last executing test programs: 3m5.139284181s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0xce23, 0x4, @empty, 0xc}, 0x1c) listen(r0, 0x50) 3m5.019574083s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x2200008, &(0x7f0000000cc0), 0x3, 0x5ad, &(0x7f0000000d00)="$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") r0 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x5, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001480)={0x1, &(0x7f00000014c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f00000008c0)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 3m4.871176358s ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) 3m4.811687754s ago: executing program 0 (id=15): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x6000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 3m4.742355691s ago: executing program 0 (id=17): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000001380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000013c0), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000001400)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 3m4.084313538s ago: executing program 0 (id=20): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x27, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4810, 0xd, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) 3m4.029121624s ago: executing program 32 (id=20): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x27, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4810, 0xd, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) 1m28.997944858s ago: executing program 1 (id=1207): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000300)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000380)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1m28.831106805s ago: executing program 1 (id=1212): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r0, &(0x7f0000000540)="b8", 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_create_resource$binfmt(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x3, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) 1m27.491190792s ago: executing program 1 (id=1229): openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/features/transaction_report\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x12, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) 1m27.283213063s ago: executing program 1 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000002c0)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x84000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m27.257214836s ago: executing program 1 (id=1233): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffff7fffffff, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0xb2, 0x0, 0xffffffffffffffdf, 0xfffffffffffffe79, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 1m27.21748169s ago: executing program 1 (id=1235): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f00000007c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000800), 0x800001d, 0x0) 1m27.21735144s ago: executing program 33 (id=1235): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f00000007c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000800), 0x800001d, 0x0) 2.287172097s ago: executing program 6 (id=2457): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x15800, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '-{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/v:{\x85&['}}, {@flag='mand'}]}, 0x1, 0x50f, &(0x7f0000000280)="$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") socket$inet6(0xa, 0x5, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x5, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000ac0)='cpu<-0\t\t\t') 2.030964294s ago: executing program 6 (id=2458): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x3, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x2000000) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x48010) set_mempolicy(0x6005, 0x0, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000010) 1.96323055s ago: executing program 6 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000280)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000800)={r2}, &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861335f28f1d6107189cd0a22ca59f68182ebc758ba23df04cf98650af72401790cf3804f17975353c0f78b4bb14371b6275c85ab9e5c491b57bf6a08170f38cbad3f4366d3ed61e2705e41b6c094c5755b6ee0822a1e37a861241727891ee4b947951253797c32271d4f59c766"], 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) unshare(0x40000000) 1.415085206s ago: executing program 2 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 1.197425968s ago: executing program 2 (id=2471): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.095129509s ago: executing program 2 (id=2472): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000140), &(0x7f00000001c0)=@tcp=r2}, 0x20) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.08302388s ago: executing program 3 (id=2473): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x3, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x2000000) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x48010) set_mempolicy(0x6005, 0x0, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000010) 1.015031786s ago: executing program 3 (id=2474): syz_create_resource$binfmt(0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) io_uring_enter(r3, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) 991.419789ms ago: executing program 3 (id=2475): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x7, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r1, @ANYBLOB="00000000000002002000128008000100736974001400028008"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 956.894553ms ago: executing program 3 (id=2476): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10000, &(0x7f0000002040)={0x77359400}) socket$inet(0x2, 0x3, 0x401) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) 953.415353ms ago: executing program 6 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) write(r0, &(0x7f0000000580)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 935.169355ms ago: executing program 2 (id=2478): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000540), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000580), 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000700)=""/263, 0x107, 0x0, 0x0, 0x0) 830.639635ms ago: executing program 5 (id=2480): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000300)=""/249, 0x46, 0xf9}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80), 0x200002, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0), 0x0, 0x40088d5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000d00)) 830.176405ms ago: executing program 3 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa2f08004500002040000000032f"], 0x32) 824.518516ms ago: executing program 2 (id=2482): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000008c0), 0x0) setpriority(0x2, 0x0, 0x5) unshare(0xc040480) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) open_by_handle_at(r1, &(0x7f0000000700)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x101}}, 0x418080) 675.185751ms ago: executing program 4 (id=2483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 599.419999ms ago: executing program 5 (id=2484): prctl$PR_SET_SECUREBITS(0x1c, 0x7) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) setregid(0x0, r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) 587.19321ms ago: executing program 4 (id=2485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 552.888184ms ago: executing program 5 (id=2486): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 552.699904ms ago: executing program 4 (id=2487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd0c42}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 543.808705ms ago: executing program 2 (id=2488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000280)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000800)={r2}, &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861335f28f1d6107189cd0a22ca59f68182ebc758ba23df04cf98650af72401790cf3804f17975353c0f78b4bb14371b6275c85ab9e5c491b57bf6a08170f38cbad3f4366d3ed61e2705e41b6c094c5755b6ee0822a1e37a861241727891ee4b947951253797c32271d4f59c766"], 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) unshare(0x40000000) 451.173004ms ago: executing program 3 (id=2489): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) open(&(0x7f0000000040)='./bus\x00', 0x10842, 0xc0) write(r1, &(0x7f0000000200)="c78885e449c2ccd4f3c941", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 432.763236ms ago: executing program 5 (id=2490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000a9"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 387.032181ms ago: executing program 6 (id=2491): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 372.886332ms ago: executing program 5 (id=2492): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x2200002, &(0x7f0000000400)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@quota}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000480)="$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") rmdir(&(0x7f0000000ac0)='./bus\x00') socketpair$unix(0x1, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 322.327047ms ago: executing program 4 (id=2493): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0xfffffffe) 223.581087ms ago: executing program 5 (id=2494): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00') 166.791033ms ago: executing program 4 (id=2495): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x3, 0x2}, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 116.008158ms ago: executing program 6 (id=2496): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x10202, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x7, 0x4, 0x8, 0x401, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000700)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mount(0x0, &(0x7f0000000580)='./proc\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x7, 0x4, 0x3, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0x2d1de0c}, 0x0, 0xff6fbffffffffffb, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2000) 0s ago: executing program 4 (id=2497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) kernel console output (not intermixed with test programs): ] loop6: lost filesystem error report for type 5 error -117 [ 174.378491][ T9025] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 174.378632][ T9025] loop6: lost filesystem error report for type 5 error -117 [ 174.379019][ T9025] EXT4-fs (loop6): 2 truncates cleaned up [ 174.379567][ T9025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.520784][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.308134][ T9091] loop3: detected capacity change from 0 to 128 [ 175.334304][ T9091] bio_check_eod: 143 callbacks suppressed [ 175.334378][ T9091] syz.3.1879: attempt to access beyond end of device [ 175.334378][ T9091] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 175.373990][ T9094] netlink: 'syz.5.1880': attribute type 1 has an invalid length. [ 175.374016][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 175.772989][ T9101] loop5: detected capacity change from 0 to 1024 [ 175.816188][ T9101] EXT4-fs: Ignoring removed i_version option [ 175.818575][ T9101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.849731][ T9101] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.885008][ T9101] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 175.885765][ T9101] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.896168][ T9101] EXT4-fs error (device loop5): ext4_free_blocks:6717: comm syz.5.1882: Freeing blocks not in datazone - block = 0, count = 4096 [ 175.896279][ T9101] loop5: lost filesystem error report for type 5 error -117 [ 175.897412][ T9101] EXT4-fs (loop5): Remounting filesystem read-only [ 175.897498][ T9101] EXT4-fs (loop5): 1 orphan inode deleted [ 175.899611][ T9101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.008424][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 176.008511][ T29] audit: type=1400 audit(1793490065.863:1278): avc: denied { write } for pid=9121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.085799][ T29] audit: type=1400 audit(1793490065.943:1279): avc: denied { write } for pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.115314][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.236388][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 176.281576][ T9146] loop5: detected capacity change from 0 to 256 [ 176.309982][ T9146] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.359985][ T9146] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.399270][ T9146] ip_tables: iptables: counters copy to user failed while replacing table [ 176.494932][ T9165] loop3: detected capacity change from 0 to 1764 [ 176.630881][ T9173] syzkaller0: entered promiscuous mode [ 176.630907][ T9173] syzkaller0: entered allmulticast mode [ 176.745119][ T9178] TC_ACT_REPEAT abuse ? [ 177.008059][ T9186] loop2: detected capacity change from 0 to 128 [ 177.176664][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1907'. [ 177.197972][ T9189] loop4: detected capacity change from 0 to 512 [ 177.206990][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 177.292332][ T29] audit: type=1400 audit(1793490067.143:1280): avc: denied { ioctl } for pid=9190 comm="syz.5.1906" path="/380/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 177.453449][ T9203] FAULT_INJECTION: forcing a failure. [ 177.453449][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 177.453492][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.5.1922 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 177.453592][ T9203] Tainted: [W]=WARN [ 177.453599][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.453624][ T9203] Call Trace: [ 177.453676][ T9203] [ 177.453686][ T9203] __dump_stack+0x1d/0x30 [ 177.453767][ T9203] dump_stack_lvl+0x95/0xd0 [ 177.453846][ T9203] dump_stack+0x15/0x1b [ 177.453879][ T9203] should_fail_ex+0x259/0x270 [ 177.453919][ T9203] ? sctp_auth_shkey_create+0x65/0x110 [ 177.453988][ T9203] should_failslab+0x8c/0xb0 [ 177.454032][ T9203] __kmalloc_cache_noprof+0x5d/0x3e0 [ 177.454078][ T9203] ? sctp_auth_shkey_create+0x65/0x110 [ 177.454171][ T9203] sctp_auth_shkey_create+0x65/0x110 [ 177.454351][ T9203] sctp_endpoint_new+0x2cc/0x560 [ 177.454390][ T9203] sctp_clone_sock+0x32c/0xc30 [ 177.454445][ T9203] ? sock_create_lite+0x250/0x290 [ 177.454486][ T9203] sctp_getsockopt_peeloff_common+0x263/0x450 [ 177.454550][ T9203] sctp_getsockopt_peeloff_flags+0xaf/0x180 [ 177.454600][ T9203] sctp_getsockopt+0x353/0xaa0 [ 177.454699][ T9203] sock_common_getsockopt+0x60/0x70 [ 177.454728][ T9203] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 177.454835][ T9203] do_sock_getsockopt+0x2ce/0x350 [ 177.454895][ T9203] __x64_sys_getsockopt+0x11d/0x1a0 [ 177.455020][ T9203] x64_sys_call+0x1032/0x2550 [ 177.455190][ T9203] do_syscall_64+0x112/0x360 [ 177.455238][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.455267][ T9203] RIP: 0033:0x7f150bdff559 [ 177.455290][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.455390][ T9203] RSP: 002b:00007f150a857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 177.455418][ T9203] RAX: ffffffffffffffda RBX: 00007f150c085fa0 RCX: 00007f150bdff559 [ 177.455439][ T9203] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 177.455458][ T9203] RBP: 00007f150be96b50 R08: 0000200000000440 R09: 0000000000000000 [ 177.455526][ T9203] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 177.455545][ T9203] R13: 00007f150c086038 R14: 00007f150c085fa0 R15: 00007ffd73cca888 [ 177.455574][ T9203] [ 177.637546][ T9204] loop6: detected capacity change from 0 to 1024 [ 177.695010][ T9204] EXT4-fs: Ignoring removed i_version option [ 177.705385][ T9204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.706195][ T9204] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.740370][ T9204] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 177.740516][ T9204] EXT4-fs (loop6): orphan cleanup on readonly fs [ 177.750323][ T9204] EXT4-fs error (device loop6): ext4_free_blocks:6717: comm syz.6.1911: Freeing blocks not in datazone - block = 0, count = 4096 [ 177.750407][ T9204] loop6: lost filesystem error report for type 5 error -117 [ 177.759646][ T9204] EXT4-fs (loop6): Remounting filesystem read-only [ 177.759754][ T9204] EXT4-fs (loop6): 1 orphan inode deleted [ 177.773799][ T9204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.904477][ T29] audit: type=1400 audit(1793490067.763:1281): avc: denied { write } for pid=9216 comm="syz.5.1917" name="strings" dev="configfs" ino=6176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.923908][ T9222] FAULT_INJECTION: forcing a failure. [ 177.923908][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 177.924016][ T9222] CPU: 0 UID: 0 PID: 9222 Comm: syz.2.1920 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 177.924205][ T9222] Tainted: [W]=WARN [ 177.924228][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.924279][ T9222] Call Trace: [ 177.924299][ T9222] [ 177.924316][ T9222] __dump_stack+0x1d/0x30 [ 177.924409][ T9222] dump_stack_lvl+0x95/0xd0 [ 177.924482][ T9222] dump_stack+0x15/0x1b [ 177.924635][ T9222] should_fail_ex+0x259/0x270 [ 177.924786][ T9222] should_failslab+0x8c/0xb0 [ 177.924901][ T9222] __kvmalloc_node_noprof+0x14f/0x5b0 [ 177.925016][ T9222] ? nf_hook_entries_grow+0x1cb/0x460 [ 177.925101][ T9222] ? nf_hook_entries_grow+0x1cb/0x460 [ 177.925185][ T9222] nf_hook_entries_grow+0x1cb/0x460 [ 177.925324][ T9222] __nf_register_net_hook+0x16e/0x4d0 [ 177.925483][ T9222] nf_register_net_hook+0x88/0x130 [ 177.925582][ T9222] nf_register_net_hooks+0x44/0x150 [ 177.925673][ T9222] nf_defrag_ipv4_enable+0x6e/0xc0 [ 177.925788][ T9222] nf_ct_netns_do_get+0x13c/0x3a0 [ 177.925892][ T9222] nf_ct_netns_get+0xf1/0x2c0 [ 177.925975][ T9222] synproxy_tg4_check+0xca/0x160 [ 177.926082][ T9222] xt_check_target+0x3c2/0x5d0 [ 177.926242][ T9222] ? mutex_unlock+0x4e/0x90 [ 177.926319][ T9222] ? xt_find_target+0x204/0x240 [ 177.926395][ T9222] translate_table+0xd32/0x1120 [ 177.926540][ T9222] do_ipt_set_ctl+0x735/0x970 [ 177.926628][ T9222] ? _raw_spin_lock_bh+0x57/0xb0 [ 177.926732][ T9222] nf_setsockopt+0x199/0x1b0 [ 177.926831][ T9222] ip_setsockopt+0x102/0x110 [ 177.926934][ T9222] tcp_setsockopt+0x98/0xb0 [ 177.927087][ T9222] sock_common_setsockopt+0x69/0x80 [ 177.927189][ T9222] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.927341][ T9222] __sys_setsockopt+0x184/0x200 [ 177.927518][ T9222] __x64_sys_setsockopt+0x64/0x80 [ 177.927626][ T9222] x64_sys_call+0x248f/0x2550 [ 177.927770][ T9222] do_syscall_64+0x112/0x360 [ 177.928019][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.928125][ T9222] RIP: 0033:0x7fef36bbf559 [ 177.928186][ T9222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.928251][ T9222] RSP: 002b:00007fef3560f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.928319][ T9222] RAX: ffffffffffffffda RBX: 00007fef36e45fa0 RCX: 00007fef36bbf559 [ 177.928499][ T9222] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 177.928541][ T9222] RBP: 00007fef36c56b50 R08: 00000000000002c0 R09: 0000000000000000 [ 177.928596][ T9222] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 177.928639][ T9222] R13: 00007fef36e46038 R14: 00007fef36e45fa0 R15: 00007ffda2f6ab88 [ 177.928712][ T9222] [ 177.947350][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.250484][ T29] audit: type=1400 audit(1793490068.103:1282): avc: denied { watch } for pid=9228 comm="syz.4.1923" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 178.350089][ T29] audit: type=1400 audit(1793490068.203:1283): avc: denied { mounton } for pid=9233 comm="syz.4.1925" path="/file0" dev="ramfs" ino=24589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 178.400614][ T9238] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1934'. [ 178.472986][ T9245] loop4: detected capacity change from 0 to 512 [ 178.486931][ T9245] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1928: bad orphan inode 13 [ 178.487029][ T9245] loop4: lost filesystem error report for type 5 error -117 [ 178.490422][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 178.490444][ C1] EXT4-fs (loop4): initial error at time 1793490068: ext4_orphan_get:1430 [ 178.490480][ C1] EXT4-fs (loop4): last error at time 1793490068: ext4_orphan_get:1430 [ 178.536539][ T9245] ext4_test_bit(bit=12, block=4) = 1 [ 178.536626][ T9245] is_bad_inode(inode)=0 [ 178.536637][ T9245] NEXT_ORPHAN(inode)=0 [ 178.536647][ T9245] max_ino=32 [ 178.536655][ T9245] i_nlink=1 [ 178.538507][ T9245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.561869][ T9245] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.1928: Hash code is SIPHASH, but hash not in dirent [ 178.561904][ T9245] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1928: Corrupt directory, running e2fsck is recommended [ 178.562153][ T9245] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.1928: Hash code is SIPHASH, but hash not in dirent [ 178.562175][ T9245] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1928: Corrupt directory, running e2fsck is recommended [ 178.562616][ T29] audit: type=1400 audit(1793490068.423:1284): avc: denied { write } for pid=9244 comm="syz.4.1928" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.620503][ T9249] loop2: detected capacity change from 0 to 1024 [ 178.621520][ T9249] EXT4-fs: Ignoring removed nobh option [ 178.621730][ T9249] EXT4-fs: Ignoring removed bh option [ 178.657553][ T9249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.669492][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.821524][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.097693][ T29] audit: type=1400 audit(1793490068.953:1285): avc: denied { append } for pid=9274 comm="syz.5.1942" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.327416][ T9297] FAULT_INJECTION: forcing a failure. [ 179.327416][ T9297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.327460][ T9297] CPU: 1 UID: 0 PID: 9297 Comm: syz.4.1950 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 179.327492][ T9297] Tainted: [W]=WARN [ 179.327546][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.327565][ T9297] Call Trace: [ 179.327574][ T9297] [ 179.327630][ T9297] __dump_stack+0x1d/0x30 [ 179.327666][ T9297] dump_stack_lvl+0x95/0xd0 [ 179.327697][ T9297] dump_stack+0x15/0x1b [ 179.327727][ T9297] should_fail_ex+0x259/0x270 [ 179.327839][ T9297] should_fail+0xb/0x20 [ 179.327874][ T9297] should_fail_usercopy+0x1a/0x20 [ 179.327905][ T9297] _copy_to_user+0x20/0xa0 [ 179.327938][ T9297] dm_ctl_ioctl+0x1d4/0xad0 [ 179.328060][ T9297] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 179.328086][ T9297] __se_sys_ioctl+0xce/0x140 [ 179.328194][ T9297] __x64_sys_ioctl+0x43/0x50 [ 179.328232][ T9297] x64_sys_call+0x239d/0x2550 [ 179.328259][ T9297] do_syscall_64+0x112/0x360 [ 179.328413][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.328446][ T9297] RIP: 0033:0x7fab5287f559 [ 179.328468][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.328495][ T9297] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.328611][ T9297] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 179.328629][ T9297] RDX: 0000200000000540 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 179.328643][ T9297] RBP: 00007fab52916b50 R08: 0000000000000000 R09: 0000000000000000 [ 179.328656][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.328670][ T9297] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 179.328741][ T9297] [ 179.489766][ T9289] xt_hashlimit: size too large, truncated to 1048576 [ 179.555415][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'. [ 179.877432][ T9319] loop2: detected capacity change from 0 to 1024 [ 179.879740][ T9309] loop4: detected capacity change from 0 to 128 [ 179.882512][ T9319] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 179.882763][ T9319] EXT4-fs (loop2): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 179.897252][ T9319] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.897628][ T9319] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.898227][ T9319] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.1957: Inode bitmap for bg 0 marked uninitialized [ 179.898369][ T9319] loop2: lost filesystem error report for type 5 error -117 [ 179.899515][ T9319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.948432][ T3290] udevd[3290]: incorrect ext4 checksum on /dev/loop4 [ 180.017950][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.018525][ T29] audit: type=1400 audit(1793490069.873:1286): avc: denied { setattr } for pid=9324 comm="syz.3.1959" path="pipe:[24415]" dev="pipefs" ino=24415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 180.261680][ T29] audit: type=1400 audit(1793490070.113:1287): avc: denied { read } for pid=9335 comm="syz.4.1966" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.304032][ T9357] loop5: detected capacity change from 0 to 512 [ 181.342599][ T9357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.342750][ T9357] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.354680][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 181.354732][ T29] audit: type=1400 audit(1793490071.213:1289): avc: denied { write } for pid=9356 comm="syz.5.1973" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.433939][ T9363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1974'. [ 182.105809][ T9376] netlink: 'syz.4.1978': attribute type 39 has an invalid length. [ 182.188390][ T9374] loop2: detected capacity change from 0 to 512 [ 182.214511][ T9374] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 182.214544][ T9374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.229351][ T9374] EXT4-fs (loop2): 1 truncate cleaned up [ 182.235016][ T9374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.241494][ T9357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.300446][ T29] audit: type=1400 audit(1793490072.153:1290): avc: denied { nlmsg_tty_audit } for pid=9379 comm="syz.5.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 182.340320][ T9382] syz_tun: entered allmulticast mode [ 182.342854][ T9381] syz_tun: left allmulticast mode [ 182.561161][ T9387] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 182.591874][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.801187][ T9405] loop4: detected capacity change from 0 to 512 [ 182.802935][ T9405] EXT4-fs: Ignoring removed nobh option [ 182.871397][ T9404] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.132115][ T9409] loop4: detected capacity change from 0 to 512 [ 183.320627][ T9409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.322499][ T9409] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.343808][ T29] audit: type=1400 audit(1793490073.193:1291): avc: denied { read } for pid=9408 comm="syz.4.1991" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.343897][ T29] audit: type=1400 audit(1793490073.193:1292): avc: denied { open } for pid=9408 comm="syz.4.1991" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.576375][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.844821][ T9442] pim6reg: entered allmulticast mode [ 183.907493][ T29] audit: type=1400 audit(1793490073.763:1293): avc: denied { create } for pid=9449 comm="syz.3.2009" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.968783][ T9447] loop6: detected capacity change from 0 to 512 [ 184.050053][ T9447] EXT4-fs: Ignoring removed nobh option [ 184.161004][ T9447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.162004][ T9447] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.250368][ T29] audit: type=1400 audit(1793490074.103:1294): avc: denied { write } for pid=9446 comm="syz.6.2006" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.269685][ T9467] loop5: detected capacity change from 0 to 512 [ 184.367025][ T9447] EXT4-fs error (device loop6): ext4_do_update_inode:6707: inode #2: comm syz.6.2006: corrupted inode contents [ 184.368092][ T29] audit: type=1326 audit(1793490074.223:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.4.2013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5287f559 code=0x7ffc0000 [ 184.369404][ T29] audit: type=1326 audit(1793490074.223:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.4.2013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fab5287f559 code=0x7ffc0000 [ 184.370250][ T9447] EXT4-fs (loop6): Remounting filesystem read-only [ 184.545531][ T29] audit: type=1326 audit(1793490074.403:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.4.2013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5287f559 code=0x7ffc0000 [ 184.545573][ T29] audit: type=1326 audit(1793490074.403:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="syz.4.2013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5287f559 code=0x7ffc0000 [ 184.697668][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.074986][ T9469] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.266757][ T9501] loop6: detected capacity change from 0 to 1024 [ 185.293671][ T9501] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.293725][ T9501] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.294490][ T9501] jbd2_journal_init_inode: Cannot locate journal superblock [ 185.294505][ T9501] EXT4-fs (loop6): Could not load journal inode [ 185.436757][ T9506] FAULT_INJECTION: forcing a failure. [ 185.436757][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 185.436789][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.4.2028 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.436853][ T9506] Tainted: [W]=WARN [ 185.436860][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.436873][ T9506] Call Trace: [ 185.436879][ T9506] [ 185.436890][ T9506] __dump_stack+0x1d/0x30 [ 185.436919][ T9506] dump_stack_lvl+0x95/0xd0 [ 185.436947][ T9506] dump_stack+0x15/0x1b [ 185.436977][ T9506] should_fail_ex+0x259/0x270 [ 185.437052][ T9506] ? kstrdup_const+0x3e/0x50 [ 185.437078][ T9506] should_failslab+0x8c/0xb0 [ 185.437120][ T9506] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 185.437162][ T9506] ? kstrdup_const+0x3e/0x50 [ 185.437192][ T9506] kstrdup+0x3e/0xd0 [ 185.437210][ T9506] kstrdup_const+0x3e/0x50 [ 185.437232][ T9506] __kernfs_new_node+0x42/0x440 [ 185.437263][ T9506] ? rb_insert_color+0x6e/0x2a0 [ 185.437359][ T9506] ? __rcu_read_unlock+0x4e/0x70 [ 185.437401][ T9506] ? up_write+0x19/0x60 [ 185.437425][ T9506] ? kernfs_link_sibling+0x2f5/0x320 [ 185.437448][ T9506] ? __rcu_read_unlock+0x4e/0x70 [ 185.437503][ T9506] kernfs_new_node+0x107/0x140 [ 185.437536][ T9506] kernfs_create_link+0xcd/0x190 [ 185.437574][ T9506] sysfs_do_create_link_sd+0x6a/0x100 [ 185.437676][ T9506] sysfs_create_link+0x51/0x70 [ 185.437722][ T9506] device_add_class_symlinks+0x168/0x1d0 [ 185.437754][ T9506] device_add+0x359/0x790 [ 185.437816][ T9506] netdev_register_kobject+0x127/0x240 [ 185.437843][ T9506] register_netdevice+0xc68/0x13f0 [ 185.437909][ T9506] register_netdev+0x3b/0x50 [ 185.437927][ T9506] loopback_net_init+0x59/0x100 [ 185.437979][ T9506] ops_init+0x22a/0x2e0 [ 185.438019][ T9506] setup_net+0x9f/0x230 [ 185.438054][ T9506] copy_net_ns+0x339/0x490 [ 185.438087][ T9506] create_new_namespaces+0x1f6/0x420 [ 185.438151][ T9506] unshare_nsproxy_namespaces+0x115/0x150 [ 185.438194][ T9506] ksys_unshare+0x3a3/0x690 [ 185.438236][ T9506] __x64_sys_unshare+0x1f/0x30 [ 185.438285][ T9506] x64_sys_call+0x1e33/0x2550 [ 185.438386][ T9506] do_syscall_64+0x112/0x360 [ 185.438491][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.438522][ T9506] RIP: 0033:0x7fab5287f559 [ 185.438540][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.438617][ T9506] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 185.438671][ T9506] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 185.438691][ T9506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 185.438754][ T9506] RBP: 00007fab52916b50 R08: 0000000000000000 R09: 0000000000000000 [ 185.438782][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.438794][ T9506] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 185.438826][ T9506] [ 185.516065][ T9509] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.377332][ T9511] loop2: detected capacity change from 0 to 512 [ 186.388778][ T9511] EXT4-fs: Ignoring removed nobh option [ 186.432630][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.433555][ T9511] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.470431][ T29] audit: type=1400 audit(1793490332.312:1299): avc: denied { write } for pid=9510 comm="syz.2.2029" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.479352][ T9511] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #2: comm syz.2.2029: corrupted inode contents [ 186.480070][ T9511] EXT4-fs (loop2): Remounting filesystem read-only [ 186.508317][ T9478] Set syz0 is full, maxelem 65536 reached [ 186.659802][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.677078][ T9530] 9p: Bad value for 'wfdno' [ 186.677680][ T29] audit: type=1400 audit(1793490332.532:1300): avc: denied { write } for pid=9529 comm="syz.3.2035" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 187.018524][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.018628][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.021642][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2047'. [ 187.035246][ T9562] vlan5: entered promiscuous mode [ 187.035339][ T9562] bond0: entered promiscuous mode [ 187.035385][ T9562] bridge0: entered promiscuous mode [ 187.103631][ T29] audit: type=1400 audit(1793490332.962:1301): avc: denied { write } for pid=9555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.140934][ T29] audit: type=1400 audit(1793490333.002:1302): avc: denied { write } for pid=9575 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.238785][ T29] audit: type=1400 audit(1793490333.092:1303): avc: denied { write } for pid=9578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.283548][ T29] audit: type=1400 audit(1793490333.142:1304): avc: denied { write } for pid=9593 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.433335][ T9602] TC_ACT_REPEAT abuse ? [ 187.447372][ T9592] loop4: detected capacity change from 0 to 1024 [ 187.474690][ T9592] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 187.474851][ T9592] EXT4-fs (loop4): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 187.476991][ T9592] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 187.477374][ T9592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.478099][ T9592] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.2049: Inode bitmap for bg 0 marked uninitialized [ 187.478130][ T9592] loop4: lost filesystem error report for type 5 error -117 [ 187.481773][ T9592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.529975][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.724793][ T29] audit: type=1326 audit(1793490333.582:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 187.728209][ T29] audit: type=1326 audit(1793490333.582:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 187.759539][ T9622] loop4: detected capacity change from 0 to 256 [ 187.774060][ T9622] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.835789][ T29] audit: type=1326 audit(1793490333.692:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 187.835826][ T29] audit: type=1326 audit(1793490333.692:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 187.838210][ T9625] loop2: detected capacity change from 0 to 1024 [ 187.876116][ T9625] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 187.883663][ T9625] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 187.884942][ T9625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.896764][ T9625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.938021][ T9622] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.002135][ T9630] FAULT_INJECTION: forcing a failure. [ 188.002135][ T9630] name failslab, interval 1, probability 0, space 0, times 0 [ 188.002169][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.6.2066 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 188.002231][ T9630] Tainted: [W]=WARN [ 188.002241][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.002258][ T9630] Call Trace: [ 188.002265][ T9630] [ 188.002275][ T9630] __dump_stack+0x1d/0x30 [ 188.002304][ T9630] dump_stack_lvl+0x95/0xd0 [ 188.002394][ T9630] dump_stack+0x15/0x1b [ 188.002469][ T9630] should_fail_ex+0x259/0x270 [ 188.002501][ T9630] ? find_get_context+0x75/0x4f0 [ 188.002540][ T9630] should_failslab+0x8c/0xb0 [ 188.002578][ T9630] __kmalloc_cache_noprof+0x5d/0x3e0 [ 188.002673][ T9630] ? find_get_context+0x75/0x4f0 [ 188.002784][ T9630] ? security_capable+0x7b/0x90 [ 188.002814][ T9630] find_get_context+0x75/0x4f0 [ 188.002933][ T9630] __se_sys_perf_event_open+0x911/0x1290 [ 188.002985][ T9630] ? do_futex+0x391/0x460 [ 188.003101][ T9630] __x64_sys_perf_event_open+0x67/0x80 [ 188.003136][ T9630] x64_sys_call+0x1f25/0x2550 [ 188.003168][ T9630] do_syscall_64+0x112/0x360 [ 188.003276][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.003307][ T9630] RIP: 0033:0x7f168953f559 [ 188.003328][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.003384][ T9630] RSP: 002b:00007f1687f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 188.003411][ T9630] RAX: ffffffffffffffda RBX: 00007f16897c5fa0 RCX: 00007f168953f559 [ 188.003432][ T9630] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000080 [ 188.003451][ T9630] RBP: 00007f16895d6b50 R08: 0000000000000008 R09: 0000000000000000 [ 188.003467][ T9630] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 188.003539][ T9630] R13: 00007f16897c6038 R14: 00007f16897c5fa0 R15: 00007ffde42055e8 [ 188.003568][ T9630] [ 188.024364][ T9622] ip_tables: iptables: counters copy to user failed while replacing table [ 188.266315][ T9632] loop3: detected capacity change from 0 to 1024 [ 188.309253][ T9632] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 188.320644][ T9632] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 188.357269][ T9632] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 188.376060][ T9632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 188.397089][ T9632] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.2067: Inode bitmap for bg 0 marked uninitialized [ 188.397200][ T9632] loop3: lost filesystem error report for type 5 error -117 [ 188.400413][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 188.400436][ C1] EXT4-fs (loop3): initial error at time 1793490334: ext4_read_inode_bitmap:169 [ 188.400467][ C1] EXT4-fs (loop3): last error at time 1793490334: ext4_read_inode_bitmap:169 [ 188.404297][ T9632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.477423][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.705228][ T9667] loop5: detected capacity change from 0 to 1024 [ 188.705601][ T9667] EXT4-fs: Ignoring removed nobh option [ 188.705696][ T9667] EXT4-fs: Ignoring removed bh option [ 188.734127][ T9667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.924159][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.981314][ T9686] loop6: detected capacity change from 0 to 1024 [ 188.999615][ T9685] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 188.999646][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.999688][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 189.008163][ T9686] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 189.008216][ T9686] EXT4-fs (loop6): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 189.009532][ T9686] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 189.009951][ T9686] EXT4-fs (loop6): orphan cleanup on readonly fs [ 189.010485][ T9686] EXT4-fs error (device loop6): ext4_read_inode_bitmap:169: comm syz.6.2084: Inode bitmap for bg 0 marked uninitialized [ 189.010568][ T9686] loop6: lost filesystem error report for type 5 error -117 [ 189.011850][ T9686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.083476][ T9685] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 189.083551][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.083644][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 189.120784][ T9685] loop5: detected capacity change from 0 to 512 [ 189.128136][ T9685] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 189.128247][ T9685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.136834][ T9685] EXT4-fs (loop5): 1 truncate cleaned up [ 189.137972][ T9685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.172111][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.213109][ T9687] vhci_hcd: connection closed [ 189.213267][ T9689] vhci_hcd: connection closed [ 189.215096][ T32] vhci_hcd vhci_hcd.5: stop threads [ 189.215128][ T32] vhci_hcd vhci_hcd.5: release socket [ 189.215159][ T32] vhci_hcd vhci_hcd.5: disconnect device [ 189.216273][ T32] vhci_hcd vhci_hcd.5: stop threads [ 189.216288][ T32] vhci_hcd vhci_hcd.5: release socket [ 189.216306][ T32] vhci_hcd vhci_hcd.5: disconnect device [ 189.217775][ T9695] loop4: detected capacity change from 0 to 1024 [ 189.224721][ T9695] EXT4-fs: Ignoring removed nobh option [ 189.224979][ T9695] EXT4-fs: Ignoring removed bh option [ 189.261113][ T5016] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 189.261259][ T5016] usb 11-1: enqueue for inactive port 0 [ 189.261309][ T5016] usb 11-1: enqueue for inactive port 0 [ 189.261435][ T5016] usb 11-1: enqueue for inactive port 0 [ 189.310102][ T9695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.330994][ T5016] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 189.357735][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.388201][ T9702] loop4: detected capacity change from 0 to 512 [ 189.400872][ T9702] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2089: inode has both inline data and extents flags [ 189.400902][ T9702] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.401055][ T9702] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2089: couldn't read orphan inode 15 (err -117) [ 189.401080][ T9702] loop4: lost filesystem error report for type 5 error -117 [ 189.401543][ T9702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.525637][ T9706] FAULT_INJECTION: forcing a failure. [ 189.525637][ T9706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 189.525674][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz.4.2089 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.525716][ T9706] Tainted: [W]=WARN [ 189.525726][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.525796][ T9706] Call Trace: [ 189.525805][ T9706] [ 189.525813][ T9706] __dump_stack+0x1d/0x30 [ 189.525840][ T9706] dump_stack_lvl+0x95/0xd0 [ 189.525943][ T9706] dump_stack+0x15/0x1b [ 189.525972][ T9706] should_fail_ex+0x259/0x270 [ 189.526011][ T9706] should_fail+0xb/0x20 [ 189.526109][ T9706] get_futex_key+0x12c/0xc40 [ 189.526187][ T9706] futex_wake+0x89/0x400 [ 189.526232][ T9706] do_futex+0x3f8/0x460 [ 189.526263][ T9706] __se_sys_futex+0x2f6/0x370 [ 189.526293][ T9706] __x64_sys_futex+0x78/0x90 [ 189.526319][ T9706] x64_sys_call+0x22e2/0x2550 [ 189.526357][ T9706] do_syscall_64+0x112/0x360 [ 189.526447][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.526478][ T9706] RIP: 0033:0x7fab5287f559 [ 189.526560][ T9706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.526579][ T9706] RSP: 002b:00007fab512ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.526600][ T9706] RAX: ffffffffffffffda RBX: 00007fab52b06098 RCX: 00007fab5287f559 [ 189.526657][ T9706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fab52b0609c [ 189.526676][ T9706] RBP: 00007fab52b06090 R08: 3fffffffffffffff R09: 0000000000000000 [ 189.526695][ T9706] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 189.526765][ T9706] R13: 00007fab52b06128 R14: 00007ffdc1755610 R15: 00007ffdc17556f8 [ 189.526786][ T9706] [ 189.643619][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.766625][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.896110][ T9710] can0: slcan on ttyS3. [ 189.952195][ T9710] can0 (unregistered): slcan off ttyS3. [ 190.211436][ T9725] loop6: detected capacity change from 0 to 1024 [ 190.211846][ T9725] EXT4-fs: Ignoring removed nobh option [ 190.211904][ T9725] EXT4-fs: Ignoring removed bh option [ 190.238577][ T9725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.246977][ T9720] loop2: detected capacity change from 0 to 256 [ 190.284895][ T9720] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.394574][ T9720] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.418535][ T9724] loop5: detected capacity change from 0 to 164 [ 190.449346][ T9724] iso9660: Bad value for 'check' [ 190.476951][ T9720] ip_tables: iptables: counters copy to user failed while replacing table [ 190.525712][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.789744][ T9747] : left promiscuous mode [ 190.854689][ T9747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.872089][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.875463][ T9747] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 190.878139][ T9747] 8021q: adding VLAN 0 to HW filter on device eth0 [ 190.903447][ T9747] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.907249][ T9747] 8021q: adding VLAN 0 to HW filter on device eth2 [ 190.909287][ T9747] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.934048][ T9747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.020966][ T12] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 191.020996][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.021064][ T12] bond6: active interface up! [ 191.270323][ T9740] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 191.270461][ T9740] EXT4-fs (loop5): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 191.279746][ T9740] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 191.281005][ T9740] EXT4-fs (loop5): orphan cleanup on readonly fs [ 191.281985][ T9740] EXT4-fs error (device loop5): ext4_read_inode_bitmap:169: comm syz.5.2099: Inode bitmap for bg 0 marked uninitialized [ 191.282073][ T9740] loop5: lost filesystem error report for type 5 error -117 [ 191.285955][ T9740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.678625][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.761837][ T9767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.785981][ T9767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.789549][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 191.789568][ T29] audit: type=1400 audit(1793490337.642:1318): avc: denied { write } for pid=9766 comm="syz.2.2111" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.809634][ T29] audit: type=1400 audit(1793490337.672:1319): avc: denied { bind } for pid=9766 comm="syz.2.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.875089][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.049115][ T9781] ip_tables: iptables: counters copy to user failed while replacing table [ 192.331051][ T9778] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 192.331141][ T9778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.412016][ T9778] EXT4-fs (loop4): 1 truncate cleaned up [ 192.414321][ T9778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.523677][ T9793] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 192.540767][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.541794][ T9793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.621261][ T9793] bond5: (slave veth3): Enslaving as an active interface with a down link [ 192.651859][ T9793] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 192.651878][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2121'. [ 192.722413][ T9804] syz.6.2124 (9804): /proc/9804/oom_adj is deprecated, please use /proc/9804/oom_score_adj instead. [ 192.885207][ T9798] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 192.885294][ T9798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 192.885707][ T9798] System zones: 0-1, 15-15, 18-18, 34-34 [ 192.889632][ T9798] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.889693][ T9798] EXT4-fs error (device loop4): ext4_quota_enable:7307: comm syz.4.2122: Bad quota inum: 768, type: 0 [ 192.889950][ T9798] loop4: lost filesystem error report for type 5 error -117 [ 192.906987][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 192.907017][ C0] EXT4-fs (loop4): initial error at time 1793490338: ext4_quota_enable:7307 [ 192.907042][ C0] EXT4-fs (loop4): last error at time 1793490338: ext4_quota_enable:7307 [ 192.947634][ T29] audit: type=1326 audit(1793490338.802:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.5.2129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150bdff559 code=0x7ffc0000 [ 192.947678][ T29] audit: type=1326 audit(1793490338.802:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.5.2129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150bdff559 code=0x7ffc0000 [ 192.947708][ T29] audit: type=1326 audit(1793490338.802:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.5.2129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f150bdff559 code=0x7ffc0000 [ 193.018193][ T9821] set_capacity_and_notify: 5 callbacks suppressed [ 193.018246][ T9821] loop6: detected capacity change from 0 to 256 [ 193.058334][ T9798] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 193.058423][ T9798] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 193.067624][ T9798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.106040][ T29] audit: type=1326 audit(1793490338.962:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.5.2129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150bdff559 code=0x7ffc0000 [ 193.106182][ T29] audit: type=1326 audit(1793490338.962:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.5.2129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150bdff559 code=0x7ffc0000 [ 193.161440][ T29] audit: type=1326 audit(1793490339.002:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.6.2131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168953f559 code=0x7ffc0000 [ 193.161506][ T29] audit: type=1326 audit(1793490339.002:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.6.2131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168953f559 code=0x7ffc0000 [ 193.161622][ T29] audit: type=1326 audit(1793490339.002:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.6.2131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f168953f559 code=0x7ffc0000 [ 193.538267][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.810164][ T9839] loop4: detected capacity change from 0 to 512 [ 193.839714][ T9839] ext4: Unknown parameter 'fowner>00000000000000000000' [ 194.132543][ T9851] syz_tun: entered allmulticast mode [ 194.397058][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2149'. [ 194.605329][ T9876] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.628638][ T9885] can0: slcan on ttyS3. [ 194.671082][ T9885] can0 (unregistered): slcan off ttyS3. [ 194.683778][ T9864] loop5: detected capacity change from 0 to 764 [ 194.978765][ T9893] FAULT_INJECTION: forcing a failure. [ 194.978765][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 194.978859][ T9893] CPU: 1 UID: 0 PID: 9893 Comm: syz.4.2159 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 194.978900][ T9893] Tainted: [W]=WARN [ 194.978910][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.978981][ T9893] Call Trace: [ 194.978990][ T9893] [ 194.979000][ T9893] __dump_stack+0x1d/0x30 [ 194.979036][ T9893] dump_stack_lvl+0x95/0xd0 [ 194.979064][ T9893] dump_stack+0x15/0x1b [ 194.979088][ T9893] should_fail_ex+0x259/0x270 [ 194.979141][ T9893] ? mpi_alloc_limb_space+0x2e/0x50 [ 194.979169][ T9893] should_failslab+0x8c/0xb0 [ 194.979214][ T9893] __kmalloc_noprof+0xb6/0x4b0 [ 194.979324][ T9893] ? mpi_alloc_limb_space+0x2e/0x50 [ 194.979359][ T9893] ? mpih_sqr_n_basecase+0x34b/0x380 [ 194.979403][ T9893] mpi_alloc_limb_space+0x2e/0x50 [ 194.979426][ T9894] ip_tables: iptables: counters copy to user failed while replacing table [ 194.979438][ T9893] mpi_powm+0xb80/0x1810 [ 194.979514][ T9893] rsa_enc+0x1e3/0x290 [ 194.979596][ T9893] crypto_akcipher_sync_encrypt+0xf2/0x130 [ 194.979625][ T9893] software_key_eds_op+0x4d7/0x5f0 [ 194.979665][ T9893] ? __kmalloc_noprof+0x1d7/0x4b0 [ 194.979818][ T9893] ? __pfx_software_key_eds_op+0x10/0x10 [ 194.979864][ T9893] asymmetric_key_eds_op+0xb5/0xe0 [ 194.979907][ T9893] keyctl_pkey_e_d_s+0x186/0x260 [ 194.980029][ T9893] __se_sys_keyctl+0x5fb/0xb70 [ 194.980062][ T9893] ? __se_sys_futex+0x2f6/0x370 [ 194.980091][ T9893] ? xfd_validate_state+0x45/0xf0 [ 194.980140][ T9893] ? restore_fpregs_from_fpstate+0x61/0x110 [ 194.980174][ T9893] __x64_sys_keyctl+0x67/0x80 [ 194.980204][ T9893] x64_sys_call+0x1fe0/0x2550 [ 194.980320][ T9893] do_syscall_64+0x112/0x360 [ 194.980354][ T9893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.980389][ T9893] RIP: 0033:0x7fab5287f559 [ 194.980409][ T9893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.980495][ T9893] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 194.980523][ T9893] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 194.980543][ T9893] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000019 [ 194.980623][ T9893] RBP: 00007fab52916b50 R08: 0000000000000000 R09: 0000000000000000 [ 194.980641][ T9893] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 194.980660][ T9893] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 194.980768][ T9893] [ 195.559711][ T9910] FAULT_INJECTION: forcing a failure. [ 195.559711][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 195.559750][ T9910] CPU: 0 UID: 0 PID: 9910 Comm: syz.4.2160 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 195.559851][ T9910] Tainted: [W]=WARN [ 195.559858][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.559875][ T9910] Call Trace: [ 195.559884][ T9910] [ 195.559894][ T9910] __dump_stack+0x1d/0x30 [ 195.559927][ T9910] dump_stack_lvl+0x95/0xd0 [ 195.559958][ T9910] dump_stack+0x15/0x1b [ 195.560013][ T9910] should_fail_ex+0x259/0x270 [ 195.560053][ T9910] ? __kernfs_new_node+0x70/0x440 [ 195.560084][ T9910] should_failslab+0x8c/0xb0 [ 195.560271][ T9910] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 195.560314][ T9910] ? __kernfs_new_node+0x70/0x440 [ 195.560346][ T9910] __kernfs_new_node+0x70/0x440 [ 195.560376][ T9910] ? __rcu_read_unlock+0x4e/0x70 [ 195.560487][ T9910] ? up_write+0x19/0x60 [ 195.560584][ T9910] ? kernfs_link_sibling+0x2f5/0x320 [ 195.560616][ T9910] ? __rcu_read_unlock+0x4e/0x70 [ 195.560652][ T9910] kernfs_new_node+0x107/0x140 [ 195.560700][ T9910] __kernfs_create_file+0x4b/0x180 [ 195.560739][ T9910] ? __pfx_dev_attr_show+0x10/0x10 [ 195.560777][ T9910] ? __pfx_dev_attr_store+0x10/0x10 [ 195.560842][ T9910] sysfs_add_file_mode_ns+0x132/0x1b0 [ 195.560969][ T9910] internal_create_group+0x43e/0x9e0 [ 195.560996][ T9910] ? kernfs_put+0x25e/0x2c0 [ 195.561025][ T9910] sysfs_create_groups+0x3f/0xf0 [ 195.561053][ T9910] device_add_attrs+0xf2/0x3f0 [ 195.561084][ T9910] device_add+0x37a/0x790 [ 195.561119][ T9910] netdev_register_kobject+0x127/0x240 [ 195.561150][ T9910] register_netdevice+0xc68/0x13f0 [ 195.561196][ T9910] register_vlan_dev+0x21d/0x470 [ 195.561272][ T9910] vlan_newlink+0x32a/0x370 [ 195.561313][ T9910] ? __pfx_vlan_newlink+0x10/0x10 [ 195.561429][ T9910] rtnl_newlink_create+0x1e4/0x4a0 [ 195.561476][ T9910] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 195.561538][ T9910] rtnl_newlink+0x1255/0x1510 [ 195.561590][ T9910] ? __css_rstat_updated+0xbb/0x280 [ 195.561683][ T9910] ? __memcg_slab_free_hook+0x154/0x340 [ 195.561718][ T9910] ? __rcu_read_unlock+0x4e/0x70 [ 195.561751][ T9910] ? avc_has_perm_noaudit+0xac/0x160 [ 195.561790][ T9910] ? cred_has_capability+0x224/0x2a0 [ 195.561891][ T9910] ? selinux_capable+0x31/0x40 [ 195.561928][ T9910] ? security_capable+0x7b/0x90 [ 195.562035][ T9910] ? ns_capable+0x80/0xb0 [ 195.562067][ T9910] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.562104][ T9910] rtnetlink_rcv_msg+0x64b/0x720 [ 195.562148][ T9910] netlink_rcv_skb+0x11e/0x220 [ 195.562173][ T9910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.562255][ T9910] rtnetlink_rcv+0x1c/0x30 [ 195.562288][ T9910] netlink_unicast+0x665/0x740 [ 195.562346][ T9910] netlink_sendmsg+0x5ef/0x740 [ 195.562379][ T9910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.562431][ T9910] ____sys_sendmsg+0x54a/0x590 [ 195.562461][ T9910] ___sys_sendmsg+0x195/0x1e0 [ 195.562506][ T9910] __x64_sys_sendmsg+0xd4/0x160 [ 195.562552][ T9910] x64_sys_call+0x22ab/0x2550 [ 195.562581][ T9910] do_syscall_64+0x112/0x360 [ 195.562686][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.562716][ T9910] RIP: 0033:0x7fab5287f559 [ 195.562734][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.562825][ T9910] RSP: 002b:00007fab512ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.562854][ T9910] RAX: ffffffffffffffda RBX: 00007fab52b06090 RCX: 00007fab5287f559 [ 195.562910][ T9910] RDX: 0000000008000002 RSI: 0000200000000340 RDI: 0000000000000005 [ 195.562930][ T9910] RBP: 00007fab52916b50 R08: 0000000000000000 R09: 0000000000000000 [ 195.562948][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.562966][ T9910] R13: 00007fab52b06128 R14: 00007fab52b06090 R15: 00007ffdc17556f8 [ 195.562992][ T9910] [ 195.605843][ T9909] loop3: detected capacity change from 0 to 1024 [ 195.639997][ T9909] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 195.645851][ T9909] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 195.649196][ T9909] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 195.649692][ T9909] EXT4-fs (loop3): orphan cleanup on readonly fs [ 195.652663][ T9909] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.2163: Inode bitmap for bg 0 marked uninitialized [ 195.653061][ T9909] loop3: lost filesystem error report for type 5 error -117 [ 195.669299][ T9909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.894626][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.103879][ T9917] can0: slcan on ttyS3. [ 196.190770][ T9917] can0 (unregistered): slcan off ttyS3. [ 196.252201][ T9921] loop6: detected capacity change from 0 to 128 [ 196.437170][ T9948] FAULT_INJECTION: forcing a failure. [ 196.437170][ T9948] name failslab, interval 1, probability 0, space 0, times 0 [ 196.437211][ T9948] CPU: 1 UID: 0 PID: 9948 Comm: syz.4.2174 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 196.437255][ T9948] Tainted: [W]=WARN [ 196.437265][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.437283][ T9948] Call Trace: [ 196.437291][ T9948] [ 196.437301][ T9948] __dump_stack+0x1d/0x30 [ 196.437334][ T9948] dump_stack_lvl+0x95/0xd0 [ 196.437427][ T9948] dump_stack+0x15/0x1b [ 196.437449][ T9948] should_fail_ex+0x259/0x270 [ 196.437477][ T9948] ? alloc_workqueue_va+0x45d/0x15d0 [ 196.437540][ T9948] should_failslab+0x8c/0xb0 [ 196.437660][ T9948] __kmalloc_noprof+0xb6/0x4b0 [ 196.437703][ T9948] ? alloc_workqueue_va+0x45d/0x15d0 [ 196.437792][ T9948] alloc_workqueue_va+0x45d/0x15d0 [ 196.437869][ T9948] alloc_workqueue_noprof+0x84/0xb0 [ 196.437898][ T9948] ? nci_hci_allocate+0x33/0x180 [ 196.437971][ T9948] ? should_failslab+0x8c/0xb0 [ 196.438014][ T9948] nci_register_device+0x2f5/0x510 [ 196.438112][ T9948] virtual_ncidev_open+0xca/0x130 [ 196.438158][ T9948] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 196.438275][ T9948] misc_open+0x1df/0x220 [ 196.438308][ T9948] chrdev_open+0x2eb/0x3a0 [ 196.438335][ T9948] do_dentry_open+0x496/0xa40 [ 196.438367][ T9948] ? __pfx_chrdev_open+0x10/0x10 [ 196.438396][ T9948] vfs_open_consume+0x46/0x1f0 [ 196.438470][ T9948] path_openat+0xc16/0x11c0 [ 196.438601][ T9948] do_file_open+0x16c/0x290 [ 196.438647][ T9948] do_sys_openat2+0xa1/0x140 [ 196.438691][ T9948] __x64_sys_openat+0xf2/0x120 [ 196.438728][ T9948] x64_sys_call+0x1f72/0x2550 [ 196.438890][ T9948] do_syscall_64+0x112/0x360 [ 196.438936][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.438966][ T9948] RIP: 0033:0x7fab5287f559 [ 196.438989][ T9948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.439035][ T9948] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.439074][ T9948] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 196.439089][ T9948] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 196.439188][ T9948] RBP: 00007fab52916b50 R08: 0000000000000000 R09: 0000000000000000 [ 196.439206][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.439220][ T9948] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 196.439248][ T9948] [ 196.472539][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.472539][ T9921] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 196.495947][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.495947][ T9921] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 196.496112][ T9921] buffer_io_error: 2 callbacks suppressed [ 196.496147][ T9921] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 196.496201][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.496201][ T9921] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 196.496297][ T9921] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 196.498208][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.498208][ T9921] loop6: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 196.499120][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.499120][ T9921] loop6: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 196.504968][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.504968][ T9921] loop6: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 196.504996][ T9921] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 196.505013][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.505013][ T9921] loop6: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 196.505274][ T9921] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 196.522308][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.522308][ T9921] loop6: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 196.536026][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.536026][ T9921] loop6: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 196.536105][ T9921] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 196.536160][ T9921] syz.6.2168: attempt to access beyond end of device [ 196.536160][ T9921] loop6: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 196.536371][ T9921] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 196.565296][ T9921] Buffer I/O error on dev loop6, logical block 107, lost async page write [ 196.565377][ T9921] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 196.578963][ T9921] Buffer I/O error on dev loop6, logical block 119, lost async page write [ 196.579509][ T9921] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 196.884669][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 196.884721][ T29] audit: type=1400 audit(1793490342.742:1612): avc: denied { read } for pid=9960 comm="syz.4.2176" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.888233][ T29] audit: type=1400 audit(1793490342.742:1613): avc: denied { open } for pid=9960 comm="syz.4.2176" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 197.104561][ T29] audit: type=1400 audit(1793490342.962:1614): avc: denied { write } for pid=9954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.190760][ T29] audit: type=1400 audit(1793490343.052:1615): avc: denied { write } for pid=9982 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.237106][ T9988] FAULT_INJECTION: forcing a failure. [ 197.237106][ T9988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.237148][ T9988] CPU: 1 UID: 0 PID: 9988 Comm: syz.6.2183 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 197.237189][ T9988] Tainted: [W]=WARN [ 197.237198][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.237216][ T9988] Call Trace: [ 197.237261][ T9988] [ 197.237271][ T9988] __dump_stack+0x1d/0x30 [ 197.237299][ T9988] dump_stack_lvl+0x95/0xd0 [ 197.237326][ T9988] dump_stack+0x15/0x1b [ 197.237357][ T9988] should_fail_ex+0x259/0x270 [ 197.237481][ T9988] should_fail+0xb/0x20 [ 197.237510][ T9988] should_fail_usercopy+0x1a/0x20 [ 197.237547][ T9988] _copy_from_user+0x1c/0xb0 [ 197.237734][ T9988] vmemdup_user+0x5e/0xd0 [ 197.237887][ T9988] path_setxattrat+0x1b3/0x320 [ 197.237948][ T9988] __x64_sys_setxattr+0x6e/0x90 [ 197.237982][ T9988] x64_sys_call+0xf6c/0x2550 [ 197.238020][ T9988] do_syscall_64+0x112/0x360 [ 197.238154][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.238186][ T9988] RIP: 0033:0x7f168953f559 [ 197.238208][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.238235][ T9988] RSP: 002b:00007f1687f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 197.238263][ T9988] RAX: ffffffffffffffda RBX: 00007f16897c5fa0 RCX: 00007f168953f559 [ 197.238292][ T9988] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 197.238312][ T9988] RBP: 00007f16895d6b50 R08: 0000000000000001 R09: 0000000000000000 [ 197.238330][ T9988] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 197.238392][ T9988] R13: 00007f16897c6038 R14: 00007f16897c5fa0 R15: 00007ffde42055e8 [ 197.238421][ T9988] [ 197.427228][ T9989] can0: slcan on ttyS3. [ 197.481780][ T9992] can0 (unregistered): slcan off ttyS3. [ 197.655886][ T29] audit: type=1326 audit(1793490343.512:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 197.657386][ T29] audit: type=1326 audit(1793490343.512:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 197.793061][T10008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 197.793155][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.793205][T10008] vhci_hcd vhci_hcd.0: Device attached [ 197.798675][ T29] audit: type=1326 audit(1793490343.652:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 197.798716][ T29] audit: type=1326 audit(1793490343.652:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.2187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 197.845018][T10009] vhci_hcd: connection closed [ 197.845819][ T12] vhci_hcd vhci_hcd.4: stop threads [ 197.845842][ T12] vhci_hcd vhci_hcd.4: release socket [ 197.845917][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 197.937600][ T29] audit: type=1400 audit(1793490343.792:1620): avc: denied { watch watch_reads } for pid=10011 comm="syz.2.2191" path="/proc/1072" dev="proc" ino=26432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 197.986059][T10014] loop3: detected capacity change from 0 to 256 [ 198.037416][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2195'. [ 198.381032][T10034] loop4: detected capacity change from 0 to 512 [ 198.381541][T10034] vfat: Unknown parameter '01777777777777777777777' [ 198.409393][T10032] can0: slcan on ttyS3. [ 198.453046][T10020] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.490634][T10035] can0 (unregistered): slcan off ttyS3. [ 198.854030][ T29] audit: type=1326 audit(1793490344.712:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.2.2204" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef36bbf559 code=0x7ffc0000 [ 199.277464][T10061] loop6: detected capacity change from 0 to 1024 [ 199.300896][T10061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.375387][T10068] can0: slcan on ttyS3. [ 199.460961][T10068] can0 (unregistered): slcan off ttyS3. [ 199.594898][T10081] SELinux: Context OPcǙ?s U^tQ`w& m [ 199.594898][T10081] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 199.848750][ T3404] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.897977][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'. [ 200.236432][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.289172][T10139] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.316653][T10137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 200.316743][T10137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.317092][T10137] vhci_hcd vhci_hcd.0: Device attached [ 200.340767][T10139] FAULT_INJECTION: forcing a failure. [ 200.340767][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 200.340807][T10139] CPU: 0 UID: 0 PID: 10139 Comm: syz.3.2224 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.340946][T10139] Tainted: [W]=WARN [ 200.340956][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.340971][T10139] Call Trace: [ 200.340978][T10139] [ 200.340987][T10139] __dump_stack+0x1d/0x30 [ 200.341016][T10139] dump_stack_lvl+0x95/0xd0 [ 200.341048][T10139] dump_stack+0x15/0x1b [ 200.341121][T10139] should_fail_ex+0x259/0x270 [ 200.341231][T10139] ? kstrdup_const+0x3e/0x50 [ 200.341254][T10139] should_failslab+0x8c/0xb0 [ 200.341290][T10139] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 200.341358][T10139] ? kstrdup_const+0x3e/0x50 [ 200.341388][T10139] kstrdup+0x3e/0xd0 [ 200.341414][T10139] kstrdup_const+0x3e/0x50 [ 200.341439][T10139] __kernfs_new_node+0x42/0x440 [ 200.341490][T10139] ? rb_insert_color+0x6e/0x2a0 [ 200.341572][T10139] ? __rcu_read_unlock+0x4e/0x70 [ 200.341606][T10139] ? up_write+0x19/0x60 [ 200.341637][T10139] ? kernfs_link_sibling+0x2f5/0x320 [ 200.341670][T10139] ? __rcu_read_unlock+0x4e/0x70 [ 200.341735][T10139] kernfs_new_node+0x107/0x140 [ 200.341774][T10139] __kernfs_create_file+0x4b/0x180 [ 200.341815][T10139] ? __pfx_port_attr_show+0x10/0x10 [ 200.341851][T10139] ? __pfx_port_attr_store+0x10/0x10 [ 200.341887][T10139] sysfs_add_file_mode_ns+0x132/0x1b0 [ 200.342013][T10139] internal_create_group+0x43e/0x9e0 [ 200.342036][T10139] ? kobject_add+0xdb/0x150 [ 200.342088][T10139] sysfs_create_groups+0x3f/0xf0 [ 200.342116][T10139] ib_setup_port_attrs+0xa15/0x14a0 [ 200.342163][T10139] ? kobject_put+0x108/0x180 [ 200.342192][T10139] add_one_compat_dev+0x25c/0x360 [ 200.342255][T10139] rdma_dev_init_net+0x17d/0x210 [ 200.342287][T10139] ops_init+0x22a/0x2e0 [ 200.342359][T10139] setup_net+0x9f/0x230 [ 200.342449][T10139] copy_net_ns+0x339/0x490 [ 200.342523][T10139] create_new_namespaces+0x1f6/0x420 [ 200.342556][T10139] unshare_nsproxy_namespaces+0x115/0x150 [ 200.342601][T10139] ksys_unshare+0x3a3/0x690 [ 200.342663][T10139] __x64_sys_unshare+0x1f/0x30 [ 200.342703][T10139] x64_sys_call+0x1e33/0x2550 [ 200.342758][T10139] do_syscall_64+0x112/0x360 [ 200.342793][T10139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.342822][T10139] RIP: 0033:0x7f83804df559 [ 200.342840][T10139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.342860][T10139] RSP: 002b:00007f837ef37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 200.342883][T10139] RAX: ffffffffffffffda RBX: 00007f8380765fa0 RCX: 00007f83804df559 [ 200.342898][T10139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 200.342964][T10139] RBP: 00007f8380576b50 R08: 0000000000000000 R09: 0000000000000000 [ 200.342979][T10139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.342993][T10139] R13: 00007f8380766038 R14: 00007f8380765fa0 R15: 00007ffe1b2e5748 [ 200.343015][T10139] [ 200.358316][T10142] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 200.358440][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.358525][T10142] vhci_hcd vhci_hcd.0: Device attached [ 200.529276][T10144] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.582023][ T5016] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 200.709298][T10137] xt_CT: No such helper "snmp_trap" [ 200.744373][T10140] vhci_hcd: connection reset by peer [ 200.744625][ T32] vhci_hcd vhci_hcd.2: stop threads [ 200.744645][ T32] vhci_hcd vhci_hcd.2: release socket [ 200.744668][ T32] vhci_hcd vhci_hcd.2: disconnect device [ 200.744730][T10143] vhci_hcd: connection closed [ 200.745025][ T32] vhci_hcd vhci_hcd.2: stop threads [ 200.745042][ T32] vhci_hcd vhci_hcd.2: release socket [ 200.745063][ T32] vhci_hcd vhci_hcd.2: disconnect device [ 201.070148][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 201.167523][T10178] FAULT_INJECTION: forcing a failure. [ 201.167523][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 201.167563][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.4.2238 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 201.167732][T10178] Tainted: [W]=WARN [ 201.167742][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.167760][T10178] Call Trace: [ 201.167769][T10178] [ 201.167780][T10178] __dump_stack+0x1d/0x30 [ 201.167830][T10178] dump_stack_lvl+0x95/0xd0 [ 201.167861][T10178] dump_stack+0x15/0x1b [ 201.167890][T10178] should_fail_ex+0x259/0x270 [ 201.167927][T10178] ? call_usermodehelper_setup+0x72/0x190 [ 201.167956][T10178] should_failslab+0x8c/0xb0 [ 201.168151][T10178] __kmalloc_cache_noprof+0x5d/0x3e0 [ 201.168219][T10178] ? call_usermodehelper_setup+0x72/0x190 [ 201.168249][T10178] ? __pfx_free_modprobe_argv+0x10/0x10 [ 201.168289][T10178] call_usermodehelper_setup+0x72/0x190 [ 201.168378][T10178] __request_module+0x264/0x3c0 [ 201.168498][T10178] ? capable+0x81/0xb0 [ 201.168536][T10178] tcp_set_ulp+0x8f/0x230 [ 201.168571][T10178] do_tcp_setsockopt+0x358/0x16c0 [ 201.168627][T10178] ? selinux_socket_setsockopt+0x1ea/0x220 [ 201.168682][T10178] tcp_setsockopt+0x51/0xb0 [ 201.168793][T10178] sock_common_setsockopt+0x69/0x80 [ 201.168832][T10178] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 201.168883][T10178] __sys_setsockopt+0x184/0x200 [ 201.168932][T10178] __x64_sys_setsockopt+0x64/0x80 [ 201.169015][T10178] x64_sys_call+0x248f/0x2550 [ 201.169053][T10178] do_syscall_64+0x112/0x360 [ 201.169122][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.169153][T10178] RIP: 0033:0x7fab5287f559 [ 