last executing test programs: 2.713176009s ago: executing program 0 (id=2208): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x9}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) epoll_create(0xf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0xfffffffffffffffc, 0x7, 0x4, 0x6, 0xe8e, 0x7fff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 2.66708785s ago: executing program 0 (id=2209): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1) (fail_nth: 1) 2.60032577s ago: executing program 0 (id=2211): socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="a0", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x8a, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000019240), &(0x7f0000019200)={'syz', 0x2}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r8) r9 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pread64(r9, 0x0, 0x0, 0x7fffffff) 2.028282647s ago: executing program 3 (id=2214): pipe(0x0) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) socket(0x840000000002, 0x801, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000850000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f6e26e7377f", 0x6}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)=[{&(0x7f00000027c0)="df61905c", 0x4}], 0x1}}], 0x2, 0x40088c4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) close(0x3) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrquota', 0x3a, '', 0x3a, './file1', 0x3a, [0x16]}, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.262326245s ago: executing program 4 (id=2234): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) r1 = dup3(r0, r0, 0x80000) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_rx_ntuple={0x35, {0x8, @udp_ip4_spec={@loopback, @loopback, 0x4e24, 0x4e24, 0xd}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, 0x9, 0x2}, 0x128b, 0x1ff, 0x0, 0x6e3, 0xfffffffffffffffe}}}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xb, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000300)="4d4906b25dd0dc7424aeeb1bccaae5f2c47b616ebd6270c4e81e9eb079edc02b3d94e77c04fa42db9064afc70a06f9bbe1f4ed3934128638b909952edc251634226db7cda1491bba44e2069643ac58a20264c93ae8cdacc22e8c3fb4b343221bb591e9f660e4772bad7a80f86e9371392081d08b7d6675c877e62bc055079c6f4f51a9e0a8fbd7c9cf2dc19d5ad506e238ec9fceedbff18c67cbd712ec5720ac224cd343c78337bb10bdb95998b9db133960c7890201535e5697ae1dca7131ed3d203cc637458cf5eecde33dfe5dc5e7dd54c3c913727a690db1d03a1fdeda7113970a733307bd747f4516e9", 0xec}], 0x1, 0x88, 0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000440)={0x2, {0x2, 0x8, 0x2, 0x3, 0xfff7}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001580)={0x6, 0x0, &(0x7f0000001500)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/73, 0x49}], &(0x7f0000001540)=[0xffffffffffffeed9, 0x5, 0x7ff, 0x8000], 0x2}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000015c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xc, 0x7b}, 0x90) open$dir(&(0x7f0000001680)='./file0\x00', 0x80200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000016c0), 0x80, 0x0) write$selinux_context(r1, &(0x7f0000001700)='system_u:object_r:cron_log_t:s0\x00', 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001a40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f00000017c0)={0x218, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4989a9cb}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4e, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x78fd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9407}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8b147bf76d75fb4c6059051382ccd361615cb74d0b49a7e8b89291a5b8"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a3ce7b09cfc749eff9bc855c7011db6e5fa11718a6c0d67787"}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe, 0x3, "dabfbbfb50b16bc1d477"}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x30000000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffeffff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r4, 0x422, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$tipc(r1, &(0x7f0000001bc0)=@nameseq={0x1e, 0x1, 0x1, {0xc971ffebd4689186, 0x2}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001c00)=@assoc_value, &(0x7f0000001c40)=0x8) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000001c80)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000001d00)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0xd, 0x1ff, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x7, 0xffff8001}}) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002240)={&(0x7f0000001dc0)=@deltfilter={0x468, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2}, {0x7, 0x7}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x424, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_ACT={0x24c, 0x2, [@m_ctinfo={0x108, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe}]}, {0xc3, 0x6, "6385f3c89ba5e367f7a77be07b85a297719167203852d9dc57d9847ccf88b54d64bb7285cf64185c5905525936fd512eb0b3eed48c85a7531598345cc75b771347fba3e3532e5f415043c9620ed1b1f20bf954c29c6833741ea3a12b18aa014d13f36a6e8f767160f69cd99440ba4798d1f01afb901ea274035344bb2eaaa1ecb3f94b0345c8b08ae2b68a8bb86d77b079739508f09fb26fbef5ebe508e3a315ff20420784f64c85bbfa7e240fd22175993617bd535d4ef0f29c4d3f73b6ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x140, 0x0, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x18e8, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x8, 0xe1d}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1b59, 0x5}}]}, {0xe3, 0x6, "eaaf149e8b8c0d9bd6c21f45b9385f0321e67a0fbe51515f7c546c7027bbe0674ac1df0ee343d1cb342425f43123cfd5afcb437d74a318077b4dc969fb8c8cb7905906899f6cfe30ccf919e334cf744ffadd574c7db445dcddf2a91730a6857264dcaff1ae06575d162e0535d33f95f59929de2f800f6d3c74df1125f271586654448a222601e6919835700617036290416522f3200c5da8338e423a2ae983635850ead83b5d011a4471fc2f5e32f6ec1f2a056c60df3fa2e6f3852d17382dfd7c9477fff97b67107661647991b57302062e29dc57b435264c98787d37337e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_ACT={0x1cc, 0x2, [@m_ct={0xa8, 0x12, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "3cc68c462d84fcab2d8950c04cfc5866"}, @TCA_CT_LABELS={0x14, 0x7, "e91195ac5fc09cbe2ce17fe8ed70ba77"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0xffffff80}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffff8, 0xfff, 0xffffffffffffffff, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x120, 0x5, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xd3, 0x6, "a9c2c7a2fd49b22d4ba19c2e452422ce18a9615303b1b4b9faac4337edff2f61b6eaed0967b1a320b36a87f789a5576520b72e053d4b0d02db061f3b0209a20f17221e6655ac9fb7a0e5035dae9949ec4917cb37017c071ad5bf255a3f8f98263338ecce3795ef00c5a125cfbd99afe0a2cf056438a7ad9049bd484bc75089a2b68855d14bec6f8f04b5eaa11122d458ba3ead60328c0918d0450c42217313627abd8b611015787c6c833a0c86a0b4ebe1279266a88c3c05440aec0565fdebf500887de806ebe098edda44b5f37e8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x468}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$P9_RVERSION(r0, &(0x7f00000022c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x2f71c000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r7, &(0x7f0000002300)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) fcntl$getownex(r2, 0x10, &(0x7f0000002340)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000002380)=0x2d) 1.057159548s ago: executing program 4 (id=2237): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xc, @mcast2, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}}, 0x8000) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 988.086109ms ago: executing program 1 (id=2238): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) uname(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1043080, &(0x7f00000003c0)={[{@mblk_io_submit}, {@lazytime}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}, {@norecovery}, {@usrjquota}]}, 0x1, 0x5c5, &(0x7f0000000680)="$eJzs3T9sG9cZAPDvjqIl23LlAi3QFh6MtoALGKb+2G7dTvJa1IABDwW6tAJFC4Yo0RCp1hIEVN6NIB6CJPDibMmQMUGGDEGWjFmz5M8cwIiFBLA8JAwokrIskwpli2Qs/n7ASe/dHfl9j3fv8e5wBwYwsE7X/qQRv42Iq0nE2I5lQ9FYeLq+3ubGWv7xxlo+iWr12jdJJBHxaGMt31w/afw/HhHrEfGbiPg4G3E23X7LI81CeWV1fqZYLCw16uOVhZvj5ZXVczcWZuYKc4XF83/568VLFy5OTk3uTPdxdWctu7+23vni7it3Pv37/bvvvHtqPf/aTBLTMdpYtrMdB6n+mWRjetf8C90I1kdJvxPguWQa/bzWlX4dY5Fp9PpWqjsHh+GepAd0UXU4orptRxEYAMkLdPrmIAK8jJrHAbXz3+bUy+OPB5frJyC1uJsba/n/RzP+UP3aRIxsnZsc+zZ56sykdr55speJciit346IiaGhZ/f/pLH/Pb+Jg0iQrvrocn1DPbv90+3xJ1qMP6PNa6cvqDn+bTbGv80W8TNtxr+r27WFo3vF+P5fX73ZNv7t4fhdy/jN/b8edXf8NCL+02Eb7/3zg0vtllXfijgTreM3JXtfHx6/fqNYmKj/bRnjwzOn/ta+/RHH2sSvX7MdSXa3/0gjp7TD9r//yXu/X98j/p/+sPf2T1p8/rUN/mqH8X/56O1/tFv24HbysHYU0H77t46fRDbudxj/z9OnP28UXTUEAAAAAAAAAIADlG7dy5akue1ymuZy9Wd4fxXH0mKpXDl7vbS8OFu/5+1kZNPmnVZj9XpSq0827sdt1qd21c9nGgEzR7fquXypONvntgMAAAAAAAAAAAAAAAAAAMDPxfFdz/9/l9l6/n86YupEv3MDeqD9T34Dh53+D4Pr6f6f9C0PoPd8/8PAqur/MLj0fxhce/d/v9kPh5nvfxhcLfv/0d7nAfTeM/1/pD95AL3n+B8AAAAAAAAAAAAAAAAAAAAAAAAAALri6pUrtan6eGMtX6vPDq0sz5f+e262UJ7PLSznc/nS0s3cXKk0Vyzk8qWFn3q/pFS6ORGLy7fGK4VyZby8svrvhdLyYvM3RQvZrrcIAAAAAAAAAAAAAAAAAAAAXj6jW1OS5iKy9Xqa5nIRJyLiZBLJ9RvFwkRE/CIiPstkh2v1yX4nDQAAAAAAAAAAAAAAAAAAAIdMeWV1fqZYLCx1rzDUCNXZq76sdDWfof2sHBHrB5tG7R33/aps4wPcmjPS9e11uAuZDvfDgS/0cVACAAAAAAAAAAAAAAAAAIAB9eSh305f8UN3EwIAAAAAAAAAAAAAAAAAAICBlH6dRERtOjP2x9HdS48km5mt/xHxv3vXXr81U6ksTdbmP9yeX3mjMX+qH/kDnWr20zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlp6zMNzBOu1iZ3rbVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9+TEAAP//8ZHIEg==") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) socket$kcm(0x10, 0x2, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x40) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) 974.368099ms ago: executing program 3 (id=2239): socket$nl_rdma(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000001c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/41, 0x29}], 0x1, 0x0, 0xf) 941.849659ms ago: executing program 1 (id=2241): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0xc, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000003640)="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", 0x2de}], 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x40000005, 0x0}) 941.028779ms ago: executing program 4 (id=2242): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="102542936bb8000000000000010000002e1284fe230a57ef24bc0dd6dadcf1a88a97661918bd83a97c74e09ab5098c70d5eace53797b291bb6478499c170ee136a4bef30537fb34df361f199497090cd8245f9e922252692d290a882b85c8f95de"], 0x10}}], 0x1, 0x4044c50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x8000, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0xc300}) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) unshare(0x2c020400) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d0e, 0x0) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x7fff, &(0x7f0000000340)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2c, 0x800, 0xc81d) 876.9323ms ago: executing program 1 (id=2243): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x18a, &(0x7f0000000180)=ANY=[], 0x0) 876.53171ms ago: executing program 3 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000760009ee9b0c07020000000000000007", @ANYRES32, @ANYBLOB="05000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r2 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x9, 0x5, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, 0x1, 0x91, 0x0, 0x5}}) socket$inet6(0xa, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) fcntl$addseals(r2, 0x409, 0x2) 825.72455ms ago: executing program 0 (id=2246): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe7f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/203, 0xcb}, {&(0x7f0000000400)="861df926f335ae78c1b508956011c42cf3c3be89a45349", 0x17}], 0x2}, 0x0) 825.3597ms ago: executing program 3 (id=2247): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000286, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000286, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x0, 0x58}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x82400, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f00000003c0)) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800001, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") perf_event_open(0x0, 0x0, 0x1, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xf, 0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) syz_read_part_table(0x5a7, &(0x7f00000005c0)="$eJzs0j9LY1kYB+CTLJoVViKusIVbCCs2GxVioYUpXIkhjYq4wxR2A4KFFoKFhWSI1jp+AcVRQWzEqS1FBRkhU0lK8Qs4OEWqDI5XZvzTCOow8DxFTs4573vPufxu4JcWD29CCLEQQvXPx3f/v50dyLcM942MXj1jLISQ/fuPbzuxqKKauB53r4fam858Il1aO+6/ma/Hoz978RDehhAmzzaS36vhYTuZg+T8wnRucTYzcZqbO+8ab882L2Wnlrvf9xZe/dX7Ovqw9uIvc35rqWfzpDp0sVLfUXNYqqSPorpU7E5j3fPch5d1N//VpmK5WBls25rpTDWW9wvvYtdBX97NHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IntZA6S8wvTucXZzMRpbu68a7w927yUnVru/v1W3V78h8mX6rOd31rq2TypDl2s1HfUHJYq6aOoLhW71/rfhye7BT/Lv+EgOV0bwk3+q03FcrEy2LY105lqLO8X4lHul/fzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4UHYg3zLcNzIaQiyMhRD64w0bV+vVxO263WgcitbziXRp7bj/83bDx38+HbauDydCiLZ+u/qZPNtI1t07rfC8L8OjfQ0AAP//U098kA==") 782.906861ms ago: executing program 1 (id=2248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) (fail_nth: 4) 781.758271ms ago: executing program 4 (id=2250): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) getpgid(0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) 757.883601ms ago: executing program 0 (id=2251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 659.269643ms ago: executing program 1 (id=2252): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) uname(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1043080, &(0x7f00000003c0)={[{@mblk_io_submit}, {@lazytime}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}, {@norecovery}, {@usrjquota}]}, 0x1, 0x5c5, &(0x7f0000000680)="$eJzs3T9sG9cZAPDvjqIl23LlAi3QFh6MtoALGKb+2G7dTvJa1IABDwW6tAJFC4Yo0RCp1hIEVN6NIB6CJPDibMmQMUGGDEGWjFmz5M8cwIiFBLA8JAwokrIskwpli2Qs/n7ASe/dHfl9j3fv8e5wBwYwsE7X/qQRv42Iq0nE2I5lQ9FYeLq+3ubGWv7xxlo+iWr12jdJJBHxaGMt31w/afw/HhHrEfGbiPg4G3E23X7LI81CeWV1fqZYLCw16uOVhZvj5ZXVczcWZuYKc4XF83/568VLFy5OTk3uTPdxdWctu7+23vni7it3Pv37/bvvvHtqPf/aTBLTMdpYtrMdB6n+mWRjetf8C90I1kdJvxPguWQa/bzWlX4dY5Fp9PpWqjsHh+GepAd0UXU4orptRxEYAMkLdPrmIAK8jJrHAbXz3+bUy+OPB5frJyC1uJsba/n/RzP+UP3aRIxsnZsc+zZ56sykdr55speJciit346IiaGhZ/f/pLH/Pb+Jg0iQrvrocn1DPbv90+3xJ1qMP6PNa6cvqDn+bTbGv80W8TNtxr+r27WFo3vF+P5fX73ZNv7t4fhdy/jN/b8edXf8NCL+02Eb7/3zg0vtllXfijgTreM3JXtfHx6/fqNYmKj/bRnjwzOn/ta+/RHH2sSvX7MdSXa3/0gjp7TD9r//yXu/X98j/p/+sPf2T1p8/rUN/mqH8X/56O1/tFv24HbysHYU0H77t46fRDbudxj/z9OnP28UXTUEAAAAAAAAAIADlG7dy5akue1ymuZy9Wd4fxXH0mKpXDl7vbS8OFu/5+1kZNPmnVZj9XpSq0827sdt1qd21c9nGgEzR7fquXypONvntgMAAAAAAAAAAAAAAAAAAMDPxfFdz/9/l9l6/n86YupEv3MDeqD9T34Dh53+D4Pr6f6f9C0PoPd8/8PAqur/MLj0fxhce/d/v9kPh5nvfxhcLfv/0d7nAfTeM/1/pD95AL3n+B8AAAAAAAAAAAAAAAAAAAAAAAAAALri6pUrtan6eGMtX6vPDq0sz5f+e262UJ7PLSznc/nS0s3cXKk0Vyzk8qWFn3q/pFS6ORGLy7fGK4VyZby8svrvhdLyYvM3RQvZrrcIAAAAAAAAAAAAAAAAAAAAXj6jW1OS5iKy9Xqa5nIRJyLiZBLJ9RvFwkRE/CIiPstkh2v1yX4nDQAAAAAAAAAAAAAAAAAAAIdMeWV1fqZYLCx1rzDUCNXZq76sdDWfof2sHBHrB5tG7R33/aps4wPcmjPS9e11uAuZDvfDgS/0cVACAAAAAAAAAAAAAAAAAIAB9eSh305f8UN3EwIAAAAAAAAAAAAAAAAAAICBlH6dRERtOjP2x9HdS48km5mt/xHxv3vXXr81U6ksTdbmP9yeX3mjMX+qH/kDnWr20zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlp6zMNzBOu1iZ3rbVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9+TEAAP//8ZHIEg==") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) socket$kcm(0x10, 0x2, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x40) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) 658.996743ms ago: executing program 0 (id=2253): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0xc, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000003640)="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", 0x2de}], 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x40000005, 0x0}) 613.012743ms ago: executing program 1 (id=2254): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000008}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000080000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="b477fee7b500"/23], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) r5 = getpid() r6 