last executing test programs: 1m35.796008775s ago: executing program 2 (id=132): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000200)={0x0, 0x1, 0xfff, 0xfffffffb, 0x200, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x560c, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000000)) 1m35.728755566s ago: executing program 2 (id=135): r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c082, 0x3, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x6ef8eb021116b2d8) socket$inet6(0xa, 0x2, 0x0) r5 = syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x700000000000000) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000bc0), 0x0, 0x24004044) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000100)="201064414d65af6dabca84da06e7eea01290879483af69d778ee39af46e3f9e1a799a7535857a8b6f4b24143115691e17f5e0942715a06532842bc4e8b5b0fab358307be063d0172a15174d0ab3e0094967205d49dde67594eb45b079249abf721f3108f30f19322020e3c43570a660186fddf1851f1b4004a4b0845098babfd9b692812291de112897865729b39eb2b37f727ca37ee889f5b", 0x99) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000a00)={0x0, 0xb78, 0x8a, "c043b847728778dc53787c70b7aac73a8c5e9cf2045b1cc1c87bf17a9def52973746067f488db9c17458a4f07d43bc922439d7ef6f87a49a50320b33e9dfd973948fbee17010c08f8c6f7419958c907c9489bd0e2d1888412603ce90c53bca8e7a64f159d4250fc65c58de2af798d686909fffe600fd78f9082678478e18626610752198cb1499cdaa0c"}, 0x92) 1m31.837508743s ago: executing program 2 (id=156): socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x4948, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 1m30.6979869s ago: executing program 2 (id=162): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fsmount(r0, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x2151090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5a3, &(0x7f0000001040)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000080)=0x7) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r6 = syz_pidfd_open(r4, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full', 0x20, 0x23}, 0xfffffdef) sendmmsg$inet(r7, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000440)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000036c0)="9821", 0x2}], 0x1, &(0x7f00000038c0)=ANY=[], 0xe8}}], 0x2, 0x24040004) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) pidfd_getfd(r6, r6, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 1m29.588722516s ago: executing program 2 (id=173): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001300)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000150a0101"], 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x30, r0, 0x61f5) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) 1m28.312235435s ago: executing program 2 (id=176): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x802, 0x0) fchdir(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0xe4ff, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0xb, 0x2, 0x1, 0xfffffffffffffd78, 0x4, 0x0}) 1m28.236088816s ago: executing program 32 (id=176): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x802, 0x0) fchdir(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0xe4ff, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0xb, 0x2, 0x1, 0xfffffffffffffd78, 0x4, 0x0}) 3.883976253s ago: executing program 0 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xa1) shutdown(0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000100)) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 2.967316676s ago: executing program 0 (id=941): syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) 2.962096846s ago: executing program 0 (id=944): r0 = io_uring_setup(0x4510d, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2000000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0x10, 0x3, 0x0) ptrace$setregset(0x4205, r1, 0x402, &(0x7f0000000000)={0x0}) 2.961562486s ago: executing program 1 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000"], 0xffe) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 2.799457149s ago: executing program 0 (id=947): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x5, &(0x7f00000000c0)={[{@orlov}, {@nombcache}, {@debug}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x14}, 0x0}, {@barrier}, {@prjquota}, {@jqfmt_vfsv1}, {@debug}, {@lazytime}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@mblk_io_submit}], [], 0x2c}, 0x0, 0x51f, &(0x7f0000001840)="$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") 2.758974709s ago: executing program 0 (id=948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) write$sndseq(r1, &(0x7f0000000700)=[{0x2, 0x7, 0x81, 0x3, @tick=0x1000, {0xf7, 0x2}, {0x8, 0x2b}, @raw32={[0x6ab1074c, 0x10000, 0x3]}}, {0x8, 0x1, 0x2, 0x2, @tick=0x7, {0x7, 0x4}, {0x2, 0x7}, @addr={0x6, 0x4}}, {0x7, 0xc, 0x73, 0x8, @time={0x0, 0x7f}, {0xb, 0xd6}, {0x8, 0x80}, @queue={0x6, {0x5}}}], 0x54) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.923855552s ago: executing program 1 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.837851963s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x60, r2, 0xb7a006d1969b963b, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x8014) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x41) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) 1.805719033s ago: executing program 5 (id=957): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x5, 0x7, 0x8, 0x6}, &(0x7f0000000240)=0x98) 1.743876124s ago: executing program 5 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) close(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010100, 0x4d4, 0x32}, @in=@empty, {0x0, 0x7, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x4000000002, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x3501, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'ccm_base(xts-aes-neon,blake2b-160)\x00'}, 0x0, 0x80}}, @algo_auth={0x48, 0x1, {{'sha3-224\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x5513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYBLOB='&'], 0x10) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x70, 0x30, 0x25, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_pedit={0x58, 0x1, 0x0, 0x0, {{0xa}, {0x2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$packet(0x11, 0x2, 0x300) 1.684281885s ago: executing program 1 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, 0x0, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 1.662596506s ago: executing program 1 (id=962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x5, 0x9, 0x7, 0x4}, 0x9c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x44000) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file3\x00', 0x2) 1.643509006s ago: executing program 4 (id=963): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.447927258s ago: executing program 3 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.36058494s ago: executing program 0 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x408c0) 1.178450582s ago: executing program 3 (id=966): syz_emit_ethernet(0x42, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}}}}}}}}, 0x0) 1.024398305s ago: executing program 3 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f90y2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJs45z/QKRpNhtxrPZYgEwyM1fIj0bEtyLi3cHMwWp9rLZlsuWYAQAAAAAAAAAAAAAAAAAAAAAAAACoq1SSqAAAAAD7WkT6cdJ4/tfw4NmBjccHDiSPBmvziLj132v/vj1ZLi+PVds/f9Je/k+j/UI3jmAAAAAAGzXH6c1xPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00sMHd6aa027G/fSXETHUKn5/HKrND0UmIo58kUT/M9slEdHXgfjrdyPiV39qET+pdiuGGr1oFf9wp+KfaJX/5vHTiDjagfjQy+5V9z+/aPX5S+N0bb7x83fwybb9HYjffv+XPtn/9bXZ/xzbZoyT99/ItY1/N+Jkf+v9TzN+0ib+mW3Gv/HHtbV2yyr/jxhu+f2TPBcrV15YypVW187PLUzO5mfzi+PjY5cmLk9cnBjNzcwV8o2/LWP843tvPt4s/yNt4g9tkf/Zbeb/9f3bD75dL2ZaxR850/r9P9Emftr47vtho1xdPtwsr9fLzzr1+junNst/uk3+W73/I9vM/9zv//bBNlcFAHZBaXVtfrJQyC/3dOGVXo3qz6I9kYXCVoVKY/DWbPnrXunYHiw0PxOPurNjAgAAOu7FMfB23Ni5DgEAAAAAAAAAAAAAAAAAAEAP6sw9w5r3xN787npN6/XZC/dCBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopm8CAAD//5Xn0MI=") socket$nl_generic(0x10, 0x3, 0x10) 803.953868ms ago: executing program 5 (id=968): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0xa, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x5, 0x0, 0x7, 0x10, 0x0, 0x0, 0x10], 0xff, [0xf442, 0x2, 0xfffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x3dc, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffd, 0x1800, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x88}}, 0x20000000) 802.226148ms ago: executing program 1 (id=969): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000362000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x2) 742.381269ms ago: executing program 4 (id=970): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 689.64166ms ago: executing program 5 (id=971): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 577.311041ms ago: executing program 4 (id=972): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r0, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 577.190431ms ago: executing program 5 (id=973): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 464.031963ms ago: executing program 4 (id=974): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 410.659204ms ago: executing program 4 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x40}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 378.476924ms ago: executing program 4 (id=976): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xae, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 248.041707ms ago: executing program 3 (id=977): syz_emit_ethernet(0x42, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}}}}}}}}, 0x0) 246.989447ms ago: executing program 3 (id=978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, 0x0) 72.795509ms ago: executing program 1 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) 0s ago: executing program 3 (id=980): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) kernel console output (not intermixed with test programs): yzkaller #0 PREEMPT(lazy) [ 87.195895][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.195913][ T4854] Call Trace: [ 87.195920][ T4854] [ 87.195929][ T4854] __dump_stack+0x1d/0x30 [ 87.196033][ T4854] dump_stack_lvl+0x95/0xd0 [ 87.196052][ T4854] dump_stack+0x15/0x1b [ 87.196148][ T4854] should_fail_ex+0x25e/0x270 [ 87.196183][ T4854] should_fail+0xb/0x20 [ 87.196279][ T4854] should_fail_usercopy+0x1a/0x20 [ 87.196308][ T4854] _copy_from_user+0x1c/0xb0 [ 87.196335][ T4854] ___sys_sendmsg+0xc1/0x1e0 [ 87.196409][ T4854] __x64_sys_sendmsg+0xd4/0x160 [ 87.196436][ T4854] x64_sys_call+0x194c/0x3020 [ 87.196462][ T4854] do_syscall_64+0x136/0x3c0 [ 87.196490][ T4854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.196510][ T4854] RIP: 0033:0x7f21ec73ce59 [ 87.196558][ T4854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.196578][ T4854] RSP: 002b:00007f21eb197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.196600][ T4854] RAX: ffffffffffffffda RBX: 00007f21ec9b5fa0 RCX: 00007f21ec73ce59 [ 87.196613][ T4854] RDX: 0000000020004010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 87.196628][ T4854] RBP: 00007f21eb197090 R08: 0000000000000000 R09: 0000000000000000 [ 87.196706][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.196719][ T4854] R13: 00007f21ec9b6038 R14: 00007f21ec9b5fa0 R15: 00007ffe874a2468 [ 87.196736][ T4854] [ 87.366328][ T28] audit: type=1400 audit(1782437071.115:694): avc: denied { write } for pid=4842 comm="syz.3.404" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.450833][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.507544][ T4862] syzkaller0: entered promiscuous mode [ 87.527392][ T4862] syzkaller0: entered allmulticast mode [ 87.533605][ T4860] loop4: detected capacity change from 0 to 512 [ 87.587475][ T4860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.614667][ T4860] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.410: bad orphan inode 131083 [ 87.620731][ T4872] loop0: detected capacity change from 0 to 1024 [ 87.633420][ T4860] loop4: lost filesystem error report for type 5 error -117 [ 87.639188][ T4860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.662682][ T4872] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.685840][ T4872] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 3: comm syz.0.413: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.705284][ T4872] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.707013][ T4872] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.413: Failed to acquire dquot type 0 [ 87.716156][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 87.716172][ C1] EXT4-fs (loop0): initial error at time 1782437071: ext4_map_blocks:833: inode 3: block 3 [ 87.716202][ C1] EXT4-fs (loop0): last error at time 1782437071: ext4_map_blocks:833: inode 3: block 3 [ 87.794064][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 87.795649][ T4872] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 3: comm syz.0.413: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.844054][ T4872] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.845553][ T4872] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.413: Failed to acquire dquot type 0 [ 87.877357][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 87.880899][ T4872] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.413: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.918605][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 87.920308][ T4872] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 3: comm syz.0.413: lblock 3 mapped to illegal pblock 3 (length 1) [ 87.965232][ T4872] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.969256][ T4872] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.413: Failed to acquire dquot type 0 [ 88.003386][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 88.007463][ T4872] EXT4-fs (loop0): 1 orphan inode deleted [ 88.022315][ T4872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.059639][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.270209][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.314246][ T4907] syzkaller0: entered promiscuous mode [ 88.320095][ T4907] syzkaller0: entered allmulticast mode [ 88.344509][ T4904] loop0: detected capacity change from 0 to 1024 [ 88.365048][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.377518][ T4904] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.820136][ T4914] loop4: detected capacity change