last executing test programs: 18.950204206s ago: executing program 0 (id=597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000080)={{r0}, 0x2, &(0x7f0000000040)=[0x7, 0x10], 0xe3f, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 18.776927654s ago: executing program 0 (id=598): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080911000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) fadvise64(r0, 0xfffffffffffffff8, 0xf, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1, &(0x7f0000000500)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000380)=""/246) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2d0e0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) lseek(r6, 0x80002, 0x2) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x8261500488d46708) sendfile(r9, r5, 0x0, 0x3ffff) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x83c, 0x7}) 18.390161174s ago: executing program 0 (id=602): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) sched_getattr(r1, &(0x7f00000009c0)={0x38}, 0x38, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x4580, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) 16.130364722s ago: executing program 0 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x0, 0x476, &(0x7f00000002c0)="$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") r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x0, 0x1}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000740)='./file0/../file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1810d1, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8936, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\x00\x84\xe6OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000814) dup(0xffffffffffffffff) bind$can_j1939(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x480c5) 6.451691715s ago: executing program 5 (id=640): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd60010100000811"], 0x0) socket$inet(0x2, 0x800, 0x9) 5.825144317s ago: executing program 5 (id=692): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\t\n', @ANYRESHEX=r2], 0xa) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000814) dup(0xffffffffffffffff) bind$can_j1939(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x480c5) 3.987122883s ago: executing program 2 (id=704): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 2.752807767s ago: executing program 2 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000050000181000"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018220000", @ANYRES32=r0, @ANYBLOB="000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000000732f8ff0800000085100000080000000478060010000000ac28ff03290700009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_clone(0x8680, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x8) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xc5b4, @mcast1, 0x4}}, 0x5, 0x7, 0x9, 0x4, 0x4, 0x2, 0x6}, 0x9c) connect$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={0x0, 0x700}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) waitid(0x0, r9, 0x0, 0x80000000, &(0x7f0000000680)) 2.30278124s ago: executing program 3 (id=708): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r5, 0x0, 0x4000010) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 2.219169795s ago: executing program 4 (id=709): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x121a83) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x4, 0x2}, {0x3, 0xd}, 0x1, 0x2, 0xf2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x11f840, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r6 = getuid() quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000010100)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000010140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) statx(r2, 0x0, 0x1000, 0x2, &(0x7f0000000400)) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x141680) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x141280, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000100)={{0x300, 0x1, 0x18, r8}, './file0\x00'}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x9}}, 0x1c) io_setup(0xc, &(0x7f0000000000)=0x0) io_cancel(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x11, r3, &(0x7f0000000140)="7d5e0d17", 0x4, 0x0, 0x0, 0x0, r2}, &(0x7f00000003c0)) io_getevents(r10, 0x5, 0x1, &(0x7f0000000040)=[{}], 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r12, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x1, r11, 0x0}]) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r13], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @xdp, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x0, 0xa3, 0x0, &(0x7f00000002c0)="0a1f9a043282a45f8d18dcaca422278380167daed4ce503d89d09b6cbc0db484b732bfe75b0dfefa7d219cf9579a4040d02066af183dcf1731506b19847541eca51371dcc2d446f8da87544b6519a4925762f3ce7779a9cd6f7ee95bdb50bc07a283f72af32349e37d8d74b67257c636e2f13e660900afa6bec7f207e7aed792c6e2ced0ecc2f0506664f86acf191baae8fa1b08086f78a01ffe80d2a49866c525d753", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 1.872820262s ago: executing program 4 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff3, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x944d}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9668}, @TCA_RATE={0x5, 0x5, {0x6, 0x10}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c0b1}, 0x0) r4 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x2, 0x4, 0xfe, 0x6, 0x0, 0xffffffffffffa596, 0x21240, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x5}, 0x8c10, 0x1, 0x8, 0x8, 0x6b7, 0x508, 0x38, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0xd, 0x80, 0x0, 0x5, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x1, 0x66}, 0x4028, 0xf, 0x741, 0x8, 0x4, 0x9, 0x800, 0x0, 0x8}, 0x0, 0x1, r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a030000000000000000000500000009"], 0xa4}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x4, {0x1, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000007c0)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x0, 0x1}, 0xfd, 0xfe}, {0x2, 0x2, {0x0, 0x1, 0x3}, {0x0, 0xff, 0x1}, 0x0, 0xfd}], 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.804362836s ago: executing program 3 (id=711): unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x6, 0xfffffff8, 0x100, r0, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x2, 0x4, 0x1, 0x11, r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800e00f0000773ee0f2a2219a4e0000020000000000faffffff000d00000000000000003c90e04616006637020000000300000000000000000000000000000d000000000000"], &(0x7f0000000140)=""/237, 0x4a, 0xed, 0x1}, 0x28) 1.754810678s ago: executing program 3 (id=712): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0) semop(0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) 1.746763379s ago: executing program 2 (id=713): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x800, 0x8, 0x0, 0x8}, {0x1, 0x15, 0x0, 0x80000000}]}) 1.564628319s ago: executing program 4 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000e5ffffff00400000aa5c8a22d5665827dbaa6943000000", @ANYRES32=0x0, @ANYBLOB="000000009891000010001280080001007369740004000280"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x30, 0x0, 0xff, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00', 0x1, 0x40, 0x80, 0x2}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x80, 0x54, 0x5, {{0x2b, 0x4, 0x3, 0x37, 0xac, 0x64, 0x0, 0x40, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x11, 0x1, [{0x0, 0x7, "88a7417d7c"}, {0x6, 0x4, "defd"}]}, @timestamp={0x44, 0x14, 0x5b, 0x0, 0xc, [0x3, 0x8, 0x3, 0xe40]}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x7, "20a046a47d"}, {0x5, 0xb, "ad815bf97b22a2061f"}, {0x7, 0x3, '\x00'}]}, @ssrr={0x89, 0x13, 0xb0, [@broadcast, @empty, @broadcast, @remote]}, @generic={0xf, 0x3, "92"}, @timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x3, [{@rand_addr=0x64010102, 0x3}, {@loopback, 0x3ff}, {@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff3062}, {@multicast2, 0x61}]}, @timestamp={0x44, 0x14, 0x24, 0x0, 0x8, [0xccf, 0xaca, 0xae36, 0x8]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x8, 0xb}}}, 0x24}}, 0x40004) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="600100008c34acac9e1c7a60e346276b1562527c256d93589567df6a37e665b0222e5cdb0e2d801c7ff72b69ba799cb7a0cbd800c2308db7e8b8de297b42fb438855ef98f35d948160557cf2efec6c9f0302e9ff1a50ab9d8be54f9bbe7517130f5c793ab4d5751e780623ef3bdfa2fb8b4f7e069f3655f97f39aeca30f6d42b07cc20ee61cd4ae0477a3b5d3c7bc9af5aeb46f47f7ed6cacf5f2abfc5c9339a47b2b0a6d39fec7e8896b1fedef49aa9ae5c7673", @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf2504000000600001800800030001000000140002006261746164763000000000000000000014000200776c616e3100000000000000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300020000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000014000200626f6e64300000000000000000000000080003000100000014000200687372300000000000000000000000000800030004000000140002006e72300000000000000000000000000020000180140002006e657464657673696d3000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="3c0001801400020070696d726567310000000000000000001400020070696d36726567300000000000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="180001801400020073797a6b616c6c657231000000000000"], 0x160}, 0x1, 0x0, 0x0, 0x40004}, 0x8010) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) r11 = socket$inet(0x2, 0x2, 0xfffffffe) setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) pipe(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x5, 0x0, 0x3, 0x1b0b}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.561697439s ago: executing program 2 (id=715): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4c", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="5400000010000304fcfffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500340012800b00010062726964676500002400028005001900020000000c0023"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.420920326s ago: executing program 1 (id=716): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0xff, 0x2, 0xfffffffffffffffe, 0x5, r0}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000000180), 0x4001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) tkill(r0, 0x35) 1.224572806s ago: executing program 2 (id=717): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 880.010634ms ago: executing program 4 (id=718): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 855.580405ms ago: executing program 3 (id=719): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 693.638584ms ago: executing program 4 (id=720): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000507da08f93591c1e415c43e3ddcc660000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x8, 0x15, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x9, 0x4}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r6, 0x25, 0x0, @void}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) futex(0x0, 0x80, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) pwritev2(r7, 0x0, 0x0, 0xfff, 0xc, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002000400000000002010000b7080000000000007b8af8ff00000000b7080000020000407b8af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0xa, 0x1012, &(0x7f00000008c0)=""/4114, 0x40f00, 0x68, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 439.228967ms ago: executing program 4 (id=721): getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000500)=0x62) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x7, 0x11, 0x7, 0x0, 0x2007fffffff, 0x7a5f4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0xc90a, 0xd, 0x6, 0x4, 0xc6, 0x4, 0x3, 0x0, 0xfffffff9, 0x0, 0x8}, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000002080)=[{&(0x7f0000000180)="065588c6545daa1ac52d50986204ce0e8c26989774da4f32f50ce5ce5e20bcd2e6024cb93ed5e9eaf6671b9a48733bd99f075580bbab2407d8cee94965f5252a0e0013a29125c6ba6b4884a4bb4a5df83b71febae2", 0x55}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="d13becbd4ee1f6b762296ab407b0455f5526e7c30cd8264a55314edddbae2cd2e9f6fe4729c37b065906dc9cfa583430dddc", 0x32}, {&(0x7f0000001f00)="e37a2a271f010b978cc3ca07de5ec7cdbbf1906fc14d7a1ee3cbed624e1e7f86d9bc1db2549ceeee787f571392d451cb908251", 0x33}, {&(0x7f0000001f40)="1424ae5e85dab1ba42e5c6c4dc174fb58b4717c90130e683e3bc46fc1f4701deb63e411ceba16179e4f9ce52dc52bbe165bc8fe074eba87e70b872b5de17c6868a272cae43a42a4087cca50ff6718a2de9cc966cf83d2578bbb838c57296e0efae8af8363791ce1912b6ee066a5cabb776c0abf6a05d58b88f286d9ae9aa7ebe209361c23ace03bbc7f8453e5b14b8eb0aca693ba2661bfd04e8133f23a6cd8750f3e3bf3cedeea7291f55aed15b4bc84e7cc4bdda97e5537de4770fb450afd7121024829e641dd25a91f9da", 0xcc}, {&(0x7f0000002040)="8900d01964870702a9a7fe9f59aacbbb22f17b9bf08579dba9327d", 0x1b}], 0x6) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") timerfd_create(0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0)="ce5a6244fb0bce42d7904e2343a9f8ff56e437e040324adc7f7ce956959493b85645827cd3f754ff858b66bb4fe2faaf5d2c182759ff6d43961d3b3f96614f9abe7a351dbaa185fec0dd36ea0b39459ebae951548ee15b523cf765d68cde405fd090a419ff61a800c1df02ef43adb727425e03a7f2dbeee69350869c2141295e2d3a5c07b845d1dede884d082f9379a37741667668c24a3cceac9b7ed597e476d0b033bd1b0d19d47727b85e6119de780b382597d065251afeadab2e8fe17c08a20431613d", 0xc5, 