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x8000, 0x5}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x4}) read$usbmon(r6, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x102) r7 = syz_pidfd_open(r5, 0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0xa0000001}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r13}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r13, 0x6}, 0x8) close_range(r7, r9, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) 595.252833ms ago: executing program 4 (id=2255): socket$nl_rdma(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000180)=""/41, 0x29}], 0x1, 0x0, 0xf) 543.407893ms ago: executing program 2 (id=2256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe7f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/202, 0xca}, {&(0x7f0000000400)="861df926f335ae78c1b5089560", 0xd}], 0x2}, 0x0) 523.413384ms ago: executing program 2 (id=2257): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000180)=""/40}, 0x20) 475.241214ms ago: executing program 3 (id=2258): socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x4, 0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc}, {0x2}, 0x70bd2c, 0x3504, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in=@broadcast}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$int_in(r2, 0x5452, 0x0) 425.900105ms ago: executing program 4 (id=2259): syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYBLOB="bbbbee60f31900000000000086dd60c5819c00343a00fe800000000000000000000000000000ff0200000000000000000000000000010300907800170000600d410b00002b00fc020000009f52000000000000000000ff020000000000000000000000000001aaa12ba2"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f0000000300)={[{@grpquota}, {@init_itable}, {@init_itable_val}]}, 0x1, 0x485, &(0x7f0000000bc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)=""/12, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000440)="000002", &(0x7f00000005c0)=""/152}, 0x20) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x105041, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) setpriority(0x2, 0x0, 0x7) 371.417146ms ago: executing program 2 (id=2260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file3\x00') 353.548686ms ago: executing program 2 (id=2261): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="861df926f335ae78c1b508956011c42cf3c3be89a45349", 0x17}], 0x1}, 0x0) 63.711959ms ago: executing program 2 (id=2262): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x9}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) epoll_create(0xf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0xfffffffffffffffc, 0x7, 0x4, 0x6, 0xe8e, 0x7fff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 10.59759ms ago: executing program 2 (id=2263): r0 = semget$private(0x0, 0x0, 0xc2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000001080)={0x2, 0x3, 0x5, 0x9, r2}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/221) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x3ed}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x3ed}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c80)='enc=', 0x0) r4 = mq_open(&(0x7f00000010c0)='\'\x00', 0x2, 0xf2, &(0x7f0000001100)={0x8, 0xffffffffffff5de0, 0x4c5, 0x2}) mq_timedreceive(r4, &(0x7f0000001140)=""/31, 0x1f, 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000300fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000001180)={0x2, 0x80, 0x8, 0x7, 0x3, 0x5, 0x0, 0x2, 0x100, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x4}, 0x8000, 0xf, 0xfff, 0x5, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x8) semop(r0, &(0x7f0000001200)=[{0x0, 0x2, 0x1000}, {0x2, 0x0, 0x800}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=2264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file3\x00') (fail_nth: 1) kernel console output (not intermixed with test programs): 8] audit: type=1326 audit(1778454645.829:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 240.301218][ T28] audit: type=1326 audit(1778454645.869:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 240.333031][ T9227] x_tables: duplicate underflow at hook 1 [ 240.383895][ T28] audit: type=1326 audit(1778454645.869:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 240.498321][ T9225] set_capacity_and_notify: 1 callbacks suppressed [ 240.498550][ T9225] loop0: detected capacity change from 0 to 512 [ 240.587527][ T28] audit: type=1326 audit(1778454645.869:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 240.862637][ T9225] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 241.074180][ T28] audit: type=1326 audit(1778454645.869:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 241.103217][ T9225] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 241.146840][ T28] audit: type=1326 audit(1778454645.869:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 241.299752][ T28] audit: type=1326 audit(1778454645.869:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.0.1832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 241.407241][ T9241] loop2: detected capacity change from 0 to 512 [ 241.568332][ T9241] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 241.579139][ T9241] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 241.735934][ T9241] loop2: detected capacity change from 0 to 2048 [ 241.752732][ T9253] x_tables: duplicate underflow at hook 1 [ 241.761748][ T9225] loop0: detected capacity change from 0 to 2048 [ 241.793563][ T9241] loop2: p1 [ 241.797699][ T9225] loop0: p1 [ 241.800953][ T9241] loop2: p1 size 5119 extends beyond EOD, truncated [ 241.801166][ T9225] loop0: p1 size 5119 extends beyond EOD, truncated [ 241.818109][ T9255] loop4: detected capacity change from 0 to 1024 [ 241.841244][ T2980] loop2: p1 [ 241.850215][ T2980] loop2: p1 size 5119 extends beyond EOD, truncated [ 241.906442][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 241.935572][ T9258] xt_hashlimit: size too large, truncated to 1048576 [ 241.951765][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 241.965811][ T9264] loop3: detected capacity change from 0 to 128 [ 241.977671][ T9264] msdos: Bad value for 'gid' [ 241.984587][ T9264] msdos: Bad value for 'gid' [ 242.025096][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 242.517119][ T9273] syz.2.1847 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 242.579553][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.2.1847 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.579590][ T9273] Tainted: [W]=WARN [ 242.579597][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.579690][ T9273] Call Trace: [ 242.579698][ T9273] [ 242.579710][ T9273] __dump_stack+0x1d/0x30 [ 242.579741][ T9273] dump_stack_lvl+0x95/0xd0 [ 242.579762][ T9273] dump_stack+0x15/0x1b [ 242.579788][ T9273] dump_header+0x80/0x240 [ 242.579886][ T9273] oom_kill_process+0x295/0x350 [ 242.580002][ T9273] out_of_memory+0x97d/0xb80 [ 242.580105][ T9273] try_charge_memcg+0x62f/0xa10 [ 242.580152][ T9273] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 242.580185][ T9273] __alloc_frozen_pages_noprof+0x18a/0x350 [ 242.580291][ T9273] alloc_pages_mpol+0xb3/0x260 [ 242.580371][ T9273] alloc_pages_noprof+0x8f/0x140 [ 242.580403][ T9273] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 242.580482][ T9273] __kvmalloc_node_noprof+0x3d4/0x640 [ 242.580503][ T9273] ? futex_hash_allocate+0x190/0x9a0 [ 242.580546][ T9273] ? futex_hash_allocate+0x190/0x9a0 [ 242.580603][ T9273] futex_hash_allocate+0x190/0x9a0 [ 242.580636][ T9273] ? cap_task_prctl+0x13f/0x6b0 [ 242.580715][ T9273] futex_hash_prctl+0xd8/0xf0 [ 242.580745][ T9273] __se_sys_prctl+0x4f4/0x1400 [ 242.580803][ T9273] __x64_sys_prctl+0x67/0x80 [ 242.580898][ T9273] x64_sys_call+0x2533/0x3020 [ 242.580925][ T9273] do_syscall_64+0x12c/0x3b0 [ 242.580954][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.580994][ T9273] RIP: 0033:0x7f14a9cfcdd9 [ 242.581013][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.581030][ T9273] RSP: 002b:00007f14a82f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 242.581055][ T9273] RAX: ffffffffffffffda RBX: 00007f14a9f76270 RCX: 00007f14a9cfcdd9 [ 242.581074][ T9273] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 242.581091][ T9273] RBP: 00007f14a9d92d69 R08: 0000000000000000 R09: 0000000000000000 [ 242.581107][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.581203][ T9273] R13: 00007f14a9f76308 R14: 00007f14a9f76270 R15: 00007ffd783613f8 [ 242.581238][ T9273] [ 242.836168][ T9273] memory: usage 307200kB, limit 307200kB, failcnt 355 [ 242.924489][ T9273] memory+swap: usage 318872kB, limit 9007199254740988kB, failcnt 0 [ 242.952133][ T9273] kmem: usage 306960kB, limit 9007199254740988kB, failcnt 0 [ 242.973327][ T9273] Memory cgroup stats for /syz2: [ 242.973801][ T9273] cache 0 [ 242.995868][ T9273] rss 245760 [ 243.003672][ T9273] shmem 0 [ 243.011015][ T9273] mapped_file 0 [ 243.018948][ T9273] dirty 0 [ 243.031100][ T9273] writeback 0 [ 243.038629][ T9273] workingset_refault_anon 184 [ 243.047752][ T9273] workingset_refault_file 4200 [ 243.061188][ T9273] swap 11952128 [ 243.064694][ T9273] swapcached 13094912 [ 243.077118][ T9273] pgpgin 166913 [ 243.089448][ T9273] pgpgout 166853 [ 243.097090][ T9273] pgfault 150246 [ 243.104833][ T9273] pgmajfault 143 [ 243.112525][ T9273] inactive_anon 241664 [ 243.120217][ T9273] active_anon 4096 [ 243.127481][ T9273] inactive_file 0 [ 243.134974][ T9273] active_file 0 [ 243.142650][ T9273] unevictable 0 [ 243.150183][ T9273] hierarchical_memory_limit 314572800 [ 243.159978][ T9273] hierarchical_memsw_limit 9223372036854771712 [ 243.169768][ T9273] total_cache 0 [ 243.173374][ T9273] total_rss 245760 [ 243.177110][ T9273] total_shmem 0 [ 243.191733][ T9273] total_mapped_file 0 [ 243.195780][ T9273] total_dirty 0 [ 243.199296][ T9273] total_writeback 0 [ 243.207021][ T9273] total_workingset_refault_anon 184 [ 243.216156][ T9273] total_workingset_refault_file 4200 [ 243.221917][ T9273] total_swap 11952128 [ 243.226144][ T9273] total_swapcached 13094912 [ 243.232069][ T9273] total_pgpgin 166913 [ 243.236138][ T9273] total_pgpgout 166853 [ 243.299574][ T9273] total_pgfault 150246 [ 243.313251][ T9273] total_pgmajfault 143 [ 243.322808][ T9273] total_inactive_anon 241664 [ 243.342765][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 243.367974][ T9273] total_active_anon 4096 [ 243.381192][ T9273] total_inactive_file 0 [ 243.385631][ T9273] total_active_file 0 [ 243.389899][ T9273] total_unevictable 0 [ 243.397118][ T9273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1847,pid=9260,uid=0 [ 243.412187][ T9273] Memory cgroup out of memory: Killed process 9260 (syz.2.1847) total-vm:109056kB, anon-rss:1460kB, file-rss:34704kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 243.453353][ T9295] x_tables: duplicate underflow at hook 1 [ 243.507198][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 243.532182][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 243.553723][ T9305] netlink: 'syz.0.1859': attribute type 21 has an invalid length. [ 243.562633][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 243.590998][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 243.646743][ T9308] netlink: 'syz.2.1860': attribute type 21 has an invalid length. [ 244.062902][ T9309] syz.3.1856 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 244.086794][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.3.1856 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.086834][ T9309] Tainted: [W]=WARN [ 244.086843][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.086910][ T9309] Call Trace: [ 244.086918][ T9309] [ 244.086930][ T9309] __dump_stack+0x1d/0x30 [ 244.086962][ T9309] dump_stack_lvl+0x95/0xd0 [ 244.086989][ T9309] dump_stack+0x15/0x1b [ 244.087042][ T9309] dump_header+0x80/0x240 [ 244.087072][ T9309] oom_kill_process+0x295/0x350 [ 244.087208][ T9309] out_of_memory+0x97d/0xb80 [ 244.087244][ T9309] try_charge_memcg+0x62f/0xa10 [ 244.087282][ T9309] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 244.087315][ T9309] __alloc_frozen_pages_noprof+0x18a/0x350 [ 244.087362][ T9309] alloc_pages_mpol+0xb3/0x260 [ 244.087394][ T9309] alloc_pages_noprof+0x8f/0x140 [ 244.087426][ T9309] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 244.087472][ T9309] __kvmalloc_node_noprof+0x3d4/0x640 [ 244.087539][ T9309] ? futex_hash_allocate+0x190/0x9a0 [ 244.087581][ T9309] ? futex_hash_allocate+0x190/0x9a0 [ 244.087665][ T9309] futex_hash_allocate+0x190/0x9a0 [ 244.087705][ T9309] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 244.087735][ T9309] futex_hash_prctl+0xd8/0xf0 [ 244.087842][ T9309] __se_sys_prctl+0x4f4/0x1400 [ 244.087912][ T9309] __x64_sys_prctl+0x67/0x80 [ 244.087942][ T9309] x64_sys_call+0x2533/0x3020 [ 244.087975][ T9309] do_syscall_64+0x12c/0x3b0 [ 244.088015][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.088092][ T9309] RIP: 0033:0x7f29f294cdd9 [ 244.088115][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.088147][ T9309] RSP: 002b:00007f29f1365028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 244.088250][ T9309] RAX: ffffffffffffffda RBX: 00007f29f2bc6180 RCX: 00007f29f294cdd9 [ 244.088264][ T9309] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 244.088278][ T9309] RBP: 00007f29f29e2d69 R08: 0000000000000000 R09: 0000000000000000 [ 244.088334][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.088351][ T9309] R13: 00007f29f2bc6218 R14: 00007f29f2bc6180 R15: 00007ffcc0857938 [ 244.088374][ T9309] [ 244.397726][ T9309] memory: usage 307200kB, limit 307200kB, failcnt 519 [ 244.404881][ T9309] memory+swap: usage 318868kB, limit 9007199254740988kB, failcnt 0 [ 244.413111][ T9309] kmem: usage 306740kB, limit 9007199254740988kB, failcnt 0 [ 244.429346][ T9309] Memory cgroup stats for /syz3: [ 244.429598][ T9309] cache 0 [ 244.438474][ T9309] rss 233472 [ 244.441833][ T9309] shmem 0 [ 244.444859][ T9309] mapped_file 0 [ 244.448765][ T9309] dirty 0 [ 244.451792][ T9309] writeback 0 [ 244.455195][ T9309] workingset_refault_anon 65 [ 244.461432][ T9309] workingset_refault_file 1705 [ 244.466531][ T9309] swap 11948032 [ 244.470425][ T9309] swapcached 12431360 [ 244.474487][ T9309] pgpgin 204563 [ 244.478316][ T9309] pgpgout 204505 [ 244.482078][ T9309] pgfault 205811 [ 244.485760][ T9309] pgmajfault 69 [ 244.489682][ T9309] inactive_anon 0 [ 244.493471][ T9309] active_anon 233472 [ 244.497773][ T9309] inactive_file 0 [ 244.501527][ T9309] active_file 4096 [ 244.505395][ T9309] unevictable 0 [ 244.509281][ T9309] hierarchical_memory_limit 314572800 [ 244.514787][ T9309] hierarchical_memsw_limit 9223372036854771712 [ 244.521412][ T9309] total_cache 0 [ 244.525024][ T9309] total_rss 233472 [ 244.529044][ T9309] total_shmem 0 [ 244.532787][ T9309] total_mapped_file 0 [ 244.536988][ T9309] total_dirty 0 [ 244.541028][ T9309] total_writeback 0 [ 244.545016][ T9309] total_workingset_refault_anon 65 [ 244.550485][ T9309] total_workingset_refault_file 1705 [ 244.555940][ T9309] total_swap 11948032 [ 244.560294][ T9309] total_swapcached 12431360 [ 244.564977][ T9309] total_pgpgin 204563 [ 244.593776][ T9309] total_pgpgout 204505 [ 244.604668][ T9309] total_pgfault 205811 [ 244.609072][ T9309] total_pgmajfault 69 [ 244.613206][ T9309] total_inactive_anon 0 [ 244.617858][ T9309] total_active_anon 233472 [ 244.622415][ T9309] total_inactive_file 0 [ 244.626652][ T9309] total_active_file 4096 [ 244.631276][ T9309] total_unevictable 0 [ 244.635356][ T9309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1856,pid=9296,uid=0 [ 244.650763][ T9309] Memory cgroup out of memory: Killed process 9296 (syz.3.1856) total-vm:104820kB, anon-rss:1452kB, file-rss:30684kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 244.683704][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 244.751383][ T9299] futex_wake_op: syz.1.1857 tries to shift op by 32; fix this program [ 244.801842][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 244.824416][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 244.824532][ T3297] Tainted: [W]=WARN [ 244.824541][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.824559][ T3297] Call Trace: [ 244.824568][ T3297] [ 244.824656][ T3297] __dump_stack+0x1d/0x30 [ 244.824725][ T3297] dump_stack_lvl+0x95/0xd0 [ 244.824750][ T3297] dump_stack+0x15/0x1b [ 244.824773][ T3297] dump_header+0x80/0x240 [ 244.824894][ T3297] oom_kill_process+0x295/0x350 [ 244.824935][ T3297] out_of_memory+0x97d/0xb80 [ 244.824971][ T3297] try_charge_memcg+0x62f/0xa10 [ 244.825012][ T3297] charge_memcg+0x6d/0x120 [ 244.825046][ T3297] __mem_cgroup_charge+0x28/0xb0 [ 244.825074][ T3297] filemap_add_folio+0x110/0x350 [ 244.825222][ T3297] __filemap_get_folio_mpol+0x326/0x680 [ 244.825269][ T3297] filemap_fault+0x462/0xb70 [ 244.825315][ T3297] ? __pfx_filemap_map_pages+0x10/0x10 [ 244.825405][ T3297] handle_mm_fault+0x16cb/0x2e70 [ 244.825441][ T3297] ? __pfx_filemap_fault+0x10/0x10 [ 244.825574][ T3297] do_user_addr_fault+0x62f/0x1050 [ 244.825653][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 244.825692][ T3297] exc_page_fault+0x62/0xa0 [ 244.825731][ T3297] asm_exc_page_fault+0x26/0x30 [ 244.825819][ T3297] RIP: 0033:0x7f46256dadf4 [ 244.825840][ T3297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 [ 244.825859][ T3297] RSP: 002b:00007ffd124e8b80 EFLAGS: 00010202 [ 244.825875][ T3297] RAX: 0000001b32b24000 RBX: 00000000000003c2 RCX: 000000000003b920 [ 244.825892][ T3297] RDX: 000000000ee044cc RSI: 00007ffd124e8c10 RDI: 0000000000000001 [ 244.825906][ T3297] RBP: 00007ffd124e8bbc R08: 0000000038bf6472 R09: 3fffffffffffffff [ 244.825975][ T3297] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 244.825988][ T3297] R13: 00000000000927c0 R14: 000000000003bc55 R15: 00007ffd124e8c10 [ 244.826092][ T3297] [ 245.024804][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 938 [ 245.054506][ T3297] memory+swap: usage 274960kB, limit 9007199254740988kB, failcnt 0 [ 245.076860][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 245.080728][ T3297] kmem: usage 193460kB, limit 9007199254740988kB, failcnt 0 [ 245.123997][ T3297] Memory cgroup stats for /syz4: [ 245.124303][ T3297] cache 58781696 [ 245.142319][ T3297] rss 1253376 [ 245.150107][ T3297] shmem 58777600 [ 245.158400][ T3297] mapped_file 4096 [ 245.166627][ T3297] dirty 4096 [ 245.174070][ T3297] writeback 0 [ 245.186021][ T3297] workingset_refault_anon 0 [ 245.195001][ T3297] workingset_refault_file 2156 [ 245.208530][ T3297] swap 0 [ 245.211496][ T3297] swapcached 0 [ 245.223351][ T3297] pgpgin 157627 [ 245.231636][ T3297] pgpgout 142970 [ 245.239629][ T3297] pgfault 172894 [ 245.247388][ T3297] pgmajfault 25 [ 245.259300][ T3297] inactive_anon 60002304 [ 245.267943][ T3297] active_anon 28672 [ 245.276593][ T3297] inactive_file 0 [ 245.284833][ T3297] active_file 0 [ 245.293301][ T3297] unevictable 0 [ 245.305585][ T3297] hierarchical_memory_limit 314572800 [ 245.319739][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 245.336021][ T3297] total_cache 58781696 [ 245.349020][ T3297] total_rss 1253376 [ 245.357624][ T3297] total_shmem 58777600 [ 245.366449][ T3297] total_mapped_file 4096 [ 245.378745][ T3297] total_dirty 4096 [ 245.386611][ T3297] total_writeback 0 [ 245.394595][ T3297] total_workingset_refault_anon 0 [ 245.410338][ T3297] total_workingset_refault_file 2156 [ 245.423970][ T3297] total_swap 0 [ 245.432287][ T3297] total_swapcached 0 [ 245.437307][ T3297] total_pgpgin 157627 [ 245.441428][ T3297] total_pgpgout 142970 [ 245.445579][ T3297] total_pgfault 172894 [ 245.450662][ T3297] total_pgmajfault 25 [ 245.454903][ T3297] total_inactive_anon 60002304 [ 245.460434][ T3297] total_active_anon 28672 [ 245.464797][ T3297] total_inactive_file 0 [ 245.493276][ T3297] total_active_file 0 [ 245.497519][ T3297] total_unevictable 0 [ 245.501570][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1864,pid=9322,uid=0 [ 245.582432][ T3297] Memory cgroup out of memory: OOM victim 9322 (syz.4.1864) is already exiting. Skip killing the task [ 245.652221][ T9340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9340 comm=syz.2.1869 [ 245.758486][ T9348] loop4: detected capacity change from 0 to 512 [ 245.978929][ T9348] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1874: inode has both inline data and extents flags [ 246.017825][ T9348] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.019977][ T9348] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1874: couldn't read orphan inode 15 (err -117) [ 246.029226][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 246.029253][ C1] EXT4-fs (loop4): initial error at time 1778454651: ext4_orphan_get:1397: inode 15 [ 246.029294][ C1] EXT4-fs (loop4): last error at time 1778454651: ext4_orphan_get:1397: inode 15 [ 246.297321][ T9348] loop4: lost filesystem error report for type 5 error -117 [ 246.301429][ T9348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.439451][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 246.439511][ T28] audit: type=1400 audit(1778454652.099:12700): avc: denied { write } for pid=9347 comm="syz.4.1874" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.550722][ T28] audit: type=1400 audit(1778454652.209:12701): avc: denied { write } for pid=9347 comm="syz.4.1874" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.584548][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 246.598894][ T9367] x_tables: duplicate underflow at hook 1 [ 246.606922][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 246.717796][ T9378] futex_wake_op: syz.3.1882 tries to shift op by 32; fix this program [ 246.731264][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.751745][ T9380] netlink: 'syz.3.1885': attribute type 21 has an invalid length. [ 246.820413][ T28] audit: type=1326 audit(1778454652.479:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9384 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x0 [ 246.892971][ T9382] loop4: detected capacity change from 0 to 1024 [ 247.106063][ T9394] loop4: detected capacity change from 0 to 512 [ 247.116623][ T9394] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 247.125358][ T9394] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 247.173297][ T9394] loop4: detected capacity change from 0 to 2048 [ 247.224193][ T9394] loop4: p1 [ 247.228420][ T9394] loop4: p1 size 5119 extends beyond EOD, truncated [ 247.252378][ T9397] loop2: detected capacity change from 0 to 512 [ 247.268855][ T9397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.286906][ T9397] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1890: bad orphan inode 131083 [ 247.302817][ T9397] loop2: lost filesystem error report for type 5 error -117 [ 247.312193][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.358992][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.397727][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.472247][ T9402] x_tables: duplicate underflow at hook 1 [ 247.599390][ T9405] xt_ipcomp: unknown flags 1D [ 247.685246][ T28] audit: type=1400 audit(1778454653.351:12703): avc: denied { listen } for pid=9409 comm="syz.4.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.723426][ T28] audit: type=1400 audit(1778454653.371:12704): avc: denied { accept } for pid=9409 comm="syz.4.1895" lport=46199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.860440][ T9407] loop0: detected capacity change from 0 to 512 [ 247.876611][ T9407] EXT4-fs: Ignoring removed bh option [ 247.884357][ T9407] EXT4-fs: inline encryption not supported [ 247.893274][ T9407] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.920784][ T9407] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 247.935763][ T9407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1894: bg 0: block 248: padding at end of block bitmap is not set [ 247.950149][ T9407] loop0: lost filesystem error report for type 5 error -117 [ 247.951216][ T9407] Quota error (device loop0): write_blk: dquota write failed [ 247.966115][ T9407] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 248.018461][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 248.024985][ C0] EXT4-fs (loop0): last error at time 1778454653: ext4_validate_block_bitmap:441 [ 248.094002][ T9407] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1894: Failed to acquire dquot type 1 [ 248.190121][ T9407] loop0: lost filesystem error report for type 5 error -28 [ 248.255689][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.287315][ T9407] EXT4-fs (loop0): 1 truncate cleaned up [ 248.377726][ T9407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 248.668858][ T9422] futex_wake_op: syz.1.1898 tries to shift op by 32; fix this program [ 248.704869][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 248.907774][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 249.051446][ T28] audit: type=1400 audit(1778454654.713:12705): avc: denied { write } for pid=9436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.106802][ T9464] xfrm0 speed is unknown, defaulting to 1000 [ 249.322698][ T9466] xt_ipcomp: unknown flags 1D [ 249.399880][ T28] audit: type=1400 audit(1778454655.063:12706): avc: denied { write } for pid=9467 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.691923][ T9482] loop2: detected capacity change from 0 to 512 [ 249.704097][ T9482] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.725833][ T28] audit: type=1400 audit(1778454655.394:12707): avc: denied { write } for pid=9470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.784814][ T9482] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1908: bad orphan inode 131083 [ 249.795333][ T9482] loop2: lost filesystem error report for type 5 error -117 [ 249.797344][ T9482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.822625][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.831150][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.897280][ T9492] loop0: detected capacity change from 0 to 512 [ 249.909582][ T9492] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 249.922431][ T9492] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 250.101775][ T9498] netlink: 'syz.3.1912': attribute type 21 has an invalid length. [ 250.278132][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 250.374363][ T9499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9499 comm=syz.1.1911 [ 250.609717][ T9504] x_tables: duplicate underflow at hook 1 [ 250.671385][ T9492] loop0: detected capacity change from 0 to 2048 [ 250.746775][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.797607][ T9492] loop0: p1 [ 250.805737][ T9492] loop0: p1 size 5119 extends beyond EOD, truncated [ 250.863216][ T9509] loop4: detected capacity change from 0 to 1024 [ 250.985190][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 250.999037][ T9517] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 251.139809][ T9529] FAULT_INJECTION: forcing a failure. [ 251.139809][ T9529] name failslab, interval 1, probability 0, space 0, times 0 [ 251.172744][ T9531] loop0: detected capacity change from 0 to 512 [ 251.183944][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.2.1924 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.184050][ T9529] Tainted: [W]=WARN [ 251.184058][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.184071][ T9529] Call Trace: [ 251.184079][ T9529] [ 251.184089][ T9529] __dump_stack+0x1d/0x30 [ 251.184120][ T9529] dump_stack_lvl+0x95/0xd0 [ 251.184164][ T9529] dump_stack+0x15/0x1b [ 251.184186][ T9529] should_fail_ex+0x263/0x280 [ 251.184223][ T9529] should_failslab+0x8c/0xb0 [ 251.184261][ T9529] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 251.184357][ T9529] ? __alloc_skb+0x2d6/0x690 [ 251.184435][ T9529] __alloc_skb+0x2d6/0x690 [ 251.184464][ T9529] ? __alloc_skb+0x200/0x690 [ 251.184571][ T9529] netlink_alloc_large_skb+0xbf/0xf0 [ 251.184607][ T9529] netlink_sendmsg+0x40c/0x6f0 [ 251.184649][ T9529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.184690][ T9529] ____sys_sendmsg+0x563/0x5b0 [ 251.184833][ T9529] ___sys_sendmsg+0x195/0x1e0 [ 251.184883][ T9529] __x64_sys_sendmsg+0xd4/0x160 [ 251.184917][ T9529] x64_sys_call+0x194c/0x3020 [ 251.184957][ T9529] do_syscall_64+0x12c/0x3b0 [ 251.185038][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.185065][ T9529] RIP: 0033:0x7f14a9cfcdd9 [ 251.185085][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.185110][ T9529] RSP: 002b:00007f14a8757028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.185137][ T9529] RAX: ffffffffffffffda RBX: 00007f14a9f75fa0 RCX: 00007f14a9cfcdd9 [ 251.185194][ T9529] RDX: 00000000400400d4 RSI: 0000200000001240 RDI: 0000000000000004 [ 251.185212][ T9529] RBP: 00007f14a8757090 R08: 0000000000000000 R09: 0000000000000000 [ 251.185250][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.185266][ T9529] R13: 00007f14a9f76038 R14: 00007f14a9f75fa0 R15: 00007ffd783613f8 [ 251.185289][ T9529] [ 251.418878][ T9533] x_tables: duplicate underflow at hook 1 [ 251.434326][ T9531] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 251.463053][ T9531] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 251.582236][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 251.582286][ T28] audit: type=1326 audit(1778454657.256:12933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6fcd0d60e code=0x7ffc0000 [ 251.626158][ T9546] SELinux: policydb string length 1851870256 does not match expected length 8 [ 251.651108][ T9546] SELinux: failed to load policy [ 251.672791][ T28] audit: type=1326 audit(1778454657.286:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6fcd4ca6b code=0x7ffc0000 [ 251.711939][ T9531] loop0: detected capacity change from 0 to 2048 [ 251.730478][ T28] audit: type=1326 audit(1778454657.286:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6fcd0d60e code=0x7ffc0000 [ 251.769127][ T28] audit: type=1326 audit(1778454657.286:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.794750][ T28] audit: type=1326 audit(1778454657.286:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.820358][ T28] audit: type=1326 audit(1778454657.286:12938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.848055][ T28] audit: type=1326 audit(1778454657.286:12939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.874016][ T28] audit: type=1326 audit(1778454657.286:12940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.899999][ T9554] loop4: detected capacity change from 0 to 512 [ 251.907120][ T9531] loop0: p1 [ 251.912763][ T9531] loop0: p1 size 5119 extends beyond EOD, truncated [ 251.925438][ T9554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.936492][ T28] audit: type=1326 audit(1778454657.286:12941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 251.962557][ T28] audit: type=1326 audit(1778454657.286:12943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.1925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fcd4cdd9 code=0x7ffc0000 [ 252.033493][ T9554] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1934: bad orphan inode 131083 [ 252.046720][ T9554] loop4: lost filesystem error report for type 5 error -117 [ 252.047436][ T9554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.076808][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.094130][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.157832][ T9560] loop0: detected capacity change from 0 to 2048 [ 252.188194][ T9560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.209422][ T9560] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.386798][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.508430][ T9575] x_tables: duplicate underflow at hook 1 [ 252.520096][ T9576] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1941'. [ 252.582853][ T9578] loop0: detected capacity change from 0 to 2048 [ 252.594575][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1941'. [ 252.645360][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1941'. [ 252.702703][ T9578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.715944][ T9578] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.730875][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.757780][ T9578] FAULT_INJECTION: forcing a failure. [ 252.757780][ T9578] name failslab, interval 1, probability 0, space 0, times 0 [ 252.803079][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.0.1940 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.803227][ T9578] Tainted: [W]=WARN [ 252.803239][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.803255][ T9578] Call Trace: [ 252.803264][ T9578] [ 252.803696][ T9578] __dump_stack+0x1d/0x30 [ 252.803724][ T9578] dump_stack_lvl+0x95/0xd0 [ 252.803786][ T9578] dump_stack+0x15/0x1b [ 252.804354][ T9578] should_fail_ex+0x263/0x280 [ 252.804385][ T9578] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 252.804434][ T9578] should_failslab+0x8c/0xb0 [ 252.804518][ T9578] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 252.804972][ T9578] ? ext4_alloc_inode+0x38/0x330 [ 252.804997][ T9578] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 252.805100][ T9578] ext4_alloc_inode+0x38/0x330 [ 252.805131][ T9578] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 252.805574][ T9578] alloc_inode+0x40/0x170 [ 252.805721][ T9578] iget_locked+0x101/0x440 [ 252.806209][ T9578] __ext4_iget+0x152/0x23f0 [ 252.806230][ T9578] ? __rcu_read_unlock+0x4e/0x70 [ 252.806252][ T9578] ? d_alloc_parallel+0xc01/0xce0 [ 252.806789][ T9578] ext4_lookup+0x173/0x3a0 [ 252.806817][ T9578] __lookup_slow+0x19d/0x260 [ 252.806843][ T9578] lookup_slow+0x3c/0x60 [ 252.806935][ T9578] path_lookupat+0x2f7/0x500 [ 252.807389][ T9578] filename_lookup+0x190/0x390 [ 252.807423][ T9578] filename_setxattr+0x56/0x410 [ 252.807471][ T9578] ? do_getname+0x102/0x1c0 [ 252.807491][ T9578] path_setxattrat+0x2be/0x310 [ 252.807971][ T9578] __x64_sys_setxattr+0x6e/0x90 [ 252.807998][ T9578] x64_sys_call+0x2ee2/0x3020 [ 252.808023][ T9578] do_syscall_64+0x12c/0x3b0 [ 252.808053][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.808543][ T9578] RIP: 0033:0x7fb6fcd4cdd9 [ 252.808562][ T9578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.808581][ T9578] RSP: 002b:00007fb6fb79f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 252.808602][ T9578] RAX: ffffffffffffffda RBX: 00007fb6fcfc5fa0 RCX: 00007fb6fcd4cdd9 [ 252.808650][ T9578] RDX: 0000200000000200 RSI: 0000200000000380 RDI: 0000200000000100 [ 252.809113][ T9578] RBP: 00007fb6fb79f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.809188][ T9578] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 252.809202][ T9578] R13: 00007fb6fcfc6038 R14: 00007fb6fcfc5fa0 R15: 00007ffe93baad88 [ 252.809223][ T9578] [ 253.061856][ T9583] loop3: detected capacity change from 0 to 1024 [ 253.064749][ T9566] syz.1.1937 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 253.084509][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.1.1937 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.084552][ T9566] Tainted: [W]=WARN [ 253.084562][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.084577][ T9566] Call Trace: [ 253.084584][ T9566] [ 253.084592][ T9566] __dump_stack+0x1d/0x30 [ 253.084651][ T9566] dump_stack_lvl+0x95/0xd0 [ 253.084735][ T9566] dump_stack+0x15/0x1b [ 253.084755][ T9566] dump_header+0x80/0x240 [ 253.084777][ T9566] oom_kill_process+0x295/0x350 [ 253.084815][ T9566] out_of_memory+0x97d/0xb80 [ 253.084969][ T9566] try_charge_memcg+0x62f/0xa10 [ 253.085086][ T9566] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 253.085115][ T9566] __alloc_frozen_pages_noprof+0x18a/0x350 [ 253.085175][ T9566] alloc_pages_mpol+0xb3/0x260 [ 253.085202][ T9566] alloc_pages_noprof+0x8f/0x140 [ 253.085300][ T9566] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 253.085339][ T9566] __kvmalloc_node_noprof+0x3d4/0x640 [ 253.085360][ T9566] ? futex_hash_allocate+0x190/0x9a0 [ 253.085475][ T9566] ? futex_hash_allocate+0x190/0x9a0 [ 253.085513][ T9566] futex_hash_allocate+0x190/0x9a0 [ 253.085558][ T9566] ? cap_task_prctl+0x13f/0x6b0 [ 253.085598][ T9566] futex_hash_prctl+0xd8/0xf0 [ 253.085638][ T9566] __se_sys_prctl+0x4f4/0x1400 [ 253.085727][ T9566] __x64_sys_prctl+0x67/0x80 [ 253.085752][ T9566] x64_sys_call+0x2533/0x3020 [ 253.085821][ T9566] do_syscall_64+0x12c/0x3b0 [ 253.085852][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.085880][ T9566] RIP: 0033:0x7f9c7b2acdd9 [ 253.085899][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.085924][ T9566] RSP: 002b:00007f9c79cbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 253.085950][ T9566] RAX: ffffffffffffffda RBX: 00007f9c7b526180 RCX: 00007f9c7b2acdd9 [ 253.086035][ T9566] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 253.086049][ T9566] RBP: 00007f9c7b342d69 R08: 0000000000000000 R09: 0000000000000000 [ 253.086062][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.086075][ T9566] R13: 00007f9c7b526218 R14: 00007f9c7b526180 R15: 00007ffe3de692e8 [ 253.086168][ T9566] [ 253.087168][ T9566] memory: usage 307200kB, limit 307200kB, failcnt 487 [ 253.345934][ T9566] memory+swap: usage 330380kB, limit 9007199254740988kB, failcnt 0 [ 253.374341][ T9566] kmem: usage 188476kB, limit 9007199254740988kB, failcnt 0 [ 253.399409][ T9566] Memory cgroup stats for /syz1: [ 253.399631][ T9566] cache 90193920 [ 253.439846][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.443456][ T9566] rss 483328 [ 253.489855][ T9566] shmem 90157056 [ 253.513812][ T9591] loop3: detected capacity change from 0 to 512 [ 253.520405][ T9566] mapped_file 4096 [ 253.525281][ T9566] dirty 0 [ 253.540450][ T9591] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 253.557647][ T9566] writeback 0 [ 253.561393][ T9591] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 253.570373][ T9566] workingset_refault_anon 23 [ 253.575649][ T9566] workingset_refault_file 5304 [ 253.580502][ T9566] swap 36515840 [ 253.583971][ T9566] swapcached 36884480 [ 253.588418][ T9566] pgpgin 311170 [ 253.591903][ T9566] pgpgout 288997 [ 253.595742][ T9566] pgfault 247387 [ 253.599423][ T9566] pgmajfault 46 [ 253.602924][ T9566] inactive_anon 90558464 [ 253.607472][ T9566] active_anon 225280 [ 253.611491][ T9566] inactive_file 36864 [ 253.616329][ T9593] loop0: detected capacity change from 0 to 512 [ 253.625249][ T9566] active_file 0 [ 253.641109][ T9593] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 253.649927][ T9593] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 253.658099][ T9566] unevictable 0 [ 253.726625][ T9566] hierarchical_memory_limit 314572800 [ 253.742975][ T9591] loop3: detected capacity change from 0 to 2048 [ 253.752354][ T9566] hierarchical_memsw_limit 9223372036854771712 [ 253.760617][ T9566] total_cache 90193920 [ 253.764992][ T9566] total_rss 483328 [ 253.768740][ T9566] total_shmem 90157056 [ 253.792904][ T9566] total_mapped_file 4096 [ 253.804647][ T9591] loop3: p1 [ 253.810879][ T9591] loop3: p1 size 5119 extends beyond EOD, truncated [ 253.834303][ T9566] total_dirty 0 [ 253.837913][ T9566] total_writeback 0 [ 253.845879][ T9566] total_workingset_refault_anon 23 [ 253.851084][ T9566] total_workingset_refault_file 5304 [ 253.856867][ T9566] total_swap 36515840 [ 253.860907][ T9566] total_swapcached 36884480 [ 253.866143][ T9566] total_pgpgin 311170 [ 253.871945][ T9566] total_pgpgout 288997 [ 253.876374][ T9566] total_pgfault 247387 [ 253.880483][ T9566] total_pgmajfault 46 [ 253.884880][ T9566] total_inactive_anon 90558464 [ 253.890202][ T9566] total_active_anon 225280 [ 253.901189][ T2980] loop3: p1 [ 253.906017][ T2980] loop3: p1 size 5119 extends beyond EOD, truncated [ 253.914618][ T9593] loop0: p1 [ 253.921980][ T9593] loop0: p1 size 5119 extends beyond EOD, truncated [ 253.931828][ T9566] total_inactive_file 36864 [ 253.944516][ T9566] total_active_file 0 [ 253.958457][ T9566] total_unevictable 0 [ 253.967088][ T9566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.815,pid=6217,uid=0 [ 253.988945][ T9566] Memory cgroup out of memory: Killed process 6217 (syz.1.815) total-vm:94300kB, anon-rss:1412kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 254.058185][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 254.073660][ T9599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.102952][ T9601] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 254.141120][ T9601] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1952'. [ 254.153940][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 254.174849][ T9599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003] [ 254.209417][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 254.210952][ T9599] System zones: 0-1, 3-36 [ 254.240932][ T9599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.273730][ T9599] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 254.532694][ T9618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.548575][ T9620] msdos: Bad value for 'gid' [ 254.559392][ T9618] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1955: bad orphan inode 131083 [ 254.570764][ T9620] msdos: Bad value for 'gid' [ 254.571728][ T9618] loop2: lost filesystem error report for type 5 error -117 [ 254.582847][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.599877][ T9618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.613632][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.625161][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.626696][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.643591][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.652018][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.661519][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 254.741171][ T9623] x_tables: duplicate underflow at hook 1 [ 254.938808][ T9630] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 254.949372][ T9630] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 255.000245][ T9632] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 255.010204][ T9632] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 255.103066][ T9632] loop0: p1 [ 255.108187][ T9632] loop0: p1 size 5119 extends beyond EOD, truncated [ 255.120886][ T2980] loop0: p1 [ 255.124789][ T9630] loop4: p1 [ 255.125763][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.129225][ T9630] loop4: p1 size 5119 extends beyond EOD, [ 255.137287][ T2980] loop0: p1 size 5119 extends beyond EOD, truncated [ 255.150678][ T9630] truncated [ 255.169851][ T2980] loop4: p1 [ 255.179987][ T2980] loop4: p1 size 5119 extends beyond EOD, truncated [ 255.195489][ T9636] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1963: inode has both inline data and extents flags [ 255.208659][ T9636] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.209268][ T9634] xt_hashlimit: size too large, truncated to 1048576 [ 255.236952][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 255.238265][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 255.252314][ C0] EXT4-fs (loop3): initial error at time 1778454660: ext4_orphan_get:1397: inode 15 [ 255.261747][ C0] EXT4-fs (loop3): last error at time 1778454660: ext4_orphan_get:1397: inode 15 [ 255.271630][ T9636] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1963: couldn't read orphan inode 15 (err -117) [ 255.279504][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 255.284585][ T9636] loop3: lost filesystem error report for type 5 error -117 [ 255.296848][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'. [ 255.298291][ T9636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.359500][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.386062][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 255.481227][ T9645] syzkaller0: entered promiscuous mode [ 255.487055][ T9645] syzkaller0: entered allmulticast mode [ 255.517391][ T9645] netlink: 'syz.4.1967': attribute type 27 has an invalid length. [ 255.546887][ T9645] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1967'. [ 255.556488][ T9652] futex_wake_op: syz.2.1969 tries to shift op by 32; fix this program [ 255.568268][ T9650] x_tables: duplicate underflow at hook 1 [ 255.634951][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.679911][ T9657] SELinux: policydb string length 1851870256 does not match expected length 8 [ 255.717503][ T9657] SELinux: failed to load policy [ 255.718780][ T9665] x_tables: duplicate underflow at hook 1 [ 255.748557][ T9667] xt_ipcomp: unknown flags 1D [ 255.797522][ T9671] futex_wake_op: syz.1.1975 tries to shift op by 32; fix this program [ 255.850929][ T9675] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 255.859755][ T9675] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 255.870374][ T9678] EXT4-fs: Ignoring removed bh option [ 255.882210][ T9678] EXT4-fs: inline encryption not supported [ 255.902462][ T9678] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.936298][ T9678] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 255.962112][ T9678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1977: bg 0: block 248: padding at end of block bitmap is not set [ 255.982210][ T9678] loop3: lost filesystem error report for type 5 error -117 [ 255.991114][ T9675] set_capacity_and_notify: 12 callbacks suppressed [ 255.991147][ T9675] loop2: detected capacity change from 0 to 2048 [ 255.992168][ T9678] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1977: Failed to acquire dquot type 1 [ 256.005764][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 256.005794][ C1] EXT4-fs (loop3): last error at time 1778454661: ext4_validate_block_bitmap:441 [ 256.040316][ T9678] loop3: lost filesystem error report for type 5 error -28 [ 256.042410][ T9678] EXT4-fs (loop3): 1 truncate cleaned up [ 256.058420][ T9678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 256.076770][ T9678] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1977'. [ 256.086993][ T9675] loop2: p1 [ 256.090799][ T9675] loop2: p1 size 5119 extends beyond EOD, truncated [ 256.107239][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 256.270279][ T9686] FAULT_INJECTION: forcing a failure. [ 256.270279][ T9686] name failslab, interval 1, probability 0, space 0, times 0 [ 256.283747][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.2.1980 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.283785][ T9686] Tainted: [W]=WARN [ 256.283791][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.283803][ T9686] Call Trace: [ 256.283809][ T9686] [ 256.283815][ T9686] __dump_stack+0x1d/0x30 [ 256.283838][ T9686] dump_stack_lvl+0x95/0xd0 [ 256.283875][ T9686] dump_stack+0x15/0x1b [ 256.283897][ T9686] should_fail_ex+0x263/0x280 [ 256.283988][ T9686] should_failslab+0x8c/0xb0 [ 256.284016][ T9686] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 256.284045][ T9686] ? __d_alloc+0x37/0x340 [ 256.284067][ T9686] __d_alloc+0x37/0x340 [ 256.284119][ T9686] d_alloc_pseudo+0x1e/0x80 [ 256.284154][ T9686] alloc_file_pseudo+0x91/0x190 [ 256.284177][ T9686] sock_alloc_file+0x9c/0x1e0 [ 256.284203][ T9686] __sys_socketpair+0x23c/0x420 [ 256.284460][ T9686] __x64_sys_socketpair+0x52/0x60 [ 256.284547][ T9686] x64_sys_call+0x2de5/0x3020 [ 256.284619][ T9686] do_syscall_64+0x12c/0x3b0 [ 256.284646][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.284666][ T9686] RIP: 0033:0x7f14a9cfcdd9 [ 256.284713][ T9686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.284730][ T9686] RSP: 002b:00007f14a8757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 256.284747][ T9686] RAX: ffffffffffffffda RBX: 00007f14a9f75fa0 RCX: 00007f14a9cfcdd9 [ 256.284760][ T9686] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 256.284771][ T9686] RBP: 00007f14a8757090 R08: 0000000000000000 R09: 0000000000000000 [ 256.284900][ T9686] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 256.284913][ T9686] R13: 00007f14a9f76038 R14: 00007f14a9f75fa0 R15: 00007ffd783613f8 [ 256.284931][ T9686] [ 256.597366][ T9692] FAULT_INJECTION: forcing a failure. [ 256.597366][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.735409][ T9692] CPU: 0 UID: 0 PID: 9692 Comm: syz.0.1981 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.735442][ T9692] Tainted: [W]=WARN [ 256.735449][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.735519][ T9692] Call Trace: [ 256.735525][ T9692] [ 256.735533][ T9692] __dump_stack+0x1d/0x30 [ 256.735581][ T9692] dump_stack_lvl+0x95/0xd0 [ 256.735607][ T9692] dump_stack+0x15/0x1b [ 256.735626][ T9692] should_fail_ex+0x263/0x280 [ 256.735729][ T9692] should_fail+0xb/0x20 [ 256.735764][ T9692] should_fail_usercopy+0x1a/0x20 [ 256.735797][ T9692] _copy_to_user+0x20/0xa0 [ 256.735832][ T9692] ucma_query_route+0x5f7/0x6d0 [ 256.735904][ T9692] ? __pfx_ucma_query_route+0x10/0x10 [ 256.735937][ T9692] ucma_write+0x1c9/0x260 [ 256.736077][ T9692] ? __pfx_ucma_write+0x10/0x10 [ 256.736104][ T9692] vfs_write+0x269/0x9f0 [ 256.736141][ T9692] ? __rcu_read_unlock+0x4e/0x70 [ 256.736177][ T9692] ? __fget_files+0x184/0x1c0 [ 256.736207][ T9692] ksys_write+0xdc/0x1a0 [ 256.736245][ T9692] __x64_sys_write+0x40/0x50 [ 256.736279][ T9692] x64_sys_call+0x27e1/0x3020 [ 256.736341][ T9692] do_syscall_64+0x12c/0x3b0 [ 256.736371][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.736393][ T9692] RIP: 0033:0x7fb6fcd4cdd9 [ 256.736445][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.736542][ T9692] RSP: 002b:00007fb6fb79f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.736565][ T9692] RAX: ffffffffffffffda RBX: 00007fb6fcfc5fa0 RCX: 00007fb6fcd4cdd9 [ 256.736597][ T9692] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000003 [ 256.736611][ T9692] RBP: 00007fb6fb79f090 R08: 0000000000000000 R09: 0000000000000000 [ 256.736662][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.736679][ T9692] R13: 00007fb6fcfc6038 R14: 00007fb6fcfc5fa0 R15: 00007ffe93baad88 [ 256.736702][ T9692] [ 257.177255][ T9708] x_tables: duplicate underflow at hook 1 [ 257.237982][ T9710] loop0: detected capacity change from 0 to 512 [ 257.252578][ T9710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.265497][ T9710] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.281932][ T9715] loop4: detected capacity change from 0 to 512 [ 257.290726][ T9715] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1990: inode has both inline data and extents flags [ 257.304098][ T9705] loop2: detected capacity change from 0 to 512 [ 257.316171][ T9717] xt_ipcomp: unknown flags 1D [ 257.327506][ T9715] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.328412][ T9715] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1990: couldn't read orphan inode 15 (err -117) [ 257.351488][ T9715] loop4: lost filesystem error report for type 5 error -117 [ 257.351859][ T9705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.373725][ T9715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.381502][ T9705] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.400934][ T28] kauditd_printk_skb: 675 callbacks suppressed [ 257.400953][ T28] audit: type=1400 audit(1778454663.084:13616): avc: denied { write } for pid=9702 comm="syz.0.1985" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.429004][ T28] audit: type=1400 audit(1778454663.084:13617): avc: denied { write } for pid=9714 comm="syz.4.1990" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.450799][ T28] audit: type=1400 audit(1778454663.084:13618): avc: denied { write } for pid=9714 comm="syz.4.1990" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.488072][ T9710] xt_hashlimit: size too large, truncated to 1048576 [ 257.500952][ T28] audit: type=1400 audit(1778454663.184:13619): avc: denied { write } for pid=9704 comm="syz.2.1986" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.526068][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.568113][ T9723] loop4: detected capacity change from 0 to 128 [ 257.589736][ T9723] msdos: Bad value for 'gid' [ 257.599407][ T28] audit: type=1326 audit(1778454663.224:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 257.604658][ T9723] msdos: Bad value for 'gid' [ 257.624993][ T28] audit: type=1326 audit(1778454663.224:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 257.661009][ T28] audit: type=1326 audit(1778454663.224:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 257.686644][ T28] audit: type=1326 audit(1778454663.224:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 257.757570][ T28] audit: type=1326 audit(1778454663.224:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 257.786781][ T28] audit: type=1326 audit(1778454663.224:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.1.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b2acdd9 code=0x7ffc0000 [ 258.002338][ T9721] xt_hashlimit: size too large, truncated to 1048576 [ 258.427512][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.637035][ T9748] FAULT_INJECTION: forcing a failure. [ 258.637035][ T9748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.651148][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.3.1999 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.651184][ T9748] Tainted: [W]=WARN [ 258.651194][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.651216][ T9748] Call Trace: [ 258.651223][ T9748] [ 258.651231][ T9748] __dump_stack+0x1d/0x30 [ 258.651292][ T9748] dump_stack_lvl+0x95/0xd0 [ 258.651356][ T9748] dump_stack+0x15/0x1b [ 258.651382][ T9748] should_fail_ex+0x263/0x280 [ 258.651453][ T9748] should_fail+0xb/0x20 [ 258.651567][ T9748] should_fail_usercopy+0x1a/0x20 [ 258.651606][ T9748] _copy_from_iter+0xcf/0xea0 [ 258.651640][ T9748] ? __alloc_skb+0x4f6/0x690 [ 258.651658][ T9748] ? __alloc_skb+0x200/0x690 [ 258.651738][ T9748] netlink_sendmsg+0x4ae/0x6f0 [ 258.651778][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.651817][ T9748] ____sys_sendmsg+0x563/0x5b0 [ 258.651923][ T9748] ___sys_sendmsg+0x195/0x1e0 [ 258.652022][ T9748] __x64_sys_sendmsg+0xd4/0x160 [ 258.652057][ T9748] x64_sys_call+0x194c/0x3020 [ 258.652092][ T9748] do_syscall_64+0x12c/0x3b0 [ 258.652129][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.652190][ T9748] RIP: 0033:0x7f29f294cdd9 [ 258.652211][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.652235][ T9748] RSP: 002b:00007f29f13a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.652257][ T9748] RAX: ffffffffffffffda RBX: 00007f29f2bc5fa0 RCX: 00007f29f294cdd9 [ 258.652291][ T9748] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.652370][ T9748] RBP: 00007f29f13a7090 R08: 0000000000000000 R09: 0000000000000000 [ 258.652435][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.652495][ T9748] R13: 00007f29f2bc6038 R14: 00007f29f2bc5fa0 R15: 00007ffcc0857938 [ 258.652519][ T9748] [ 258.871314][ T9754] loop3: detected capacity change from 0 to 512 [ 258.910104][ T9754] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2001: inode has both inline data and extents flags [ 258.939441][ T9754] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.940565][ T9754] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2001: couldn't read orphan inode 15 (err -117) [ 258.949790][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.949831][ C0] EXT4-fs (loop3): initial error at time 1778454664: ext4_orphan_get:1397: inode 15 [ 258.949867][ C0] EXT4-fs (loop3): last error at time 1778454664: ext4_orphan_get:1397: inode 15 [ 258.957297][ T9757] futex_wake_op: syz.1.2003 tries to shift op by 32; fix this program [ 259.007504][ T9754] loop3: lost filesystem error report for type 5 error -117 [ 259.008428][ T9754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.032674][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.112481][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.334225][ T9777] __nla_validate_parse: 12 callbacks suppressed [ 259.334244][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 259.410441][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 259.430525][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 259.491566][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 259.519950][ T9782] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2011'. [ 259.556958][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 259.577973][ T9784] loop0: detected capacity change from 0 to 1024 [ 259.638595][ T9784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.661398][ T9784] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.702355][ T9791] loop3: detected capacity change from 0 to 8192 [ 259.716783][ T9791] FAT-fs (loop3): bogus logical sector size 0 [ 259.723363][ T9791] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 259.742964][ T9791] FAT-fs (loop3): Can't find a valid FAT filesystem [ 259.768934][ T9791] loop5: detected capacity change from 0 to 7 [ 259.798205][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.873747][ T9801] loop0: detected capacity change from 0 to 512 [ 259.910678][ T9801] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2017: inode has both inline data and extents flags [ 259.924716][ T9801] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.926468][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 259.935564][ T9801] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2017: couldn't read orphan inode 15 (err -117) [ 259.935649][ T9801] loop0: lost filesystem error report for type 5 error -117 [ 259.937175][ T9801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.942114][ C0] EXT4-fs (loop0): initial error at time 1778454665: ext4_orphan_get:1397: inode 15 [ 259.983126][ C0] EXT4-fs (loop0): last error at time 1778454665: ext4_orphan_get:1402 [ 260.003828][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 260.013662][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 260.048722][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.084639][ T9808] x_tables: duplicate underflow at hook 1 [ 260.197372][ T9813] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 260.198291][ T9815] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.205899][ T9815] FAULT_INJECTION: forcing a failure. [ 260.205899][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 260.255442][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz.0.2023 Tainted: G W syzkaller #0 PREEMPT(full) [ 260.255480][ T9815] Tainted: [W]=WARN [ 260.255487][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.255500][ T9815] Call Trace: [ 260.255507][ T9815] [ 260.255518][ T9815] __dump_stack+0x1d/0x30 [ 260.255642][ T9815] dump_stack_lvl+0x95/0xd0 [ 260.255746][ T9815] dump_stack+0x15/0x1b [ 260.255840][ T9815] should_fail_ex+0x263/0x280 [ 260.255936][ T9815] ? alloc_fs_context+0x46/0x580 [ 260.256002][ T9815] should_failslab+0x8c/0xb0 [ 260.256140][ T9815] __kmalloc_cache_noprof+0x5f/0x400 [ 260.256261][ T9815] alloc_fs_context+0x46/0x580 [ 260.256406][ T9815] ? security_capable+0x7b/0x90 [ 260.256494][ T9815] fs_context_for_reconfigure+0x42/0x50 [ 260.256590][ T9815] path_mount+0xa61/0xbc0 [ 260.256706][ T9815] __se_sys_mount+0x28c/0x2e0 [ 260.256816][ T9815] ? __se_sys_mkdirat+0xa2/0xf0 [ 260.256913][ T9815] ? kmem_cache_free+0xca/0x380 [ 260.256979][ T9815] __x64_sys_mount+0x67/0x80 [ 260.257200][ T9815] x64_sys_call+0x2d61/0x3020 [ 260.257288][ T9815] do_syscall_64+0x12c/0x3b0 [ 260.257464][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.257540][ T9815] RIP: 0033:0x7fb6fcd4e04a [ 260.257602][ T9815] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.257659][ T9815] RSP: 002b:00007fb6fb79ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.257741][ T9815] RAX: ffffffffffffffda RBX: 00007fb6fb79eee0 RCX: 00007fb6fcd4e04a [ 260.257856][ T9815] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 260.257900][ T9815] RBP: 0000200000000180 R08: 00007fb6fb79eee0 R09: 00000000000200e1 [ 260.257952][ T9815] R10: 00000000000200e1 R11: 0000000000000246 R12: 0000200000000100 [ 260.257995][ T9815] R13: 00007fb6fb79eea0 R14: 0000000000000000 R15: 00002000000001c0 [ 260.258061][ T9815] [ 260.302845][ T9818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.324540][ T9822] EXT4-fs: Ignoring removed i_version option [ 260.417516][ T9818] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.447447][ T9822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.510609][ T9822] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2025: invalid block [ 260.510694][ T9822] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.537114][ T9822] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2025: invalid indirect mapped block 4294967295 (level 1) [ 260.537233][ T9822] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.537356][ T9822] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2025: invalid indirect mapped block 4294967295 (level 1) [ 260.537391][ T9822] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.538009][ T9822] EXT4-fs (loop4): 2 truncates cleaned up [ 260.546693][ C0] EXT4-fs (loop4): error count since last fsck: 3 [ 260.546713][ C0] EXT4-fs (loop4): initial error at time 1778454666: ext4_get_branch:178: inode 11: block 4294967295 [ 260.546747][ C0] EXT4-fs (loop4): last error at time 1778454666: ext4_free_branches:1023: inode 11 [ 260.626636][ T9822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.639203][ T3296] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 260.665657][ T9822] EXT4-fs error (device loop4): ext4_get_parent:1832: inode #11: comm syz.4.2025: bad parent inode number: 3 [ 260.687005][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.717704][ T9827] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2025'. [ 260.758118][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.807116][ T9829] FAULT_INJECTION: forcing a failure. [ 260.807116][ T9829] name failslab, interval 1, probability 0, space 0, times 0 [ 260.807155][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.3.2027 Tainted: G W syzkaller #0 PREEMPT(full) [ 260.807272][ T9829] Tainted: [W]=WARN [ 260.807281][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.807295][ T9829] Call Trace: [ 260.807302][ T9829] [ 260.807310][ T9829] __dump_stack+0x1d/0x30 [ 260.807378][ T9829] dump_stack_lvl+0x95/0xd0 [ 260.807406][ T9829] dump_stack+0x15/0x1b [ 260.807432][ T9829] should_fail_ex+0x263/0x280 [ 260.807520][ T9829] should_failslab+0x8c/0xb0 [ 260.807627][ T9829] kmem_cache_alloc_noprof+0x66/0x3f0 [ 260.807671][ T9829] ? do_getname+0x2e/0x1c0 [ 260.807691][ T9829] ? mutex_lock+0x57/0x90 [ 260.807800][ T9829] do_getname+0x2e/0x1c0 [ 260.807902][ T9829] __se_sys_mknodat+0x24/0xf0 [ 260.807942][ T9829] __x64_sys_mknodat+0x55/0x70 [ 260.808039][ T9829] x64_sys_call+0x312/0x3020 [ 260.808072][ T9829] do_syscall_64+0x12c/0x3b0 [ 260.808172][ T9829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.808251][ T9829] RIP: 0033:0x7f29f294cdd9 [ 260.808270][ T9829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.808293][ T9829] RSP: 002b:00007f29f13a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 260.808315][ T9829] RAX: ffffffffffffffda RBX: 00007f29f2bc5fa0 RCX: 00007f29f294cdd9 [ 260.808333][ T9829] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 260.808383][ T9829] RBP: 00007f29f13a7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.808401][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.808418][ T9829] R13: 00007f29f2bc6038 R14: 00007f29f2bc5fa0 R15: 00007ffcc0857938 [ 260.808474][ T9829] [ 262.072273][ T9851] xt_ipcomp: unknown flags 1D [ 262.073705][ T9850] x_tables: duplicate underflow at hook 1 [ 262.211085][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 262.258969][ T9861] syzkaller0: entered promiscuous mode [ 262.270016][ T9861] syzkaller0: entered allmulticast mode [ 262.288715][ T9863] set_capacity_and_notify: 3 callbacks suppressed [ 262.288754][ T9863] loop4: detected capacity change from 0 to 512 [ 262.305465][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 262.369528][ T9863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.385253][ T9865] loop3: detected capacity change from 0 to 2048 [ 262.395318][ T9863] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2039: bad orphan inode 131083 [ 262.407931][ T9863] loop4: lost filesystem error report for type 5 error -117 [ 262.413573][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 262.427375][ C1] EXT4-fs (loop4): initial error at time 1778454668: ext4_orphan_get:1423 [ 262.435944][ C1] EXT4-fs (loop4): last error at time 1778454668: ext4_orphan_get:1423 [ 262.445117][ T9865] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 262.454613][ T9863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.500074][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.511505][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.543188][ T9877] FAULT_INJECTION: forcing a failure. [ 262.543188][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.559839][ T9877] CPU: 1 UID: 0 PID: 9877 Comm: syz.0.2044 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.559885][ T9877] Tainted: [W]=WARN [ 262.559893][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.559908][ T9877] Call Trace: [ 262.559916][ T9877] [ 262.559925][ T9877] __dump_stack+0x1d/0x30 [ 262.559954][ T9877] dump_stack_lvl+0x95/0xd0 [ 262.559974][ T9877] dump_stack+0x15/0x1b [ 262.560005][ T9877] should_fail_ex+0x263/0x280 [ 262.560039][ T9877] should_fail+0xb/0x20 [ 262.560068][ T9877] should_fail_usercopy+0x1a/0x20 [ 262.560104][ T9877] _copy_from_iter+0xcf/0xea0 [ 262.560139][ T9877] ? __alloc_skb+0x4f6/0x690 [ 262.560159][ T9877] ? __alloc_skb+0x200/0x690 [ 262.560179][ T9877] netlink_sendmsg+0x4ae/0x6f0 [ 262.560214][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.560320][ T9877] ____sys_sendmsg+0x563/0x5b0 [ 262.560349][ T9877] ___sys_sendmsg+0x195/0x1e0 [ 262.560372][ T9877] ? path_openat+0x1b01/0x2050 [ 262.560494][ T9877] __sys_sendmmsg+0x185/0x320 [ 262.560529][ T9877] __x64_sys_sendmmsg+0x57/0x70 [ 262.560555][ T9877] x64_sys_call+0x27aa/0x3020 [ 262.560581][ T9877] do_syscall_64+0x12c/0x3b0 [ 262.560612][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.560696][ T9877] RIP: 0033:0x7fb6fcd4cdd9 [ 262.560713][ T9877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.560748][ T9877] RSP: 002b:00007fb6fb79f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.560770][ T9877] RAX: ffffffffffffffda RBX: 00007fb6fcfc5fa0 RCX: 00007fb6fcd4cdd9 [ 262.560785][ T9877] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.560799][ T9877] RBP: 00007fb6fb79f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.560882][ T9877] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.560896][ T9877] R13: 00007fb6fcfc6038 R14: 00007fb6fcfc5fa0 R15: 00007ffe93baad88 [ 262.560976][ T9877] [ 262.761837][ T9875] x_tables: duplicate underflow at hook 1 [ 262.828190][ T9884] x_tables: duplicate underflow at hook 1 [ 262.838422][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 262.838468][ T28] audit: type=1326 audit(1778454668.520:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.871955][ T28] audit: type=1326 audit(1778454668.560:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.872045][ T28] audit: type=1326 audit(1778454668.560:13836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.926152][ T9887] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 262.969007][ T28] audit: type=1326 audit(1778454668.560:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969052][ T28] audit: type=1326 audit(1778454668.610:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969091][ T28] audit: type=1326 audit(1778454668.610:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969198][ T28] audit: type=1326 audit(1778454668.610:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969236][ T28] audit: type=1326 audit(1778454668.610:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969276][ T28] audit: type=1326 audit(1778454668.610:13842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.969313][ T28] audit: type=1326 audit(1778454668.610:13843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.2046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f294cdd9 code=0x7ffc0000 [ 262.997948][ T9880] loop3: detected capacity change from 0 to 512 [ 263.002213][ T9880] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 263.002261][ T9880] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 263.036007][ T9889] loop2: detected capacity change from 0 to 128 [ 263.036579][ T9889] msdos: Bad value for 'gid' [ 263.036598][ T9889] msdos: Bad value for 'gid' [ 263.039283][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 263.218750][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.425980][ T9897] loop4: detected capacity change from 0 to 512 [ 263.435176][ T9897] EXT4-fs (loop4): 1 orphan inode deleted [ 263.435664][ T9897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.450369][ T30] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.450477][ T30] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.450540][ T30] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.450585][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.459367][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.501618][ T9911] macsec0: entered promiscuous mode [ 263.598740][ T9915] x_tables: duplicate underflow at hook 1 [ 263.638052][ T5417] IPVS: starting estimator thread 0... [ 263.644373][ T9895] loop2: detected capacity change from 0 to 512 [ 263.665401][ T9895] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.2052: corrupted xattr block 95: invalid header [ 263.680824][ T9895] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.682104][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 263.697825][ C0] EXT4-fs (loop2): initial error at time 1778454669: ext4_expand_extra_isize_ea:2810: inode 11 [ 263.708249][ C0] EXT4-fs (loop2): last error at time 1778454669: ext4_expand_extra_isize_ea:2810 [ 263.708266][ T9895] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2052: bg 0: block 7: invalid block bitmap [ 263.717507][ C0] : inode 11 [ 263.744436][ T9917] IPVS: using max 2256 ests per chain, 112800 per kthread [ 263.770691][ T9895] loop2: lost filesystem error report for type 5 error -117 [ 263.770871][ T9895] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 263.783801][ T9922] loop4: detected capacity change from 0 to 512 [ 263.797670][ T9895] loop2: lost filesystem error report for type 5 error -117 [ 263.816647][ T9895] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.2052: corrupted xattr block 95: invalid header [ 263.837631][ T9895] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.837856][ T9895] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 263.859413][ T9895] EXT4-fs (loop2): 1 orphan inode deleted [ 263.865489][ T9895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.963148][ T9922] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2062: corrupted inode contents [ 263.977241][ T9922] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.978468][ T9922] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2062: mark_inode_dirty error [ 263.988967][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 263.989134][ C1] EXT4-fs (loop4): initial error at time 1778454669: ext4_do_update_inode:5690: inode 16 [ 263.989495][ C1] EXT4-fs (loop4): last error at time 1778454669: ext4_do_update_inode:5690: inode 16 [ 264.031312][ T9922] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.040979][ T9922] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2062: corrupted inode contents [ 264.065342][ T9922] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.067233][ T9922] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2062: mark_inode_dirty error [ 264.102200][ T9922] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.106187][ T9922] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2062: corrupted inode contents [ 264.133566][ T9922] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.134474][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.153236][ T9922] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 264.163489][ T9922] loop4: lost filesystem error report for type 5 error -117 [ 264.165164][ T9922] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2062: corrupted inode contents [ 264.236010][ T9922] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2062: mark_inode_dirty error [ 264.280108][ T9922] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 264.314945][ T9922] loop4: lost filesystem error report for type 5 error -117 [ 264.318724][ T9945] loop0: detected capacity change from 0 to 512 [ 264.343177][ T9922] EXT4-fs (loop4): 1 truncate cleaned up [ 264.353150][ T9945] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 264.365821][ T4985] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 264.367204][ T9922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.392098][ T9945] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 264.398668][ T4985] loop4: lost filesystem error report for type 5 error -117 [ 264.400828][ T9944] loop3: detected capacity change from 0 to 512 [ 264.410210][ T9922] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.434538][ T9944] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 264.443358][ T9944] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 264.537664][ T9945] loop0: detected capacity change from 0 to 2048 [ 264.591539][ T9950] x_tables: duplicate underflow at hook 1 [ 264.622584][ T9945] loop0: p1 [ 264.626600][ T9945] loop0: p1 size 5119 extends beyond EOD, truncated [ 264.692183][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 264.696001][ T9922] IPVS: length: 85 != 24 [ 264.707848][ T9922] __nla_validate_parse: 4 callbacks suppressed [ 264.707867][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 264.727688][ T9944] loop3: p1 [ 264.731529][ T9944] loop3: p1 size 5119 extends beyond EOD, truncated [ 264.753382][ T9959] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2077'. [ 264.800605][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.869182][ T9966] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 264.905557][ T9968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.931569][ T9973] FAULT_INJECTION: forcing a failure. [ 264.931569][ T9973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.951776][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz.0.2082 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.951818][ T9973] Tainted: [W]=WARN [ 264.951828][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.951844][ T9973] Call Trace: [ 264.951856][ T9973] [ 264.951865][ T9973] __dump_stack+0x1d/0x30 [ 264.951895][ T9973] dump_stack_lvl+0x95/0xd0 [ 264.951916][ T9973] dump_stack+0x15/0x1b [ 264.951939][ T9973] should_fail_ex+0x263/0x280 [ 264.951978][ T9973] should_fail+0xb/0x20 [ 264.952010][ T9973] should_fail_usercopy+0x1a/0x20 [ 264.952131][ T9973] _copy_from_iter+0xcf/0xea0 [ 264.952185][ T9973] ? __alloc_skb+0x4f6/0x690 [ 264.952209][ T9973] ? __alloc_skb+0x200/0x690 [ 264.952280][ T9973] netlink_sendmsg+0x4ae/0x6f0 [ 264.952323][ T9973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.952362][ T9973] ____sys_sendmsg+0x563/0x5b0 [ 264.952482][ T9973] ___sys_sendmsg+0x195/0x1e0 [ 264.952531][ T9973] __x64_sys_sendmsg+0xd4/0x160 [ 264.952622][ T9973] x64_sys_call+0x194c/0x3020 [ 264.952723][ T9973] do_syscall_64+0x12c/0x3b0 [ 264.952765][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.952796][ T9973] RIP: 0033:0x7fb6fcd4cdd9 [ 264.952817][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.952841][ T9973] RSP: 002b:00007fb6fb79f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.952868][ T9973] RAX: ffffffffffffffda RBX: 00007fb6fcfc5fa0 RCX: 00007fb6fcd4cdd9 [ 264.952967][ T9973] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 264.952985][ T9973] RBP: 00007fb6fb79f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.953003][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.953175][ T9973] R13: 00007fb6fcfc6038 R14: 00007fb6fcfc5fa0 R15: 00007ffe93baad88 [ 264.953253][ T9973] [ 264.953974][ T9968] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.3.2081: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 265.180529][ T9981] x_tables: duplicate underflow at hook 1 [ 265.185541][ T9977] xfrm0 speed is unknown, defaulting to 1000 [ 265.202723][ T9968] EXT4-fs (loop3): Remounting filesystem read-only [ 265.237164][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.333073][ T9993] FAULT_INJECTION: forcing a failure. [ 265.333073][ T9993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.368499][ T9993] CPU: 1 UID: 0 PID: 9993 Comm: syz.2.2090 Tainted: G W syzkaller #0 PREEMPT(full) [ 265.368605][ T9993] Tainted: [W]=WARN [ 265.368615][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.368632][ T9993] Call Trace: [ 265.368640][ T9993] [ 265.368650][ T9993] __dump_stack+0x1d/0x30 [ 265.368681][ T9993] dump_stack_lvl+0x95/0xd0 [ 265.368783][ T9993] dump_stack+0x15/0x1b [ 265.368808][ T9993] should_fail_ex+0x263/0x280 [ 265.368843][ T9993] should_fail+0xb/0x20 [ 265.368908][ T9993] should_fail_usercopy+0x1a/0x20 [ 265.368949][ T9993] _copy_from_user+0x1c/0xb0 [ 265.369088][ T9993] kstrtouint_from_user+0x69/0xf0 [ 265.369118][ T9993] ? 0xffffffff81000000 [ 265.369132][ T9993] ? selinux_file_permission+0x1e1/0x320 [ 265.369198][ T9993] proc_fail_nth_write+0x50/0x160 [ 265.369309][ T9993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.369338][ T9993] vfs_write+0x269/0x9f0 [ 265.369370][ T9993] ? __rcu_read_unlock+0x4e/0x70 [ 265.369435][ T9993] ? __fget_files+0x184/0x1c0 [ 265.369462][ T9993] ? mutex_lock+0x57/0x90 [ 265.369495][ T9993] ksys_write+0xdc/0x1a0 [ 265.369535][ T9993] __x64_sys_write+0x40/0x50 [ 265.369585][ T9993] x64_sys_call+0x27e1/0x3020 [ 265.369617][ T9993] do_syscall_64+0x12c/0x3b0 [ 265.369652][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.369687][ T9993] RIP: 0033:0x7f14a9cbd60e [ 265.369707][ T9993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.369728][ T9993] RSP: 002b:00007f14a8756fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.369754][ T9993] RAX: ffffffffffffffda RBX: 00007f14a87576c0 RCX: 00007f14a9cbd60e [ 265.369772][ T9993] RDX: 0000000000000001 RSI: 00007f14a87570a0 RDI: 0000000000000004 [ 265.369788][ T9993] RBP: 00007f14a8757090 R08: 0000000000000000 R09: 0000000000000000 [ 265.369859][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.369877][ T9993] R13: 00007f14a9f76038 R14: 00007f14a9f75fa0 R15: 00007ffd783613f8 [ 265.369901][ T9993] [ 265.817382][T10024] x_tables: duplicate underflow at hook 1 [ 265.899457][T10033] SELinux: policydb string length 1851870256 does not match expected length 8 [ 265.899502][T10033] SELinux: failed to load policy [ 266.063773][T10041] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 266.159344][T10044] macsec0: left promiscuous mode [ 266.200035][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 266.283774][T10056] x_tables: duplicate underflow at hook 1 [ 266.324242][T10058] vfat: Unknown parameter '00000000000000000000' [ 266.385820][T10058] xfrm0 speed is unknown, defaulting to 1000 [ 266.417463][ C0] Adjusting tsc more than 11% (6083271 vs 8464875) [ 266.448293][T10064] SELinux: policydb string length 1851870256 does not match expected length 8 [ 266.474637][T10064] SELinux: failed to load policy [ 266.565573][T10073] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2120: inode has both inline data and extents flags [ 266.581586][T10073] fserror_report: 2 callbacks suppressed [ 266.581602][T10073] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.588913][T10070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.596779][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 266.609124][T10070] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.610558][ C0] EXT4-fs (loop3): initial error at time 1778454672: ext4_orphan_get:1397: inode 15 [ 266.610603][ C0] EXT4-fs (loop3): last error at time 1778454672: ext4_orphan_get:1397: inode 15 [ 266.616258][T10073] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2120: couldn't read orphan inode 15 (err -117) [ 266.658000][T10073] loop3: lost filesystem error report for type 5 error -117 [ 266.658736][T10073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.719072][T10070] xt_hashlimit: size too large, truncated to 1048576 [ 266.720767][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.785548][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2119'. [ 266.801359][T10081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.802919][T10083] FAULT_INJECTION: forcing a failure. [ 266.802919][T10083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.803093][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.2.2123 Tainted: G W syzkaller #0 PREEMPT(full) [ 266.803130][T10083] Tainted: [W]=WARN [ 266.803139][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.803155][T10083] Call Trace: [ 266.803199][T10083] [ 266.803218][T10083] __dump_stack+0x1d/0x30 [ 266.803248][T10083] dump_stack_lvl+0x95/0xd0 [ 266.803278][T10083] dump_stack+0x15/0x1b [ 266.803304][T10083] should_fail_ex+0x263/0x280 [ 266.803338][T10083] should_fail+0xb/0x20 [ 266.803362][T10083] should_fail_usercopy+0x1a/0x20 [ 266.803455][T10083] _copy_from_iter+0xcf/0xea0 [ 266.803492][T10083] ? __alloc_skb+0x4f6/0x690 [ 266.803581][T10083] ? __alloc_skb+0x200/0x690 [ 266.803607][T10083] netlink_sendmsg+0x4ae/0x6f0 [ 266.803642][T10083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.803684][T10083] sock_write_iter+0x2e8/0x320 [ 266.803736][T10083] do_iter_readv_writev+0x4fd/0x5a0 [ 266.803837][T10083] vfs_writev+0x2e1/0x900 [ 266.803934][T10083] do_writev+0xe9/0x210 [ 266.803956][T10083] __x64_sys_writev+0x45/0x50 [ 266.803988][T10083] x64_sys_call+0x1c0c/0x3020 [ 266.804055][T10083] do_syscall_64+0x12c/0x3b0 [ 266.804086][T10083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.804108][T10083] RIP: 0033:0x7f14a9cfcdd9 [ 266.804136][T10083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.804218][T10083] RSP: 002b:00007f14a8757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 266.804244][T10083] RAX: ffffffffffffffda RBX: 00007f14a9f75fa0 RCX: 00007f14a9cfcdd9 [ 266.804286][T10083] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 266.804302][T10083] RBP: 00007f14a8757090 R08: 0000000000000000 R09: 0000000000000000 [ 266.804319][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.804336][T10083] R13: 00007f14a9f76038 R14: 00007f14a9f75fa0 R15: 00007ffd783613f8 [ 266.804361][T10083] [ 266.807799][T10081] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2122: bad orphan inode 131083 [ 266.807826][T10081] loop3: lost filesystem error report for type 5 error -117 [ 266.817006][T10081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.965283][T10078] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 267.014679][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.088015][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.188688][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 267.216190][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.321175][T10102] x_tables: duplicate underflow at hook 1 [ 267.347153][T10103] netlink: 'syz.1.2129': attribute type 27 has an invalid length. [ 267.347249][T10103] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2129'. [ 267.454376][T10107] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2132: inode has both inline data and extents flags [ 267.492877][T10107] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.493053][T10107] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2132: couldn't read orphan inode 15 (err -117) [ 267.502327][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 267.502351][ C0] EXT4-fs (loop2): initial error at time 1778454672: ext4_orphan_get:1397: inode 15 [ 267.502388][ C0] EXT4-fs (loop2): last error at time 1778454672: ext4_orphan_get:1397: inode 15 [ 267.556196][T10107] loop2: lost filesystem error report for type 5 error -117 [ 267.600344][T10107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.659063][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.814746][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.893182][T10121] xt_ipcomp: unknown flags 1D [ 268.087067][T10125] set_capacity_and_notify: 7 callbacks suppressed [ 268.087106][T10125] loop4: detected capacity change from 0 to 512 [ 268.105936][T10125] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 268.119545][T10125] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 268.309394][T10112] futex_wake_op: syz.0.2134 tries to shift op by 32; fix this program [ 268.331682][ T28] kauditd_printk_skb: 315 callbacks suppressed [ 268.331700][ T28] audit: type=1326 audit(1778454673.558:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46257cd60e code=0x7ffc0000 [ 268.403790][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 268.421967][T10123] loop4: detected capacity change from 0 to 2048 [ 268.428757][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 268.434669][ T28] audit: type=1326 audit(1778454673.558:14159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f462580ca6b code=0x7ffc0000 [ 268.464918][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 268.477078][T10129] loop3: detected capacity change from 0 to 512 [ 268.485764][ T28] audit: type=1326 audit(1778454673.558:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f46257cd60e code=0x7ffc0000 [ 268.501226][T10123] loop4: p1 [ 268.517096][ T28] audit: type=1326 audit(1778454673.583:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.543361][T10129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.558342][T10123] loop4: p1 size 5119 extends beyond EOD, truncated [ 268.567278][ T28] audit: type=1326 audit(1778454673.583:14162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.593365][ T28] audit: type=1326 audit(1778454673.583:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.609814][T10129] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.619153][ T28] audit: type=1326 audit(1778454673.583:14164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.661121][ T28] audit: type=1326 audit(1778454673.583:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.691119][ T28] audit: type=1326 audit(1778454673.583:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.735634][ T28] audit: type=1326 audit(1778454673.583:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.4.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462580cdd9 code=0x7ffc0000 [ 268.769177][T10129] xt_hashlimit: size too large, truncated to 1048576 [ 268.787024][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'. [ 268.964310][T10148] syzkaller0: entered promiscuous mode [ 268.969842][T10148] syzkaller0: entered allmulticast mode [ 268.984717][T10148] netlink: 'syz.2.2144': attribute type 27 has an invalid length. [ 269.005779][T10150] x_tables: duplicate underflow at hook 1 [ 269.021953][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.104700][T10159] xt_ipcomp: unknown flags 1D [ 269.131842][T10161] loop0: detected capacity change from 0 to 512 [ 269.140683][T10161] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 269.140747][T10161] EXT4-fs: failed to create workqueue [ 269.155850][T10161] EXT4-fs (loop0): mount failed [ 269.162123][T10157] loop3: detected capacity change from 0 to 512 [ 269.306221][T10157] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.2148: corrupted inode contents [ 269.311701][T10174] loop2: detected capacity change from 0 to 512 [ 269.324959][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.325367][T10157] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.2148: mark_inode_dirty error [ 269.345828][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.347567][T10157] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.2148: corrupted inode contents [ 269.362955][T10174] netlink: 'syz.2.2155': attribute type 13 has an invalid length. [ 269.376947][T10174] netlink: 'syz.2.2155': attribute type 17 has an invalid length. [ 269.385381][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.386011][T10157] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2148: mark_inode_dirty error [ 269.407642][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.408604][T10157] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.2148: corrupted inode contents [ 269.418986][ C0] EXT4-fs (loop3): error count since last fsck: 4 [ 269.432810][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.436663][ C0] EXT4-fs (loop3): initial error at time 1778454674: ext4_do_update_inode:5690: inode 16 [ 269.436702][ C0] EXT4-fs (loop3): last error at time 1778454674: __ext4_ext_dirty:207: inode 16 [ 269.485811][T10157] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 269.497921][T10157] loop3: lost filesystem error report for type 5 error -117 [ 269.502989][T10157] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.2148: corrupted inode contents [ 269.524704][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.529150][T10157] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.2148: mark_inode_dirty error [ 269.557902][T10157] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.559490][T10157] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 269.580728][T10157] loop3: lost filesystem error report for type 5 error -117 [ 269.587899][T10185] loop0: detected capacity change from 0 to 1764 [ 269.589827][T10157] EXT4-fs (loop3): 1 truncate cleaned up [ 269.611071][ T3458] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 269.622345][T10183] loop2: detected capacity change from 0 to 512 [ 269.635948][ T3458] loop3: lost filesystem error report for type 5 error -117 [ 269.640158][T10185] iso9660: Unexpected value for 'showassoc' [ 269.641528][T10157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.672606][T10185] program syz.0.2157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.687723][T10183] EXT4-fs: Ignoring removed nobh option [ 269.696949][T10183] EXT4-fs: Ignoring removed bh option [ 269.707141][T10183] ext2: Unknown parameter 'appraise_type' [ 269.724227][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.732205][T10157] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.782825][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.817265][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.838843][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.859240][T10174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.869626][T10174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.924666][T10174] veth1_vlan: left promiscuous mode [ 269.933067][T10157] IPVS: length: 85 != 24 [ 269.940442][T10174] veth0_vlan: left promiscuous mode [ 269.946172][T10174] veth0_vlan: entered promiscuous mode [ 269.946834][T10189] xt_hashlimit: size too large, truncated to 1048576 [ 269.965406][T10174] veth1_vlan: entered promiscuous mode [ 269.979247][T10174] veth1_macvtap: left promiscuous mode [ 269.991322][T10174] veth0_macvtap: left promiscuous mode [ 270.003200][T10174] veth0_macvtap: entered promiscuous mode [ 270.015683][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.027911][T10174] veth1_macvtap: entered promiscuous mode [ 270.045780][T10174] 8021q: adding VLAN 0 to HW filter on device eth0 [ 270.065949][T10174] 8021q: adding VLAN 0 to HW filter on device eth1 [ 270.091294][T10174] 8021q: adding VLAN 0 to HW filter on device eth2 [ 270.138258][T10174] 8021q: adding VLAN 0 to HW filter on device eth3 [ 270.218170][T10174] 8021q: adding VLAN 0 to HW filter on device team1 [ 270.298848][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.309878][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.320723][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.360554][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.507913][ T116] bridge0: port 1(1¾x9ÿ) entered blocking state [ 270.514380][ T116] bridge0: port 1(1¾x9ÿ) entered listening state [ 270.522882][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.530045][ T116] bridge0: port 2(bridge_slave_1) entered listening state [ 270.717855][T10202] loop2: detected capacity change from 0 to 2048 [ 270.734422][T10202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.766878][T10205] loop4: detected capacity change from 0 to 512 [ 270.892721][T10205] EXT4-fs: Ignoring removed bh option [ 270.936879][T10205] EXT4-fs: inline encryption not supported [ 271.013096][T10205] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.027740][T10213] syzkaller0: entered promiscuous mode [ 271.050760][T10213] syzkaller0: entered allmulticast mode [ 271.080830][T10213] netlink: 'syz.3.2165': attribute type 27 has an invalid length. [ 271.107474][T10213] __nla_validate_parse: 8 callbacks suppressed [ 271.107496][T10213] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2165'. [ 271.144075][T10205] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 271.203831][T10205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2163: bg 0: block 248: padding at end of block bitmap is not set [ 271.218654][T10205] loop4: lost filesystem error report for type 5 error -117 [ 271.257674][T10205] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2163: Failed to acquire dquot type 1 [ 271.276329][T10205] loop4: lost filesystem error report for type 5 error -28 [ 271.299543][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 271.313353][ C0] EXT4-fs (loop4): last error at time 1778454676: ext4_acquire_dquot:7034 [ 271.340513][T10205] EXT4-fs (loop4): 1 truncate cleaned up [ 271.346599][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 271.413422][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 271.422398][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 271.431294][T10222] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2168'. [ 271.454741][T10205] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2163'. [ 271.513140][T10224] EXT4-fs: test_dummy_encryption option not supported [ 271.539532][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 271.929320][T10230] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 272.352294][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.621107][T10241] netlink: 'syz.1.2174': attribute type 21 has an invalid length. [ 272.685321][T10224] EXT4-fs (loop3): 1 orphan inode deleted [ 272.706436][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 272.751002][ T30] loop3: lost filesystem error report for type 5 error -117 [ 272.776450][T10224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.830474][T10224] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.876413][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 272.893623][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 273.018381][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.126158][T10264] x_tables: duplicate underflow at hook 1 [ 273.176942][T10268] FAULT_INJECTION: forcing a failure. [ 273.176942][T10268] name failslab, interval 1, probability 0, space 0, times 0 [ 273.189998][T10268] CPU: 1 UID: 0 PID: 10268 Comm: syz.4.2182 Tainted: G W syzkaller #0 PREEMPT(full) [ 273.190073][T10268] Tainted: [W]=WARN [ 273.190083][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.190100][T10268] Call Trace: [ 273.190108][T10268] [ 273.190116][T10268] __dump_stack+0x1d/0x30 [ 273.190141][T10268] dump_stack_lvl+0x95/0xd0 [ 273.190163][T10268] dump_stack+0x15/0x1b [ 273.190222][T10268] should_fail_ex+0x263/0x280 [ 273.190259][T10268] ? ip_set_create+0x1ec/0x970 [ 273.190373][T10268] should_failslab+0x8c/0xb0 [ 273.190404][T10268] __kmalloc_cache_noprof+0x5f/0x400 [ 273.190534][T10268] ip_set_create+0x1ec/0x970 [ 273.190589][T10268] ? nla_get_range_unsigned+0x253/0x290 [ 273.190632][T10268] ? __nla_parse+0x40/0x60 [ 273.190706][T10268] nfnetlink_rcv_msg+0x4fe/0x5d0 [ 273.190754][T10268] netlink_rcv_skb+0x123/0x220 [ 273.190783][T10268] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 273.190871][T10268] nfnetlink_rcv+0x167/0x1720 [ 273.190948][T10268] ? __account_obj_stock+0x111/0x5f0 [ 273.190998][T10268] ? xas_load+0x413/0x430 [ 273.191026][T10268] ? xas_load+0x413/0x430 [ 273.191059][T10268] ? __rcu_read_unlock+0x4e/0x70 [ 273.191088][T10268] ? xa_load+0xb1/0xe0 [ 273.191125][T10268] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 273.191196][T10268] ? set_normalized_timespec64+0xe0/0x110 [ 273.191237][T10268] ? __account_obj_stock+0x3f5/0x5f0 [ 273.191269][T10268] ? __account_obj_stock+0x3ba/0x5f0 [ 273.191297][T10268] ? __rcu_read_unlock+0x4e/0x70 [ 273.191317][T10268] ? should_fail_ex+0x30/0x280 [ 273.191359][T10268] ? __rcu_read_unlock+0x4e/0x70 [ 273.191387][T10268] ? avc_has_perm_noaudit+0xab/0x130 [ 273.191430][T10268] ? selinux_nlmsg_lookup+0x99/0x890 [ 273.191621][T10268] ? selinux_netlink_send+0x5f5/0x650 [ 273.191662][T10268] ? __rcu_read_unlock+0x33/0x70 [ 273.191716][T10268] ? __netlink_lookup+0x276/0x2b0 [ 273.191787][T10268] netlink_unicast+0x5a8/0x680 [ 273.191821][T10268] netlink_sendmsg+0x5c8/0x6f0 [ 273.191869][T10268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.191921][T10268] ____sys_sendmsg+0x563/0x5b0 [ 273.191949][T10268] ___sys_sendmsg+0x195/0x1e0 [ 273.192057][T10268] __x64_sys_sendmsg+0xd4/0x160 [ 273.192086][T10268] x64_sys_call+0x194c/0x3020 [ 273.192112][T10268] do_syscall_64+0x12c/0x3b0 [ 273.192150][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.192193][T10268] RIP: 0033:0x7f462580cdd9 [ 