201.169183][T10178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.169208][T10178] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.169237][T10178] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 201.169267][T10178] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000005 [ 201.169285][T10178] RBP: 00007fab52916b50 R08: 0000000000000004 R09: 0000000000000000 [ 201.169303][T10178] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000000 [ 201.169319][T10178] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 201.169343][T10178] [ 201.620024][T10193] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.750357][T10199] ip_tables: iptables: counters copy to user failed while replacing table [ 201.833790][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 202.113770][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 202.153751][T10212] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2251'. [ 202.154089][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2251'. [ 202.305832][T10216] loop3: detected capacity change from 0 to 512 [ 202.333578][T10216] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 202.333841][T10216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.372203][T10223] syz.2.2256(10223): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 202.426171][T10216] EXT4-fs (loop3): 1 truncate cleaned up [ 202.455033][T10216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.639867][T10234] loop4: detected capacity change from 0 to 128 [ 203.169747][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.259332][T10239] FAULT_INJECTION: forcing a failure. [ 203.259332][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 203.259435][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.3.2261 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 203.259470][T10239] Tainted: [W]=WARN [ 203.259477][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.259493][T10239] Call Trace: [ 203.259502][T10239] [ 203.259528][T10239] __dump_stack+0x1d/0x30 [ 203.259555][T10239] dump_stack_lvl+0x95/0xd0 [ 203.259578][T10239] dump_stack+0x15/0x1b [ 203.259600][T10239] should_fail_ex+0x259/0x270 [ 203.259638][T10239] ? __kernfs_new_node+0x70/0x440 [ 203.259675][T10239] should_failslab+0x8c/0xb0 [ 203.259717][T10239] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 203.259849][T10239] ? __kernfs_new_node+0x70/0x440 [ 203.259874][T10239] __kernfs_new_node+0x70/0x440 [ 203.259904][T10239] ? kernfs_new_node+0x35/0x140 [ 203.259954][T10239] kernfs_new_node+0x107/0x140 [ 203.259985][T10239] __kernfs_create_file+0x4b/0x180 [ 203.260030][T10239] ? __pfx_dev_attr_show+0x10/0x10 [ 203.260133][T10239] ? __pfx_dev_attr_store+0x10/0x10 [ 203.260169][T10239] sysfs_add_file_mode_ns+0x132/0x1b0 [ 203.260231][T10239] internal_create_group+0x43e/0x9e0 [ 203.260253][T10239] ? sysfs_create_groups+0x24/0xf0 [ 203.260351][T10239] sysfs_create_groups+0x3f/0xf0 [ 203.260380][T10239] device_add_attrs+0xf2/0x3f0 [ 203.260405][T10239] device_add+0x37a/0x790 [ 203.260451][T10239] netdev_register_kobject+0x127/0x240 [ 203.260480][T10239] register_netdevice+0xc68/0x13f0 [ 203.260530][T10239] register_vlan_dev+0x21d/0x470 [ 203.260563][T10239] vlan_newlink+0x32a/0x370 [ 203.260665][T10239] ? __pfx_vlan_newlink+0x10/0x10 [ 203.260744][T10239] rtnl_newlink_create+0x1e4/0x4a0 [ 203.260849][T10239] ? security_capable+0x7b/0x90 [ 203.260874][T10239] ? netlink_ns_capable+0x86/0xa0 [ 203.260914][T10239] rtnl_newlink+0x1255/0x1510 [ 203.260959][T10239] ? lapic_next_event+0x11/0x20 [ 203.261017][T10239] ? clockevents_program_event+0x2fd/0x340 [ 203.261109][T10239] ? tick_program_event+0x79/0xc0 [ 203.261205][T10239] ? _raw_spin_unlock+0x9/0x30 [ 203.261231][T10239] ? __hrtimer_rearm_deferred+0x571/0x650 [ 203.261281][T10239] ? __rcu_read_unlock+0x4e/0x70 [ 203.261307][T10239] ? irqentry_exit+0x58f/0x610 [ 203.261381][T10239] ? cred_has_capability+0x224/0x2a0 [ 203.261427][T10239] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 203.261465][T10239] ? __pfx_rtnl_newlink+0x10/0x10 [ 203.261520][T10239] ? rtnetlink_rcv_msg+0x624/0x720 [ 203.261547][T10239] ? __tsan_unaligned_volatile_read4+0x132/0x190 [ 203.261582][T10239] ? __pfx_rtnl_newlink+0x10/0x10 [ 203.261629][T10239] rtnetlink_rcv_msg+0x64b/0x720 [ 203.261668][T10239] ? irqentry_exit+0x58f/0x610 [ 203.261735][T10239] netlink_rcv_skb+0x11e/0x220 [ 203.261760][T10239] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.261801][T10239] rtnetlink_rcv+0x1c/0x30 [ 203.261925][T10239] netlink_unicast+0x665/0x740 [ 203.261970][T10239] netlink_sendmsg+0x5ef/0x740 [ 203.261994][T10239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.262053][T10239] ____sys_sendmsg+0x54a/0x590 [ 203.262147][T10239] ___sys_sendmsg+0x195/0x1e0 [ 203.262187][T10239] __x64_sys_sendmsg+0xd4/0x160 [ 203.262220][T10239] x64_sys_call+0x22ab/0x2550 [ 203.262281][T10239] do_syscall_64+0x112/0x360 [ 203.262386][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.262483][T10239] RIP: 0033:0x7f83804df559 [ 203.262505][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.262538][T10239] RSP: 002b:00007f837ef37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.262565][T10239] RAX: ffffffffffffffda RBX: 00007f8380765fa0 RCX: 00007f83804df559 [ 203.262592][T10239] RDX: 0000000008000002 RSI: 0000200000000340 RDI: 0000000000000005 [ 203.262610][T10239] RBP: 00007f8380576b50 R08: 0000000000000000 R09: 0000000000000000 [ 203.262629][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.262646][T10239] R13: 00007f8380766038 R14: 00007f8380765fa0 R15: 00007ffe1b2e5748 [ 203.262686][T10239] [ 203.701165][T10257] FAULT_INJECTION: forcing a failure. [ 203.701165][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.701287][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.6.2268 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 203.701330][T10257] Tainted: [W]=WARN [ 203.701340][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.701358][T10257] Call Trace: [ 203.701367][T10257] [ 203.701375][T10257] __dump_stack+0x1d/0x30 [ 203.701428][T10257] dump_stack_lvl+0x95/0xd0 [ 203.701463][T10257] dump_stack+0x15/0x1b [ 203.701486][T10257] should_fail_ex+0x259/0x270 [ 203.701515][T10257] should_fail+0xb/0x20 [ 203.701564][T10257] should_fail_usercopy+0x1a/0x20 [ 203.701593][T10257] _copy_from_user+0x1c/0xb0 [ 203.701686][T10257] get_itimerspec64+0x4c/0x1b0 [ 203.701776][T10257] __x64_sys_timer_settime+0x9a/0x160 [ 203.701810][T10257] x64_sys_call+0x158e/0x2550 [ 203.701883][T10257] do_syscall_64+0x112/0x360 [ 203.701927][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.701949][T10257] RIP: 0033:0x7f168953f559 [ 203.701964][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.702049][T10257] RSP: 002b:00007f1687f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 203.702077][T10257] RAX: ffffffffffffffda RBX: 00007f16897c5fa0 RCX: 00007f168953f559 [ 203.702200][T10257] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 203.702215][T10257] RBP: 00007f16895d6b50 R08: 0000000000000000 R09: 0000000000000000 [ 203.702228][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.702249][T10257] R13: 00007f16897c6038 R14: 00007f16897c5fa0 R15: 00007ffde42055e8 [ 203.702277][T10257] [ 203.834828][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 203.834872][ T29] audit: type=1326 audit(1793490349.682:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.835667][ T29] audit: type=1326 audit(1793490349.682:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.836095][ T29] audit: type=1326 audit(1793490349.682:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.837720][ T29] audit: type=1326 audit(1793490349.682:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.838197][ T29] audit: type=1326 audit(1793490349.682:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.840565][ T29] audit: type=1326 audit(1793490349.682:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.841194][ T29] audit: type=1326 audit(1793490349.682:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.841640][ T29] audit: type=1326 audit(1793490349.682:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.844642][ T29] audit: type=1326 audit(1793490349.702:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.845964][ T29] audit: type=1326 audit(1793490349.702:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10263 comm="syz.3.2281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83804df559 code=0x7ffc0000 [ 203.867358][T10265] FAULT_INJECTION: forcing a failure. [ 203.867358][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 203.867471][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.3.2281 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 203.867574][T10265] Tainted: [W]=WARN [ 203.867597][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.867639][T10265] Call Trace: [ 203.867661][T10265] [ 203.867712][T10265] __dump_stack+0x1d/0x30 [ 203.867798][T10265] dump_stack_lvl+0x95/0xd0 [ 203.867884][T10265] dump_stack+0x15/0x1b [ 203.867966][T10265] should_fail_ex+0x259/0x270 [ 203.868132][T10265] ? sidtab_sid2str_get+0xa0/0x130 [ 203.868307][T10265] should_failslab+0x8c/0xb0 [ 203.868422][T10265] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 203.868624][T10265] ? sidtab_sid2str_get+0xa0/0x130 [ 203.868700][T10265] kmemdup_noprof+0x2b/0x70 [ 203.868822][T10265] sidtab_sid2str_get+0xa0/0x130 [ 203.868900][T10265] security_sid_to_context_core+0x179/0x2d0 [ 203.868984][T10265] security_sid_to_context+0x27/0x40 [ 203.869056][T10265] selinux_lsmprop_to_secctx+0x67/0xf0 [ 203.869133][T10265] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 203.869342][T10265] audit_log_subj_ctx+0xa4/0x3e0 [ 203.869456][T10265] audit_log_task_context+0x48/0x70 [ 203.869592][T10265] audit_log_task+0xf3/0x240 [ 203.869706][T10265] audit_seccomp+0x6a/0x110 [ 203.869837][T10265] __seccomp_filter+0x8f8/0x13d0 [ 203.870006][T10265] ? xfd_validate_state+0x45/0xf0 [ 203.870076][T10265] __seccomp_permit_syscall+0x7d/0x150 [ 203.870161][T10265] do_syscall_64+0xca/0x360 [ 203.870275][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.870349][T10265] RIP: 0033:0x7f83804df559 [ 203.870447][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.870510][T10265] RSP: 002b:00007f837ef370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.870623][T10265] RAX: ffffffffffffffda RBX: 00007f8380765fa8 RCX: 00007f83804df559 [ 203.870716][T10265] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8380765fa8 [ 203.870759][T10265] RBP: 00007f8380765fa0 R08: 0000000000000000 R09: 0000000000000000 [ 203.870823][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.870884][T10265] R13: 00007f8380766038 R14: 00007ffe1b2e5660 R15: 00007ffe1b2e5748 [ 203.870949][T10265] [ 203.948801][T10267] loop6: detected capacity change from 0 to 512 [ 203.959753][T10267] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 203.959813][T10267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 203.977073][T10267] EXT4-fs (loop6): 1 truncate cleaned up [ 204.006106][T10267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.198884][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.375564][T10278] loop5: detected capacity change from 0 to 1024 [ 204.394908][T10278] EXT4-fs: Ignoring removed bh option [ 204.469944][T10278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 204.470248][T10278] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.524214][T10275] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 3: comm syz.5.2284: lblock 3 mapped to illegal pblock 3 (length 3) [ 204.524665][T10275] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 204.524693][T10275] EXT4-fs (loop5): This should not happen!! Data will be lost [ 204.524693][T10275] [ 204.598710][ T4288] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 204.599025][ T4288] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 204.599083][ T4288] EXT4-fs (loop5): This should not happen!! Data will be lost [ 204.599083][ T4288] [ 204.600251][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.845653][T10293] loop5: detected capacity change from 0 to 512 [ 204.864519][T10293] ext4: Unknown parameter 'fowner>00000000000000000000' [ 204.864704][T10297] loop4: detected capacity change from 0 to 164 [ 204.888420][T10297] rock: directory entry would overflow storage [ 204.888435][T10297] rock: sig=0x66, size=4, remaining=3 [ 205.055270][T10301] loop5: detected capacity change from 0 to 512 [ 205.174927][T10306] FAULT_INJECTION: forcing a failure. [ 205.174927][T10306] name failslab, interval 1, probability 0, space 0, times 0 [ 205.175044][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.3.2286 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 205.175084][T10306] Tainted: [W]=WARN [ 205.175100][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.175119][T10306] Call Trace: [ 205.175130][T10306] [ 205.175141][T10306] __dump_stack+0x1d/0x30 [ 205.175177][T10306] dump_stack_lvl+0x95/0xd0 [ 205.175227][T10306] dump_stack+0x15/0x1b [ 205.175350][T10306] should_fail_ex+0x259/0x270 [ 205.175525][T10306] ? __memcg_list_lru_alloc+0x288/0x470 [ 205.175572][T10306] should_failslab+0x8c/0xb0 [ 205.175616][T10306] __kmalloc_noprof+0xb6/0x4b0 [ 205.175703][T10306] ? __memcg_list_lru_alloc+0x288/0x470 [ 205.175752][T10306] __memcg_list_lru_alloc+0x288/0x470 [ 205.175802][T10306] memcg_list_lru_alloc+0x88/0xa0 [ 205.175953][T10306] __memcg_slab_post_alloc_hook+0x23e/0x8c0 [ 205.175994][T10306] ? __futex_wait+0x244/0x2a0 [ 205.176052][T10306] ? should_fail_ex+0xdb/0x270 [ 205.176091][T10306] kmem_cache_alloc_lru_noprof+0x1d6/0x3e0 [ 205.176208][T10306] ? __d_alloc+0x34/0x320 [ 205.176242][T10306] ? __d_alloc+0x34/0x320 [ 205.176277][T10306] __d_alloc+0x34/0x320 [ 205.176390][T10306] d_alloc+0x2e/0x100 [ 205.176436][T10306] lookup_one_qstr_excl+0x95/0x240 [ 205.176477][T10306] start_creating_noperm+0x64/0xa0 [ 205.176511][T10306] do_mq_open+0x161/0x4d0 [ 205.176579][T10306] __x64_sys_mq_open+0xcb/0x100 [ 205.176691][T10306] x64_sys_call+0x70f/0x2550 [ 205.176722][T10306] do_syscall_64+0x112/0x360 [ 205.176756][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.176841][T10306] RIP: 0033:0x7f83804df559 [ 205.176865][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.176928][T10306] RSP: 002b:00007f837ef37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 205.176949][T10306] RAX: ffffffffffffffda RBX: 00007f8380765fa0 RCX: 00007f83804df559 [ 205.176972][T10306] RDX: 0000000000000030 RSI: 00000000000008c2 RDI: 0000200000000000 [ 205.177042][T10306] RBP: 00007f8380576b50 R08: 0000000000000000 R09: 0000000000000000 [ 205.177062][T10306] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 205.177081][T10306] R13: 00007f8380766038 R14: 00007f8380765fa0 