0x4, &(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="f9808406726026ec9917", 0xa}, 0x1, 0x0, 0x0, 0x24048081}, 0x20044844) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=@newlink={0x2c0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x8900}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2d86}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}}}, @IFLA_VFINFO_LIST={0x280, 0x16, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x5e2, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0x7}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xcf}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1e7, 0x1}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x101}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x23, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x80000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @local}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3ff, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1000, 0x4000003}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd46, 0x61}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x9, 0x5}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6e8, 0x482, 0x4, 0x8100}}, {0x14, 0x1, {0x1000, 0xae, 0xa, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x8e, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x39, 0x6}}]}, {0xac, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0xd9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7f, 0x4fd, 0x1fd9295d}}, @IFLA_VF_RATE={0x10, 0x6, {0x87, 0x4, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8001, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x2}}]}]}]}, 0x2c0}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 394.080629ms ago: executing program 3 (id=722): unshare(0x2c020400) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5, 0x4, 0x8, {}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "05a1dbdc5b780d05"}}, 0x48}, 0x1, 0x0, 0x0, 0x14041}, 0x20000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (fail_nth: 2) 177.84845ms ago: executing program 2 (id=723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) (fail_nth: 2) 50.307397ms ago: executing program 1 (id=724): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7002, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xd240, 0x7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x8000, 0x80000000}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7002, 0xffffffffffffffff}) (async) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xd240, 0x7}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x8000, 0x80000000}) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 0s ago: executing program 3 (id=725): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xacb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) kernel console output (not intermixed with test programs): 995][ T4605] __kernfs_new_node+0x70/0x400 [ 84.765042][ T4605] ? avc_has_perm+0x101/0x190 [ 84.765078][ T4605] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 84.765156][ T4605] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 84.765181][ T4605] kernfs_new_node+0xd0/0x140 [ 84.765280][ T4605] kernfs_create_dir_ns+0x44/0xe0 [ 84.765429][ T4605] internal_create_group+0x2bb/0x9e0 [ 84.765457][ T4605] ? blk_validate_limits+0xaac/0xbd0 [ 84.765476][ T4605] ? mutex_unlock+0x4e/0x90 [ 84.765528][ T4605] ? sync_lazytime+0x45/0x1d0 [ 84.765618][ T4605] sysfs_create_group+0x1f/0x30 [ 84.765642][ T4605] loop_configure+0x7ee/0x9c0 [ 84.765676][ T4605] lo_ioctl+0x5aa/0x13a0 [ 84.765750][ T4605] ? avc_has_extended_perms+0x689/0x890 [ 84.765841][ T4605] ? blkdev_common_ioctl+0xc12/0x20a0 [ 84.765871][ T4605] ? do_vfs_ioctl+0x84f/0xe70 [ 84.765954][ T4605] ? selinux_file_ioctl+0x338/0x3b0 [ 84.765980][ T4605] ? __pfx_lo_ioctl+0x10/0x10 [ 84.766104][ T4605] ? __pfx_blkdev_ioctl+0x10/0x10 [ 84.766130][ T4605] blkdev_ioctl+0x387/0x460 [ 84.766150][ T4605] ? __pfx_blkdev_ioctl+0x10/0x10 [ 84.766176][ T4605] __se_sys_ioctl+0xce/0x140 [ 84.766259][ T4605] __x64_sys_ioctl+0x43/0x50 [ 84.766285][ T4605] x64_sys_call+0x1563/0x3020 [ 84.766307][ T4605] do_syscall_64+0x12c/0x3b0 [ 84.766334][ T4605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.766403][ T4605] RIP: 0033:0x7fecbce8cdd9 [ 84.766417][ T4605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.766433][ T4605] RSP: 002b:00007fecbb8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.766453][ T4605] RAX: ffffffffffffffda RBX: 00007fecbd105fa0 RCX: 00007fecbce8cdd9 [ 84.766539][ T4605] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 84.766558][ T4605] RBP: 00007fecbb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.766573][ T4605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.766588][ T4605] R13: 00007fecbd106038 R14: 00007fecbd105fa0 R15: 00007ffc9418e268 [ 84.766612][ T4605] [ 84.766685][ T4605] loop2: detected capacity change from 0 to 7 [ 85.054439][ T28] audit: type=1400 audit(1777095106.190:727): avc: denied { open } for pid=4601 comm="syz.3.342" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.225454][ T4566] syz.1.329 (4566) used greatest stack depth: 8256 bytes left [ 85.249180][ T4624] loop1: detected capacity change from 0 to 512 [ 85.275024][ T4624] EXT4-fs (loop1): 1 truncate cleaned up [ 85.284837][ T4624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.314510][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 85.368304][ T4629] loop3: detected capacity change from 0 to 512 [ 85.375040][ T4624] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.351: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 85.436219][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.436649][ T4629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.436737][ T4629] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.476380][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.552930][ T4628] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.577283][ T4628] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 85.611052][ T4628] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.611052][ T4628] [ 85.622111][ T4628] EXT4-fs (loop3): Total free blocks count 0 [ 85.629417][ T4628] EXT4-fs (loop3): Free/Dirty block details [ 85.632656][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.636177][ T4628] EXT4-fs (loop3): free_blocks=65280 [ 85.651838][ T4628] EXT4-fs (loop3): dirty_blocks=23 [ 85.657757][ T4628] EXT4-fs (loop3): Block reservation details [ 85.674657][ T4628] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 85.721395][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 85.733115][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.774337][ T4637] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 85.792956][ T4637] netlink: 55 bytes leftover after parsing attributes in process `syz.3.354'. [ 85.819250][ T4639] 9p: Bad value for 'rfdno' [ 85.858133][ T4644] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 85.873912][ T4644] bond1: entered promiscuous mode [ 85.879185][ T4644] bond1: entered allmulticast mode [ 85.884581][ T4644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.902900][ T4644] loop4: detected capacity change from 0 to 136 [ 85.919685][ T4644] iso9660: Unknown parameter ' ' [ 86.001929][ T4650] capability: warning: `syz.3.359' uses 32-bit capabilities (legacy support in use) [ 86.013568][ T4650] program syz.3.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.045998][ T4654] loop3: detected capacity change from 0 to 1024 [ 86.052758][ T4654] EXT4-fs: dax option not supported [ 86.070860][ T4656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 86.087011][ T28] audit: type=1400 audit(1777095107.660:728): avc: denied { bind } for pid=4653 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.088019][ T4656] System zones: 1-3, 19-19, 35-36 [ 86.133418][ T28] audit: type=1400 audit(1777095107.660:729): avc: denied { listen } for pid=4653 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.161301][ T4666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.366'. [ 86.172519][ T4663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.364'. [ 86.178390][ T4656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.196084][ T4656] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.228810][ T4663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.364'. [ 86.273075][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.332816][ T4671] EXT4-fs: Ignoring removed bh option [ 86.363697][ T4671] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.413031][ T4671] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 86.454111][ T4661] macsec1: entered promiscuous mode [ 86.455712][ T4671] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.470865][ T4680] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 86.478826][ T4661] bridge0: entered promiscuous mode [ 86.485720][ T4671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.487413][ T4666] set_capacity_and_notify: 3 callbacks suppressed [ 86.487463][ T4666] loop1: detected capacity change from 0 to 1024 [ 86.510169][ T4680] netlink: 55 bytes leftover after parsing attributes in process `syz.4.370'. [ 86.522524][ T4671] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 86.544774][ T4671] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 86.554606][ T4671] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.363: Failed to acquire dquot type 1 [ 86.565834][ T4671] loop0: lost filesystem error report for type 5 error -5 [ 86.568811][ T4671] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.363: Invalid block bitmap block 0 in block_group 0 [ 86.575999][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 86.576020][ C0] EXT4-fs (loop0): last error at time 1777095108: ext4_acquire_dquot:7034 [ 86.605338][ T4671] loop0: lost filesystem error report for type 5 error -117 [ 86.606995][ T4671] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.363: Invalid block bitmap block 0 in block_group 0 [ 86.626580][ T4666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 86.642324][ T4671] loop0: lost filesystem error report for type 5 error -117 [ 86.642647][ T4671] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.363: Invalid block bitmap block 0 in block_group 0 [ 86.653077][ T4666] System zones: 0-1, 3-36 [ 86.677462][ T4671] loop0: lost filesystem error report for type 5 error -117 [ 86.689446][ T4666] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.366: bad orphan inode 134217728 [ 86.746440][ T4671] Quota error (device loop0): write_blk: dquota write failed [ 86.760999][ T4666] loop1: lost filesystem error report for type 5 error -117 [ 86.764828][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 86.781075][ C0] EXT4-fs (loop1): initial error at time 1777095108: ext4_orphan_get:1423 [ 86.786954][ T4671] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 86.791513][ C0] EXT4-fs (loop1): last error at time 1777095108: ext4_orphan_get:1423 [ 86.802007][ T4671] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.363: Failed to acquire dquot type 1 [ 86.827739][ T4671] loop0: lost filesystem error report for type 5 error -28 [ 86.828051][ T4671] Quota error (device loop0): write_blk: dquota write failed [ 86.830875][ T4666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.839454][ T4671] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 86.883691][ T4671] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.363: Failed to acquire dquot type 1 [ 86.895483][ T4671] loop0: lost filesystem error report for type 5 error -28 [ 86.895702][ T4671] EXT4-fs (loop0): 1 orphan inode deleted [ 86.909405][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.930808][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.966145][ T4688] FAULT_INJECTION: forcing a failure. [ 86.966145][ T4688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.001994][ T4688] CPU: 0 UID: 0 PID: 4688 Comm: syz.1.372 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.002110][ T4688] Tainted: [W]=WARN [ 87.002119][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.002134][ T4688] Call Trace: [ 87.002141][ T4688] [ 87.002149][ T4688] __dump_stack+0x1d/0x30 [ 87.002227][ T4688] dump_stack_lvl+0x95/0xd0 [ 87.002253][ T4688] dump_stack+0x15/0x1b [ 87.002350][ T4688] should_fail_ex+0x263/0x280 [ 87.002382][ T4688] ? __pfx_ucma_create_id+0x10/0x10 [ 87.002417][ T4688] should_fail+0xb/0x20 [ 87.002447][ T4688] should_fail_usercopy+0x1a/0x20 [ 87.002518][ T4688] _copy_from_user+0x1c/0xb0 [ 87.002552][ T4688] ucma_create_id+0x7f/0x280 [ 87.002578][ T4688] ? __pfx_ucma_create_id+0x10/0x10 [ 87.002611][ T4688] ucma_write+0x1c9/0x260 [ 87.002650][ T4688] vfs_writev+0x42b/0x900 [ 87.002727][ T4688] ? __pfx_ucma_write+0x10/0x10 [ 87.002769][ T4688] do_writev+0xe9/0x210 [ 87.002795][ T4688] __x64_sys_writev+0x45/0x50 [ 87.002899][ T4688] x64_sys_call+0x1c0c/0x3020 [ 87.002929][ T4688] do_syscall_64+0x12c/0x3b0 [ 87.003034][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.003076][ T4688] RIP: 0033:0x7f0fb957cdd9 [ 87.003095][ T4688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.003126][ T4688] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 87.003150][ T4688] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 87.003183][ T4688] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 