273.192216][T10268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.192241][T10268] RSP: 002b:00007f4624267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.192296][T10268] RAX: ffffffffffffffda RBX: 00007f4625a85fa0 RCX: 00007f462580cdd9 [ 273.192355][T10268] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 273.192491][T10268] RBP: 00007f4624267090 R08: 0000000000000000 R09: 0000000000000000 [ 273.192510][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.192526][T10268] R13: 00007f4625a86038 R14: 00007f4625a85fa0 R15: 00007ffd124e8818 [ 273.192553][T10268] [ 273.994157][T10290] set_capacity_and_notify: 2 callbacks suppressed [ 273.994173][T10290] loop2: detected capacity change from 0 to 512 [ 274.208606][T10290] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.388824][T10290] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.2189: Bad quota inum: 2, type: 1 [ 274.422233][T10290] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 274.454572][T10306] loop3: detected capacity change from 0 to 512 [ 274.484570][T10306] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.2192: inode #1792: comm syz.3.2192: iget: illegal inode # [ 274.532790][T10306] loop3: lost filesystem error report for type 5 error -117 [ 274.533493][T10306] EXT4-fs (loop3): Remounting filesystem read-only [ 274.547391][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 274.547412][ C1] EXT4-fs (loop3): initial error at time 1778454678: ext4_get_journal_inode:5896 [ 274.547442][ C1] EXT4-fs (loop3): last error at time 1778454678: ext4_get_journal_inode:5896 [ 274.579173][T10290] EXT4-fs: Ignoring removed bh option [ 274.604328][T10306] EXT4-fs (loop3): no journal found [ 274.609813][T10306] EXT4-fs (loop3): can't get journal size [ 274.616208][T10290] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 274.631499][T10306] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 274.643028][T10306] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 274.656627][T10290] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 274.716801][T10306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.740492][T10308] loop0: detected capacity change from 0 to 1024 [ 274.751560][T10306] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.769800][T10290] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.2189: Bad quota inum: 2, type: 1 [ 274.788912][T10290] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 274.854577][T10314] netlink: 'syz.4.2194': attribute type 8 has an invalid length. [ 274.868396][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 274.869874][ T3300] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 274.964301][T10323] loop3: detected capacity change from 0 to 512 [ 274.976667][T10323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 275.006218][T10323] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2198: bad orphan inode 131083 [ 275.018505][T10323] loop3: lost filesystem error report for type 5 error -117 [ 275.026591][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.049145][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.492146][T10338] syzkaller0: entered promiscuous mode [ 275.514970][T10338] syzkaller0: entered allmulticast mode [ 275.544893][T10338] netlink: 'syz.2.2201': attribute type 27 has an invalid length. [ 275.578021][T10338] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2201'. [ 275.729052][T10342] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 275.982384][T10348] syzkaller0: entered promiscuous mode [ 275.982418][T10348] syzkaller0: entered allmulticast mode [ 276.015431][T10350] loop3: detected capacity change from 0 to 1024 [ 276.133065][T10354] FAULT_INJECTION: forcing a failure. [ 276.133065][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 276.146227][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.0.2209 Tainted: G W syzkaller #0 PREEMPT(full) [ 276.146397][T10354] Tainted: [W]=WARN [ 276.146407][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.146425][T10354] Call Trace: [ 276.146433][T10354] [ 276.146443][T10354] __dump_stack+0x1d/0x30 [ 276.146482][T10354] dump_stack_lvl+0x95/0xd0 [ 276.146503][T10354] dump_stack+0x15/0x1b [ 276.146566][T10354] should_fail_ex+0x263/0x280 [ 276.146604][T10354] ? alloc_pipe_info+0xad/0x340 [ 276.146642][T10354] should_failslab+0x8c/0xb0 [ 276.146687][T10354] __kmalloc_cache_noprof+0x5f/0x400 [ 276.146813][T10354] alloc_pipe_info+0xad/0x340 [ 276.146852][T10354] splice_direct_to_actor+0x591/0x670 [ 276.146911][T10354] ? kstrtouint_from_user+0xa8/0xf0 [ 276.147002][T10354] ? __pfx_direct_splice_actor+0x10/0x10 [ 276.147038][T10354] ? __rcu_read_unlock+0x4e/0x70 [ 276.147066][T10354] ? get_pid_task+0x96/0xd0 [ 276.147157][T10354] ? avc_policy_seqno+0x15/0x30 [ 276.147193][T10354] ? selinux_file_permission+0x1e1/0x320 [ 276.147223][T10354] do_splice_direct+0x119/0x1a0 [ 276.147280][T10354] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 276.147311][T10354] do_sendfile+0x382/0x650 [ 276.147422][T10354] __x64_sys_sendfile64+0x105/0x150 [ 276.147466][T10354] x64_sys_call+0x2dc4/0x3020 [ 276.147498][T10354] do_syscall_64+0x12c/0x3b0 [ 276.147604][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.147633][T10354] RIP: 0033:0x7fb6fcd4cdd9 [ 276.147727][T10354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.147745][T10354] RSP: 002b:00007fb6fb79f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.147767][T10354] RAX: ffffffffffffffda RBX: 00007fb6fcfc5fa0 RCX: 00007fb6fcd4cdd9 [ 276.147786][T10354] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 276.147802][T10354] RBP: 00007fb6fb79f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.147819][T10354] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 276.147882][T10354] R13: 00007fb6fcfc6038 R14: 00007fb6fcfc5fa0 R15: 00007ffe93baad88 [ 276.147902][T10354] [ 276.306623][T10360] xfrm0 speed is unknown, defaulting to 1000 [ 276.448324][T10356] loop2: detected capacity change from 0 to 8192 [ 277.210393][T10401] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 277.492414][T10416] FAULT_INJECTION: forcing a failure. [ 277.492414][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 277.526820][T10416] CPU: 1 UID: 0 PID: 10416 Comm: syz.2.2233 Tainted: G W syzkaller #0 PREEMPT(full) [ 277.526872][T10416] Tainted: [W]=WARN [ 277.526960][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.526973][T10416] Call Trace: [ 277.526979][T10416] [ 277.526989][T10416] __dump_stack+0x1d/0x30 [ 277.527076][T10416] dump_stack_lvl+0x95/0xd0 [ 277.527104][T10416] dump_stack+0x15/0x1b [ 277.527144][T10416] should_fail_ex+0x263/0x280 [ 277.527175][T10416] should_failslab+0x8c/0xb0 [ 277.527286][T10416] __kmalloc_noprof+0xb8/0x4d0 [ 277.527326][T10416] ? security_sk_alloc+0x52/0x120 [ 277.527442][T10416] security_sk_alloc+0x52/0x120 [ 277.527484][T10416] sk_prot_alloc+0xc2/0x180 [ 277.527507][T10416] sk_alloc+0x35/0x3e0 [ 277.527538][T10416] ? __pfx_genl_release+0x10/0x10 [ 277.527559][T10416] ? __pfx_genl_release+0x10/0x10 [ 277.527578][T10416] netlink_create+0x32a/0x450 [ 277.527607][T10416] ? __pfx_genl_unbind+0x10/0x10 [ 277.527648][T10416] ? __pfx_genl_bind+0x10/0x10 [ 277.527672][T10416] __sock_create+0x2e4/0x580 [ 277.527716][T10416] __sys_socket+0xaf/0x180 [ 277.527867][T10416] __x64_sys_socket+0x3f/0x50 [ 277.527987][T10416] x64_sys_call+0x11fc/0x3020 [ 277.528019][T10416] do_syscall_64+0x12c/0x3b0 [ 277.528051][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.528106][T10416] RIP: 0033:0x7f14a9cfe647 [ 277.528122][T10416] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.528140][T10416] RSP: 002b:00007f14a8755f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 277.528219][T10416] RAX: ffffffffffffffda RBX: 00007f14a9f75fa0 RCX: 00007f14a9cfe647 [ 277.528233][T10416] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 277.528246][T10416] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 277.528271][T10416] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 277.528288][T10416] R13: 00007f14a9f76038 R14: 00007f14a9f75fa0 R15: 00007ffd783613f8 [ 277.528385][T10416] [ 277.532224][ T28] kauditd_printk_skb: 279 callbacks suppressed [ 277.532269][ T28] audit: type=1400 audit(1778454681.700:14443): avc: denied { ioctl } for pid=10418 comm="syz.4.2234" path="socket:[28157]" dev="sockfs" ino=28157 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.861592][T10434] macsec0: entered promiscuous mode [ 277.867136][T10434] macsec0: entered allmulticast mode [ 277.916914][T10434] Invalid option length (64948) for dns_resolver key [ 277.977967][T10445] netlink: 'syz.0.2246': attribute type 21 has an invalid length. [ 277.986444][T10443] loop3: detected capacity change from 0 to 512 [ 278.012341][T10443] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 278.037754][T10451] futex_wake_op: syz.4.2250 tries to shift op by 32; fix this program [ 278.060868][T10443] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 278.173246][T10443] loop3: detected capacity change from 0 to 2048 [ 278.228188][T10443] loop3: p1 [ 278.228408][T10443] loop3: p1 size 5119 extends beyond EOD, truncated [ 278.390243][T10479] loop2: detected capacity change from 0 to 1024 [ 278.408265][T10482] xt_ipcomp: unknown flags 1D [ 278.420181][ T28] audit: type=1400 audit(1778454682.514:14444): avc: denied { write } for pid=10478 comm="syz.2.2260" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.420213][ T28] audit: type=1400 audit(1778454682.514:14445): avc: denied { write } for pid=10478 comm="syz.2.2260" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.420308][ T28] audit: type=1400 audit(1778454682.514:14446): avc: denied { write } for pid=10478 comm="syz.2.2260" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.420334][ T28] audit: type=1400 audit(1778454682.514:14447): avc: denied { write } for pid=10478 comm="syz.2.2260" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.420359][ T28] audit: type=1400 audit(1778454682.514:14448): avc: denied { write } for pid=10478 comm="syz.2.2260" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.525489][T10481] loop4: detected capacity change from 0 to 512 [ 278.679812][T10481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.679924][T10464] ================================================================== [ 278.679975][T10464] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 278.680036][T10464] [ 278.680045][T10464] write to 0xffffffff86c6b6e8 of 8 bytes by task 10481 on cpu 0: [ 278.680066][T10464] data_alloc+0x310/0x390 [ 278.680100][T10464] prb_reserve+0x8d6/0xad0 [ 278.680130][T10464] vprintk_store+0x54a/0x910 [ 278.680147][T10464] vprintk_emit+0x1a4/0x600 [ 278.680171][T10464] vprintk_default+0x26/0x30 [ 278.680195][T10464] vprintk+0x1d/0x30 [ 278.680228][T10464] _printk+0x79/0xa0 [ 278.680247][T10464] __ext4_msg+0x1aa/0x1c0 [ 278.680265][T10464] ext4_check_journal_data_mode+0x16f/0x210 [ 278.680285][T10464] ext4_fill_super+0x1c8f/0x37c0 [ 278.680305][T10464] get_tree_bdev_flags+0x291/0x300 [ 278.680344][T10464] get_tree_bdev+0x1f/0x30 [ 278.680380][T10464] ext4_get_tree+0x1c/0x30 [ 278.680410][T10464] vfs_get_tree+0x57/0x1d0 [ 278.680441][T10464] do_new_mount+0x288/0x8d0 [ 278.680481][T10464] path_mount+0x4d0/0xbc0 [ 278.680521][T10464] __se_sys_mount+0x28c/0x2e0 [ 278.680554][T10464] __x64_sys_mount+0x67/0x80 [ 278.680584][T10464] x64_sys_call+0x2d61/0x3020 [ 278.680610][T10464] do_syscall_64+0x12c/0x3b0 [ 278.680645][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.680674][T10464] [ 278.680681][T10464] read to 0xffffffff86c6b6e8 of 16 bytes by task 10464 on cpu 1: [ 278.680704][T10464] _prb_read_valid+0x1b6/0x950 [ 278.680747][T10464] prb_read_valid+0x3c/0x60 [ 278.680784][T10464] printk_get_next_message+0xea/0x560 [ 278.680815][T10464] console_flush_all+0x2cd/0x6c0 [ 278.680844][T10464] console_unlock+0xa1/0x280 [ 278.680870][T10464] do_con_write+0x2cd4/0x2d40 [ 278.680892][T10464] con_put_char+0x38/0x60 [ 278.680922][T10464] tty_put_char+0x68/0xc0 [ 278.680953][T10464] do_output_char+0x4de/0x500 [ 278.680978][T10464] n_tty_write+0x8ac/0xb80 [ 278.681003][T10464] file_tty_write+0x378/0x680 [ 278.681036][T10464] tty_write+0x25/0x30 [ 278.681064][T10464] do_iter_readv_writev+0x4fd/0x5a0 [ 278.681103][T10464] vfs_writev+0x2e1/0x900 [ 278.681126][T10464] do_writev+0xe9/0x210 [ 278.681148][T10464] __x64_sys_writev+0x45/0x50 [ 278.681187][T10464] x64_sys_call+0x1c0c/0x3020 [ 278.681219][T10464] do_syscall_64+0x12c/0x3b0 [ 278.681251][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.681278][T10464] [ 278.681283][T10464] Reported by Kernel Concurrency Sanitizer on: [ 278.681298][T10464] CPU: 1 UID: 0 PID: 10464 Comm: syz.0.2253 Tainted: G W syzkaller #0 PREEMPT(full) [ 278.681330][T10464] Tainted: [W]=WARN [ 278.681337][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.681350][T10464] ================================================================== [ 278.688826][T10481] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2259: bad orphan inode 131083 [ 278.688947][T10481] loop4: lost filesystem error report for type 5 error -117 [ 278.722329][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.722661][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.818971][ T28] audit: type=1400 audit(1778454682.881:14449): avc: denied { lock } for pid=10492 comm="syz.2.2263" path="socket:[28859]" dev="sockfs" ino=28859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.822045][ T28] audit: type=1400 audit(1778454682.881:14450): avc: denied { audit_write } for pid=10492 comm="syz.2.2263" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 278.847051][T10494] netlink: 'syz.2.2263': attribute type 3 has an invalid length. [ 278.847110][T10494] netlink: 'syz.2.2263': attribute type 16 has an invalid length. [ 278.847128][T10494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2263'. [ 278.883135][T10493] FAULT_INJECTION: forcing a failure. [ 278.883135][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 278.883173][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.3.2264 Tainted: G W syzkaller #0 PREEMPT(full) [ 278.883356][T10493] Tainted: [W]=WARN [ 278.883364][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.883376][T10493] Call Trace: [ 278.883390][T10493] [ 278.883398][T10493] __dump_stack+0x1d/0x30 [ 278.883427][T10493] dump_stack_lvl+0x95/0xd0 [ 278.883456][T10493] dump_stack+0x15/0x1b [ 278.883521][T10493] should_fail_ex+0x263/0x280 [ 278.883550][T10493] should_failslab+0x8c/0xb0 [ 278.883644][T10493] kmem_cache_alloc_noprof+0x66/0x3f0 [ 278.883682][T10493] ? do_getname+0x2e/0x1c0 [ 278.883754][T10493] do_getname+0x2e/0x1c0 [ 278.883772][T10493] __se_sys_rename+0x20/0x1c0 [ 278.883863][T10493] __x64_sys_rename+0x31/0x40 [ 278.883882][T10493] x64_sys_call+0x2b3/0x3020 [ 278.883988][T10493] do_syscall_64+0x12c/0x3b0 [ 278.884026][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.884116][T10493] RIP: 0033:0x7f29f294cdd9 [ 278.884132][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.884151][T10493] RSP: 002b:00007f29f13a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 278.884203][T10493] RAX: ffffffffffffffda RBX: 00007f29f2bc5fa0 RCX: 00007f29f294cdd9 [ 278.884221][T10493] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000440 [ 278.884234][T10493] RBP: 00007f29f13a7090 R08: 0000000000000000 R09: 0000000000000000 [ 278.884250][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.884267][T10493] R13: 00007f29f2bc6038 R14: 00007f29f2bc5fa0 R15: 00007ffcc0857938 [ 278.884292][T10493] [ 278.884395][ T28] audit: type=1400 audit(1778454682.945:14451): avc: denied { write } for pid=10491 comm="syz.3.2264" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.884431][ T28] audit: type=1400 audit(1778454682.945:14452): avc: denied { write } for pid=10491 comm="syz.3.2264" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.231976][ T5411] page_pool_release_retry() stalled pool shutdown: id 33, 21 inflight 181 sec [ 287.094709][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 287.101944][ C0] bridge0: port 1(1¾x9ÿ) entered learning state [ 287.962375][ T1039] page_pool_release_retry() stalled pool shutdown: id 34, 44 inflight 181 sec