R15: 00007ffe1b2e5748 [ 205.177104][T10306] [ 205.247970][T10301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.253232][T10301] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.396792][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.700487][ T5016] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 206.215735][T10328] loop3: detected capacity change from 0 to 164 [ 206.312455][T10337] TCP: TCP_TX_DELAY enabled [ 206.454108][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2303'. [ 206.470608][T10350] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2303'. [ 206.470899][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2303'. [ 206.545517][T10346] FAULT_INJECTION: forcing a failure. [ 206.545517][T10346] name failslab, interval 1, probability 0, space 0, times 0 [ 206.546152][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.2.2301 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 206.546192][T10346] Tainted: [W]=WARN [ 206.546199][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.546219][T10346] Call Trace: [ 206.546229][T10346] [ 206.546245][T10346] __dump_stack+0x1d/0x30 [ 206.546277][T10346] dump_stack_lvl+0x95/0xd0 [ 206.546309][T10346] dump_stack+0x15/0x1b [ 206.546338][T10346] should_fail_ex+0x259/0x270 [ 206.546431][T10346] ? __kernfs_new_node+0x70/0x440 [ 206.546454][T10346] should_failslab+0x8c/0xb0 [ 206.546489][T10346] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 206.546610][T10346] ? __kernfs_new_node+0x70/0x440 [ 206.546637][T10346] __kernfs_new_node+0x70/0x440 [ 206.546665][T10346] ? __rcu_read_unlock+0x4e/0x70 [ 206.546714][T10346] ? up_write+0x19/0x60 [ 206.546781][T10346] ? kernfs_link_sibling+0x2f5/0x320 [ 206.546811][T10346] ? __rcu_read_unlock+0x4e/0x70 [ 206.546842][T10346] kernfs_new_node+0x107/0x140 [ 206.546913][T10346] __kernfs_create_file+0x4b/0x180 [ 206.547001][T10346] ? __pfx_dev_attr_show+0x10/0x10 [ 206.547038][T10346] ? __pfx_dev_attr_store+0x10/0x10 [ 206.547071][T10346] sysfs_add_file_mode_ns+0x132/0x1b0 [ 206.547175][T10346] internal_create_group+0x43e/0x9e0 [ 206.547210][T10346] sysfs_create_groups+0x3f/0xf0 [ 206.547252][T10346] device_add_attrs+0xf2/0x3f0 [ 206.547275][T10346] device_add+0x37a/0x790 [ 206.547295][T10346] netdev_register_kobject+0x127/0x240 [ 206.547318][T10346] register_netdevice+0xc68/0x13f0 [ 206.547370][T10346] register_vlan_dev+0x21d/0x470 [ 206.547405][T10346] vlan_newlink+0x32a/0x370 [ 206.547439][T10346] ? __pfx_vlan_newlink+0x10/0x10 [ 206.547506][T10346] rtnl_newlink_create+0x1e4/0x4a0 [ 206.547543][T10346] rtnl_newlink+0x1255/0x1510 [ 206.547588][T10346] ? __memcg_slab_free_hook+0x154/0x340 [ 206.547694][T10346] ? __rcu_read_unlock+0x4e/0x70 [ 206.547729][T10346] ? avc_has_perm_noaudit+0xac/0x160 [ 206.547766][T10346] ? cred_has_capability+0x224/0x2a0 [ 206.547835][T10346] ? selinux_capable+0x31/0x40 [ 206.547932][T10346] ? security_capable+0x7b/0x90 [ 206.547964][T10346] ? ns_capable+0x80/0xb0 [ 206.547995][T10346] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.548033][T10346] rtnetlink_rcv_msg+0x64b/0x720 [ 206.548160][T10346] netlink_rcv_skb+0x11e/0x220 [ 206.548187][T10346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.548232][T10346] rtnetlink_rcv+0x1c/0x30 [ 206.548268][T10346] netlink_unicast+0x665/0x740 [ 206.548315][T10346] netlink_sendmsg+0x5ef/0x740 [ 206.548350][T10346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.548442][T10346] ____sys_sendmsg+0x54a/0x590 [ 206.548504][T10346] ___sys_sendmsg+0x195/0x1e0 [ 206.548550][T10346] __x64_sys_sendmsg+0xd4/0x160 [ 206.548583][T10346] x64_sys_call+0x22ab/0x2550 [ 206.548621][T10346] do_syscall_64+0x112/0x360 [ 206.548715][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.548763][T10346] RIP: 0033:0x7fef36bbf559 [ 206.548784][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.548811][T10346] RSP: 002b:00007fef3560f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.548839][T10346] RAX: ffffffffffffffda RBX: 00007fef36e45fa0 RCX: 00007fef36bbf559 [ 206.548861][T10346] RDX: 0000000008000002 RSI: 0000200000000340 RDI: 0000000000000005 [ 206.548880][T10346] RBP: 00007fef36c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 206.548926][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.548943][T10346] R13: 00007fef36e46038 R14: 00007fef36e45fa0 R15: 00007ffda2f6ab88 [ 206.549005][T10346] [ 207.414536][T10361] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.078037][T10398] bond7 (unregistering): Released all slaves [ 208.135153][T10400] loop6: detected capacity change from 0 to 1024 [ 208.327448][T10419] loop3: detected capacity change from 0 to 512 [ 208.334654][T10400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.335148][T10400] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.382409][T10419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.382527][T10419] ext4 filesystem being mounted at /470/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.434832][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.473499][T10423] loop6: detected capacity change from 0 to 256 [ 208.722574][T10430] loop5: detected capacity change from 0 to 512 [ 208.743825][T10430] tipc: Enabled bearer , priority 1 [ 208.811348][T10434] FAULT_INJECTION: forcing a failure. [ 208.811348][T10434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.811536][T10434] CPU: 1 UID: 0 PID: 10434 Comm: syz.5.2330 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 208.811602][T10434] Tainted: [W]=WARN [ 208.811644][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.811657][T10434] Call Trace: [ 208.811667][T10434] [ 208.811675][T10434] __dump_stack+0x1d/0x30 [ 208.811759][T10434] dump_stack_lvl+0x95/0xd0 [ 208.811790][T10434] dump_stack+0x15/0x1b [ 208.811820][T10434] should_fail_ex+0x259/0x270 [ 208.811872][T10434] should_fail+0xb/0x20 [ 208.811906][T10434] should_fail_usercopy+0x1a/0x20 [ 208.811950][T10434] _copy_to_user+0x20/0xa0 [ 208.812019][T10434] copy_to_sockptr_offset+0x4c/0x60 [ 208.812063][T10434] ipv6_flowlabel_opt+0x19bb/0x1b30 [ 208.812107][T10434] ? __css_rstat_updated+0xbb/0x280 [ 208.812177][T10434] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 208.812215][T10434] ? __rb_insert_augmented+0x76/0x2c0 [ 208.812261][T10434] ? lock_sock_nested+0x7f/0x110 [ 208.812332][T10434] do_ipv6_setsockopt+0x75d/0x1d30 [ 208.812523][T10434] ? __rcu_read_unlock+0x4e/0x70 [ 208.812558][T10434] ? __rcu_read_unlock+0x4e/0x70 [ 208.812591][T10434] ? avc_has_perm_noaudit+0xac/0x160 [ 208.812694][T10434] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 208.812803][T10434] ipv6_setsockopt+0x59/0x130 [ 208.812829][T10434] rawv6_setsockopt+0x1cc/0x3f0 [ 208.812874][T10434] sock_common_setsockopt+0x69/0x80 [ 208.812929][T10434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.812963][T10434] __sys_setsockopt+0x184/0x200 [ 208.813068][T10434] __x64_sys_setsockopt+0x64/0x80 [ 208.813111][T10434] x64_sys_call+0x248f/0x2550 [ 208.813148][T10434] do_syscall_64+0x112/0x360 [ 208.813238][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.813269][T10434] RIP: 0033:0x7f150bdff559 [ 208.813291][T10434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.813318][T10434] RSP: 002b:00007f150a857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.813404][T10434] RAX: ffffffffffffffda RBX: 00007f150c085fa0 RCX: 00007f150bdff559 [ 208.813424][T10434] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 208.813443][T10434] RBP: 00007f150be96b50 R08: 0000000000000020 R09: 0000000000000000 [ 208.813462][T10434] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 208.813525][T10434] R13: 00007f150c086038 R14: 00007f150c085fa0 R15: 00007ffd73cca888 [ 208.813554][T10434] [ 209.099092][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.138574][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 209.138595][ T29] audit: type=1400 audit(1793490354.992:1687): avc: denied { read } for pid=10438 comm="syz.5.2331" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.160741][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2336'. [ 209.160871][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2336'. [ 209.291996][T10446] loop5: detected capacity change from 0 to 512 [ 209.328835][T10446] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 209.330076][T10446] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 209.444435][T10446] EXT4-fs (loop5): 1 truncate cleaned up [ 209.454068][T10446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.463357][T10450] syzkaller0: entered promiscuous mode [ 209.463415][T10450] syzkaller0: entered allmulticast mode [ 209.477002][T10453] loop6: detected capacity change from 0 to 1024 [ 209.523340][T10453] EXT4-fs: Ignoring removed bh option [ 209.659843][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.690049][T10468] loop3: detected capacity change from 0 to 512 [ 209.704212][T10453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.706431][T10453] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.715032][T10468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.719264][T10468] ext4 filesystem being mounted at /474/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.767415][ T29] audit: type=1400 audit(1793490355.622:1688): avc: denied { write } for pid=10452 comm="syz.6.2338" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.971845][ T12] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 209.972063][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 209.972097][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 209.972097][ T12] [ 209.972855][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.034383][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.215670][T10485] loop6: detected capacity change from 0 to 128 [ 210.311489][T10496] TC_ACT_REPEAT abuse ? [ 210.353982][ T29] audit: type=1400 audit(1793490356.212:1689): avc: denied { load_policy } for pid=10499 comm="syz.4.2355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 210.366358][T10500] SELinux: ebitmap: empty map [ 210.366430][T10500] SELinux: invalid class [ 210.378446][T10500] SELinux: failed to load policy [ 210.795270][ T29] audit: type=1400 audit(1793490356.642:1690): avc: denied { ioctl } for pid=10510 comm="syz.2.2359" path="socket:[28161]" dev="sockfs" ino=28161 ioctlcmd=0x894a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.837582][T10512] netlink: 'syz.2.2359': attribute type 2 has an invalid length. [ 210.837607][T10512] netlink: 'syz.2.2359': attribute type 2 has an invalid length. [ 210.837624][T10512] netlink: 'syz.2.2359': attribute type 2 has an invalid length. [ 210.837641][T10512] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 210.843302][T10503] loop4: detected capacity change from 0 to 512 [ 210.925335][T10503] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 210.925355][T10503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.942373][T10503] EXT4-fs (loop4): 1 truncate cleaned up [ 210.944177][T10503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.130258][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.182445][T10498] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.664370][T10539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2369'. [ 211.762230][T10544] batman_adv: batadv0: Adding interface: syzkaller0 [ 211.762253][T10544] batman_adv: batadv0: Interface activated: syzkaller0 [ 212.039001][T10554] FAULT_INJECTION: forcing a failure. [ 212.039001][T10554] name failslab, interval 1, probability 0, space 0, times 0 [ 212.039102][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.6.2376 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 212.039174][T10554] Tainted: [W]=WARN [ 212.039184][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 212.039203][T10554] Call Trace: [ 212.039213][T10554] [ 212.039224][T10554] __dump_stack+0x1d/0x30 [ 212.039285][T10554] dump_stack_lvl+0x95/0xd0 [ 212.039317][T10554] dump_stack+0x15/0x1b [ 212.039348][T10554] should_fail_ex+0x259/0x270 [ 212.039447][T10554] should_failslab+0x8c/0xb0 [ 212.039491][T10554] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 212.039535][T10554] ? mqueue_alloc_inode+0x34/0x50 [ 212.039665][T10554] ? mqueue_alloc_inode+0x34/0x50 [ 212.039700][T10554] ? __pfx_mqueue_fill_super+0x10/0x10 [ 212.039734][T10554] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 212.039860][T10554] mqueue_alloc_inode+0x34/0x50 [ 212.039893][T10554] alloc_inode+0x40/0x170 [ 212.039920][T10554] new_inode+0x1d/0xe0 [ 212.039952][T10554] ? __pfx_mqueue_fill_super+0x10/0x10 [ 212.040044][T10554] mqueue_fill_super+0x98/0x1e0 [ 212.040074][T10554] ? __pfx_mqueue_fill_super+0x10/0x10 [ 212.040110][T10554] get_tree_nodev+0x89/0x100 [ 212.040192][T10554] mqueue_get_tree+0x5d/0x80 [ 212.040225][T10554] vfs_get_tree+0x57/0x1d0 [ 212.040269][T10554] fc_mount_longterm+0x18/0xb0 [ 212.040376][T10554] mq_init_ns+0x2db/0x370 [ 212.040398][T10554] copy_ipcs+0x26d/0x460 [ 212.040461][T10554] create_new_namespaces+0x121/0x420 [ 212.040515][T10554] unshare_nsproxy_namespaces+0x115/0x150 [ 212.040551][T10554] ksys_unshare+0x3a3/0x690 [ 212.040596][T10554] __x64_sys_unshare+0x1f/0x30 [ 212.040680][T10554] x64_sys_call+0x1e33/0x2550 [ 212.040717][T10554] do_syscall_64+0x112/0x360 [ 212.040761][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.040841][T10554] RIP: 0033:0x7f168953f559 [ 212.040864][T10554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.040891][T10554] RSP: 002b:00007f1687f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 212.040920][T10554] RAX: ffffffffffffffda RBX: 00007f16897c5fa0 RCX: 00007f168953f559 [ 212.041001][T10554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 212.041019][T10554] RBP: 00007f16895d6b50 R08: 0000000000000000 R09: 0000000000000000 [ 212.041065][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.041083][T10554] R13: 00007f16897c6038 R14: 00007f16897c5fa0 R15: 00007ffde42055e8 [ 212.041113][T10554] [ 212.280991][T10543] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 212.313633][T10543] batman_adv: batadv0: Removing interface: syzkaller0 [ 212.574082][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2383'. [ 213.220858][T10587] loop2: detected capacity change from 0 to 512 [ 213.253856][T10588] -1: renamed from syzkaller0 [ 213.355233][ T12] IPVS: starting estimator thread 0... [ 213.440470][T10593] IPVS: using max 1680 ests per chain, 84000 per kthread [ 213.477671][T10598] loop2: detected capacity change from 0 to 164 [ 213.501013][T10598] rock: directory entry would overflow storage [ 213.501027][T10598] rock: sig=0x66, size=4, remaining=3 [ 213.849999][T10611] loop5: detected capacity change from 0 to 256 [ 214.053321][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 