87.003241][ T4688] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.003264][ T4688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.003361][ T4688] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 87.003388][ T4688] [ 87.022424][ T28] audit: type=1400 audit(1777095108.600:730): avc: denied { bind } for pid=4689 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.072488][ T28] audit: type=1400 audit(1777095108.660:731): avc: denied { bind } for pid=4689 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.328494][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.627704][ T4717] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 87.654743][ T4717] netlink: 55 bytes leftover after parsing attributes in process `syz.3.383'. [ 87.778019][ T4705] loop1: detected capacity change from 0 to 2048 [ 87.887194][ T4705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.907984][ T4709] loop0: detected capacity change from 0 to 512 [ 87.932209][ T4709] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.956236][ T4709] EXT4-fs (loop0): 1 truncate cleaned up [ 87.958940][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 87.995723][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.029024][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.048084][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.099940][ T4740] FAULT_INJECTION: forcing a failure. [ 88.099940][ T4740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.115546][ T4740] CPU: 0 UID: 0 PID: 4740 Comm: syz.1.389 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.115586][ T4740] Tainted: [W]=WARN [ 88.115595][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.115611][ T4740] Call Trace: [ 88.115620][ T4740] [ 88.115687][ T4740] __dump_stack+0x1d/0x30 [ 88.115712][ T4740] dump_stack_lvl+0x95/0xd0 [ 88.115733][ T4740] dump_stack+0x15/0x1b [ 88.115814][ T4740] should_fail_ex+0x263/0x280 [ 88.115844][ T4740] should_fail+0xb/0x20 [ 88.115878][ T4740] should_fail_usercopy+0x1a/0x20 [ 88.115911][ T4740] _copy_to_user+0x20/0xa0 [ 88.115989][ T4740] simple_read_from_buffer+0xb5/0x130 [ 88.116035][ T4740] proc_fail_nth_read+0x10e/0x150 [ 88.116139][ T4740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.116174][ T4740] vfs_read+0x1ab/0x7f0 [ 88.116268][ T4740] ? __rcu_read_unlock+0x4e/0x70 [ 88.116374][ T4740] ? __fget_files+0x184/0x1c0 [ 88.116400][ T4740] ? mutex_lock+0x57/0x90 [ 88.116442][ T4740] ksys_read+0xdc/0x1a0 [ 88.116540][ T4740] __x64_sys_read+0x40/0x50 [ 88.116577][ T4740] x64_sys_call+0x2886/0x3020 [ 88.116607][ T4740] do_syscall_64+0x12c/0x3b0 [ 88.116676][ T4740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.116739][ T4740] RIP: 0033:0x7f0fb953d60e [ 88.116759][ T4740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.116783][ T4740] RSP: 002b:00007f0fb7fcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.116815][ T4740] RAX: ffffffffffffffda RBX: 00007f0fb7fcf6c0 RCX: 00007f0fb953d60e [ 88.116833][ T4740] RDX: 000000000000000f RSI: 00007f0fb7fcf0a0 RDI: 0000000000000004 [ 88.116847][ T4740] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.116864][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.116876][ T4740] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 88.116936][ T4740] [ 88.527212][ T4733] loop3: detected capacity change from 0 to 512 [ 88.556462][ T4733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.625589][ T4733] EXT4-fs (loop3): 1 truncate cleaned up [ 88.637343][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.767403][ T4764] FAULT_INJECTION: forcing a failure. [ 88.767403][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.781424][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.4.399 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.781545][ T4764] Tainted: [W]=WARN [ 88.781555][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.781571][ T4764] Call Trace: [ 88.781624][ T4764] [ 88.781632][ T4764] __dump_stack+0x1d/0x30 [ 88.781661][ T4764] dump_stack_lvl+0x95/0xd0 [ 88.781687][ T4764] dump_stack+0x15/0x1b [ 88.781709][ T4764] should_fail_ex+0x263/0x280 [ 88.781819][ T4764] should_fail+0xb/0x20 [ 88.781865][ T4764] should_fail_usercopy+0x1a/0x20 [ 88.781912][ T4764] _copy_from_user+0x1c/0xb0 [ 88.781952][ T4764] __copy_msghdr+0x244/0x300 [ 88.782038][ T4764] ___sys_sendmsg+0x10c/0x1e0 [ 88.782080][ T4764] __x64_sys_sendmsg+0xd4/0x160 [ 88.782115][ T4764] x64_sys_call+0x194c/0x3020 [ 88.782147][ T4764] do_syscall_64+0x12c/0x3b0 [ 88.782177][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.782276][ T4764] RIP: 0033:0x7f946c01cdd9 [ 88.782302][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.782327][ T4764] RSP: 002b:00007f946aa6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.782349][ T4764] RAX: ffffffffffffffda RBX: 00007f946c295fa0 RCX: 00007f946c01cdd9 [ 88.782368][ T4764] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 88.782388][ T4764] RBP: 00007f946aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.782405][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.782419][ T4764] R13: 00007f946c296038 R14: 00007f946c295fa0 R15: 00007ffd698fa1c8 [ 88.782440][ T4764] [ 88.961033][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.006347][ T4775] FAULT_INJECTION: forcing a failure. [ 89.006347][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 89.019149][ T4775] CPU: 0 UID: 0 PID: 4775 Comm: syz.3.400 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.019227][ T4775] Tainted: [W]=WARN [ 89.019234][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.019245][ T4775] Call Trace: [ 89.019251][ T4775] [ 89.019257][ T4775] __dump_stack+0x1d/0x30 [ 89.019280][ T4775] dump_stack_lvl+0x95/0xd0 [ 89.019325][ T4775] dump_stack+0x15/0x1b [ 89.019343][ T4775] should_fail_ex+0x263/0x280 [ 89.019371][ T4775] should_failslab+0x8c/0xb0 [ 89.019479][ T4775] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 89.019536][ T4775] ? __alloc_skb+0x2d6/0x690 [ 89.019642][ T4775] __alloc_skb+0x2d6/0x690 [ 89.019675][ T4775] ? __alloc_skb+0x200/0x690 [ 89.019716][ T4775] netlink_alloc_large_skb+0xbf/0xf0 [ 89.019823][ T4775] netlink_sendmsg+0x40c/0x6f0 [ 89.019853][ T4775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.019897][ T4775] ____sys_sendmsg+0x563/0x5b0 [ 89.019920][ T4775] ___sys_sendmsg+0x195/0x1e0 [ 89.019952][ T4775] __x64_sys_sendmsg+0xd4/0x160 [ 89.019977][ T4775] x64_sys_call+0x194c/0x3020 [ 89.020059][ T4775] do_syscall_64+0x12c/0x3b0 [ 89.020081][ T4775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.020102][ T4775] RIP: 0033:0x7fc1981acdd9 [ 89.020122][ T4775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.020138][ T4775] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.020244][ T4775] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 89.020260][ T4775] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 0000000000000004 [ 89.020275][ T4775] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 89.020286][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.020297][ T4775] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 89.020317][ T4775] [ 89.259751][ T4781] FAULT_INJECTION: forcing a failure. [ 89.259751][ T4781] name failslab, interval 1, probability 0, space 0, times 0 [ 89.304582][ T4781] CPU: 1 UID: 0 PID: 4781 Comm: syz.3.403 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.304612][ T4781] Tainted: [W]=WARN [ 89.304620][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.304634][ T4781] Call Trace: [ 89.304679][ T4781] [ 89.304687][ T4781] __dump_stack+0x1d/0x30 [ 89.304711][ T4781] dump_stack_lvl+0x95/0xd0 [ 89.304729][ T4781] dump_stack+0x15/0x1b [ 89.304749][ T4781] should_fail_ex+0x263/0x280 [ 89.304821][ T4781] should_failslab+0x8c/0xb0 [ 89.304850][ T4781] __kmalloc_cache_node_noprof+0x6b/0x470 [ 89.304935][ T4781] ? avc_has_perm_noaudit+0xab/0x130 [ 89.304964][ T4781] ? __get_vm_area_node+0x106/0x1d0 [ 89.305028][ T4781] __get_vm_area_node+0x106/0x1d0 [ 89.305109][ T4781] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 89.305155][ T4781] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 89.305191][ T4781] ? cred_has_capability+0x224/0x2a0 [ 89.305243][ T4781] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 89.305266][ T4781] __vmalloc_noprof+0xa4/0xf0 [ 89.305288][ T4781] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 89.305319][ T4781] bpf_prog_alloc_no_stats+0x47/0x390 [ 89.305377][ T4781] ? bpf_prog_alloc+0x2a/0x150 [ 89.305408][ T4781] bpf_prog_alloc+0x3c/0x150 [ 89.305448][ T4781] bpf_prog_load+0x50d/0x1030 [ 89.305491][ T4781] ? security_bpf+0x2b/0x90 [ 89.305519][ T4781] __sys_bpf+0x505/0x7e0 [ 89.305637][ T4781] __x64_sys_bpf+0x41/0x50 [ 89.305659][ T4781] x64_sys_call+0x10cb/0x3020 [ 89.305683][ T4781] do_syscall_64+0x12c/0x3b0 [ 89.305743][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.305770][ T4781] RIP: 0033:0x7fc1981acdd9 [ 89.305788][ T4781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.305811][ T4781] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.305893][ T4781] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 89.305972][ T4781] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 89.305984][ T4781] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 89.305996][ T4781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.306006][ T4781] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 89.306025][ T4781] [ 89.308206][ T4781] warn_alloc: 1 callbacks suppressed [ 89.308221][ T4781] syz.3.403: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 89.459078][ T4785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.407'. [ 89.465436][ T4781] ,cpuset=/,mems_allowed=0 [ 89.574624][ T4781] CPU: 1 UID: 0 PID: 4781 Comm: syz.3.403 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.574657][ T4781] Tainted: [W]=WARN [ 89.574688][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.574700][ T4781] Call Trace: [ 89.574706][ T4781] [ 89.574723][ T4781] __dump_stack+0x1d/0x30 [ 89.574749][ T4781] dump_stack_lvl+0x95/0xd0 [ 89.574770][ T4781] dump_stack+0x15/0x1b [ 89.574930][ T4781] warn_alloc+0x145/0x1c0 [ 89.574952][ T4781] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 89.574979][ T4781] ? cred_has_capability+0x224/0x2a0 [ 89.575049][ T4781] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 89.575071][ T4781] __vmalloc_noprof+0xa4/0xf0 [ 89.575124][ T4781] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 89.575151][ T4781] bpf_prog_alloc_no_stats+0x47/0x390 [ 89.575291][ T4781] ? bpf_prog_alloc+0x2a/0x150 [ 89.575316][ T4781] bpf_prog_alloc+0x3c/0x150 [ 89.575339][ T4781] bpf_prog_load+0x50d/0x1030 [ 89.575411][ T4781] ? security_bpf+0x2b/0x90 [ 89.575432][ T4781] __sys_bpf+0x505/0x7e0 [ 89.575460][ T4781] __x64_sys_bpf+0x41/0x50 [ 89.575553][ T4781] x64_sys_call+0x10cb/0x3020 [ 89.575576][ T4781] do_syscall_64+0x12c/0x3b0 [ 89.575597][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.575620][ T4781] RIP: 0033:0x7fc1981acdd9 [ 89.575634][ T4781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.575735][ T4781] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.575754][ T4781] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 89.575767][ T4781] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 89.575778][ T4781] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 89.575792][ T4781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.575860][ T4781] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 89.575885][ T4781] [ 89.575960][ T4781] Mem-Info: [ 89.657050][ T4795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.408'. [ 89.701231][ T4781] active_anon:10261 inactive_anon:1 isolated_anon:0 [ 89.701231][ T4781] active_file:18453 inactive_file:2320 isolated_file:0 [ 89.701231][ T4781] unevictable:0 dirty:531 writeback:0 [ 89.701231][ T4781] slab_reclaimable:3180 slab_unreclaimable:117230 [ 89.701231][ T4781] mapped:31094 shmem:3026 pagetables:1140 [ 89.701231][ T4781] sec_pagetables:0 bounce:0 [ 89.701231][ T4781] kernel_misc_reclaimable:0 [ 89.701231][ T4781] free:1784844 free_pcp:5049 free_cma:0 [ 89.844564][ T4781] Node 0 active_anon:38632kB inactive_anon:4kB active_file:73812kB inactive_file:9280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128524kB dirty:2112kB writeback:0kB shmem:9636kB kernel_stack:3584kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 89.844623][ T4781] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.844754][ T4781] lowmem_reserve[]: 0 2878 7857 7857 [ 89.844789][ T4781] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 89.844918][ T4781] lowmem_reserve[]: 0 0 4978 4978 [ 89.844991][ T4781] Node 0 Normal free:4179548kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38632kB inactive_anon:4kB active_file:73812kB inactive_file:9280kB unevictable:0kB writepending:2112kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:19336kB local_pcp:10008kB free_cma:0kB [ 89.845174][ T4781] lowmem_reserve[]: 0 0 0 0 [ 89.845222][ T4781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 89.845514][ T4781] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 89.847221][ T4781] Node 0 Normal: 109*4kB (UM) 351*8kB (UME) 327*16kB (UME) 350*32kB (UME) 138*64kB (UME) 62*128kB (UME) 48*256kB (UME) 12*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 1004*4096kB (M) = 4179548kB [ 89.847504][ T4781] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 89.847525][ T4781] 23033 total pagecache pages [ 89.847570][ T4781] 1 pages in swap cache [ 89.847577][ T4781] Free swap = 124992kB [ 89.847584][ T4781] Total swap = 124996kB [ 89.847593][ T4781] 2097051 pages RAM [ 89.847601][ T4781] 0 pages HighMem/MovableOnly [ 89.847610][ T4781] 81630 pages reserved [ 89.900811][ T4798] loop4: detected capacity change from 0 to 1024 [ 89.966095][ T4798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.138673][ T4791] loop1: detected capacity change from 0 to 1024 [ 90.157267][ T4791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.165576][ T4798] System zones: 0-1, 3-36 [ 90.171580][ T4791] System zones: 0-1, 3-36 [ 90.184063][ T4798] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.407: bad orphan inode 134217728 [ 90.194871][ T4791] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.408: bad orphan inode 134217728 [ 90.204902][ T4798] loop4: lost filesystem error report for type 5 error -117 [ 90.205464][ T4791] loop1: lost filesystem error report for type 5 error -117 [ 90.206408][ T4798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.214462][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 90.235754][ T4791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.239422][ C0] EXT4-fs (loop1): initial error at time 1777095111: ext4_orphan_get:1423 [ 90.260387][ C0] EXT4-fs (loop1): last error at time 1777095111: ext4_orphan_get:1423 [ 90.324002][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.338876][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.354931][ T4815] FAULT_INJECTION: forcing a failure. [ 90.354931][ T4815] name failslab, interval 1, probability 0, space 0, times 0 [ 90.409576][ T4815] CPU: 0 UID: 0 PID: 4815 Comm: syz.0.414 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.409607][ T4815] Tainted: [W]=WARN [ 90.409614][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.409627][ T4815] Call Trace: [ 90.409633][ T4815] [ 90.409660][ T4815] __dump_stack+0x1d/0x30 [ 90.409729][ T4815] dump_stack_lvl+0x95/0xd0 [ 90.409757][ T4815] dump_stack+0x15/0x1b [ 90.409787][ T4815] should_fail_ex+0x263/0x280 [ 90.409891][ T4815] should_failslab+0x8c/0xb0 [ 90.409975][ T4815] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 90.410014][ T4815] ? __alloc_skb+0x2d6/0x690 [ 90.410092][ T4815] __alloc_skb+0x2d6/0x690 [ 90.410157][ T4815] ? __alloc_skb+0x200/0x690 [ 90.410250][ T4815] netlink_alloc_large_skb+0xbf/0xf0 [ 90.410276][ T4815] netlink_sendmsg+0x40c/0x6f0 [ 90.410379][ T4815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.410409][ T4815] ____sys_sendmsg+0x563/0x5b0 [ 90.410436][ T4815] ___sys_sendmsg+0x195/0x1e0 [ 90.410523][ T4815] __x64_sys_sendmsg+0xd4/0x160 [ 90.410552][ T4815] x64_sys_call+0x194c/0x3020 [ 90.410578][ T4815] do_syscall_64+0x12c/0x3b0 [ 90.410603][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.410704][ T4815] RIP: 0033:0x7fecbce8cdd9 [ 90.410720][ T4815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.410739][ T4815] RSP: 002b:00007fecbb8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.410761][ T4815] RAX: ffffffffffffffda RBX: 00007fecbd105fa0 RCX: 00007fecbce8cdd9 [ 90.410779][ T4815] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 90.410793][ T4815] RBP: 00007fecbb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.410806][ T4815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.410820][ T4815] R13: 00007fecbd106038 R14: 00007fecbd105fa0 R15: 00007ffc9418e268 [ 90.410883][ T4815] [ 90.669129][ T4824] 9p: Bad value for 'rfdno' [ 90.740770][ T4829] tipc: Started in network mode [ 90.750708][ T4829] tipc: Node identity 22d57dde41e5, cluster identity 4711 [ 90.754744][ T4805] loop3: detected capacity change from 0 to 512 [ 90.765508][ T4829] tipc: Enabled bearer , priority 0 [ 90.811450][ T4829] syzkaller0: entered promiscuous mode [ 90.823752][ T4829] syzkaller0: entered allmulticast mode [ 90.833861][ T4805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.851662][ T4828] tipc: Resetting bearer [ 90.865587][ T4828] tipc: Disabling bearer [ 90.907125][ T4805] EXT4-fs (loop3): 1 truncate cleaned up [ 90.933962][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.952367][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 91.072629][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.077019][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=4840 comm=syz.0.423 [ 91.177200][ T4848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.426'. [ 91.187274][ T4846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=4846 comm=syz.3.425 [ 91.222697][ T4846] netlink: 'syz.3.425': attribute type 39 has an invalid length. [ 91.290354][ T4846] hsr_slave_0 (unregistering): left promiscuous mode [ 91.378176][ T4848] loop4: detected capacity change from 0 to 1024 [ 91.397307][ T4860] FAULT_INJECTION: forcing a failure. [ 91.397307][ T4860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.425976][ T4860] CPU: 0 UID: 0 PID: 4860 Comm: syz.1.430 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.426019][ T4860] Tainted: [W]=WARN [ 91.426044][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.426059][ T4860] Call Trace: [ 91.426066][ T4860] [ 91.426090][ T4860] __dump_stack+0x1d/0x30 [ 91.426128][ T4860] dump_stack_lvl+0x95/0xd0 [ 91.426151][ T4860] dump_stack+0x15/0x1b [ 91.426251][ T4860] should_fail_ex+0x263/0x280 [ 91.426284][ T4860] should_fail+0xb/0x20 [ 91.426311][ T4860] should_fail_usercopy+0x1a/0x20 [ 91.426347][ T4860] _copy_from_user+0x1c/0xb0 [ 91.426387][ T4860] ucma_write+0xd8/0x260 [ 91.426413][ T4860] ? __pfx_ucma_write+0x10/0x10 [ 91.426442][ T4860] vfs_write+0x269/0x9f0 [ 91.426501][ T4860] ? __rcu_read_unlock+0x4e/0x70 [ 91.426526][ T4860] ? __fget_files+0x184/0x1c0 [ 91.426549][ T4860] ksys_write+0xdc/0x1a0 [ 91.426574][ T4860] __x64_sys_write+0x40/0x50 [ 91.426694][ T4860] x64_sys_call+0x27e1/0x3020 [ 91.426724][ T4860] do_syscall_64+0x12c/0x3b0 [ 91.426826][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.426846][ T4860] RIP: 0033:0x7f0fb957cdd9 [ 91.426861][ T4860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.426878][ T4860] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.426932][ T4860] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 91.426945][ T4860] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003 [ 91.426958][ T4860] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.426970][ T4860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.426981][ T4860] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 91.427026][ T4860] [ 91.427280][ T4862] tipc: Started in network mode [ 91.488723][ T4848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 91.509916][ T4862] tipc: Node identity d2dd0408f0d6, cluster identity 4711 [ 91.541318][ T4848] System zones: [ 91.542454][ T4862] tipc: Enabled bearer , priority 0 [ 91.557472][ T4848] 0-1 [ 91.645917][ T4864] syzkaller0: entered promiscuous mode [ 91.647843][ T4848] , 3-36 [ 91.664513][ T4864] syzkaller0: entered allmulticast mode [ 91.666254][ T4848] [ 91.688370][ T4861] tipc: Resetting bearer [ 91.698139][ T4848] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.426: bad orphan inode 134217728 [ 91.729282][ T4861] tipc: Disabling bearer [ 91.734802][ T4848] loop4: lost filesystem error report for type 5 error -117 [ 91.745533][ T4848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.837185][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.881151][ T4870] loop1: detected capacity change from 0 to 8192 [ 91.904921][ T4870] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff' [ 91.965710][ T4882] netlink: 64 bytes leftover after parsing attributes in process `syz.3.438'. [ 92.019308][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 92.019324][ T28] audit: type=1400 audit(1777095113.600:738): avc: denied { ioctl } for pid=4868 comm="syz.1.433" path="socket:[9745]" dev="sockfs" ino=9745 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.146790][ T4894] FAULT_INJECTION: forcing a failure. [ 92.146790][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.179352][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.1.441 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.179444][ T4894] Tainted: [W]=WARN [ 92.179452][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.179465][ T4894] Call Trace: [ 92.179472][ T4894] [ 92.179480][ T4894] __dump_stack+0x1d/0x30 [ 92.179507][ T4894] dump_stack_lvl+0x95/0xd0 [ 92.179541][ T4894] dump_stack+0x15/0x1b [ 92.179562][ T4894] should_fail_ex+0x263/0x280 [ 92.179594][ T4894] should_fail+0xb/0x20 [ 92.179621][ T4894] should_fail_usercopy+0x1a/0x20 [ 92.179728][ T4894] _copy_from_user+0x1c/0xb0 [ 92.179762][ T4894] kstrtouint_from_user+0x69/0xf0 [ 92.179791][ T4894] ? 0xffffffff81000000 [ 92.179846][ T4894] ? selinux_file_permission+0x1e1/0x320 [ 92.179941][ T4894] proc_fail_nth_write+0x50/0x160 [ 92.179976][ T4894] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.180006][ T4894] vfs_write+0x269/0x9f0 [ 92.180030][ T4894] ? __rcu_read_unlock+0x4e/0x70 [ 92.180057][ T4894] ? __fget_files+0x184/0x1c0 [ 92.180096][ T4894] ? mutex_lock+0x57/0x90 [ 92.180133][ T4894] ksys_write+0xdc/0x1a0 [ 92.180166][ T4894] __x64_sys_write+0x40/0x50 [ 92.180277][ T4894] x64_sys_call+0x27e1/0x3020 [ 92.180305][ T4894] do_syscall_64+0x12c/0x3b0 [ 92.180332][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.180460][ T4894] RIP: 0033:0x7f0fb953d60e [ 92.180477][ T4894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.180493][ T4894] RSP: 002b:00007f0fb7fadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.180515][ T4894] RAX: ffffffffffffffda RBX: 00007f0fb7fae6c0 RCX: 00007f0fb953d60e [ 92.180531][ T4894] RDX: 0000000000000001 RSI: 00007f0fb7fae0a0 RDI: 0000000000000004 [ 92.180586][ T4894] RBP: 00007f0fb7fae090 R08: 0000000000000000 R09: 0000000000000000 [ 92.180601][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.180615][ T4894] R13: 00007f0fb97f6128 R14: 00007f0fb97f6090 R15: 00007fff499ca698 [ 92.180709][ T4894] [ 92.891064][ T4899] syzkaller0: entered promiscuous mode [ 92.916276][ T4899] syzkaller0: entered allmulticast mode [ 92.942993][ T4899] FAULT_INJECTION: forcing a failure. [ 92.942993][ T4899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.972078][ T4899] CPU: 1 UID: 0 PID: 4899 Comm: syz.0.444 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.972167][ T4899] Tainted: [W]=WARN [ 92.972177][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.972194][ T4899] Call Trace: [ 92.972202][ T4899] [ 92.972210][ T4899] __dump_stack+0x1d/0x30 [ 92.972366][ T4899] dump_stack_lvl+0x95/0xd0 [ 92.972388][ T4899] dump_stack+0x15/0x1b [ 92.972419][ T4899] should_fail_ex+0x263/0x280 [ 92.972455][ T4899] should_fail+0xb/0x20 [ 92.972529][ T4899] should_fail_usercopy+0x1a/0x20 [ 92.972603][ T4899] _copy_from_user+0x1c/0xb0 [ 92.972635][ T4899] __copy_msghdr+0x244/0x300 [ 92.972660][ T4899] ___sys_sendmsg+0x10c/0x1e0 [ 92.972760][ T4899] __x64_sys_sendmsg+0xd4/0x160 [ 92.972787][ T4899] x64_sys_call+0x194c/0x3020 [ 92.972865][ T4899] do_syscall_64+0x12c/0x3b0 [ 92.972926][ T4899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.972953][ T4899] RIP: 0033:0x7fecbce8cdd9 [ 92.972973][ T4899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.972997][ T4899] RSP: 002b:00007fecbb8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.973023][ T4899] RAX: ffffffffffffffda RBX: 00007fecbd105fa0 RCX: 00007fecbce8cdd9 [ 92.973122][ T4899] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 92.973139][ T4899] RBP: 00007fecbb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.973156][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.973172][ T4899] R13: 00007fecbd106038 R14: 00007fecbd105fa0 R15: 00007ffc9418e268 [ 92.973244][ T4899] [ 93.160774][ T4910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.449'. [ 93.839285][ T4941] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 93.848420][ T28] audit: type=1400 audit(1777095115.420:739): avc: denied { mac_admin } for pid=4940 comm="syz.3.458" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.891002][ T28] audit: type=1400 audit(1777095115.460:740): avc: denied { relabelto } for pid=4940 comm="syz.3.458" name="bus" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 93.943242][ T28] audit: type=1400 audit(1777095115.460:741): avc: denied { associate } for pid=4940 comm="syz.3.458" name="bus" dev="tmpfs" ino=514 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 94.007714][ T28] audit: type=1400 audit(1777095115.590:742): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.098752][ T4953] loop4: detected capacity change from 0 to 512 [ 94.303575][ T4953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.316368][ T4953] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.496670][ T4950] loop2: detected capacity change from 0 to 256 [ 94.591752][ T28] audit: type=1400 audit(1777095116.170:743): avc: denied { block_suspend } for pid=4959 comm="syz.0.463" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.621854][ T4950] vfat: Unknown parameter 'u‘' [ 94.754125][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.796801][ T28] audit: type=1400 audit(1777095116.370:744): avc: denied { allowed } for pid=4973 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.852994][ T4981] loop4: detected capacity change from 0 to 256 [ 94.863642][ T3376] IPVS: starting estimator thread 0... [ 94.911248][ T4987] loop0: detected capacity change from 0 to 512 [ 94.938980][ T4987] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 94.954814][ T4982] IPVS: using max 2496 ests per chain, 124800 per kthread [ 95.060727][ T4969] loop3: detected capacity change from 0 to 128 [ 95.179115][ T5002] loop0: detected capacity change from 0 to 512 [ 95.221843][ T5002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.268043][ T5002] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.376383][ T4999] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.407423][ T4999] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 95.421905][ T4999] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.421905][ T4999] [ 95.432992][ T4999] EXT4-fs (loop0): Total free blocks count 0 [ 95.441775][ T4999] EXT4-fs (loop0): Free/Dirty block details [ 95.449299][ T4999] EXT4-fs (loop0): free_blocks=65280 [ 95.456238][ T4999] EXT4-fs (loop0): dirty_blocks=23 [ 95.475420][ T4999] EXT4-fs (loop0): Block reservation details [ 95.491404][ T5010] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 95.497295][ T4999] EXT4-fs (loop0): i_reserved_data_blocks=23 [ 95.507465][ T5010] netlink: 55 bytes leftover after parsing attributes in process `syz.4.477'. [ 95.517328][ T28] audit: type=1400 audit(1777095117.100:745): avc: denied { execute } for pid=5011 comm="syz.3.478" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.517545][ T5012] process 'syz.3.478' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 95.549899][ T28] audit: type=1400 audit(1777095117.130:746): avc: denied { execute_no_trans } for pid=5011 comm="syz.3.478" path="/98/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.576693][ T28] audit: type=1400 audit(1777095117.160:747): avc: denied { getopt } for pid=5011 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.701859][ T5021] FAULT_INJECTION: forcing a failure. [ 95.701859][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.715288][ T5021] CPU: 1 UID: 0 PID: 5021 Comm: syz.4.482 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.715326][ T5021] Tainted: [W]=WARN [ 95.715335][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.715350][ T5021] Call Trace: [ 95.715358][ T5021] [ 95.715368][ T5021] __dump_stack+0x1d/0x30 [ 95.715489][ T5021] dump_stack_lvl+0x95/0xd0 [ 95.715511][ T5021] dump_stack+0x15/0x1b [ 95.715577][ T5021] should_fail_ex+0x263/0x280 [ 95.715613][ T5021] should_fail+0xb/0x20 [ 95.715681][ T5021] should_fail_usercopy+0x1a/0x20 [ 95.715710][ T5021] _copy_from_user+0x1c/0xb0 [ 95.715758][ T5021] __copy_msghdr+0x244/0x300 [ 95.715800][ T5021] ___sys_sendmsg+0x10c/0x1e0 [ 95.715848][ T5021] __x64_sys_sendmsg+0xd4/0x160 [ 95.715882][ T5021] x64_sys_call+0x194c/0x3020 [ 95.715920][ T5021] do_syscall_64+0x12c/0x3b0 [ 95.715945][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.715973][ T5021] RIP: 0033:0x7f946c01cdd9 [ 95.715991][ T5021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.716015][ T5021] RSP: 002b:00007f946aa6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.716084][ T5021] RAX: ffffffffffffffda RBX: 00007f946c295fa0 RCX: 00007f946c01cdd9 [ 95.716101][ T5021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 95.716116][ T5021] RBP: 00007f946aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.716132][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.716147][ T5021] R13: 00007f946c296038 R14: 00007f946c295fa0 R15: 00007ffd698fa1c8 [ 95.716172][ T5021] [ 95.957759][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 95.969133][ T5030] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 96.004948][ T3301] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.025204][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.113792][ T5028] loop2: detected capacity change from 0 to 256 [ 96.139161][ T5028] vfat: Unknown parameter 'u‘' [ 96.216772][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 96.298637][ T5041] loop4: detected capacity change from 0 to 512 [ 96.363191][ T5041] ext4: Unknown parameter 'appraise' [ 96.760978][ T5052] FAULT_INJECTION: forcing a failure. [ 96.760978][ T5052] name failslab, interval 1, probability 0, space 0, times 0 [ 96.803630][ T5052] CPU: 0 UID: 0 PID: 5052 Comm: syz.3.493 Tainted: G W syzkaller #0 PREEMPT(full) [ 96.803669][ T5052] Tainted: [W]=WARN [ 96.803676][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.803697][ T5052] Call Trace: [ 96.803703][ T5052] [ 96.803710][ T5052] __dump_stack+0x1d/0x30 [ 96.803734][ T5052] dump_stack_lvl+0x95/0xd0 [ 96.803756][ T5052] dump_stack+0x15/0x1b [ 96.803787][ T5052] should_fail_ex+0x263/0x280 [ 96.803821][ T5052] should_failslab+0x8c/0xb0 [ 96.803866][ T5052] __kmalloc_noprof+0xb8/0x4d0 [ 96.803921][ T5052] ? bpf_test_init+0x86/0x130 [ 96.803998][ T5052] bpf_test_init+0x86/0x130 [ 96.804021][ T5052] bpf_prog_test_run_xdp+0x306/0xa10 [ 96.804068][ T5052] ? __rcu_read_unlock+0x4e/0x70 [ 96.804097][ T5052] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.804127][ T5052] bpf_prog_test_run+0x204/0x340 [ 96.804187][ T5052] __sys_bpf+0x52e/0x7e0 [ 96.804216][ T5052] __x64_sys_bpf+0x41/0x50 [ 96.804235][ T5052] x64_sys_call+0x10cb/0x3020 [ 96.804302][ T5052] do_syscall_64+0x12c/0x3b0 [ 96.804326][ T5052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.804491][ T5052] RIP: 0033:0x7fc1981acdd9 [ 96.804508][ T5052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.804527][ T5052] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.804546][ T5052] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 96.804597][ T5052] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 96.804610][ T5052] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 96.804624][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.804675][ T5052] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 96.804698][ T5052] [ 97.069297][ T5058] FAULT_INJECTION: forcing a failure. [ 97.069297][ T5058] name failslab, interval 1, probability 0, space 0, times 0 [ 97.110388][ T5058] CPU: 0 UID: 0 PID: 5058 Comm: syz.3.495 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.110426][ T5058] Tainted: [W]=WARN [ 97.110434][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.110447][ T5058] Call Trace: [ 97.110453][ T5058] [ 97.110512][ T5058] __dump_stack+0x1d/0x30 [ 97.110542][ T5058] dump_stack_lvl+0x95/0xd0 [ 97.110567][ T5058] dump_stack+0x15/0x1b [ 97.110644][ T5058] should_fail_ex+0x263/0x280 [ 97.110703][ T5058] should_failslab+0x8c/0xb0 [ 97.110752][ T5058] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 97.110786][ T5058] ? __alloc_skb+0x2d6/0x690 [ 97.110888][ T5058] __alloc_skb+0x2d6/0x690 [ 97.110920][ T5058] ? __alloc_skb+0x200/0x690 [ 97.110962][ T5058] netlink_alloc_large_skb+0xbf/0xf0 [ 97.111104][ T5058] netlink_sendmsg+0x40c/0x6f0 [ 97.111152][ T5058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.111179][ T5058] ____sys_sendmsg+0x563/0x5b0 [ 97.111268][ T5058] ___sys_sendmsg+0x195/0x1e0 [ 97.111310][ T5058] __x64_sys_sendmsg+0xd4/0x160 [ 97.111341][ T5058] x64_sys_call+0x194c/0x3020 [ 97.111366][ T5058] do_syscall_64+0x12c/0x3b0 [ 97.111455][ T5058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.111481][ T5058] RIP: 0033:0x7fc1981acdd9 [ 97.111558][ T5058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.111575][ T5058] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.111593][ T5058] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 97.111606][ T5058] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 97.111618][ T5058] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 97.111705][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.111719][ T5058] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 97.111749][ T5058] [ 97.364234][ T5067] netlink: 'syz.2.496': attribute type 39 has an invalid length. [ 97.596594][ T5094] loop4: detected capacity change from 0 to 512 [ 97.614051][ T5094] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 97.931492][ T5102] FAULT_INJECTION: forcing a failure. [ 97.931492][ T5102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.964984][ T5102] CPU: 1 UID: 0 PID: 5102 Comm: syz.1.511 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.965018][ T5102] Tainted: [W]=WARN [ 97.965024][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.965035][ T5102] Call Trace: [ 97.965041][ T5102] [ 97.965047][ T5102] __dump_stack+0x1d/0x30 [ 97.965110][ T5102] dump_stack_lvl+0x95/0xd0 [ 97.965161][ T5102] dump_stack+0x15/0x1b [ 97.965184][ T5102] should_fail_ex+0x263/0x280 [ 97.965218][ T5102] should_fail+0xb/0x20 [ 97.965248][ T5102] should_fail_usercopy+0x1a/0x20 [ 97.965332][ T5102] _copy_from_user+0x1c/0xb0 [ 97.965366][ T5102] sctp_getsockopt_local_addrs+0x85/0x960 [ 97.965473][ T5102] ? avc_has_perm+0x101/0x190 [ 97.965535][ T5102] ? lock_sock_nested+0x84/0x110 [ 97.965566][ T5102] sctp_getsockopt+0x631/0xaa0 [ 97.965617][ T5102] sock_common_getsockopt+0x60/0x70 [ 97.965735][ T5102] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 97.965766][ T5102] do_sock_getsockopt+0x2f5/0x570 [ 97.965793][ T5102] __x64_sys_getsockopt+0x11d/0x1a0 [ 97.965880][ T5102] x64_sys_call+0x2dcf/0x3020 [ 97.965904][ T5102] do_syscall_64+0x12c/0x3b0 [ 97.965926][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.965947][ T5102] RIP: 0033:0x7f0fb957cdd9 [ 97.965962][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.965986][ T5102] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 97.966005][ T5102] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 97.966018][ T5102] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 97.966030][ T5102] RBP: 00007f0fb7fcf090 R08: 0000200000000100 R09: 0000000000000000 [ 97.966042][ T5102] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 97.966054][ T5102] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 97.966103][ T5102] [ 98.366974][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 98.366992][ T28] audit: type=1400 audit(1777095119.950:750): avc: denied { create } for pid=5125 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 98.401197][ T28] audit: type=1400 audit(1777095119.980:751): avc: denied { cpu } for pid=5123 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.423674][ T5130] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 98.450562][ T28] audit: type=1400 audit(1777095120.030:752): avc: denied { ioctl } for pid=5123 comm="syz.0.521" path="uts:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.479590][ T28] audit: type=1400 audit(1777095120.060:753): avc: denied { associate } for pid=5133 comm="syz.3.522" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 98.502089][ T28] audit: type=1400 audit(1777095120.060:754): avc: denied { append } for pid=5133 comm="syz.3.522" name="pfkey" dev="proc" ino=4026532935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.565430][ T5139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.524'. [ 98.610717][ T5141] FAULT_INJECTION: forcing a failure. [ 98.610717][ T5141] name failslab, interval 1, probability 0, space 0, times 0 [ 98.654241][ T5141] CPU: 0 UID: 0 PID: 5141 Comm: syz.0.525 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.654289][ T5141] Tainted: [W]=WARN [ 98.654300][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.654374][ T5141] Call Trace: [ 98.654382][ T5141] [ 98.654391][ T5141] __dump_stack+0x1d/0x30 [ 98.654422][ T5141] dump_stack_lvl+0x95/0xd0 [ 98.654465][ T5141] dump_stack+0x15/0x1b [ 98.654489][ T5141] should_fail_ex+0x263/0x280 [ 98.654581][ T5141] should_failslab+0x8c/0xb0 [ 98.654620][ T5141] kmem_cache_alloc_noprof+0x66/0x3f0 [ 98.654722][ T5141] ? security_inode_alloc+0x37/0x100 [ 98.654775][ T5141] security_inode_alloc+0x37/0x100 [ 98.654814][ T5141] inode_init_always_gfp+0x4a0/0x4e0 [ 98.654895][ T5141] alloc_inode+0x58/0x170 [ 98.654937][ T5141] path_from_stashed+0xec/0x330 [ 98.654960][ T5141] ? __pfx_ns_ioctl+0x10/0x10 [ 98.654991][ T5141] open_namespace+0x59/0x140 [ 98.655102][ T5141] ns_ioctl+0x7e1/0xa60 [ 98.655184][ T5141] ? __se_sys_ioctl+0x90/0x140 [ 98.655291][ T5141] ? __pfx_ns_ioctl+0x10/0x10 [ 98.655351][ T5141] __se_sys_ioctl+0xce/0x140 [ 98.655385][ T5141] __x64_sys_ioctl+0x43/0x50 [ 98.655421][ T5141] x64_sys_call+0x1563/0x3020 [ 98.655504][ T5141] do_syscall_64+0x12c/0x3b0 [ 98.655607][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.655636][ T5141] RIP: 0033:0x7fecbce8cdd9 [ 98.655654][ T5141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.655722][ T5141] RSP: 002b:00007fecbb8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.655747][ T5141] RAX: ffffffffffffffda RBX: 00007fecbd105fa0 RCX: 00007fecbce8cdd9 [ 98.655834][ T5141] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000006 [ 98.655848][ T5141] RBP: 00007fecbb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.655865][ T5141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.655880][ T5141] R13: 00007fecbd106038 R14: 00007fecbd105fa0 R15: 00007ffc9418e268 [ 98.655907][ T5141] [ 98.678376][ T5139] loop4: detected capacity change from 0 to 1024 [ 98.900952][ T5139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 98.916153][ T5139] System zones: 0-1, 3-36 [ 98.957450][ T5139] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.524: bad orphan inode 134217728 [ 98.974983][ T5139] loop4: lost filesystem error report for type 5 error -117 [ 99.029383][ T5139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.124198][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.252078][ T28] audit: type=1400 audit(1777095120.830:755): avc: denied { write } for pid=5164 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.319969][ T5174] FAULT_INJECTION: forcing a failure. [ 99.319969][ T5174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.354622][ T5174] CPU: 1 UID: 0 PID: 5174 Comm: syz.2.536 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.354671][ T5174] Tainted: [W]=WARN [ 99.354679][ T5174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.354691][ T5174] Call Trace: [ 99.354697][ T5174] [ 99.354705][ T5174] __dump_stack+0x1d/0x30 [ 99.354787][ T5174] dump_stack_lvl+0x95/0xd0 [ 99.354816][ T5174] dump_stack+0x15/0x1b [ 99.354859][ T5174] should_fail_ex+0x263/0x280 [ 99.354895][ T5174] should_fail+0xb/0x20 [ 99.354925][ T5174] should_fail_usercopy+0x1a/0x20 [ 99.354961][ T5174] _copy_from_user+0x1c/0xb0 [ 99.355036][ T5174] __sys_bpf+0x183/0x7e0 [ 99.355157][ T5174] __x64_sys_bpf+0x41/0x50 [ 99.355185][ T5174] x64_sys_call+0x10cb/0x3020 [ 99.355218][ T5174] do_syscall_64+0x12c/0x3b0 [ 99.355246][ T5174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.355337][ T5174] RIP: 0033:0x7f56343dcdd9 [ 99.355357][ T5174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.355375][ T5174] RSP: 002b:00007f5632e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.355437][ T5174] RAX: ffffffffffffffda RBX: 00007f5634655fa0 RCX: 00007f56343dcdd9 [ 99.355455][ T5174] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 99.355472][ T5174] RBP: 00007f5632e37090 R08: 0000000000000000 R09: 0000000000000000 [ 99.355489][ T5174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.355505][ T5174] R13: 00007f5634656038 R14: 00007f5634655fa0 R15: 00007ffe04299b38 [ 99.355527][ T5174] [ 99.562271][ T5176] loop4: detected capacity change from 0 to 128 [ 99.578636][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 99.593391][ T5178] gretap1: entered allmulticast mode [ 99.712057][ T5181] rdma_op ffff88813bad7180 conn xmit_rdma 0000000000000000 [ 99.724270][ T28] audit: type=1400 audit(1777095121.290:756): avc: denied { bind } for pid=5179 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.761468][ T5181] loop1: detected capacity change from 0 to 128 [ 99.789149][ T5181] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.824505][ T28] audit: type=1326 audit(1777095121.400:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56343dcdd9 code=0x7ffc0000 [ 100.027104][ T5181] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.051504][ T28] audit: type=1326 audit(1777095121.400:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f56343dcdd9 code=0x7ffc0000 [ 100.163178][ T5180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.355328][ T5180] block device autoloading is deprecated and will be removed. [ 100.363540][ T28] audit: type=1326 audit(1777095121.400:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56343dcdd9 code=0x7ffc0000 [ 100.452000][ T5199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.544'. [ 100.464703][ T5197] loop4: detected capacity change from 0 to 512 [ 100.481092][ T5197] EXT4-fs (loop4): 1 truncate cleaned up [ 100.502328][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.515321][ T5197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.588621][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 100.614721][ T5197] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.543: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 100.672699][ T5205] netlink: 56 bytes leftover after parsing attributes in process `syz.2.546'. [ 100.690050][ T5199] loop0: detected capacity change from 0 to 1024 [ 100.702678][ T5205] xt_TCPMSS: Only works on TCP SYN packets [ 100.734365][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.785254][ T5210] FAULT_INJECTION: forcing a failure. [ 100.785254][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 100.803634][ T5199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 100.812695][ T5199] System zones: 0-1, 3-36 [ 100.820885][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.3.548 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.820911][ T5210] Tainted: [W]=WARN [ 100.820919][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.820994][ T5210] Call Trace: [ 100.821001][ T5210] [ 100.821009][ T5210] __dump_stack+0x1d/0x30 [ 100.821089][ T5210] dump_stack_lvl+0x95/0xd0 [ 100.821108][ T5210] dump_stack+0x15/0x1b [ 100.821127][ T5210] should_fail_ex+0x263/0x280 [ 100.821154][ T5210] should_failslab+0x8c/0xb0 [ 100.821226][ T5210] __kmalloc_noprof+0xb8/0x4d0 [ 100.821328][ T5210] ? bpf_test_init+0x86/0x130 [ 100.821363][ T5210] bpf_test_init+0x86/0x130 [ 100.821390][ T5210] bpf_prog_test_run_xdp+0x306/0xa10 [ 100.821421][ T5210] ? __rcu_read_unlock+0x4e/0x70 [ 100.821443][ T5210] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.821474][ T5210] bpf_prog_test_run+0x204/0x340 [ 100.821555][ T5210] __sys_bpf+0x52e/0x7e0 [ 100.821603][ T5210] __x64_sys_bpf+0x41/0x50 [ 100.821626][ T5210] x64_sys_call+0x10cb/0x3020 [ 100.821652][ T5210] do_syscall_64+0x12c/0x3b0 [ 100.821708][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.821732][ T5210] RIP: 0033:0x7fc1981acdd9 [ 100.821746][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.821761][ T5210] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.821777][ T5210] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 100.821802][ T5210] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 100.821889][ T5210] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 100.821903][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.821913][ T5210] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 100.822005][ T5210] [ 101.031879][ T5199] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.544: bad orphan inode 134217728 [ 101.045528][ T5199] loop0: lost filesystem error report for type 5 error -117 [ 101.057630][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.138476][ T5218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'. [ 101.218495][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.372753][ T5236] loop0: detected capacity change from 0 to 512 [ 101.387364][ T5236] EXT4-fs (loop0): 1 truncate cleaned up [ 101.399814][ T5239] netlink: 'syz.3.558': attribute type 29 has an invalid length. [ 101.408039][ T5236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.443524][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 101.492889][ T5239] netlink: 'syz.3.558': attribute type 29 has an invalid length. [ 101.515646][ T5244] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.557: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 101.544743][ T5248] Illegal XDP return value 2730708741 on prog (id 112) dev N/A, expect packet loss! [ 101.558705][ T5250] netlink: 500 bytes leftover after parsing attributes in process `syz.3.558'. [ 101.577693][ T5252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 101.589824][ T5254] loop1: detected capacity change from 0 to 512 [ 101.619503][ T5254] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 101.626830][ T5250] unsupported nla_type 58 [ 101.628820][ T5239] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=5239 comm=syz.3.558 [ 101.652353][ T5243] usb usb9: usbfs: process 5243 (syz.4.560) did not claim interface 40 before use [ 101.689180][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.755317][ T5252] loop2: detected capacity change from 0 to 1024 [ 101.805486][ T5252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 101.813866][ T5252] System zones: 0-1, 3-36 [ 101.824732][ T5252] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.562: bad orphan inode 134217728 [ 101.835948][ T5252] loop2: lost filesystem error report for type 5 error -117 [ 101.852296][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.909430][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.971067][ T5267] loop0: detected capacity change from 0 to 8192 [ 102.023161][ T5267] loop0: p2 p3 p4 < > [ 102.036661][ T5267] loop0: p2 size 591360 extends beyond EOD, truncated [ 102.049608][ T5267] loop0: p3 start 9830145 is beyond EOD, truncated [ 102.211723][ T5259] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 102.231165][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 102.254565][ T5289] EXT4-fs (loop4): 1 truncate cleaned up [ 102.276584][ T5289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.300758][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 102.328530][ T5289] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.573: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 102.922284][ T5293] sit0: entered allmulticast mode [ 102.933343][ T5293] sit0: entered promiscuous mode [ 103.059247][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.070977][ T5299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.579'. [ 103.097306][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 103.140580][ T5303] 9p: Bad value for 'rfdno' [ 103.226222][ T5299] set_capacity_and_notify: 1 callbacks suppressed [ 103.226237][ T5299] loop1: detected capacity change from 0 to 1024 [ 103.277388][ T5299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 103.290464][ T5299] System zones: 0-1, 3-36 [ 103.329622][ T5299] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.579: bad orphan inode 134217728 [ 103.343288][ T5299] loop1: lost filesystem error report for type 5 error -117 [ 103.348939][ T5299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.386718][ T5321] loop4: detected capacity change from 0 to 512 [ 103.397445][ T5321] EXT4-fs (loop4): 1 truncate cleaned up [ 103.411028][ T5321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.449033][ T5321] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.585: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 103.481076][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.503231][ T5327] FAULT_INJECTION: forcing a failure. [ 103.503231][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 103.526627][ T5330] FAULT_INJECTION: forcing a failure. [ 103.526627][ T5330] name failslab, interval 1, probability 0, space 0, times 0 [ 103.536837][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.3.588 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.537008][ T5327] Tainted: [W]=WARN [ 103.537030][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.537085][ T5327] Call Trace: [ 103.537116][ T5327] [ 103.537155][ T5327] __dump_stack+0x1d/0x30 [ 103.537282][ T5327] dump_stack_lvl+0x95/0xd0 [ 103.537357][ T5327] dump_stack+0x15/0x1b [ 103.537421][ T5327] should_fail_ex+0x263/0x280 [ 103.537517][ T5327] should_failslab+0x8c/0xb0 [ 103.537674][ T5327] __kmalloc_cache_node_noprof+0x6b/0x470 [ 103.537792][ T5327] ? avc_has_perm_noaudit+0xab/0x130 [ 103.537947][ T5327] ? __get_vm_area_node+0x106/0x1d0 [ 103.538087][ T5327] __get_vm_area_node+0x106/0x1d0 [ 103.538298][ T5327] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 103.538372][ T5327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 103.538479][ T5327] ? cred_has_capability+0x224/0x2a0 [ 103.538605][ T5327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 103.538689][ T5327] __vmalloc_noprof+0xa4/0xf0 [ 103.538753][ T5327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 103.538855][ T5327] bpf_prog_alloc_no_stats+0x47/0x390 [ 103.538974][ T5327] ? bpf_prog_alloc+0x2a/0x150 [ 103.539083][ T5327] bpf_prog_alloc+0x3c/0x150 [ 103.539165][ T5327] bpf_prog_load+0x50d/0x1030 [ 103.539284][ T5327] ? security_bpf+0x2b/0x90 [ 103.539336][ T5327] __sys_bpf+0x505/0x7e0 [ 103.539495][ T5327] __x64_sys_bpf+0x41/0x50 [ 103.539578][ T5327] x64_sys_call+0x10cb/0x3020 [ 103.539665][ T5327] do_syscall_64+0x12c/0x3b0 [ 103.539821][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.539897][ T5327] RIP: 0033:0x7fc1981acdd9 [ 103.539944][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.540002][ T5327] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.540075][ T5327] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 103.540149][ T5327] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 103.540192][ T5327] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 103.540246][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.540296][ T5327] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 103.540363][ T5327] [ 103.548079][ T5327] syz.3.588: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 103.557180][ T5330] CPU: 1 UID: 0 PID: 5330 Comm: syz.1.587 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.557283][ T5330] Tainted: [W]=WARN [ 103.557356][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.557398][ T5330] Call Trace: [ 103.557419][ T5330] [ 103.557442][ T5330] __dump_stack+0x1d/0x30 [ 103.557523][ T5330] dump_stack_lvl+0x95/0xd0 [ 103.557597][ T5330] dump_stack+0x15/0x1b [ 103.557661][ T5330] should_fail_ex+0x263/0x280 [ 103.557791][ T5330] should_failslab+0x8c/0xb0 [ 103.557972][ T5330] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 103.558101][ T5330] ? __alloc_skb+0x2d6/0x690 [ 103.558239][ T5330] __alloc_skb+0x2d6/0x690 [ 103.558377][ T5330] ? __alloc_skb+0x200/0x690 [ 103.558501][ T5330] netlink_alloc_large_skb+0xbf/0xf0 [ 103.558572][ T5330] netlink_sendmsg+0x40c/0x6f0 [ 103.558603][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.558636][ T5330] ____sys_sendmsg+0x563/0x5b0 [ 103.558718][ T5330] ___sys_sendmsg+0x195/0x1e0 [ 103.558922][ T5330] __x64_sys_sendmsg+0xd4/0x160 [ 103.559027][ T5330] x64_sys_call+0x194c/0x3020 [ 103.559105][ T5330] do_syscall_64+0x12c/0x3b0 [ 103.559190][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.559280][ T5330] RIP: 0033:0x7f0fb957cdd9 [ 103.559332][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.559396][ T5330] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.559467][ T5330] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 103.559591][ T5330] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000004 [ 103.559642][ T5330] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.559698][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.559754][ T5330] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 103.559828][ T5330] [ 103.977612][ T5327] ,cpuset=/,mems_allowed=0 [ 103.982176][ T5327] CPU: 1 UID: 0 PID: 5327 Comm: syz.3.588 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.982314][ T5327] Tainted: [W]=WARN [ 103.982336][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.982349][ T5327] Call Trace: [ 103.982355][ T5327] [ 103.982362][ T5327] __dump_stack+0x1d/0x30 [ 103.982387][ T5327] dump_stack_lvl+0x95/0xd0 [ 103.982412][ T5327] dump_stack+0x15/0x1b [ 103.982487][ T5327] warn_alloc+0x145/0x1c0 [ 103.982517][ T5327] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 103.982551][ T5327] ? cred_has_capability+0x224/0x2a0 [ 103.982584][ T5327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 103.982638][ T5327] __vmalloc_noprof+0xa4/0xf0 [ 103.982704][ T5327] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 103.982785][ T5327] bpf_prog_alloc_no_stats+0x47/0x390 [ 103.982810][ T5327] ? bpf_prog_alloc+0x2a/0x150 [ 103.982921][ T5327] bpf_prog_alloc+0x3c/0x150 [ 103.982944][ T5327] bpf_prog_load+0x50d/0x1030 [ 103.982978][ T5327] ? security_bpf+0x2b/0x90 [ 103.983003][ T5327] __sys_bpf+0x505/0x7e0 [ 103.983077][ T5327] __x64_sys_bpf+0x41/0x50 [ 103.983115][ T5327] x64_sys_call+0x10cb/0x3020 [ 103.983152][ T5327] do_syscall_64+0x12c/0x3b0 [ 103.983179][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.983227][ T5327] RIP: 0033:0x7fc1981acdd9 [ 103.983274][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.983295][ T5327] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.983317][ T5327] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 103.983329][ T5327] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 103.983341][ T5327] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 103.983353][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.983432][ T5327] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 103.983452][ T5327] [ 103.984979][ T5327] Mem-Info: [ 104.002665][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.012532][ T5327] active_anon:7989 inactive_anon:1 isolated_anon:0 [ 104.012532][ T5327] active_file:20629 inactive_file:2336 isolated_file:0 [ 104.012532][ T5327] unevictable:0 dirty:458 writeback:0 [ 104.012532][ T5327] slab_reclaimable:3224 slab_unreclaimable:117068 [ 104.012532][ T5327] mapped:30081 shmem:241 pagetables:1118 [ 104.012532][ T5327] sec_pagetables:0 bounce:0 [ 104.012532][ T5327] kernel_misc_reclaimable:0 [ 104.012532][ T5327] free:1783417 free_pcp:6671 free_cma:0 [ 104.241138][ T5327] Node 0 active_anon:31840kB inactive_anon:4kB active_file:82516kB inactive_file:9344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120208kB dirty:1832kB writeback:0kB shmem:964kB kernel_stack:3408kB pagetables:4472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.286374][ T5327] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.321212][ T5327] lowmem_reserve[]: 0 2878 7857 7857 [ 104.338591][ T5336] loop4: detected capacity change from 0 to 2048 [ 104.350676][ T5327] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 104.382541][ T5327] lowmem_reserve[]: 0 0 4978 4978 [ 104.392071][ T5327] Node 0 Normal free:4173872kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31028kB inactive_anon:4kB active_file:82516kB inactive_file:9344kB unevictable:0kB writepending:1832kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:24460kB local_pcp:5952kB free_cma:0kB [ 104.445535][ T5336] loop4: p2 p3 p7 [ 104.449636][ T5344] loop2: detected capacity change from 0 to 512 [ 104.471814][ T5327] lowmem_reserve[]: 0 0 0 0 [ 104.478952][ T5336] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 104.479555][ T5344] EXT4-fs (loop2): inodes count not valid: 0 vs 32 [ 104.492212][ T5327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.511635][ T5327] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB [ 104.543957][ T5336] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 104.573346][ T5327] (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 104.607691][ T5327] Node 0 Normal: 784*4kB (M) 460*8kB (ME) 395*16kB (UME) 331*32kB (UME) 196*64kB (UME) 102*128kB (UM) 56*256kB (UME) 18*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 998*4096kB (M) = 4174000kB [ 104.649087][ T5327] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 104.668391][ T5327] 24101 total pagecache pages [ 104.695695][ T5327] 1 pages in swap cache [ 104.708334][ T5327] Free swap = 124752kB [ 104.719225][ T5327] Total swap = 124996kB [ 104.735863][ T5327] 2097051 pages RAM [ 104.747079][ T5358] loop2: detected capacity change from 0 to 1024 [ 104.756257][ T5327] 0 pages HighMem/MovableOnly [ 104.773838][ T5353] loop0: detected capacity change from 0 to 1024 [ 104.788858][ T5327] 81630 pages reserved [ 104.794833][ T5358] EXT4-fs: dax option not supported [ 104.831548][ T5353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 104.886974][ T5353] System zones: 0-1, 3-36 [ 104.931082][ T5353] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.598: bad orphan inode 134217728 [ 104.959960][ T5353] loop0: lost filesystem error report for type 5 error -117 [ 104.964725][ T5353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.025477][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.131488][ T5351] udevd[5351]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 105.143424][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.153891][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 105.172205][ T5371] loop4: detected capacity change from 0 to 512 [ 105.200656][ T5371] EXT4-fs (loop4): 1 truncate cleaned up [ 105.206880][ T5371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.240102][ T5371] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.601: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 105.272715][ T5374] 9p: Bad value for 'rfdno' [ 105.310715][ T5375] loop0: detected capacity change from 0 to 256 [ 105.363881][ T5375] FAT-fs (loop0): Directory bread(block 64) failed [ 105.370529][ T5375] FAT-fs (loop0): Directory bread(block 65) failed [ 105.377489][ T5375] FAT-fs (loop0): Directory bread(block 66) failed [ 105.384059][ T5375] FAT-fs (loop0): Directory bread(block 67) failed [ 105.390953][ T5375] FAT-fs (loop0): Directory bread(block 68) failed [ 105.397721][ T5375] FAT-fs (loop0): Directory bread(block 69) failed [ 105.404300][ T5375] FAT-fs (loop0): Directory bread(block 70) failed [ 105.411040][ T5375] FAT-fs (loop0): Directory bread(block 71) failed [ 105.418044][ T5375] FAT-fs (loop0): Directory bread(block 72) failed [ 105.424806][ T5375] FAT-fs (loop0): Directory bread(block 73) failed [ 106.070458][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.115251][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 106.115267][ T28] audit: type=1400 audit(1777095127.700:902): avc: denied { append } for pid=5383 comm="syz.1.608" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 106.216522][ T5390] FAULT_INJECTION: forcing a failure. [ 106.216522][ T5390] name failslab, interval 1, probability 0, space 0, times 0 [ 106.247675][ T5395] __nla_validate_parse: 4 callbacks suppressed [ 106.247690][ T5395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.612'. [ 106.282659][ T5390] CPU: 0 UID: 0 PID: 5390 Comm: syz.1.611 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.282694][ T5390] Tainted: [W]=WARN [ 106.282716][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.282733][ T5390] Call Trace: [ 106.282741][ T5390] [ 106.282751][ T5390] __dump_stack+0x1d/0x30 [ 106.282789][ T5390] dump_stack_lvl+0x95/0xd0 [ 106.282865][ T5390] dump_stack+0x15/0x1b [ 106.282890][ T5390] should_fail_ex+0x263/0x280 [ 106.282931][ T5390] should_failslab+0x8c/0xb0 [ 106.283006][ T5390] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 106.283051][ T5390] ? __alloc_skb+0x2d6/0x690 [ 106.283087][ T5390] __alloc_skb+0x2d6/0x690 [ 106.283155][ T5390] ? __alloc_skb+0x200/0x690 [ 106.283195][ T5390] netlink_alloc_large_skb+0xbf/0xf0 [ 106.283219][ T5390] netlink_sendmsg+0x40c/0x6f0 [ 106.283306][ T5390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.283342][ T5390] ____sys_sendmsg+0x563/0x5b0 [ 106.283374][ T5390] ___sys_sendmsg+0x195/0x1e0 [ 106.283433][ T5390] __x64_sys_sendmsg+0xd4/0x160 [ 106.283525][ T5390] x64_sys_call+0x194c/0x3020 [ 106.283549][ T5390] do_syscall_64+0x12c/0x3b0 [ 106.283578][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.283652][ T5390] RIP: 0033:0x7f0fb957cdd9 [ 106.283672][ T5390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.283694][ T5390] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.283714][ T5390] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 106.283728][ T5390] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 106.283743][ T5390] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 106.283767][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.283876][ T5390] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 106.283903][ T5390] [ 106.522974][ T5395] loop3: detected capacity change from 0 to 1024 [ 106.584619][ T5395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.602852][ T5395] System zones: 0-1, 3-36 [ 106.639010][ T5395] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.612: bad orphan inode 134217728 [ 106.653912][ T5395] loop3: lost filesystem error report for type 5 error -117 [ 106.654414][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 106.669192][ C0] EXT4-fs (loop3): initial error at time 1777095128: ext4_orphan_get:1423 [ 106.678503][ C0] EXT4-fs (loop3): last error at time 1777095128: ext4_orphan_get:1423 [ 106.692622][ T5402] loop1: detected capacity change from 0 to 1024 [ 106.702269][ T5402] EXT4-fs: dax option not supported [ 106.769029][ T5406] FAULT_INJECTION: forcing a failure. [ 106.769029][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 106.789566][ T5395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.802839][ T5406] CPU: 0 UID: 0 PID: 5406 Comm: syz.4.613 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.802889][ T5406] Tainted: [W]=WARN [ 106.802896][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.802909][ T5406] Call Trace: [ 106.802917][ T5406] [ 106.802926][ T5406] __dump_stack+0x1d/0x30 [ 106.802955][ T5406] dump_stack_lvl+0x95/0xd0 [ 106.803044][ T5406] dump_stack+0x15/0x1b [ 106.803062][ T5406] should_fail_ex+0x263/0x280 [ 106.803091][ T5406] should_failslab+0x8c/0xb0 [ 106.803129][ T5406] __kmalloc_noprof+0xb8/0x4d0 [ 106.803322][ T5406] ? iovec_from_user+0x84/0x200 [ 106.803360][ T5406] iovec_from_user+0x84/0x200 [ 106.803392][ T5406] __import_iovec+0xf3/0x530 [ 106.803545][ T5406] ? _parse_integer_limit+0x170/0x190 [ 106.803568][ T5406] import_iovec+0x60/0x80 [ 106.803672][ T5406] ___sys_sendmsg+0x160/0x1e0 [ 106.803734][ T5406] __x64_sys_sendmsg+0xd4/0x160 [ 106.803768][ T5406] x64_sys_call+0x194c/0x3020 [ 106.803835][ T5406] do_syscall_64+0x12c/0x3b0 [ 106.803884][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.803908][ T5406] RIP: 0033:0x7f946c01cdd9 [ 106.803922][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.803952][ T5406] RSP: 002b:00007f946aa6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.803980][ T5406] RAX: ffffffffffffffda RBX: 00007f946c295fa0 RCX: 00007f946c01cdd9 [ 106.803997][ T5406] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 106.804029][ T5406] RBP: 00007f946aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.804044][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.804105][ T5406] R13: 00007f946c296038 R14: 00007f946c295fa0 R15: 00007ffd698fa1c8 [ 106.804130][ T5406] [ 107.337975][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.397053][ T5425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.425494][ T5425] EXT4-fs (loop0): 1 truncate cleaned up [ 107.438452][ T5425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.449856][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.465476][ T5434] vfat: Unknown parameter 'u‘' [ 107.469947][ T1038] IPVS: starting estimator thread 0... [ 107.476991][ T5425] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 107.477233][ T28] audit: type=1400 audit(1777095129.060:903): avc: denied { setattr } for pid=5424 comm="syz.0.625" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.485830][ T5430] EXT4-fs: dax option not