] audit: type=1326 audit(1792718674.602:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.396787][ T29] audit: type=1326 audit(1792718674.602:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.399205][ T29] audit: type=1326 audit(1792718674.602:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.401713][ T29] audit: type=1326 audit(1792718674.612:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.403258][ T29] audit: type=1326 audit(1792718674.612:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.404978][ T29] audit: type=1326 audit(1792718674.612:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.406534][ T29] audit: type=1326 audit(1792718674.612:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.1539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efda78ffd8e code=0x7ffc0000 [ 125.799679][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 125.890251][ T8625] pimreg: entered allmulticast mode [ 125.914755][ T8616] pimreg: left allmulticast mode [ 126.003742][ T8632] netlink: 'syz.3.1567': attribute type 83 has an invalid length. [ 126.818229][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 126.845330][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1594'. [ 127.202960][ T8752] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 127.202960][ T8752] Please contact the netfilter-devel mailing list or update your nftables rules. [ 127.262576][ T8760] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1616'. [ 127.262617][ T8760] openvswitch: netlink: Flow key attr not present in new flow. [ 127.298118][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 127.450126][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 127.542701][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'. [ 128.275832][ T8809] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 129.238577][ T8807] loop4: detected capacity change from 0 to 1024 [ 129.318212][ T8807] EXT4-fs (loop4): unsupported inode size: 143 [ 129.318553][ T8807] EXT4-fs (loop4): blocksize: 1024 [ 129.484889][ T8845] ================================================================== [ 129.484931][ T8845] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 129.484970][ T8845] [ 129.484978][ T8845] write to 0xffff88810d252a60 of 8 bytes by task 8844 on cpu 0: [ 129.485000][ T8845] shmem_file_splice_read+0x3eb/0x570 [ 129.485035][ T8845] splice_direct_to_actor+0x25d/0x680 [ 129.485071][ T8845] do_splice_direct+0x119/0x1a0 [ 129.485098][ T8845] do_sendfile+0x37d/0x640 [ 129.485137][ T8845] __x64_sys_sendfile64+0x105/0x150 [ 129.485171][ T8845] x64_sys_call+0x1015/0x2550 [ 129.485203][ T8845] do_syscall_64+0x112/0x360 [ 129.485227][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.485249][ T8845] [ 129.485255][ T8845] write to 0xffff88810d252a60 of 8 bytes by task 8845 on cpu 1: [ 129.485271][ T8845] shmem_file_splice_read+0x3eb/0x570 [ 129.485300][ T8845] splice_direct_to_actor+0x25d/0x680 [ 129.485328][ T8845] do_splice_direct+0x119/0x1a0 [ 129.485353][ T8845] do_sendfile+0x37d/0x640 [ 129.485384][ T8845] __x64_sys_sendfile64+0x105/0x150 [ 129.485414][ T8845] x64_sys_call+0x1015/0x2550 [ 129.485443][ T8845] do_syscall_64+0x112/0x360 [ 129.485465][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.485490][ T8845] [ 129.485495][ T8845] value changed: 0x0000000000002e06 -> 0x0000000000002e08 [ 129.485510][ T8845] [ 129.485514][ T8845] Reported by Kernel Concurrency Sanitizer on: [ 129.485532][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.0.1646 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 129.485566][ T8845] Tainted: [Y]=FORCED_BIND [ 129.485575][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.485590][ T8845] ==================================================================