214.337042][T10641] xt_hashlimit: size too large, truncated to 1048576 [ 214.337063][T10641] xt_hashlimit: max too large, truncated to 1048576 [ 214.337141][T10641] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 214.390000][T10641] md: md2 stopped. [ 215.298066][T10664] loop4: detected capacity change from 0 to 256 [ 215.735544][ T29] audit: type=1400 audit(1793490361.592:1691): avc: denied { write } for pid=10666 comm="syz.3.2409" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.788913][ T29] audit: type=1400 audit(1793490361.642:1692): avc: denied { ioctl } for pid=10666 comm="syz.3.2409" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x4018920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.980075][ T29] audit: type=1400 audit(1793490361.832:1693): avc: denied { map } for pid=10685 comm="syz.3.2422" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.980114][ T29] audit: type=1400 audit(1793490361.832:1694): avc: denied { write } for pid=10685 comm="syz.3.2422" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.049305][T10677] loop5: detected capacity change from 0 to 164 [ 216.120842][T10677] rock: directory entry would overflow storage [ 216.121050][T10677] rock: sig=0x66, size=4, remaining=3 [ 216.196701][T10697] loop3: detected capacity change from 0 to 1024 [ 216.228636][T10697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.267876][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.331213][T10702] bond6 (unregistering): Released all slaves [ 216.405024][T10709] netlink: 'syz.3.2426': attribute type 2 has an invalid length. [ 216.405184][T10709] netlink: 'syz.3.2426': attribute type 2 has an invalid length. [ 216.405341][T10709] netlink: 'syz.3.2426': attribute type 2 has an invalid length. [ 216.405364][T10709] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 216.447471][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2436'. [ 216.649405][T10720] FAULT_INJECTION: forcing a failure. [ 216.649405][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 216.649437][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.3.2431 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.649476][T10720] Tainted: [W]=WARN [ 216.649487][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.649571][T10720] Call Trace: [ 216.649579][T10720] [ 216.649588][T10720] __dump_stack+0x1d/0x30 [ 216.649620][T10720] dump_stack_lvl+0x95/0xd0 [ 216.649652][T10720] dump_stack+0x15/0x1b [ 216.649680][T10720] should_fail_ex+0x259/0x270 [ 216.649768][T10720] ? x509_cert_parse+0xa7/0x450 [ 216.649801][T10720] should_failslab+0x8c/0xb0 [ 216.649863][T10720] __kmalloc_cache_noprof+0x5d/0x3e0 [ 216.649903][T10720] ? x509_cert_parse+0xa7/0x450 [ 216.649997][T10720] x509_cert_parse+0xa7/0x450 [ 216.650046][T10720] x509_key_preparse+0x3c/0x420 [ 216.650072][T10720] ? selinux_key_permission+0x161/0x190 [ 216.650115][T10720] asymmetric_key_preparse+0x68/0xb0 [ 216.650156][T10720] __key_create_or_update+0x29e/0x820 [ 216.650214][T10720] ? key_task_permission+0x2ac/0x2c0 [ 216.650257][T10720] key_create_or_update+0x42/0x60 [ 216.650336][T10720] __se_sys_add_key+0x2a5/0x360 [ 216.650361][T10720] __x64_sys_add_key+0x67/0x80 [ 216.650385][T10720] x64_sys_call+0x1fa9/0x2550 [ 216.650420][T10720] do_syscall_64+0x112/0x360 [ 216.650465][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.650494][T10720] RIP: 0033:0x7f83804df559 [ 216.650516][T10720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.650541][T10720] RSP: 002b:00007f837ef37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 216.650572][T10720] RAX: ffffffffffffffda RBX: 00007f8380765fa0 RCX: 00007f83804df559 [ 216.650588][T10720] RDX: 00002000000016c0 RSI: 0000000000000000 RDI: 0000200000001680 [ 216.650603][T10720] RBP: 00007f8380576b50 R08: ffffffffffffffff R09: 0000000000000000 [ 216.650618][T10720] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 216.650633][T10720] R13: 00007f8380766038 R14: 00007f8380765fa0 R15: 00007ffe1b2e5748 [ 216.650668][T10720] [ 216.889844][T10726] loop5: detected capacity change from 0 to 512 [ 216.907765][T10726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.907829][T10726] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.938669][T10732] FAULT_INJECTION: forcing a failure. [ 216.938669][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 216.938708][T10732] CPU: 1 UID: 0 PID: 10732 Comm: syz.4.2435 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.938798][T10732] Tainted: [W]=WARN [ 216.938808][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.938822][T10732] Call Trace: [ 216.938829][T10732] [ 216.938837][T10732] __dump_stack+0x1d/0x30 [ 216.938899][T10732] dump_stack_lvl+0x95/0xd0 [ 216.938922][T10732] dump_stack+0x15/0x1b [ 216.938949][T10732] should_fail_ex+0x259/0x270 [ 216.939027][T10732] should_failslab+0x8c/0xb0 [ 216.939066][T10732] __kvmalloc_node_noprof+0x14f/0x5b0 [ 216.939156][T10732] ? nf_hook_entries_grow+0x1cb/0x460 [ 216.939189][T10732] ? nf_hook_entries_grow+0x1cb/0x460 [ 216.939298][T10732] nf_hook_entries_grow+0x1cb/0x460 [ 216.939333][T10732] ? __pfx___nf_hook_entries_free+0x10/0x10 [ 216.939418][T10732] __nf_register_net_hook+0x16e/0x4d0 [ 216.939497][T10732] nf_register_net_hook+0x88/0x130 [ 216.939552][T10732] nf_register_net_hooks+0x44/0x150 [ 216.939581][T10732] xt_register_table+0x3aa/0x530 [ 216.939618][T10732] ip6t_register_table+0xd9/0x180 [ 216.939650][T10732] ip6table_mangle_table_init+0x4d/0x70 [ 216.939683][T10732] xt_find_table_lock+0x1a5/0x2c0 [ 216.939767][T10732] do_ip6t_get_ctl+0x540/0xcb0 [ 216.939793][T10732] ? should_fail_ex+0xdb/0x270 [ 216.939877][T10732] ? __rcu_read_unlock+0x4e/0x70 [ 216.939905][T10732] nf_getsockopt+0x190/0x1b0 [ 216.939941][T10732] ipv6_getsockopt+0x170/0x1e0 [ 216.940027][T10732] udpv6_getsockopt+0xa5/0x230 [ 216.940060][T10732] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 216.940095][T10732] sock_common_getsockopt+0x60/0x70 [ 216.940128][T10732] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 216.940213][T10732] do_sock_getsockopt+0x2ce/0x350 [ 216.940270][T10732] __x64_sys_getsockopt+0x11d/0x1a0 [ 216.940380][T10732] x64_sys_call+0x1032/0x2550 [ 216.940414][T10732] do_syscall_64+0x112/0x360 [ 216.940454][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.940492][T10732] RIP: 0033:0x7fab5287f559 [ 216.940514][T10732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.940534][T10732] RSP: 002b:00007fab512cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 216.940555][T10732] RAX: ffffffffffffffda RBX: 00007fab52b05fa0 RCX: 00007fab5287f559 [ 216.940570][T10732] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000006 [ 216.940622][T10732] RBP: 00007fab52916b50 R08: 0000200000000f80 R09: 0000000000000000 [ 216.940636][T10732] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 216.940649][T10732] R13: 00007fab52b06038 R14: 00007fab52b05fa0 R15: 00007ffdc17556f8 [ 216.940670][T10732] [ 217.083264][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.314791][T10745] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 217.315034][T10745] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 217.315061][T10745] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 217.315220][T10745] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 217.584838][T10763] loop6: detected capacity change from 0 to 512 [ 217.629801][T10763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.629881][T10763] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.645763][T10754] loop4: detected capacity change from 0 to 512 [ 217.704677][T10760] mmap: syz.6.2446 (10760): VmData 29265920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 217.742461][ T29] audit: type=1400 audit(1793490363.592:1695): avc: denied { create } for pid=10751 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 217.742891][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.822720][T10772] loop6: detected capacity change from 0 to 512 [ 217.830167][T10772] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 217.830219][T10772] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 217.928498][T10772] EXT4-fs (loop6): 1 truncate cleaned up [ 217.929008][T10772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.058781][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.185031][T10788] loop6: detected capacity change from 0 to 512 [ 218.248212][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2457'. [ 218.408581][T10795] FAULT_INJECTION: forcing a failure. [ 218.408581][T10795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.408623][T10795] CPU: 1 UID: 0 PID: 10795 Comm: syz.5.2468 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 218.408737][T10795] Tainted: [W]=WARN [ 218.408747][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.408766][T10795] Call Trace: [ 218.408775][T10795] [ 218.408785][T10795] __dump_stack+0x1d/0x30 [ 218.408816][T10795] dump_stack_lvl+0x95/0xd0 [ 218.408987][T10795] dump_stack+0x15/0x1b [ 218.409015][T10795] should_fail_ex+0x259/0x270 [ 218.409054][T10795] should_fail+0xb/0x20 [ 218.409089][T10795] should_fail_usercopy+0x1a/0x20 [ 218.409209][T10795] fpu__restore_sig+0x133/0xcf0 [ 218.409248][T10795] ? should_fail_ex+0xdb/0x270 [ 218.409286][T10795] ? should_fail_ex+0xdb/0x270 [ 218.409327][T10795] __ia32_sys_rt_sigreturn+0x231/0x2f0 [ 218.409437][T10795] x64_sys_call+0x1532/0x2550 [ 218.409467][T10795] do_syscall_64+0x112/0x360 [ 218.409515][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.409581][T10795] RIP: 0033:0x7f150bdff557 [ 218.409605][T10795] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 218.409629][T10795] RSP: 002b:00007f150a857028 EFLAGS: 00000246 [ 218.409652][T10795] RAX: 0000000000000113 RBX: 00007f150c085fa0 RCX: 00007f150bdff559 [ 218.409745][T10795] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 218.409836][T10795] RBP: 00007f150be96b50 R08: 0000000000000006 R09: 0000000000000000 [ 218.409856][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.409875][T10795] R13: 00007f150c086038 R14: 00007f150c085fa0 R15: 00007ffd73cca888 [ 218.409905][T10795] [ 218.764909][T10801] loop3: detected capacity change from 0 to 1024 [ 218.791266][ T29] audit: type=1400 audit(1793490364.652:1696): avc: denied { name_bind } for pid=10813 comm="syz.2.2466" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 218.826242][T10801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.826839][T10801] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.836157][T10801] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 218.841287][T10801] EXT4-fs (loop3): orphan cleanup on readonly fs [ 218.841764][T10801] EXT4-fs error (device loop3): ext4_free_blocks:6717: comm syz.3.2462: Freeing blocks not in datazone - block = 0, count = 4096 [ 218.841858][T10801] loop3: lost filesystem error report for type 5 error -117 [ 218.850438][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 218.850513][ C1] EXT4-fs (loop3): initial error at time 1793490364: ext4_free_blocks:6717 [ 218.850626][ C1] EXT4-fs (loop3): last error at time 1793490364: ext4_free_blocks:6717 [ 218.853468][T10801] EXT4-fs (loop3): 1 orphan inode deleted [ 218.858954][T10801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.860539][T10817] loop5: detected capacity change from 0 to 512 [ 218.904421][T10817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.904701][T10817] ext4 filesystem being mounted at /497/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 218.951859][T10801] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 16: comm syz.3.2462: path /500/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 218.991964][T10804] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.072414][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.262877][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.365470][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 219.425695][T10844] batman_adv: batadv0: Adding interface: syzkaller0 [ 219.425717][T10844] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.425758][T10844] batman_adv: batadv0: Interface activated: syzkaller0 [ 219.614125][ T29] audit: type=1400 audit(1793490365.342:1697): avc: denied { read write } for pid=10847 comm="syz.5.2479" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 219.614165][ T29] audit: type=1400 audit(1793490365.342:1698): avc: denied { open } for pid=10847 comm="syz.5.2479" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 219.702250][T10852] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 219.802629][T10843] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 219.803456][T10864] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 219.835161][T10843] batman_adv: batadv0: Removing interface: syzkaller0 [ 219.918601][T10864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.049787][T10879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.121144][ T3572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.134014][T10867] rxe_eth0 speed is unknown, defaulting to 1000 [ 220.389099][T10880] ================================================================== [ 220.389165][T10880] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 220.389230][T10880] [ 220.389240][T10880] write to 0xffff88810b4fc160 of 8 bytes by task 10875 on cpu 1: [ 220.389266][T10880] shmem_file_splice_read+0x3eb/0x570 [ 220.389309][T10880] splice_direct_to_actor+0x25d/0x680 [ 220.389336][T10880] do_splice_direct+0x119/0x1a0 [ 220.389368][T10880] do_sendfile+0x37d/0x640 [ 220.389400][T10880] __x64_sys_sendfile64+0x105/0x150 [ 220.389431][T10880] x64_sys_call+0x1015/0x2550 [ 220.389470][T10880] do_syscall_64+0x112/0x360 [ 220.389505][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.389537][T10880] [ 220.389546][T10880] write to 0xffff88810b4fc160 of 8 bytes by task 10880 on cpu 0: [ 220.389576][T10880] shmem_file_splice_read+0x3eb/0x570 [ 220.389620][T10880] splice_direct_to_actor+0x25d/0x680 [ 220.389643][T10880] do_splice_direct+0x119/0x1a0 [ 220.389665][T10880] do_sendfile+0x37d/0x640 [ 220.389688][T10880] __x64_sys_sendfile64+0x105/0x150 [ 220.389717][T10880] x64_sys_call+0x1015/0x2550 [ 220.389752][T10880] do_syscall_64+0x112/0x360 [ 220.389797][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.389827][T10880] [ 220.389832][T10880] value changed: 0x00000000000144bf -> 0x00000000000144eb [ 220.389846][T10880] [ 220.389851][T10880] Reported by Kernel Concurrency Sanitizer on: [ 220.389867][T10880] CPU: 0 UID: 0 PID: 10880 Comm: syz.3.2489 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.389904][T10880] Tainted: [W]=WARN [ 220.389915][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.389933][T10880] ==================================================================