from 0 to 1024 [ 88.850477][ T4914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.863504][ T4914] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.995276][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.146244][ T4925] __nla_validate_parse: 9 callbacks suppressed [ 89.146279][ T4925] netlink: 1080 bytes leftover after parsing attributes in process `syz.3.432'. [ 89.260708][ T4942] syzkaller0: entered promiscuous mode [ 89.280399][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 89.280414][ T28] audit: type=1400 audit(1782437073.115:700): avc: denied { setopt } for pid=4940 comm="syz.3.437" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.282631][ T4942] syzkaller0: entered allmulticast mode [ 89.366191][ T4943] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 89.400361][ T4943] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 89.415302][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 89.482287][ T4943] loop3: detected capacity change from 0 to 1024 [ 89.503030][ T4943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.557533][ T4943] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.571434][ T4923] loop0: detected capacity change from 0 to 2048 [ 89.797357][ T4963] loop3: detected capacity change from 0 to 1024 [ 89.801157][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 89.817658][ T4923] loop0: p2 < > p3 < p5 > p4 [ 89.828093][ T4923] loop0: partition table partially beyond EOD, truncated [ 89.852195][ T4923] loop0: p2 start 4278190080 is beyond EOD, truncated [ 89.857229][ T4963] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.958670][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 90.011305][ T4923] loop0: p4 size 8192 extends beyond EOD, truncated [ 90.047289][ T4923] loop0: p5 size 8192 extends beyond EOD, truncated [ 90.128307][ T28] audit: type=1400 audit(1782437073.965:701): avc: denied { read write } for pid=4970 comm="syz.5.445" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.241973][ T28] audit: type=1400 audit(1782437073.965:702): avc: denied { open } for pid=4970 comm="syz.5.445" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.435440][ T28] audit: type=1400 audit(1782437074.275:703): avc: denied { write } for pid=4972 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.691075][ T4951] loop1: detected capacity change from 0 to 1024 [ 90.857435][ T4988] syzkaller0: entered promiscuous mode [ 90.877353][ T4988] syzkaller0: entered allmulticast mode [ 90.896711][ T4951] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.134416][ T5004] loop3: detected capacity change from 0 to 1024 [ 91.155832][ T5004] ext4: Unknown parameter 'syzkaller0' [ 91.276450][ T5008] loop0: detected capacity change from 0 to 512 [ 91.303007][ T5008] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.363475][ T5008] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.457: corrupted xattr entries [ 91.406656][ T5008] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.406892][ T5008] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.416057][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 91.416090][ C0] EXT4-fs (loop0): initial error at time 1782437075: xattr_find_entry:337: inode 15 [ 91.416123][ C0] EXT4-fs (loop0): last error at time 1782437075: xattr_find_entry:337: inode 15 [ 91.495851][ T5011] FAULT_INJECTION: forcing a failure. [ 91.495851][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.602082][ T5011] CPU: 0 UID: 0 PID: 5011 Comm: syz.1.458 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.602155][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.602169][ T5011] Call Trace: [ 91.602232][ T5011] [ 91.602241][ T5011] __dump_stack+0x1d/0x30 [ 91.602288][ T5011] dump_stack_lvl+0x95/0xd0 [ 91.602346][ T5011] dump_stack+0x15/0x1b [ 91.602368][ T5011] should_fail_ex+0x25e/0x270 [ 91.602398][ T5011] should_fail+0xb/0x20 [ 91.602472][ T5011] should_fail_usercopy+0x1a/0x20 [ 91.602501][ T5011] _copy_to_user+0x20/0xa0 [ 91.602519][ T5011] simple_read_from_buffer+0xb5/0x130 [ 91.602546][ T5011] proc_fail_nth_read+0x10e/0x150 [ 91.602571][ T5011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.602658][ T5011] vfs_read+0x18e/0x7c0 [ 91.602770][ T5011] ? ptm_open_peer+0x193/0x1b0 [ 91.602801][ T5011] ksys_read+0xdc/0x1a0 [ 91.602822][ T5011] __x64_sys_read+0x40/0x50 [ 91.602844][ T5011] x64_sys_call+0x2886/0x3020 [ 91.602929][ T5011] do_syscall_64+0x136/0x3c0 [ 91.602962][ T5011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.602983][ T5011] RIP: 0033:0x7f67ab55d68e [ 91.603042][ T5011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.603082][ T5011] RSP: 002b:00007f67a9feefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.603104][ T5011] RAX: ffffffffffffffda RBX: 00007f67a9fef6c0 RCX: 00007f67ab55d68e [ 91.603121][ T5011] RDX: 000000000000000f RSI: 00007f67a9fef0a0 RDI: 0000000000000004 [ 91.603136][ T5011] RBP: 00007f67a9fef090 R08: 0000000000000000 R09: 0000000000000000 [ 91.603188][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.603203][ T5011] R13: 00007f67ab816038 R14: 00007f67ab815fa0 R15: 00007fff712e56e8 [ 91.603225][ T5011] [ 91.808502][ T5008] EXT4-fs (loop0): 1 orphan inode deleted [ 92.086716][ T5013] loop4: detected capacity change from 0 to 1024 [ 92.156640][ T4975] loop5: detected capacity change from 0 to 1024 [ 92.188359][ T5019] FAULT_INJECTION: forcing a failure. [ 92.188359][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 92.222296][ T5013] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.264378][ T5023] syzkaller0: entered promiscuous mode [ 92.274168][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.3.462 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.274197][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.274211][ T5019] Call Trace: [ 92.274219][ T5019] [ 92.274227][ T5019] __dump_stack+0x1d/0x30 [ 92.274278][ T5019] dump_stack_lvl+0x95/0xd0 [ 92.274300][ T5019] dump_stack+0x15/0x1b [ 92.274320][ T5019] should_fail_ex+0x25e/0x270 [ 92.274365][ T5019] should_failslab+0x8c/0xb0 [ 92.274388][ T5019] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 92.274412][ T5019] ? skb_clone+0x151/0x1f0 [ 92.274477][ T5019] ? skb_clone+0x151/0x1f0 [ 92.274550][ T5019] skb_clone+0x151/0x1f0 [ 92.274631][ T5019] __netlink_deliver_tap+0x2be/0x510 [ 92.274729][ T5019] netlink_unicast+0x654/0x680 [ 92.274762][ T5019] netlink_sendmsg+0x5be/0x6f0 [ 92.274787][ T5019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.274855][ T5019] ____sys_sendmsg+0x532/0x580 [ 92.274887][ T5019] ___sys_sendmsg+0x195/0x1e0 [ 92.274931][ T5019] __x64_sys_sendmsg+0xd4/0x160 [ 92.275056][ T5019] x64_sys_call+0x194c/0x3020 [ 92.275097][ T5019] do_syscall_64+0x136/0x3c0 [ 92.275128][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.275152][ T5019] RIP: 0033:0x7fd82184ce59 [ 92.275170][ T5019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.275193][ T5019] RSP: 002b:00007fd8202a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.275253][ T5019] RAX: ffffffffffffffda RBX: 00007fd821ac5fa0 RCX: 00007fd82184ce59 [ 92.275269][ T5019] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 92.275359][ T5019] RBP: 00007fd8202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.275424][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.275437][ T5019] R13: 00007fd821ac6038 R14: 00007fd821ac5fa0 R15: 00007ffc98d84bc8 [ 92.275459][ T5019] [ 92.487587][ T5025] loop1: detected capacity change from 0 to 512 [ 92.494505][ T5023] syzkaller0: entered allmulticast mode [ 92.538947][ T5025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.762878][ T5025] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.463: bad orphan inode 131083 [ 92.774898][ T5029] loop5: detected capacity change from 0 to 256 [ 92.827950][ T5025] loop1: lost filesystem error report for type 5 error -117 [ 92.832345][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 92.846149][ C0] EXT4-fs (loop1): initial error at time 1782437076: ext4_orphan_get:1425 [ 92.854684][ C0] EXT4-fs (loop1): last error at time 1782437076: ext4_orphan_get:1425 [ 92.888649][ T28] audit: type=1400 audit(1782437076.715:704): avc: denied { write } for pid=5024 comm="syz.1.463" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.024547][ T5029] FAT-fs (loop5): Directory bread(block 64) failed [ 93.031288][ T5029] FAT-fs (loop5): Directory bread(block 65) failed [ 93.050096][ T5029] FAT-fs (loop5): Directory bread(block 66) failed [ 93.072200][ T5029] FAT-fs (loop5): Directory bread(block 67) failed [ 93.081053][ T5039] loop3: detected capacity change from 0 to 512 [ 93.089026][ T5039] ext4: Unknown parameter 'smackfstransmute' [ 93.108013][ T5039] ./file0: Can't lookup blockdev [ 93.136376][ T5029] FAT-fs (loop5): Directory bread(block 68) failed [ 93.182019][ T5029] FAT-fs (loop5): Directory bread(block 69) failed [ 93.227055][ T5029] FAT-fs (loop5): Directory bread(block 70) failed [ 93.277281][ T28] audit: type=1400 audit(1782437077.115:705): avc: denied { accept } for pid=5048 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.277819][ T5049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.474'. [ 93.319702][ T5029] FAT-fs (loop5): Directory bread(block 71) failed [ 93.373975][ T5029] FAT-fs (loop5): Directory bread(block 72) failed [ 93.428391][ T5029] FAT-fs (loop5): Directory bread(block 73) failed [ 93.441153][ T5049] loop3: detected capacity change from 0 to 512 [ 93.499104][ T5049] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.474: inode has both inline data and extents flags [ 93.600086][ T5049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.602404][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 93.618196][ C1] EXT4-fs (loop3): initial error at time 1782437077: ext4_orphan_get:1399: inode 15 [ 93.627912][ C1] EXT4-fs (loop3): last error at time 1782437077: ext4_orphan_get:1399: inode 15 [ 93.650806][ T5073] bio_check_eod: 288 callbacks suppressed [ 93.650842][ T5073] syz.5.465: attempt to access beyond end of device [ 93.650842][ T5073] loop5: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 93.679456][ T5049] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.474: couldn't read orphan inode 15 (err -117) [ 93.715472][ T5049] loop3: lost filesystem error report for type 5 error -117 [ 93.735831][ T5072] loop0: detected capacity change from 0 to 1024 [ 93.771143][ T5073] syz.5.465: attempt to access beyond end of device [ 93.771143][ T5073] loop5: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 93.785353][ T5073] syz.5.465: attempt to access beyond end of device [ 93.785353][ T5073] loop5: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 93.799701][ T5073] syz.5.465: attempt to access beyond end of device [ 93.799701][ T5073] loop5: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 93.814750][ T5073] syz.5.465: attempt to access beyond end of device [ 93.814750][ T5073] loop5: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 93.832374][ T5073] syz.5.465: attempt to access beyond end of device [ 93.832374][ T5073] loop5: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 93.850404][ T5072] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.018942][ T5073] syz.5.465: attempt to access beyond end of device [ 94.018942][ T5073] loop5: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 94.266933][ T5073] syz.5.465: attempt to access beyond end of device [ 94.266933][ T5073] loop5: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 94.359868][ T5087] FAULT_INJECTION: forcing a failure. [ 94.359868][ T5087] name failslab, interval 1, probability 0, space 0, times 0 [ 94.399509][ T5087] CPU: 0 UID: 0 PID: 5087 Comm: syz.3.482 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.399583][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.399596][ T5087] Call Trace: [ 94.399603][ T5087] [ 94.399636][ T5087] __dump_stack+0x1d/0x30 [ 94.399662][ T5087] dump_stack_lvl+0x95/0xd0 [ 94.399685][ T5087] dump_stack+0x15/0x1b [ 94.399743][ T5087] should_fail_ex+0x25e/0x270 [ 94.399772][ T5087] should_failslab+0x8c/0xb0 [ 94.399817][ T5087] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 94.399841][ T5087] ? do_getname+0x2e/0x1c0 [ 94.399862][ T5087] ? do_getname+0x2e/0x1c0 [ 94.399887][ T5087] do_getname+0x2e/0x1c0 [ 94.399962][ T5087] user_path_at+0x28/0x100 [ 94.399992][ T5087] __se_sys_mount+0x25b/0x2e0 [ 94.400016][ T5087] ? fput+0x8f/0xc0 [ 94.400060][ T5087] __x64_sys_mount+0x67/0x80 [ 94.400083][ T5087] x64_sys_call+0x2d61/0x3020 [ 94.400171][ T5087] do_syscall_64+0x136/0x3c0 [ 94.400221][ T5087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.400245][ T5087] RIP: 0033:0x7fd82184ce59 [ 94.400263][ T5087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.400282][ T5087] RSP: 002b:00007fd8202a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.400302][ T5087] RAX: ffffffffffffffda RBX: 00007fd821ac5fa0 RCX: 00007fd82184ce59 [ 94.400316][ T5087] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 94.400367][ T5087] RBP: 00007fd8202a7090 R08: 0000200000000000 R09: 0000000000000000 [ 94.400382][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.400395][ T5087] R13: 00007fd821ac6038 R14: 00007fd821ac5fa0 R15: 00007ffc98d84bc8 [ 94.400417][ T5087] [ 94.563343][ T5073] syz.5.465: attempt to access beyond end of device [ 94.563343][ T5073] loop5: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 94.591702][ T5073] syz.5.465: attempt to access beyond end of device [ 94.591702][ T5073] loop5: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 94.962631][ T5103] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.011294][ T28] audit: type=1400 audit(1782437078.845:706): avc: denied { write } for pid=5102 comm="syz.3.487" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.114655][ T5060] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.136553][ T28] audit: type=1400 audit(1782437078.945:707): avc: denied { sys_admin } for pid=5116 comm="syz.0.490" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 95.346308][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 95.385772][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 95.494843][ T5126] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.932688][ T28] audit: type=1400 audit(1782437079.765:708): avc: denied { setattr } for pid=5130 comm="syz.3.496" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.980306][ T5136] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 96.092398][ T5136] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 96.170812][ T5136] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.496: Failed to acquire dquot type 1 [ 96.306397][ T3297] EXT4-fs unmount: 23 callbacks suppressed [ 96.306413][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.369343][ T5140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.417738][ T5128] set_capacity_and_notify: 5 callbacks suppressed [ 96.417761][ T5128] loop1: detected capacity change from 0 to 512 [ 96.465186][ T28] audit: type=1326 audit(1782437080.305:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.0.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab72a4ce59 code=0x0 [ 96.537569][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.550239][ T5128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.598260][ T5128] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.493: bad orphan inode 131083 [ 96.618677][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 96.622351][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.636084][ C1] EXT4-fs (loop1): initial error at time 1782437080: ext4_orphan_get:1425 [ 96.644634][ C1] EXT4-fs (loop1): last error at time 1782437080: ext4_orphan_get:1425 [ 96.674107][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.686752][ T5150] loop3: detected capacity change from 0 to 128 [ 96.710428][ T5150] vfat: Unknown parameter '0x000000000000000400000000000000000000zXDb&S!|:]dN' [ 96.789855][ T28] audit: type=1400 audit(1782437080.625:710): avc: denied { write } for pid=5127 comm="syz.1.493" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.059276][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.378167][ T5162] loop1: detected capacity change from 0 to 512 [ 97.446057][ T5162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.513644][ T5162] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.504: bad orphan inode 131083 [ 97.526395][ T5168] loop3: detected capacity change from 0 to 512 [ 97.569567][ T5168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.583944][ T5162] loop1: lost filesystem error report for type 5 error -117 [ 97.599847][ T5168] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.506: bad orphan inode 131083 [ 97.600229][ T5162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.623695][ T5168] loop3: lost filesystem error report for type 5 error -117 [ 97.667815][ T5168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.690610][ T28] audit: type=1400 audit(1782437081.495:711): avc: denied { write } for pid=5161 comm="syz.1.504" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.748036][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.770811][ T5173] loop4: detected capacity change from 0 to 512 [ 97.797471][ T5173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.810258][ T28] audit: type=1400 audit(1782437081.655:712): avc: denied { write } for pid=5167 comm="syz.3.506" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.859366][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.507: iget: bad i_size value: 38620345925642 [ 97.880086][ T5173] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.880733][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.507: couldn't read orphan inode 15 (err -117) [ 97.890028][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.890074][ C1] EXT4-fs (loop4): initial error at time 1782437081: ext4_orphan_get:1399: inode 15 [ 97.890171][ C1] EXT4-fs (loop4): last error at time 1782437081: ext4_orphan_get:1399: inode 15 [ 97.938772][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 97.991907][ T5175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 98.032925][ T5178] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 98.040865][ T5173] loop4: lost filesystem error report for type 5 error -117 [ 98.041078][ T5178] netlink: 84 bytes leftover after parsing attributes in process `syz.1.508'. [ 98.064884][ T5173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.089224][ T28] audit: type=1400 audit(1782437081.925:713): avc: denied { write } for pid=5172 comm="syz.4.507" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.111496][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 98.145323][ T4992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 98.180650][ T5181] loop0: detected capacity change from 0 to 1024 [ 98.225013][ T5181] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 98.370119][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.381551][ T5185] loop0: detected capacity change from 0 to 512 [ 98.391291][ T5185] ext4: Unknown parameter 'subj_user' [ 98.587046][ T5195] loop3: detected capacity change from 0 to 512 [ 98.609991][ T5195] ext4: Unknown parameter 'smackfstransmute' [ 98.643686][ T5195] ./file0: Can't lookup blockdev [ 98.713934][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.722097][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.733695][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.786231][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 98.798322][ T5201] netlink: 'syz.4.516': attribute type 21 has an invalid length. [ 98.799696][ T5200] netlink: 'syz.4.516': attribute type 21 has an invalid length. [ 98.818215][ T5201] netlink: 128 bytes leftover after parsing attributes in process `syz.4.516'. [ 98.830273][ T5200] netlink: 128 bytes leftover after parsing attributes in process `syz.4.516'. [ 98.842594][ T5197] netlink: 'syz.5.515': attribute type 21 has an invalid length. [ 98.884598][ T5187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.911221][ T5201] netlink: 'syz.4.516': attribute type 5 has an invalid length. [ 98.923577][ T5201] netlink: 'syz.4.516': attribute type 6 has an invalid length. [ 98.931697][ T5201] netlink: 3 bytes leftover after parsing attributes in process `syz.4.516'. [ 98.936745][ T5210] loop0: detected capacity change from 0 to 512 [ 98.947187][ T5200] netlink: 'syz.4.516': attribute type 5 has an invalid length. [ 98.954978][ T5200] netlink: 'syz.4.516': attribute type 6 has an invalid length. [ 98.965497][ T5210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.990448][ T5210] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.517: bad orphan inode 131083 [ 99.035965][ T5210] loop0: lost filesystem error report for type 5 error -117 [ 99.036519][ T5210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.121217][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.159542][ T5219] FAULT_INJECTION: forcing a failure. [ 99.159542][ T5219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.193303][ T5219] CPU: 1 UID: 0 PID: 5219 Comm: syz.0.520 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.193331][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.193342][ T5219] Call Trace: [ 99.193347][ T5219] [ 99.193353][ T5219] __dump_stack+0x1d/0x30 [ 99.193373][ T5219] dump_stack_lvl+0x95/0xd0 [ 99.193439][ T5219] dump_stack+0x15/0x1b [ 99.193454][ T5219] should_fail_ex+0x25e/0x270 [ 99.193476][ T5219] should_fail+0xb/0x20 [ 99.193495][ T5219] should_fail_usercopy+0x1a/0x20 [ 99.193593][ T5219] _copy_from_user+0x1c/0xb0 [ 99.193612][ T5219] ___sys_sendmsg+0xc1/0x1e0 [ 99.193638][ T5219] ? terminate_walk+0x1d5/0x200 [ 99.193729][ T5219] __sys_sendmmsg+0x185/0x320 [ 99.193791][ T5219] __x64_sys_sendmmsg+0x57/0x70 [ 99.193813][ T5219] x64_sys_call+0x27aa/0x3020 [ 99.193832][ T5219] do_syscall_64+0x136/0x3c0 [ 99.193856][ T5219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.193883][ T5219] RIP: 0033:0x7fab72a4ce59 [ 99.193897][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.193927][ T5219] RSP: 002b:00007fab714a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.193944][ T5219] RAX: ffffffffffffffda RBX: 00007fab72cc5fa0 RCX: 00007fab72a4ce59 [ 99.193956][ T5219] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 99.193967][ T5219] RBP: 00007fab714a7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.193978][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.194025][ T5219] R13: 00007fab72cc6038 R14: 00007fab72cc5fa0 R15: 00007ffc8d4512f8 [ 99.194040][ T5219] [ 99.373183][ T5216] loop4: detected capacity change from 0 to 512 [ 99.488597][ T5216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.548401][ T5216] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.518: bad orphan inode 131083 [ 99.559465][ T5216] loop4: lost filesystem error report for type 5 error -117 [ 99.657885][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.931229][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.085120][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 100.085134][ T28] audit: type=1400 audit(1782437083.925:717): avc: denied { setopt } for pid=5238 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.282420][ T5241] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.298620][ T5241] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.331643][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.345621][ T28] audit: type=1400 audit(1782437084.175:718): avc: denied { write } for pid=5238 comm="syz.5.526" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.346808][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.433460][ T28] audit: type=1400 audit(1782437084.265:719): avc: denied { write } for pid=5238 comm="syz.5.526" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.479944][ T5247] ext4: Unknown parameter 'smackfstransmute' [ 100.495130][ T4085] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.508796][ T5247] ./file0: Can't lookup blockdev [ 100.519911][ T5250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.550185][ T5250] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.530: bad orphan inode 131083 [ 100.567184][ T5250] loop1: lost filesystem error report for type 5 error -117 [ 100.568312][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.588699][ T5240] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.597212][ T5240] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.626872][ T5240] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 100.644511][ T28] audit: type=1400 audit(1782437084.485:720): avc: denied { write } for pid=5249 comm="syz.1.530" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.675641][ T5240] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 100.686327][ T5240] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.527: Failed to acquire dquot type 1 [ 100.686335][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.715019][ T5240] loop3: lost filesystem error report for type 5 error -5 [ 100.717505][ T5240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.527: bg 0: block 40: padding at end of block bitmap is not set [ 100.724741][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 100.724756][ C0] EXT4-fs (loop3): initial error at time 1782437084: ext4_acquire_dquot:7041 [ 100.724775][ C0] EXT4-fs (loop3): last error at time 1782437084: ext4_acquire_dquot:7041 [ 100.789061][ T5240] loop3: lost filesystem error report for type 5 error -117 [ 100.790566][ T5240] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 100.807898][ T5258] __nla_validate_parse: 5 callbacks suppressed [ 100.807913][ T5258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.531'. [ 100.851242][ T5240] loop3: lost filesystem error report for type 5 error -117 [ 100.852787][ T5240] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.527: data will be lost [ 100.890091][ T5240] EXT4-fs (loop3): 1 truncate cleaned up [ 100.902420][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 100.912667][ T5240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.973774][ T5258] Cannot find add_set index 0 as target [ 101.123871][ T5263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.146029][ T5263] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.535: bad orphan inode 131083 [ 101.168376][ T5263] loop1: lost filesystem error report for type 5 error -117 [ 101.174083][ T5263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.197540][ T28] audit: type=1400 audit(1782437085.035:721): avc: denied { write } for pid=5262 comm="syz.1.535" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.243848][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.347005][ T28] audit: type=1400 audit(1782437085.185:722): avc: denied { ioctl } for pid=5275 comm="syz.1.539" path="socket:[11415]" dev="sockfs" ino=11415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.434243][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.462133][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.512289][ T5278] set_capacity_and_notify: 6 callbacks suppressed [ 101.512306][ T5278] loop1: detected capacity change from 0 to 1024 [ 101.566669][ T5278] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 101.580048][ T5278] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 101.684767][ T5278] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.540: Failed to acquire dquot type 0 [ 101.696472][ T5278] loop1: lost filesystem error report for type 5 error -5 [ 101.697313][ T5272] loop0: detected capacity change from 0 to 512 [ 101.704603][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 101.704636][ C1] EXT4-fs (loop1): initial error at time 1782437085: ext4_acquire_dquot:7041 [ 101.704683][ C1] EXT4-fs (loop1): last error at time 1782437085: ext4_acquire_dquot:7041 [ 101.772752][ T5278] EXT4-fs (loop1): 1 truncate cleaned up [ 101.778914][ T5278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.818064][ T5272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.823552][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.084957][ T5286] loop3: detected capacity change from 0 to 512 [ 102.138286][ T5272] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.538: bad orphan inode 131083 [ 102.152708][ T5286] ext4: Unknown parameter 'smackfstransmute' [ 102.236921][ T5286] ./file0: Can't lookup blockdev [ 102.272980][ T5272] loop0: lost filesystem error report for type 5 error -117 [ 102.282381][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 102.296136][ C1] EXT4-fs (loop0): initial error at time 1782437086: ext4_orphan_get:1425 [ 102.304682][ C1] EXT4-fs (loop0): last error at time 1782437086: ext4_orphan_get:1425 [ 102.326094][ T5272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.342206][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.387496][ T5290] loop1: detected capacity change from 0 to 512 [ 102.409907][ T5290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.469068][ T5290] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.543: bad orphan inode 131083 [ 102.486111][ T5290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.528886][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.633159][ T5300] netlink: 83 bytes leftover after parsing attributes in process `syz.4.546'. [ 102.665547][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.715895][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 102.730704][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 102.756983][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 103.020253][ T5307] loop4: detected capacity change from 0 to 512 [ 103.051674][ T5313] netlink: 120 bytes leftover after parsing attributes in process `syz.1.551'. [ 103.062092][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'. [ 103.090450][ T5307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.102015][ T5313] tipc: Enabling of bearer rejected, media not registered [ 103.124882][ T5307] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.548: bad orphan inode 131083 [ 103.149643][ T5307] fserror_report: 1 callbacks suppressed [ 103.149672][ T5307] loop4: lost filesystem error report for type 5 error -117 [ 103.172985][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.273634][ T5318] loop1: detected capacity change from 0 to 512 [ 103.290477][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.310034][ T5318] ------------[ cut here ]------------ [ 103.315674][ T5318] EA inode 11 i_nlink=2 [ 103.315694][ T5318] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.552/5318 [ 103.327626][ T5320] loop5: detected capacity change from 0 to 512 [ 103.330695][ T5318] Modules linked in: [ 103.340761][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.1.552 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.349405][ T5320] ext4: Unknown parameter 'smackfstransmute' [ 103.350222][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.366215][ T5318] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 103.367723][ T5320] ./file0: Can't lookup blockdev [ 103.372830][ T5318] Code: c6 ce 96 ff 49 8d 7e 40 4c 8d 2d 9b 89 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 d1 06 d9 03 90 90 90 90 90 90 90 [ 103.372853][ T5318] RSP: 0018:ffffc90001f977f8 EFLAGS: 00010246 [ 103.372871][ T5318] RAX: ffff8881047bd030 RBX: ffff88810d5baf38 RCX: ffffffff81c2a876 [ 103.372888][ T5318] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3200 [ 103.372903][ T5318] RBP: 000000000000000b R08: 000188810d5baeeb R09: 0000000000000000 [ 103.427817][ T5318] R10: ffffc90001f97728 R11: 0001c90001f97728 R12: ffff88810d5baee8 [ 103.435825][ T5318] R13: ffffffff871d3200 R14: ffff88810d5baea0 R15: 0000000000000001 [ 103.444167][ T5318] FS: 00007f67a9fef6c0(0000) GS:ffff8882ae8d4000(0000) knlGS:0000000000000000 [ 103.453187][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.459777][ T5318] CR2: 00007f67ab585fc0 CR3: 0000000103a1c000 CR4: 00000000003506f0 [ 103.467790][ T5318] Call Trace: [ 103.471098][ T5318] [ 103.474081][ T5318] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 103.479982][ T5318] ext4_xattr_delete_inode+0x6b5/0x790 [ 103.485837][ T5318] ext4_evict_inode+0xb18/0xdf0 [ 103.490873][ T5318] ? __pfx_ext4_evict_inode+0x10/0x10 [ 103.496327][ T5318] evict+0x2a5/0x510 [ 103.500231][ T5318] iput+0x430/0x5a0 [ 103.504234][ T5318] ext4_process_orphan+0x1a4/0x1c0 [ 103.509386][ T5318] ext4_orphan_cleanup+0x6a6/0xa10 [ 103.514582][ T5318] ? ext4_register_li_request+0x14c/0x440 [ 103.520314][ T5318] ext4_fill_super+0x33ab/0x3760 [ 103.525352][ T5318] ? set_blocksize+0x14c/0x270 [ 103.530115][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 103.535449][ T5318] get_tree_bdev_flags+0x291/0x300 [ 103.540592][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 103.545973][ T5318] get_tree_bdev+0x1f/0x30 [ 103.550388][ T5318] ext4_get_tree+0x1c/0x30 [ 103.554879][ T5318] vfs_get_tree+0x57/0x1d0 [ 103.559366][ T5318] do_new_mount+0x288/0x8d0 [ 103.563901][ T5318] path_mount+0x4ad/0xb90 [ 103.568232][ T5318] __se_sys_mount+0x28c/0x2e0 [ 103.572966][ T5318] __x64_sys_mount+0x67/0x80 [ 103.577594][ T5318] x64_sys_call+0x2d61/0x3020 [ 103.582309][ T5318] do_syscall_64+0x136/0x3c0 [ 103.586967][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.593007][ T5318] RIP: 0033:0x7f67ab59e0ca [ 103.597556][ T5318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.617269][ T5318] RSP: 002b:00007f67a9feee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.625777][ T5318] RAX: ffffffffffffffda RBX: 00007f67a9feeee0 RCX: 00007f67ab59e0ca [ 103.633981][ T5318] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f67a9feeea0 [ 103.642019][ T5318] RBP: 00002000000009c0 R08: 00007f67a9feeee0 R09: 0000000000800718 [ 103.650076][ T5318] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 103.658126][ T5318] R13: 00007f67a9feeea0 R14: 000000000000048d R15: 0000200000000200 [ 103.666173][ T5318] [ 103.669263][ T5318] ---[ end trace 0000000000000000 ]--- [ 103.707993][ T5318] EXT4-fs (loop1): 1 orphan inode deleted [ 103.714212][ T5318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.745649][ T5318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.768832][ T5328] loop4: detected capacity change from 0 to 512 [ 103.789634][ T5328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.812083][ T5328] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.557: bad orphan inode 131083 [ 103.824631][ T5318] bond0: (slave bond_slave_1): Releasing backup interface [ 103.845921][ T5328] loop4: lost filesystem error report for type 5 error -117 [ 103.846535][ T5328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.016545][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.347330][ T5334] loop5: detected capacity change from 0 to 512 [ 104.536724][ T5339] loop4: detected capacity change from 0 to 1024 [ 104.556635][ T5334] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.646786][ T5334] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.558: bad orphan inode 131083 [ 104.746907][ T5334] loop5: lost filesystem error report for type 5 error -117 [ 104.773658][ T5334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.803784][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 104.832667][ T5357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.887357][ T5357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.008898][ T5357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.042428][ T5360] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.050650][ T5357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.116093][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.188783][ T5367] EXT4-fs: Ignoring removed i_version option [ 105.207207][ T5369] ext4: Unknown parameter 'smackfstransmute' [ 105.220846][ T5357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.238672][ T5369] ./file0: Can't lookup blockdev [ 105.252180][ T5357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.272886][ T5367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.292084][ T5367] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.336814][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 105.336839][ T28] audit: type=1400 audit(1782437089.175:733): avc: denied { write } for pid=5366 comm="syz.0.566" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.444339][ T5379] FAT-fs (loop4): Directory bread(block 64) failed [ 105.462693][ T5379] FAT-fs (loop4): Directory bread(block 65) failed [ 105.496852][ T5379] FAT-fs (loop4): Directory bread(block 66) failed [ 105.502728][ T5378] futex_wake_op: syz.1.570 tries to shift op by 35; fix this program [ 105.511603][ T5357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.531029][ T28] audit: type=1326 audit(1782437089.365:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.536626][ T5379] FAT-fs (loop4): Directory bread(block 67) failed [ 105.565426][ T5357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.601819][ T5379] FAT-fs (loop4): Directory bread(block 68) failed [ 105.619950][ T28] audit: type=1326 audit(1782437089.365:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.663707][ T5379] FAT-fs (loop4): Directory bread(block 69) failed [ 105.668921][ T28] audit: type=1326 audit(1782437089.365:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.693888][ T5379] FAT-fs (loop4): Directory bread(block 70) failed [ 105.720616][ T5379] FAT-fs (loop4): Directory bread(block 71) failed [ 105.749149][ T28] audit: type=1326 audit(1782437089.365:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.768589][ T5379] FAT-fs (loop4): Directory bread(block 72) failed [ 105.807794][ T5383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 105.822488][ T28] audit: type=1326 audit(1782437089.405:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.826489][ T5379] FAT-fs (loop4): Directory bread(block 73) failed [ 105.883784][ T68] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.897039][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.903816][ T28] audit: type=1326 audit(1782437089.405:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 105.929158][ T68] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.945238][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.959348][ T68] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.976812][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.979924][ T28] audit: type=1326 audit(1782437089.405:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 106.003834][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.046733][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.112874][ T28] audit: type=1326 audit(1782437089.405:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 106.205202][ T28] audit: type=1326 audit(1782437089.405:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.5.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d178ce59 code=0x7ffc0000 [ 106.234751][ T5399] bio_check_eod: 184 callbacks suppressed [ 106.234775][ T5399] syz.4.569: attempt to access beyond end of device [ 106.234775][ T5399] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 106.264698][ T5401] tmpfs: Bad value for 'mpol' [ 106.392553][ T5399] syz.4.569: attempt to access beyond end of device [ 106.392553][ T5399] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 106.725699][ T5399] syz.4.569: attempt to access beyond end of device [ 106.725699][ T5399] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 106.978250][ T5399] syz.4.569: attempt to access beyond end of device [ 106.978250][ T5399] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 107.094312][ T5399] syz.4.569: attempt to access beyond end of device [ 107.094312][ T5399] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 107.113545][ T5399] syz.4.569: attempt to access beyond end of device [ 107.113545][ T5399] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 107.145979][ T5399] syz.4.569: attempt to access beyond end of device [ 107.145979][ T5399] loop4: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 107.194228][ T5399] syz.4.569: attempt to access beyond end of device [ 107.194228][ T5399] loop4: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 107.259115][ T5399] syz.4.569: attempt to access beyond end of device [ 107.259115][ T5399] loop4: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 107.284189][ T5399] syz.4.569: attempt to access beyond end of device [ 107.284189][ T5399] loop4: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 107.472497][ T5410] set_capacity_and_notify: 4 callbacks suppressed [ 107.472521][ T5410] loop3: detected capacity change from 0 to 512 [ 107.548774][ T5410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.583681][ T5410] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.579: bad orphan inode 131083 [ 107.603057][ T5410] loop3: lost filesystem error report for type 5 error -117 [ 107.631540][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.165687][ T5415] loop5: detected capacity change from 0 to 512 [ 108.217378][ T5415] ext4: Unknown parameter 'smackfstransmute' [ 108.237556][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.270344][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.285074][ T5415] ./file0: Can't lookup blockdev [ 108.396101][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 108.461558][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 108.496365][ T5421] SET target dimension over the limit! [ 109.089815][ T5448] loop4: detected capacity change from 0 to 256 [ 109.125910][ T5448] FAT-fs (loop4): Directory bread(block 64) failed [ 109.132784][ T5448] FAT-fs (loop4): Directory bread(block 65) failed [ 109.139413][ T5448] FAT-fs (loop4): Directory bread(block 66) failed [ 109.146423][ T5448] FAT-fs (loop4): Directory bread(block 67) failed [ 109.153335][ T5448] FAT-fs (loop4): Directory bread(block 68) failed [ 109.160082][ T5448] FAT-fs (loop4): Directory bread(block 69) failed [ 109.177323][ T5432] loop1: detected capacity change from 0 to 1024 [ 109.178872][ T5448] FAT-fs (loop4): Directory bread(block 70) failed [ 109.193010][ T5448] FAT-fs (loop4): Directory bread(block 71) failed [ 109.199700][ T5448] FAT-fs (loop4): Directory bread(block 72) failed [ 109.216188][ T5448] FAT-fs (loop4): Directory bread(block 73) failed [ 109.251952][ T5452] loop5: detected capacity change from 0 to 512 [ 109.276802][ T5452] ext4: Unknown parameter 'smackfstransmute' [ 109.334337][ T5452] ./file0: Can't lookup blockdev [ 109.362449][ T5457] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 109.586280][ T5474] FAULT_INJECTION: forcing a failure. [ 109.586280][ T5474] name fail_futex, interval 1, probability 0, space 0, times 1 [ 109.630396][ T5474] CPU: 1 UID: 0 PID: 5474 Comm: syz.5.599 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 109.630497][ T5474] Tainted: [W]=WARN [ 109.630504][ T5474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.630517][ T5474] Call Trace: [ 109.630522][ T5474] [ 109.630529][ T5474] __dump_stack+0x1d/0x30 [ 109.630550][ T5474] dump_stack_lvl+0x95/0xd0 [ 109.630570][ T5474] dump_stack+0x15/0x1b [ 109.630609][ T5474] should_fail_ex+0x25e/0x270 [ 109.630670][ T5474] should_fail+0xb/0x20 [ 109.630725][ T5474] get_futex_key+0x596/0xb10 [ 109.630797][ T5474] futex_wait_requeue_pi+0x160/0x6e0 [ 109.630822][ T5474] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.630899][ T5474] do_futex+0x146/0x460 [ 109.630920][ T5474] ? perf_pending_task+0x1df/0x210 [ 109.630948][ T5474] __se_sys_futex+0x2f6/0x370 [ 109.631045][ T5474] __x64_sys_futex+0x78/0x90 [ 109.631108][ T5474] x64_sys_call+0x24ab/0x3020 [ 109.631155][ T5474] do_syscall_64+0x136/0x3c0 [ 109.631185][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.631209][ T5474] RIP: 0033:0x7f63d178ce59 [ 109.631227][ T5474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.631250][ T5474] RSP: 002b:00007f63d01df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.631272][ T5474] RAX: ffffffffffffffda RBX: 00007f63d1a05fa0 RCX: 00007f63d178ce59 [ 109.631288][ T5474] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 109.631302][ T5474] RBP: 00007f63d01df090 R08: 0000200000048000 R09: 0000000000000020 [ 109.631316][ T5474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.631328][ T5474] R13: 00007f63d1a06038 R14: 00007f63d1a05fa0 R15: 00007ffc9d0f6648 [ 109.631346][ T5474] [ 110.079321][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 110.197540][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 110.264796][ T5483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 110.572909][ T5490] loop1: detected capacity change from 0 to 512 [ 110.648766][ T5490] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.674022][ T5500] loop0: detected capacity change from 0 to 512 [ 110.721169][ T5500] ext4: Unknown parameter 'smackfstransmute' [ 110.786878][ T5500] ./file0: Can't lookup blockdev [ 110.804418][ T5490] netlink: 'syz.1.606': attribute type 12 has an invalid length. [ 110.851741][ T5490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.606'. [ 111.188562][ T5511] loop0: detected capacity change from 0 to 512 [ 111.235176][ T5511] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.296646][ T5511] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.613: bad orphan inode 131083 [ 111.312953][ T5454] Set syz1 is full, maxelem 65536 reached [ 111.325745][ T5511] loop0: lost filesystem error report for type 5 error -117 [ 111.328247][ T5511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.427869][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 111.427885][ T28] audit: type=1400 audit(1782437095.265:761): avc: denied { write } for pid=5510 comm="syz.0.613" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.621569][ T5531] loop4: detected capacity change from 0 to 512 [ 111.718589][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.768589][ T5531] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.888061][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.987578][ T5541] loop0: detected capacity change from 0 to 256 [ 112.117665][ T5541] FAT-fs (loop0): Directory bread(block 64) failed [ 112.131821][ T5541] FAT-fs (loop0): Directory bread(block 65) failed [ 112.152158][ T5541] FAT-fs (loop0): Directory bread(block 66) failed [ 112.172902][ T5541] FAT-fs (loop0): Directory bread(block 67) failed [ 112.195093][ T5541] FAT-fs (loop0): Directory bread(block 68) failed [ 112.211121][ T5541] FAT-fs (loop0): Directory bread(block 69) failed [ 112.232206][ T5541] FAT-fs (loop0): Directory bread(block 70) failed [ 112.249030][ T5541] FAT-fs (loop0): Directory bread(block 71) failed [ 112.292400][ T5541] FAT-fs (loop0): Directory bread(block 72) failed [ 112.300369][ T5541] FAT-fs (loop0): Directory bread(block 73) failed [ 112.399420][ T5547] bio_check_eod: 320 callbacks suppressed [ 112.399434][ T5547] syz.0.621: attempt to access beyond end of device [ 112.399434][ T5547] loop0: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 112.483211][ T5547] syz.0.621: attempt to access beyond end of device [ 112.483211][ T5547] loop0: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 112.572198][ T5547] syz.0.621: attempt to access beyond end of device [ 112.572198][ T5547] loop0: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 112.673185][ T5547] syz.0.621: attempt to access beyond end of device [ 112.673185][ T5547] loop0: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 112.723503][ T5547] syz.0.621: attempt to access beyond end of device [ 112.723503][ T5547] loop0: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 112.783702][ T5547] syz.0.621: attempt to access beyond end of device [ 112.783702][ T5547] loop0: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 112.842634][ T5547] syz.0.621: attempt to access beyond end of device [ 112.842634][ T5547] loop0: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 112.870701][ T5547] syz.0.621: attempt to access beyond end of device [ 112.870701][ T5547] loop0: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 112.892879][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.908316][ T5547] syz.0.621: attempt to access beyond end of device [ 112.908316][ T5547] loop0: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 112.938212][ T5547] syz.0.621: attempt to access beyond end of device [ 112.938212][ T5547] loop0: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 113.227861][ T5567] set_capacity_and_notify: 1 callbacks suppressed [ 113.227895][ T5567] loop0: detected capacity change from 0 to 512 [ 113.293666][ T5567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.321135][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.630: bad orphan inode 131083 [ 113.349434][ T5567] loop0: lost filesystem error report for type 5 error -117 [ 113.384410][ T5567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.497590][ T28] audit: type=1400 audit(1782437097.335:762): avc: denied { write } for pid=5566 comm="syz.0.630" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.562795][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 113.598271][ T5579] FAULT_INJECTION: forcing a failure. [ 113.598271][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 113.664233][ T5579] CPU: 1 UID: 0 PID: 5579 Comm: syz.4.635 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.664265][ T5579] Tainted: [W]=WARN [ 113.664347][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.664358][ T5579] Call Trace: [ 113.664364][ T5579] [ 113.664371][ T5579] __dump_stack+0x1d/0x30 [ 113.664393][ T5579] dump_stack_lvl+0x95/0xd0 [ 113.664440][ T5579] dump_stack+0x15/0x1b [ 113.664458][ T5579] should_fail_ex+0x25e/0x270 [ 113.664512][ T5579] should_failslab+0x8c/0xb0 [ 113.664531][ T5579] __kmalloc_noprof+0xd4/0x4a0 [ 113.664553][ T5579] ? ethnl_default_notify+0xe2/0x600 [ 113.664631][ T5579] ? ethnl_default_notify+0xe2/0x600 [ 113.664707][ T5579] ethnl_default_notify+0xe2/0x600 [ 113.664733][ T5579] ethnl_notify+0x12a/0x1e0 [ 113.664753][ T5579] ethtool_notify+0x1d/0x30 [ 113.664772][ T5579] ethtool_set_settings+0x1ef/0x250 [ 113.664805][ T5579] dev_ethtool+0xee5/0x20f0 [ 113.664879][ T5579] dev_ioctl+0x2e0/0x960 [ 113.664907][ T5579] sock_do_ioctl+0x1aa/0x230 [ 113.664974][ T5579] sock_ioctl+0x439/0x610 [ 113.665002][ T5579] ? mutex_lock+0x57/0x90 [ 113.665024][ T5579] ? __pfx_sock_ioctl+0x10/0x10 [ 113.665109][ T5579] __se_sys_ioctl+0xce/0x140 [ 113.665129][ T5579] __x64_sys_ioctl+0x43/0x50 [ 113.665160][ T5579] x64_sys_call+0x1563/0x3020 [ 113.665183][ T5579] do_syscall_64+0x136/0x3c0 [ 113.665223][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.665270][ T5579] RIP: 0033:0x7f21ec73ce59 [ 113.665284][ T5579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.665325][ T5579] RSP: 002b:00007f21eb197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.665347][ T5579] RAX: ffffffffffffffda RBX: 00007f21ec9b5fa0 RCX: 00007f21ec73ce59 [ 113.665431][ T5579] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 113.665446][ T5579] RBP: 00007f21eb197090 R08: 0000000000000000 R09: 0000000000000000 [ 113.665460][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.665473][ T5579] R13: 00007f21ec9b6038 R14: 00007f21ec9b5fa0 R15: 00007ffe874a2468 [ 113.665512][ T5579] [ 113.968268][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.997762][ T5583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 114.094939][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 114.105552][ T5592] loop0: detected capacity change from 0 to 256 [ 114.113559][ T5590] 9p: Bad value for 'wfdno' [ 114.141145][ T5592] FAT-fs (loop0): Directory bread(block 64) failed [ 114.156730][ T5593] SET target dimension over the limit! [ 114.173122][ T5592] FAT-fs (loop0): Directory bread(block 65) failed [ 114.183793][ T5590] tmpfs: Unknown parameter 'ml' [ 114.200538][ T5592] FAT-fs (loop0): Directory bread(block 66) failed [ 114.241101][ T5592] FAT-fs (loop0): Directory bread(block 67) failed [ 114.259069][ T5592] FAT-fs (loop0): Directory bread(block 68) failed [ 114.280567][ T5596] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 114.280567][ T5596] M9) failed with errno=-22 [ 114.297405][ T5592] FAT-fs (loop0): Directory bread(block 69) failed [ 114.311186][ T5597] netlink: 'syz.3.641': attribute type 3 has an invalid length. [ 114.341241][ T5592] FAT-fs (loop0): Directory bread(block 70) failed [ 114.349802][ T5597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.641'. [ 114.371959][ T5592] FAT-fs (loop0): Directory bread(block 71) failed [ 114.399197][ T5592] FAT-fs (loop0): Directory bread(block 72) failed [ 114.415142][ T5592] FAT-fs (loop0): Directory bread(block 73) failed [ 114.418511][ T5603] netlink: 388 bytes leftover after parsing attributes in process `syz.4.644'. [ 114.443162][ T5597] loop3: detected capacity change from 0 to 1024 [ 114.445290][ T28] audit: type=1326 audit(1782437098.265:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.518036][ T5597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.532040][ T28] audit: type=1326 audit(1782437098.265:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.557731][ T28] audit: type=1326 audit(1782437098.265:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.583815][ T28] audit: type=1326 audit(1782437098.265:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.610175][ T28] audit: type=1326 audit(1782437098.265:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.635655][ T28] audit: type=1326 audit(1782437098.265:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.662104][ T28] audit: type=1326 audit(1782437098.265:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.687522][ T28] audit: type=1326 audit(1782437098.265:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.3.641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82184ce59 code=0x7ffc0000 [ 114.712924][ T5610] loop4: detected capacity change from 0 to 164 [ 114.736291][ T5610] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.795726][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.950191][ T5621] loop1: detected capacity change from 0 to 128 [ 115.019815][ T5621] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.143698][ T5621] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.159521][ T5627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 115.253043][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 115.266773][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 115.269758][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 115.285389][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 115.329900][ T5631] SET target dimension over the limit! [ 115.339550][ T5636] netlink: 'syz.5.627': attribute type 13 has an invalid length. [ 115.354340][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.373501][ T5636] netlink: 'syz.5.627': attribute type 17 has an invalid length. [ 115.451178][ T5640] loop1: detected capacity change from 0 to 2048 [ 115.536895][ T5640] Alternate GPT is invalid, using primary GPT. [ 115.556289][ T5640] loop1: p2 p3 p7 [ 115.584734][ T5646] loop0: detected capacity change from 0 to 128 [ 115.622898][ T5646] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.702090][ T5646] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.760582][ T5646] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.655: No space for directory leaf checksum. Please run e2fsck -D. [ 115.812879][ T5646] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.655: checksumming directory block 0 [ 116.002904][ T5644] loop3: detected capacity change from 0 to 512 [ 116.077731][ T5644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.094964][ T5644] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.153296][ T30] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 116.167160][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.182287][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.195587][ T5661] loop5: detected capacity change from 0 to 164 [ 116.228865][ T5661] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.259989][ T30] bond1: active interface up! [ 116.346883][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.520110][ T5676] loop3: detected capacity change from 0 to 1024 [ 116.528358][ T5676] ext4: Unknown parameter 'syzkaller0' [ 117.009300][ T5683] Cannot find add_set index 0 as target [ 117.375258][ T5681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.396825][ T5681] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.537204][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.751081][ T5690] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 117.751081][ T5690] [ 117.876457][ T5687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.889432][ T5687] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.673220][ T5706] set_capacity_and_notify: 3 callbacks suppressed [ 118.673252][ T5706] loop1: detected capacity change from 0 to 512 [ 118.715966][ T5575] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 118.839266][ T5706] EXT4-fs (loop1): 1 orphan inode deleted [ 118.881412][ T5706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.902908][ T5706] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.994120][ T2515] __quota_error: 48 callbacks suppressed [ 118.994138][ T2515] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.259701][ T2515] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 120.232965][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.335725][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.370892][ T5720] batman_adv: batadv0: Adding interface: ipvlan2 [ 120.382487][ T5720] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.420386][ T5720] batman_adv: batadv0: Interface activated: ipvlan2 [ 120.499961][ T28] audit: type=1400 audit(1782437104.335:819): avc: denied { connect } for pid=5727 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.503056][ T5729] loop3: detected capacity change from 0 to 1024 [ 120.546142][ T5732] tmpfs: Bad value for 'mpol' [ 120.691695][ T28] audit: type=1400 audit(1782437104.525:820): avc: denied { write } for pid=5747 comm="syz.5.685" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.798949][ T5741] loop0: detected capacity change from 0 to 512 [ 120.827140][ T5741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.846687][ T5741] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.683: bad orphan inode 131083 [ 120.846753][ T5741] loop0: lost filesystem error report for type 5 error -117 [ 120.851594][ T5741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.864298][ T28] audit: type=1400 audit(1782437104.705:821): avc: denied { write } for pid=5740 comm="syz.0.683" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.955654][ T5756] loop5: detected capacity change from 0 to 256 [ 121.015493][ T5744] loop3: detected capacity change from 0 to 1024 [ 121.146881][ T5760] IPVS: Error connecting to the multicast addr [ 121.284749][ T5770] tmpfs: Bad value for 'mpol' [ 121.305898][ T28] audit: type=1400 audit(1782437105.145:822): avc: denied { getopt } for pid=5769 comm="syz.1.692" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.337905][ T5773] vhci_hcd vhci_hcd.0: default hub control req: 1f06 v0303 i0000 l0 [ 121.370500][ T5774] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.585433][ T5782] loop1: detected capacity change from 0 to 512 [ 121.600818][ T5782] ext4: Unknown parameter 'smackfstransmute' [ 121.619699][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.646719][ T5782] ./file0: Can't lookup blockdev [ 121.695896][ T5784] __nla_validate_parse: 3 callbacks suppressed [ 121.695911][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'. [ 121.732053][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 121.766082][ T28] audit: type=1400 audit(1782437105.605:823): avc: denied { create } for pid=5787 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 121.857703][ T28] audit: type=1400 audit(1782437105.675:824): avc: denied { create } for pid=5787 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.902955][ T28] audit: type=1400 audit(1782437105.735:825): avc: denied { append } for pid=5789 comm="syz.3.700" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.919261][ T5796] loop0: detected capacity change from 0 to 512 [ 121.935817][ T5797] tmpfs: Bad value for 'mpol' [ 121.962240][ T5796] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.976130][ T28] audit: type=1400 audit(1782437105.815:826): avc: denied { create } for pid=5800 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.004434][ T5802] loop1: detected capacity change from 0 to 512 [ 122.014252][ T5803] 9p: Bad value for 'wfdno' [ 122.023567][ T5796] EXT4-fs (loop0): 1 truncate cleaned up [ 122.034646][ T5796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.039277][ T5803] tmpfs: Unknown parameter 'ml' [ 122.048662][ T5802] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: comm syz.1.702: inode #1792: comm syz.1.702: iget: illegal inode # [ 122.090559][ T5809] FAULT_INJECTION: forcing a failure. [ 122.090559][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.111977][ T5799] vhci_hcd vhci_hcd.0: default hub control req: 1f06 v0303 i0000 l0 [ 122.130242][ T28] audit: type=1400 audit(1782437105.965:827): avc: denied { write } for pid=5794 comm="syz.0.704" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.194906][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.4.707 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 122.194948][ T5809] Tainted: [W]=WARN [ 122.194954][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.194965][ T5809] Call Trace: [ 122.194971][ T5809] [ 122.194977][ T5809] __dump_stack+0x1d/0x30 [ 122.195042][ T5809] dump_stack_lvl+0x95/0xd0 [ 122.195060][ T5809] dump_stack+0x15/0x1b [ 122.195080][ T5809] should_fail_ex+0x25e/0x270 [ 122.195107][ T5809] should_fail+0xb/0x20 [ 122.195131][ T5809] should_fail_usercopy+0x1a/0x20 [ 122.195199][ T5809] _copy_to_iter+0xd2/0xea0 [ 122.195228][ T5809] ? should_fail_ex+0x30/0x270 [ 122.195254][ T5809] ? should_failslab+0x8c/0xb0 [ 122.195274][ T5809] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 122.195295][ T5809] ? security_inode_alloc+0x37/0x100 [ 122.195380][ T5809] ? __rcu_read_unlock+0x4e/0x70 [ 122.195407][ T5809] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 122.195450][ T5809] __skb_datagram_iter+0xc6/0x680 [ 122.195521][ T5809] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 122.195560][ T5809] skb_copy_datagram_iter+0x3f/0xf0 [ 122.195635][ T5809] tipc_recvmsg+0x4ca/0x9d0 [ 122.195671][ T5809] ? __pfx_tipc_recvmsg+0x10/0x10 [ 122.195699][ T5809] sock_recvmsg+0xf5/0x120 [ 122.195723][ T5809] ____sys_recvmsg+0xf5/0x280 [ 122.195810][ T5809] ___sys_recvmsg+0x11f/0x3a0 [ 122.195847][ T5809] __x64_sys_recvmsg+0xd1/0x160 [ 122.195879][ T5809] x64_sys_call+0x2b1a/0x3020 [ 122.195919][ T5809] do_syscall_64+0x136/0x3c0 [ 122.195998][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.196075][ T5809] RIP: 0033:0x7f21ec73ce59 [ 122.196089][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.196105][ T5809] RSP: 002b:00007f21eb176028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 122.196124][ T5809] RAX: ffffffffffffffda RBX: 00007f21ec9b6090 RCX: 00007f21ec73ce59 [ 122.196138][ T5809] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000005 [ 122.196152][ T5809] RBP: 00007f21eb176090 R08: 0000000000000000 R09: 0000000000000000 [ 122.196166][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.196203][ T5809] R13: 00007f21ec9b6128 R14: 00007f21ec9b6090 R15: 00007ffe874a2468 [ 122.196220][ T5809] [ 122.197718][ T5802] loop1: lost filesystem error report for type 5 error -117 [ 122.428548][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.460547][ T5819] loop5: detected capacity change from 0 to 512 [ 122.472174][ T5821] loop4: detected capacity change from 0 to 512 [ 122.486167][ T5819] ext4: Unknown parameter 'smackfstransmute' [ 122.516578][ T5821] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: comm syz.4.713: inode #1792: comm syz.4.713: iget: illegal inode # [ 122.547749][ T5802] EXT4-fs (loop1): Remounting filesystem read-only [ 122.554571][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 122.554594][ C0] EXT4-fs (loop1): initial error at time 1782437106: ext4_get_journal_inode:5900 [ 122.554627][ C0] EXT4-fs (loop1): last error at time 1782437106: ext4_get_journal_inode:5900 [ 122.569022][ T5821] loop4: lost filesystem error report for type 5 error -117 [ 122.590921][ T5819] ./file0: Can't lookup blockdev [ 122.659661][ T5802] EXT4-fs (loop1): no journal found [ 122.660160][ T5821] EXT4-fs (loop4): Remounting filesystem read-only [ 122.664928][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.664946][ C1] EXT4-fs (loop4): initial error at time 1782437106: ext4_get_journal_inode:5900 [ 122.664970][ C1] EXT4-fs (loop4): last error at time 1782437106: ext4_get_journal_inode:5900 [ 122.680766][ T5802] EXT4-fs (loop1): can't get journal size [ 122.702938][ T5821] EXT4-fs (loop4): no journal found [ 122.710744][ T5821] EXT4-fs (loop4): can't get journal size [ 122.727260][ T5821] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 122.738366][ T5821] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 122.747204][ T5802] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 122.772233][ T5802] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 122.811375][ T5834] tmpfs: Bad value for 'mpol' [ 122.869304][ T5836] 9p: Bad value for 'wfdno' [ 122.869681][ T5838] FAULT_INJECTION: forcing a failure. [ 122.869681][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 122.905822][ T5836] tmpfs: Unknown parameter 'ml' [ 122.938336][ T5844] syzkaller0: entered promiscuous mode [ 122.953494][ T5844] syzkaller0: entered allmulticast mode [ 122.962033][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.3.719 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 122.962068][ T5838] Tainted: [W]=WARN [ 122.962076][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.962101][ T5838] Call Trace: [ 122.962165][ T5838] [ 122.962171][ T5838] __dump_stack+0x1d/0x30 [ 122.962192][ T5838] dump_stack_lvl+0x95/0xd0 [ 122.962210][ T5838] dump_stack+0x15/0x1b [ 122.962229][ T5838] should_fail_ex+0x25e/0x270 [ 122.962297][ T5838] should_failslab+0x8c/0xb0 [ 122.962369][ T5838] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 122.962390][ T5838] ? security_inode_alloc+0x37/0x100 [ 122.962438][ T5838] ? security_inode_alloc+0x37/0x100 [ 122.962464][ T5838] security_inode_alloc+0x37/0x100 [ 122.962488][ T5838] inode_init_always_gfp+0x495/0x4e0 [ 122.962512][ T5838] ? __pfx_proc_alloc_inode+0x10/0x10 [ 122.962601][ T5838] alloc_inode+0x58/0x170 [ 122.962624][ T5838] new_inode+0x1d/0xe0 [ 122.962649][ T5838] proc_pid_make_inode+0x24/0x200 [ 122.962679][ T5838] proc_ns_dir_lookup+0x486/0x560 [ 122.962701][ T5838] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 122.962760][ T5838] path_openat+0xb8c/0x2000 [ 122.962797][ T5838] do_file_open+0x16c/0x290 [ 122.962891][ T5838] ? __pfx_kfree_link+0x10/0x10 [ 122.962971][ T5838] do_sys_openat2+0xa0/0x130 [ 122.963000][ T5838] __x64_sys_openat+0xf2/0x120 [ 122.963065][ T5838] x64_sys_call+0x1e39/0x3020 [ 122.963090][ T5838] do_syscall_64+0x136/0x3c0 [ 122.963123][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.963154][ T5838] RIP: 0033:0x7fd82180d68e [ 122.963178][ T5838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.963197][ T5838] RSP: 002b:00007fd8202a6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.963218][ T5838] RAX: ffffffffffffffda RBX: 00007fd8202a76c0 RCX: 00007fd82180d68e [ 122.963265][ T5838] RDX: 0000000000000000 RSI: 00007fd8218e25aa RDI: ffffffffffffff9c [ 122.963280][ T5838] RBP: 00007fd8202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.963295][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.963308][ T5838] R13: 00007fd821ac6038 R14: 00007fd821ac5fa0 R15: 00007ffc98d84bc8 [ 122.963334][ T5838] [ 123.255716][ T5857] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.459727][ T5862] ext4: Unknown parameter 'smackfstransmute' [ 123.493293][ T5862] ./file0: Can't lookup blockdev [ 123.538294][ T5867] tmpfs: Bad value for 'mpol' [ 123.652083][ T5870] program syz.4.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.709748][ T5875] 9p: Bad value for 'wfdno' [ 123.780975][ T5875] tmpfs: Unknown parameter 'ml' [ 123.837758][ T5882] syzkaller0: entered promiscuous mode [ 123.861214][ T5882] syzkaller0: entered allmulticast mode [ 124.100998][ T5904] set_capacity_and_notify: 2 callbacks suppressed [ 124.101024][ T5904] loop5: detected capacity change from 0 to 512 [ 124.120156][ T5904] ext4: Unknown parameter 'smackfstransmute' [ 124.173511][ T5899] ./file0: Can't lookup blockdev [ 124.200154][ T5880] loop4: detected capacity change from 0 to 1024 [ 124.231263][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 124.231284][ T28] audit: type=1400 audit(1782437108.065:844): avc: denied { listen } for pid=5906 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.292803][ T28] audit: type=1400 audit(1782437108.105:845): avc: denied { accept } for pid=5906 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.339187][ T5908] tipc: Enabled bearer , priority 0 [ 124.388710][ T5908] syzkaller0: entered promiscuous mode [ 124.394284][ T5908] syzkaller0: entered allmulticast mode [ 124.400840][ T5908] tipc: Resetting bearer [ 124.581392][ T28] audit: type=1400 audit(1782437108.105:846): avc: denied { read } for pid=5906 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.665284][ T49] tipc: Resetting bearer [ 124.765088][ T5880] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 124.765088][ T5880] [ 124.914386][ T5902] tipc: Resetting bearer [ 124.937054][ T5902] tipc: Disabling bearer [ 124.991512][ T5901] loop1: detected capacity change from 0 to 512 [ 125.763571][ T5920] loop4: detected capacity change from 0 to 512 [ 126.086367][ T5920] EXT4-fs (loop4): 1 orphan inode deleted [ 126.160103][ T5920] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.538656][ T5901] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 126.626154][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.038815][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 127.053691][ T5925] 9p: Bad value for 'wfdno' [ 127.077594][ T5901] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 127.368990][ T5925] tmpfs: Unknown parameter 'ml' [ 127.460459][ T3297] EXT4-fs unmount: 5 callbacks suppressed [ 127.460555][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.549770][ T5942] loop4: detected capacity change from 0 to 764 [ 127.569211][ T3363] IPVS: starting estimator thread 0... [ 127.641423][ T5947] loop4: detected capacity change from 0 to 164 [ 127.662758][ T5944] IPVS: using max 2880 ests per chain, 144000 per kthread [ 127.690511][ T5947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.735469][ T5951] loop3: detected capacity change from 0 to 512 [ 127.765412][ T5951] ext4: Unknown parameter 'smackfstransmute' [ 127.809935][ T5951] ./file0: Can't lookup blockdev [ 127.872467][ T5949] loop5: detected capacity change from 0 to 1024 [ 127.937227][ T5949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.950547][ T5949] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.103977][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 128.126689][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 128.208828][ T28] audit: type=1400 audit(1782437112.045:847): avc: denied { ioctl } for pid=5959 comm="syz.3.758" path="socket:[13773]" dev="sockfs" ino=13773 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.869971][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.891028][ T5975] loop5: detected capacity change from 0 to 256 [ 128.939391][ T5975] FAT-fs (loop5): Directory bread(block 64) failed [ 128.965882][ T5975] FAT-fs (loop5): Directory bread(block 65) failed [ 128.982402][ T5975] FAT-fs (loop5): Directory bread(block 66) failed [ 128.989136][ T5975] FAT-fs (loop5): Directory bread(block 67) failed [ 129.012659][ T5975] FAT-fs (loop5): Directory bread(block 68) failed [ 129.019204][ T5975] FAT-fs (loop5): Directory bread(block 69) failed [ 129.039113][ T5975] FAT-fs (loop5): Directory bread(block 70) failed [ 129.044893][ T5973] loop3: detected capacity change from 0 to 512 [ 129.046027][ T5975] FAT-fs (loop5): Directory bread(block 71) failed [ 129.070316][ T5975] FAT-fs (loop5): Directory bread(block 72) failed [ 129.085141][ T5973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.099617][ T5975] FAT-fs (loop5): Directory bread(block 73) failed [ 129.127382][ T5973] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.761: bad orphan inode 131083 [ 129.156992][ T5973] loop3: lost filesystem error report for type 5 error -117 [ 129.172603][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.215552][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.273766][ T5985] bio_check_eod: 218 callbacks suppressed [ 129.273831][ T5985] syz.5.762: attempt to access beyond end of device [ 129.273831][ T5985] loop5: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 129.299276][ T5987] syzkaller0: entered promiscuous mode [ 129.309665][ T5987] syzkaller0: entered allmulticast mode [ 129.367141][ T5985] syz.5.762: attempt to access beyond end of device [ 129.367141][ T5985] loop5: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 129.454469][ T5985] syz.5.762: attempt to access beyond end of device [ 129.454469][ T5985] loop5: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 129.508961][ T5985] syz.5.762: attempt to access beyond end of device [ 129.508961][ T5985] loop5: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 129.556733][ T5992] tmpfs: Bad value for 'mpol' [ 129.577579][ T5985] syz.5.762: attempt to access beyond end of device [ 129.577579][ T5985] loop5: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 129.653234][ T5985] syz.5.762: attempt to access beyond end of device [ 129.653234][ T5985] loop5: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 129.793156][ T5985] syz.5.762: attempt to access beyond end of device [ 129.793156][ T5985] loop5: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 129.816906][ T5985] syz.5.762: attempt to access beyond end of device [ 129.816906][ T5985] loop5: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 129.992868][ T5985] syz.5.762: attempt to access beyond end of device [ 129.992868][ T5985] loop5: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 130.252145][ T5985] syz.5.762: attempt to access beyond end of device [ 130.252145][ T5985] loop5: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 130.460058][ T5999] loop4: detected capacity change from 0 to 128 [ 130.514059][ T5999] vfat: Unknown parameter '' [ 130.648561][ T6002] loop3: detected capacity change from 0 to 164 [ 130.663222][ T6002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 130.760425][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 130.780572][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 130.811057][ T6005] Cannot find add_set index 0 as target [ 130.860042][ T28] audit: type=1326 audit(1782437114.695:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 130.933131][ T28] audit: type=1326 audit(1782437114.695:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.001535][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 131.008536][ T28] audit: type=1326 audit(1782437114.725:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.036231][ T28] audit: type=1326 audit(1782437114.725:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.061879][ T28] audit: type=1326 audit(1782437114.725:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.088004][ T28] audit: type=1326 audit(1782437114.725:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.137248][ T28] audit: type=1326 audit(1782437114.725:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.167729][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 131.182743][ T28] audit: type=1326 audit(1782437114.725:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.4.772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ec73ce59 code=0x7ffc0000 [ 131.322936][ T6019] syzkaller0: entered promiscuous mode [ 131.339302][ T6019] syzkaller0: entered allmulticast mode [ 131.772105][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 131.799066][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 131.927583][ T6052] syzkaller0: entered promiscuous mode [ 131.964642][ T6052] syzkaller0: entered allmulticast mode [ 132.043071][ T6057] loop5: detected capacity change from 0 to 128 [ 132.672740][ T6065] loop0: detected capacity change from 0 to 164 [ 132.742947][ T6065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.505472][ T6072] loop0: detected capacity change from 0 to 512 [ 133.554491][ T6072] EXT4-fs (loop0): #clusters per group too big: 131071 [ 133.966146][ T6068] loop5: detected capacity change from 0 to 1024 [ 134.520502][ T28] audit: type=1400 audit(1782437118.355:856): avc: denied { listen } for pid=6090 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.551431][ T28] audit: type=1400 audit(1782437118.385:857): avc: denied { append } for pid=6092 comm="syz.5.803" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.598152][ T6096] loop1: detected capacity change from 0 to 512 [ 134.650736][ T6096] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #14: comm syz.1.804: invalid orphan symlink nlink 1 [ 134.679530][ T6096] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 134.679698][ T6096] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.804: couldn't read orphan inode 14 (err -117) [ 134.688957][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 134.688980][ C0] EXT4-fs (loop1): initial error at time 1782437118: ext4_orphan_get:1399: inode 14 [ 134.689014][ C0] EXT4-fs (loop1): last error at time 1782437118: ext4_orphan_get:1399: inode 14 [ 134.758799][ T6096] loop1: lost filesystem error report for type 5 error -117 [ 134.759375][ T6096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.813206][ T6096] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.837628][ T6103] loop0: detected capacity change from 0 to 164 [ 134.846728][ T6103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.900358][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.545515][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 135.972727][ T6140] FAULT_INJECTION: forcing a failure. [ 135.972727][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 136.012413][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.4.817 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 136.012495][ T6140] Tainted: [W]=WARN [ 136.012506][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.012571][ T6140] Call Trace: [ 136.012577][ T6140] [ 136.012584][ T6140] __dump_stack+0x1d/0x30 [ 136.012609][ T6140] dump_stack_lvl+0x95/0xd0 [ 136.012690][ T6140] dump_stack+0x15/0x1b [ 136.012758][ T6140] should_fail_ex+0x25e/0x270 [ 136.012855][ T6140] should_failslab+0x8c/0xb0 [ 136.012880][ T6140] __kmalloc_node_noprof+0xda/0x4c0 [ 136.012952][ T6140] ? __vmalloc_node_range_noprof+0x403/0x11e0 [ 136.013131][ T6140] ? __vmalloc_node_range_noprof+0x403/0x11e0 [ 136.013158][ T6140] __vmalloc_node_range_noprof+0x403/0x11e0 [ 136.013185][ T6140] ? tick_program_event+0x79/0xc0 [ 136.013217][ T6140] ? __hrtimer_rearm_deferred+0x571/0x650 [ 136.013244][ T6140] ? ktime_get+0x212/0x240 [ 136.013264][ T6140] ? avc_has_perm_noaudit+0xa3/0x120 [ 136.013289][ T6140] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 136.013325][ T6140] __vmalloc_noprof+0xa4/0xf0 [ 136.013398][ T6140] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 136.013427][ T6140] bpf_prog_alloc_no_stats+0x47/0x390 [ 136.013507][ T6140] ? bpf_prog_alloc+0x2a/0x150 [ 136.013533][ T6140] bpf_prog_alloc+0x3c/0x150 [ 136.013562][ T6140] bpf_prog_load+0x54b/0x1100 [ 136.013680][ T6140] __sys_bpf+0xbae/0xc30 [ 136.013719][ T6140] __x64_sys_bpf+0x69/0x80 [ 136.013760][ T6140] x64_sys_call+0x10cb/0x3020 [ 136.013783][ T6140] do_syscall_64+0x136/0x3c0 [ 136.013815][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.013886][ T6140] RIP: 0033:0x7f21ec73ce59 [ 136.013900][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.013919][ T6140] RSP: 002b:00007f21eb197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.013977][ T6140] RAX: ffffffffffffffda RBX: 00007f21ec9b5fa0 RCX: 00007f21ec73ce59 [ 136.013990][ T6140] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 136.014077][ T6140] RBP: 00007f21eb197090 R08: 0000000000000000 R09: 0000000000000000 [ 136.014090][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.014104][ T6140] R13: 00007f21ec9b6038 R14: 00007f21ec9b5fa0 R15: 00007ffe874a2468 [ 136.014123][ T6140] [ 136.015600][ T6140] syz.4.817: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 136.055938][ T6142] loop1: detected capacity change from 0 to 128 [ 136.082418][ T6140] ,cpuset= [ 136.275492][ T6142] vfat: Unknown parameter '' [ 136.365340][ T6140] /,mems_allowed=0 [ 136.388500][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.4.817 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 136.388532][ T6140] Tainted: [W]=WARN [ 136.388539][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.388569][ T6140] Call Trace: [ 136.388575][ T6140] [ 136.388582][ T6140] __dump_stack+0x1d/0x30 [ 136.388606][ T6140] dump_stack_lvl+0x95/0xd0 [ 136.388627][ T6140] dump_stack+0x15/0x1b [ 136.388645][ T6140] warn_alloc+0x145/0x1c0 [ 136.388676][ T6140] ? should_failslab+0x8c/0xb0 [ 136.388744][ T6140] ? __kmalloc_node_noprof+0xda/0x4c0 [ 136.388897][ T6140] __vmalloc_node_range_noprof+0x7e7/0x11e0 [ 136.388920][ T6140] ? tick_program_event+0x79/0xc0 [ 136.388948][ T6140] ? __hrtimer_rearm_deferred+0x571/0x650 [ 136.389027][ T6140] ? ktime_get+0x212/0x240 [ 136.389100][ T6140] ? avc_has_perm_noaudit+0xa3/0x120 [ 136.389227][ T6140] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 136.389325][ T6140] __vmalloc_noprof+0xa4/0xf0 [ 136.389346][ T6140] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 136.389374][ T6140] bpf_prog_alloc_no_stats+0x47/0x390 [ 136.389466][ T6140] ? bpf_prog_alloc+0x2a/0x150 [ 136.389491][ T6140] bpf_prog_alloc+0x3c/0x150 [ 136.389514][ T6140] bpf_prog_load+0x54b/0x1100 [ 136.389567][ T6140] __sys_bpf+0xbae/0xc30 [ 136.389605][ T6140] __x64_sys_bpf+0x69/0x80 [ 136.389628][ T6140] x64_sys_call+0x10cb/0x3020 [ 136.389692][ T6140] do_syscall_64+0x136/0x3c0 [ 136.389720][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.389743][ T6140] RIP: 0033:0x7f21ec73ce59 [ 136.389776][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.389795][ T6140] RSP: 002b:00007f21eb197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.389813][ T6140] RAX: ffffffffffffffda RBX: 00007f21ec9b5fa0 RCX: 00007f21ec73ce59 [ 136.389866][ T6140] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 136.389880][ T6140] RBP: 00007f21eb197090 R08: 0000000000000000 R09: 0000000000000000 [ 136.389892][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.389906][ T6140] R13: 00007f21ec9b6038 R14: 00007f21ec9b5fa0 R15: 00007ffe874a2468 [ 136.389938][ T6140] [ 136.615059][ T6140] Mem-Info: [ 136.640893][ T6140] active_anon:53834 inactive_anon:1 isolated_anon:0 [ 136.640893][ T6140] active_file:17 inactive_file:29422 isolated_file:0 [ 136.640893][ T6140] unevictable:0 dirty:300 writeback:0 [ 136.640893][ T6140] slab_reclaimable:3518 slab_unreclaimable:57655 [ 136.640893][ T6140] mapped:36602 shmem:44958 pagetables:1275 [ 136.640893][ T6140] sec_pagetables:0 bounce:0 [ 136.640893][ T6140] kernel_misc_reclaimable:0 [ 136.640893][ T6140] free:1764288 free_pcp:15009 free_cma:0 [ 136.737632][ T6140] Node 0 active_anon:220320kB inactive_anon:4kB active_file:68kB inactive_file:117688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148208kB dirty:1288kB writeback:0kB shmem:183928kB kernel_stack:3728kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.803883][ T6140] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.880154][ T6140] lowmem_reserve[]: 0 2878 7857 7857 [ 136.893991][ T6140] Node 0 DMA32 free:2944112kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947740kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 136.963834][ T6140] lowmem_reserve[]: 0 0 4978 4978 [ 136.985311][ T6140] Node 0 Normal free:4097332kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:230644kB inactive_anon:4kB active_file:68kB inactive_file:117688kB unevictable:0kB writepending:1288kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:43068kB local_pcp:39108kB free_cma:0kB [ 137.037795][ T6140] lowmem_reserve[]: 0 0 0 0 [ 137.054678][ T6140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.073739][ T6140] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944112kB [ 137.075245][ T6156] netlink: 'syz.0.822': attribute type 8 has an invalid length. [ 137.091561][ T6140] Node 0 Normal: 588*4kB (UME) 1370*8kB (UM) 458*16kB (M) 194*32kB (UM) 322*64kB (UM) 141*128kB (UME) 43*256kB (UME) 18*512kB (UM) 11*1024kB (UME) 6*2048kB (UM) 973*4096kB (UM) = 4094688kB [ 137.120208][ T6140] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 137.129828][ T6140] 78636 total pagecache pages [ 137.155372][ T6140] 1 pages in swap cache [ 137.165713][ T6140] Free swap = 124992kB [ 137.174932][ T6140] Total swap = 124996kB [ 137.190755][ T6140] 2097051 pages RAM [ 137.195728][ T6140] 0 pages HighMem/MovableOnly [ 137.207329][ T6140] 81717 pages reserved [ 137.452192][ T6147] loop1: detected capacity change from 0 to 2368 [ 137.524605][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.830'. [ 137.648752][ T6177] tipc: Started in network mode [ 137.654590][ T6177] tipc: Node identity 8ed4d0124796, cluster identity 4711 [ 137.662682][ T6177] tipc: Enabled bearer , priority 0 [ 137.809188][ T6177] syzkaller0: entered promiscuous mode [ 137.815227][ T6177] syzkaller0: entered allmulticast mode [ 137.826353][ T6177] tipc: Resetting bearer [ 137.939486][ T2515] tipc: Resetting bearer [ 137.969280][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 138.088491][ T6179] SET target dimension over the limit! [ 138.311678][ T6167] tipc: Resetting bearer [ 138.332666][ T6167] tipc: Disabling bearer [ 138.484323][ T6190] FAULT_INJECTION: forcing a failure. [ 138.484323][ T6190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.500852][ T6187] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 138.538726][ T6187] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 138.556129][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.1.835 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 138.556159][ T6190] Tainted: [W]=WARN [ 138.556165][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.556176][ T6190] Call Trace: [ 138.556183][ T6190] [ 138.556190][ T6190] __dump_stack+0x1d/0x30 [ 138.556229][ T6190] dump_stack_lvl+0x95/0xd0 [ 138.556247][ T6190] dump_stack+0x15/0x1b [ 138.556267][ T6190] should_fail_ex+0x25e/0x270 [ 138.556295][ T6190] should_fail+0xb/0x20 [ 138.556315][ T6190] should_fail_usercopy+0x1a/0x20 [ 138.556479][ T6190] _copy_from_iter+0xcc/0xe70 [ 138.556510][ T6190] ? __alloc_skb+0x511/0x6f0 [ 138.556598][ T6190] ? __alloc_skb+0x205/0x6f0 [ 138.556623][ T6190] netlink_sendmsg+0x4a4/0x6f0 [ 138.556716][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.556747][ T6190] ____sys_sendmsg+0x532/0x580 [ 138.556789][ T6190] ___sys_sendmsg+0x195/0x1e0 [ 138.556904][ T6190] __x64_sys_sendmsg+0xd4/0x160 [ 138.556931][ T6190] x64_sys_call+0x194c/0x3020 [ 138.557015][ T6190] do_syscall_64+0x136/0x3c0 [ 138.557048][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.557145][ T6190] RIP: 0033:0x7f67ab59ce59 [ 138.557204][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.557224][ T6190] RSP: 002b:00007f67a9fef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.557303][ T6190] RAX: ffffffffffffffda RBX: 00007f67ab815fa0 RCX: 00007f67ab59ce59 [ 138.557319][ T6190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.557334][ T6190] RBP: 00007f67a9fef090 R08: 0000000000000000 R09: 0000000000000000 [ 138.557349][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.557362][ T6190] R13: 00007f67ab816038 R14: 00007f67ab815fa0 R15: 00007fff712e56e8 [ 138.557435][ T6190] [ 138.794614][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 139.461751][ T6214] loop5: detected capacity change from 0 to 1024 [ 139.741865][ T6214] EXT4-fs: Ignoring removed nobh option [ 139.812196][ T6214] EXT4-fs: Ignoring removed bh option [ 139.824230][ T6214] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 139.836270][ T28] audit: type=1400 audit(1782437123.675:858): avc: denied { read } for pid=6224 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.968934][ T6214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.992090][ T28] audit: type=1400 audit(1782437123.825:859): avc: denied { write } for pid=6213 comm="syz.5.843" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.043116][ T28] audit: type=1400 audit(1782437123.885:860): avc: denied { ioctl } for pid=6213 comm="syz.5.843" path="/108/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.081175][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 140.219939][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.454538][ T6260] Cannot find del_set index 0 as target [ 141.009375][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.859'. [ 141.071294][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.079977][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.720163][ T28] audit: type=1400 audit(1782437132.560:861): avc: denied { write } for pid=6287 comm="syz.5.868" path="socket:[14916]" dev="sockfs" ino=14916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.748559][ T6291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.789968][ T6294] loop3: detected capacity change from 0 to 512 [ 141.824641][ T6294] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.850759][ T6294] EXT4-fs: Invalid want_extra_isize 2048 [ 141.899796][ T6298] loop3: detected capacity change from 0 to 128 [ 142.171933][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 142.181842][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 142.231337][ T6317] netlink: 84 bytes leftover after parsing attributes in process `syz.5.881'. [ 142.458832][ T6328] loop3: detected capacity change from 0 to 4096 [ 142.491886][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.591821][ T6329] loop5: detected capacity change from 0 to 512 [ 142.599359][ T6329] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.652757][ T6329] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.884: bad orphan inode 131083 [ 142.663176][ T6329] loop5: lost filesystem error report for type 5 error -117 [ 142.664428][ T6329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.743156][ T28] audit: type=1400 audit(1782437133.530:862): avc: denied { write } for pid=6324 comm="syz.5.884" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.799643][ T6334] loop0: detected capacity change from 0 to 256 [ 142.888233][ T6334] FAT-fs (loop0): codepage cp737 not found [ 143.060505][ T6337] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 143.380728][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.426623][ T6352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 143.812342][ T6360] capability: warning: `syz.3.898' uses deprecated v2 capabilities in a way that may be insecure [ 143.827588][ T6360] GUP no longer grows the stack in syz.3.898 (6360): 200000004000-20000000a000 (200000002000) [ 143.841261][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.3.898 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 143.841297][ T6360] Tainted: [W]=WARN [ 143.841303][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.841315][ T6360] Call Trace: [ 143.841321][ T6360] [ 143.841328][ T6360] __dump_stack+0x1d/0x30 [ 143.841355][ T6360] dump_stack_lvl+0x95/0xd0 [ 143.841379][ T6360] dump_stack+0x15/0x1b [ 143.841400][ T6360] __get_user_pages+0x1b27/0x1f10 [ 143.841434][ T6360] ? __rcu_read_unlock+0x4e/0x70 [ 143.841557][ T6360] get_user_pages_remote+0x1d5/0x6b0 [ 143.841592][ T6360] __access_remote_vm+0x156/0x4d0 [ 143.841707][ T6360] access_remote_vm+0x32/0x40 [ 143.841740][ T6360] proc_pid_cmdline_read+0x334/0x710 [ 143.841854][ T6360] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 143.841890][ T6360] vfs_readv+0x417/0x6d0 [ 143.841967][ T6360] __x64_sys_preadv+0xfd/0x1c0 [ 143.842046][ T6360] x64_sys_call+0x2915/0x3020 [ 143.842067][ T6360] do_syscall_64+0x136/0x3c0 [ 143.842096][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.842121][ T6360] RIP: 0033:0x7fd82184ce59 [ 143.842138][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.842166][ T6360] RSP: 002b:00007fd8202a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 143.842187][ T6360] RAX: ffffffffffffffda RBX: 00007fd821ac5fa0 RCX: 00007fd82184ce59 [ 143.842200][ T6360] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 143.842212][ T6360] RBP: 00007fd8218e2e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 143.842227][ T6360] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 143.842244][ T6360] R13: 00007fd821ac6038 R14: 00007fd821ac5fa0 R15: 00007ffc98d84bc8 [ 143.842296][ T6360] [ 144.027632][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.069576][ T6362] loop5: detected capacity change from 0 to 512 [ 144.131441][ T6362] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 144.174570][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 144.183698][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.184036][ T6362] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 144.225018][ T28] audit: type=1400 audit(1782437135.070:863): avc: denied { map } for pid=6379 comm="syz.3.907" path="socket:[15125]" dev="sockfs" ino=15125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 144.453016][ T6386] fido_id[6386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.694459][ T6394] netlink: 236 bytes leftover after parsing attributes in process `syz.1.910'. [ 144.703571][ T6394] netlink: 236 bytes leftover after parsing attributes in process `syz.1.910'. [ 145.308245][ T6404] netlink: 56 bytes leftover after parsing attributes in process `syz.0.915'. [ 145.433781][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.441018][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.612749][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.718123][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.784305][ T5709] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.800030][ T5709] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.811836][ T5709] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.821275][ T5709] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.830979][ T5709] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.840232][ T5709] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.849564][ T5709] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.868849][ T5709] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.088212][ T6420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 146.454124][ T6431] loop5: detected capacity change from 0 to 512 [ 146.462955][ T6431] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 146.577300][ T6431] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 147.422258][ T28] audit: type=1400 audit(1782437138.170:864): avc: denied { getopt } for pid=6444 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.897417][ T28] audit: type=1400 audit(1782437138.740:865): avc: denied { connect } for pid=6473 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.913015][ T6476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 147.928709][ T6476] batman_adv: batadv0: Adding interface: gretap1 [ 147.935313][ T6476] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.005982][ T6476] batman_adv: batadv0: Interface activated: gretap1 [ 148.022159][ T6480] bond0: entered promiscuous mode [ 148.031537][ T6480] bond_slave_0: entered promiscuous mode [ 148.037301][ T6480] bond_slave_1: entered promiscuous mode [ 148.214124][ T6495] loop0: detected capacity change from 0 to 512 [ 148.221010][ T6495] EXT4-fs: Ignoring removed orlov option [ 148.227526][ T6495] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 149.131646][ T6510] loop4: detected capacity change from 0 to 512 [ 149.155070][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 149.401071][ T6538] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 149.410375][ T2515] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.486333][ T6543] loop1: detected capacity change from 0 to 1024 [ 149.493410][ T6543] EXT4-fs: Ignoring removed bh option [ 149.498785][ T6543] EXT4-fs: Ignoring removed oldalloc option [ 149.504890][ T6543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.538960][ T28] audit: type=1400 audit(1782437140.360:866): avc: denied { create } for pid=6537 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 149.575427][ T6543] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 149.587103][ T6543] System zones: 0-1, 3-36 [ 149.601740][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.662315][ T2515] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.829639][ T6538] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 149.882291][ T28] audit: type=1400 audit(1782437140.360:867): avc: denied { write } for pid=6537 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 149.924432][ T6538] bond2 (unregistering): Released all slaves [ 149.994856][ T2515] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.020613][ T6558] loop3: detected capacity change from 0 to 512 [ 150.028968][ T6558] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.038065][ T6558] EXT4-fs (loop3): blocks per group (42) and clusters per group (32768) inconsistent [ 150.219162][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.237559][ T2515] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.369219][ T28] audit: type=1400 audit(1782437141.210:868): avc: denied { name_connect } for pid=6563 comm="syz.5.971" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 150.655680][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.676201][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.801982][ T6581] loop3: detected capacity change from 0 to 512 [ 150.839310][ T6581] EXT4-fs (loop3): 1 orphan inode deleted [ 150.853367][ T5709] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.863218][ T5709] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 150.865696][ T6581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.874923][ T5709] loop3: lost filesystem error report for type 5 error -117 [ 150.914014][ T6581] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.022405][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.041304][ T3302] ================================================================== [ 151.049392][ T3302] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 151.057137][ T3302] [ 151.059636][ T3302] read-write to 0xffff888237c26528 of 1 bytes by task 6554 on cpu 0: [ 151.067694][ T3302] folio_add_lru+0xa4/0x250 [ 151.072185][ T3302] folio_add_lru_vma+0x49/0x70 [ 151.076943][ T3302] do_wp_page+0x13a5/0x2030 [ 151.081455][ T3302] handle_mm_fault+0x8bc/0x2da0 [ 151.086303][ T3302] do_user_addr_fault+0x402/0x1060 [ 151.091408][ T3302] exc_page_fault+0x62/0xa0 [ 151.096084][ T3302] asm_exc_page_fault+0x26/0x30 [ 151.100936][ T3302] __put_user_nocheck_4+0x3/0x20 [ 151.105867][ T3302] ____sys_recvmsg+0x1a1/0x280 [ 151.110635][ T3302] ___sys_recvmsg+0x11f/0x3a0 [ 151.115305][ T3302] do_recvmmsg+0x1e5/0x560 [ 151.119717][ T3302] __x64_sys_recvmmsg+0xe5/0x170 [ 151.125088][ T3302] x64_sys_call+0x80f/0x3020 [ 151.129678][ T3302] do_syscall_64+0x136/0x3c0 [ 151.134265][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.140152][ T3302] [ 151.142469][ T3302] read to 0xffff888237c26528 of 1 bytes by task 3302 on cpu 1: [ 151.149998][ T3302] __lru_add_drain_all+0x17e/0x450 [ 151.155104][ T3302] lru_add_drain_all+0x10/0x20 [ 151.159862][ T3302] invalidate_bdev+0x47/0x70 [ 151.164444][ T3302] ext4_put_super+0x614/0x7c0 [ 151.169130][ T3302] generic_shutdown_super+0xee/0x220 [ 151.174414][ T3302] kill_block_super+0x2a/0x70 [ 151.179091][ T3302] ext4_kill_sb+0x42/0x80 [ 151.183416][ T3302] deactivate_locked_super+0x75/0x1c0 [ 151.188784][ T3302] deactivate_super+0x97/0xa0 [ 151.193467][ T3302] cleanup_mnt+0x2c3/0x340 [ 151.197888][ T3302] __cleanup_mnt+0x19/0x20 [ 151.202307][ T3302] task_work_run+0x130/0x1a0 [ 151.206888][ T3302] exit_to_user_mode_loop+0x1e4/0x8c0 [ 151.212262][ T3302] do_syscall_64+0x23c/0x3c0 [ 151.216862][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.222756][ T3302] [ 151.225067][ T3302] value changed: 0x03 -> 0x04 [ 151.229730][ T3302] [ 151.232041][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 151.238178][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 151.249195][ T3302] Tainted: [W]=WARN [ 151.252985][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.263029][ T3302] ================================================================== [ 151.296614][ T6587] netlink: 148 bytes leftover after parsing attributes in process `syz.1.979'.