supported [ 107.508608][ T5422] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.574511][ T5435] IPVS: using max 2688 ests per chain, 134400 per kthread [ 107.627671][ T5438] FAULT_INJECTION: forcing a failure. [ 107.627671][ T5438] name failslab, interval 1, probability 0, space 0, times 0 [ 107.660466][ T5422] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 107.676158][ T5438] CPU: 0 UID: 0 PID: 5438 Comm: syz.1.627 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.676209][ T5438] Tainted: [W]=WARN [ 107.676295][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.676311][ T5438] Call Trace: [ 107.676318][ T5438] [ 107.676327][ T5438] __dump_stack+0x1d/0x30 [ 107.676357][ T5438] dump_stack_lvl+0x95/0xd0 [ 107.676417][ T5438] dump_stack+0x15/0x1b [ 107.676439][ T5438] should_fail_ex+0x263/0x280 [ 107.676476][ T5438] should_failslab+0x8c/0xb0 [ 107.676523][ T5438] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 107.676564][ T5438] ? __alloc_skb+0x2d6/0x690 [ 107.676616][ T5438] __alloc_skb+0x2d6/0x690 [ 107.676704][ T5438] ? __alloc_skb+0x200/0x690 [ 107.676741][ T5438] netlink_alloc_large_skb+0xbf/0xf0 [ 107.676886][ T5438] netlink_sendmsg+0x40c/0x6f0 [ 107.676924][ T5438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.676992][ T5438] ____sys_sendmsg+0x563/0x5b0 [ 107.677024][ T5438] ___sys_sendmsg+0x195/0x1e0 [ 107.677072][ T5438] __x64_sys_sendmsg+0xd4/0x160 [ 107.677131][ T5438] x64_sys_call+0x194c/0x3020 [ 107.677162][ T5438] do_syscall_64+0x12c/0x3b0 [ 107.677195][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.677225][ T5438] RIP: 0033:0x7f0fb957cdd9 [ 107.677275][ T5438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.677335][ T5438] RSP: 002b:00007f0fb7fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.677419][ T5438] RAX: ffffffffffffffda RBX: 00007f0fb97f5fa0 RCX: 00007f0fb957cdd9 [ 107.677437][ T5438] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 107.677451][ T5438] RBP: 00007f0fb7fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.677468][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.677484][ T5438] R13: 00007f0fb97f6038 R14: 00007f0fb97f5fa0 R15: 00007fff499ca698 [ 107.677512][ T5438] [ 107.940162][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.940704][ T5422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 107.972082][ T5422] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.972082][ T5422] [ 107.991184][ T5422] EXT4-fs (loop2): Total free blocks count 0 [ 108.007914][ T5422] EXT4-fs (loop2): Free/Dirty block details [ 108.015662][ T5422] EXT4-fs (loop2): free_blocks=65280 [ 108.030817][ T5422] EXT4-fs (loop2): dirty_blocks=23 [ 108.038897][ T5422] EXT4-fs (loop2): Block reservation details [ 108.048002][ T5422] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 108.180327][ T3300] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.220733][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.264189][ T5463] set_capacity_and_notify: 4 callbacks suppressed [ 108.264204][ T5463] loop4: detected capacity change from 0 to 1024 [ 108.271333][ T5461] loop1: detected capacity change from 0 to 256 [ 108.281273][ T5463] EXT4-fs: dax option not supported [ 108.310400][ T5461] vfat: Unknown parameter 'u‘' [ 108.523137][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.596332][ T3376] IPVS: starting estimator thread 0... [ 108.683045][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.714809][ T5467] IPVS: using max 2688 ests per chain, 134400 per kthread [ 108.839843][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.851323][ T5466] loop4: detected capacity change from 0 to 256 [ 109.023758][ T5470] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 109.091454][ T5466] vfat: Unknown parameter 'u‘' [ 109.114656][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.316017][ T28] audit: type=1400 audit(1777095130.900:904): avc: denied { read } for pid=3022 comm="dhcpcd" name="n25" dev="tmpfs" ino=5218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.318815][ T5481] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 109.359323][ T28] audit: type=1400 audit(1777095130.900:905): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.386880][ T35] IPVS: starting estimator thread 0... [ 109.422406][ T28] audit: type=1400 audit(1777095130.900:906): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.504754][ T5483] IPVS: using max 2544 ests per chain, 127200 per kthread [ 109.509972][ T28] audit: type=1400 audit(1777095130.980:907): avc: denied { setopt } for pid=5479 comm="syz.2.642" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.587425][ T5491] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.644'. [ 109.588322][ T5491] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.644'. [ 109.588919][ T28] audit: type=1400 audit(1777095131.170:908): avc: denied { accept } for pid=5490 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.589029][ T28] audit: type=1400 audit(1777095131.170:909): avc: denied { ioctl } for pid=5490 comm="syz.4.644" path="socket:[12581]" dev="sockfs" ino=12581 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.803041][ T36] bridge_slave_1: left allmulticast mode [ 109.818999][ T36] bridge_slave_1: left promiscuous mode [ 109.833338][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.846745][ T36] bridge_slave_0: left allmulticast mode [ 109.857213][ T36] bridge_slave_0: left promiscuous mode [ 109.877579][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.975102][ T28] audit: type=1400 audit(1777095131.550:910): avc: denied { create } for pid=5495 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.040913][ T28] audit: type=1400 audit(1777095131.550:911): avc: denied { write } for pid=5495 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.086812][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.097272][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.107114][ T36] bond0 (unregistering): Released all slaves [ 110.115108][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 110.307159][ T36] tipc: Left network mode [ 110.325575][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.332824][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.339989][ T5475] bridge_slave_0: entered allmulticast mode [ 110.377524][ T5475] bridge_slave_0: entered promiscuous mode [ 110.398887][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.406037][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.413216][ T5475] bridge_slave_1: entered allmulticast mode [ 110.434161][ T5475] bridge_slave_1: entered promiscuous mode [ 110.454640][ T36] hsr_slave_0: left promiscuous mode [ 110.487889][ T36] hsr_slave_1: left promiscuous mode [ 110.502535][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 110.518507][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.529337][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 110.540439][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.549500][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.556801][ T5535] loop1: detected capacity change from 0 to 256 [ 110.559421][ T5535] vfat: Unknown parameter 'u‘' [ 110.607415][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.611256][ T5541] loop2: detected capacity change from 0 to 512 [ 110.640258][ T36] veth1_macvtap: left promiscuous mode [ 110.648347][ T36] veth0_macvtap: left promiscuous mode [ 110.666062][ T5541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.682255][ T5541] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.684680][ T36] veth1_vlan: left promiscuous mode [ 110.705028][ T5541] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.746102][ T36] veth0_vlan: left promiscuous mode [ 110.760983][ T5541] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 110.773544][ T5541] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.773544][ T5541] [ 110.783845][ T5541] EXT4-fs (loop2): Total free blocks count 0 [ 110.790033][ T5541] EXT4-fs (loop2): Free/Dirty block details [ 110.796132][ T5541] EXT4-fs (loop2): free_blocks=65280 [ 110.801468][ T5541] EXT4-fs (loop2): dirty_blocks=23 [ 110.807567][ T5541] EXT4-fs (loop2): Block reservation details [ 110.815515][ T5541] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 110.940345][ T5555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 110.953859][ T5551] loop4: detected capacity change from 0 to 256 [ 110.971081][ T5551] vfat: Unknown parameter 'u‘' [ 110.977907][ T36] team_slave_1 (unregistering): left allmulticast mode [ 111.002919][ T36] team0 (unregistering): Port device team_slave_1 removed [ 111.023909][ T36] team_slave_0 (unregistering): left allmulticast mode [ 111.031568][ T36] team0 (unregistering): Port device team_slave_0 removed [ 111.099608][ T5559] loop3: detected capacity change from 0 to 1024 [ 111.148060][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 111.154704][ T5559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 111.164512][ T5559] System zones: 0-1, 3-36 [ 111.172476][ T5559] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.654: bad orphan inode 134217728 [ 111.182189][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.192732][ T5559] loop3: lost filesystem error report for type 5 error -117 [ 111.193513][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.236693][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.308733][ T5562] loop1: detected capacity change from 0 to 512 [ 111.360729][ T5475] team0: Port device team_slave_0 added [ 111.393498][ T5562] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.655: corrupted xattr block 95: invalid header [ 111.408576][ T5562] fserror_report: 1 callbacks suppressed [ 111.408886][ T5562] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.419162][ T5562] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.655: bg 0: block 7: invalid block bitmap [ 111.429377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.429426][ C0] EXT4-fs (loop1): initial error at time 1777095133: ext4_expand_extra_isize_ea:2810: inode 11 [ 111.429705][ C0] EXT4-fs (loop1): last error at time 1777095133: ext4_expand_extra_isize_ea:2810: inode 11 [ 111.470837][ T5562] loop1: lost filesystem error report for type 5 error -117 [ 111.473664][ T5562] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 111.491387][ T5562] loop1: lost filesystem error report for type 5 error -117 [ 111.495253][ T5562] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.655: corrupted xattr block 95: invalid header [ 111.517409][ T5562] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.535274][ T5562] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 111.556193][ T5562] EXT4-fs (loop1): 1 orphan inode deleted [ 111.572273][ T5562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.720909][ T5475] team0: Port device team_slave_1 added [ 111.765426][ T3300] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 111.826396][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.890978][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.903836][ T5568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 111.917773][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.929238][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.106830][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.125165][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.141581][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.433729][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.885829][ T5574] loop4: detected capacity change from 0 to 256 [ 112.951264][ T5574] FAT-fs (loop4): Directory bread(block 64) failed [ 112.958017][ T5574] FAT-fs (loop4): Directory bread(block 65) failed [ 112.964981][ T5574] FAT-fs (loop4): Directory bread(block 66) failed [ 112.971647][ T5574] FAT-fs (loop4): Directory bread(block 67) failed [ 112.978232][ T5574] FAT-fs (loop4): Directory bread(block 68) failed [ 112.984864][ T5574] FAT-fs (loop4): Directory bread(block 69) failed [ 112.991734][ T5574] FAT-fs (loop4): Directory bread(block 70) failed [ 112.998532][ T5574] FAT-fs (loop4): Directory bread(block 71) failed [ 113.005211][ T5574] FAT-fs (loop4): Directory bread(block 72) failed [ 113.011989][ T5574] FAT-fs (loop4): Directory bread(block 73) failed [ 113.141017][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.860073][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 113.870255][ T5584] loop1: detected capacity change from 0 to 512 [ 113.885037][ T5475] hsr_slave_0: entered promiscuous mode [ 113.894686][ T5584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.912945][ T5475] hsr_slave_1: entered promiscuous mode [ 113.944691][ T5584] EXT4-fs (loop1): 1 truncate cleaned up [ 113.959132][ T5606] loop2: detected capacity change from 0 to 512 [ 113.974517][ T5584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.995834][ T5606] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 114.079451][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 114.079467][ T28] audit: type=1400 audit(1777095135.660:915): avc: denied { create } for pid=5605 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 114.129598][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.205770][ T28] audit: type=1400 audit(1777095135.720:916): avc: denied { write } for pid=5605 comm="syz.2.666" path="socket:[12096]" dev="sockfs" ino=12096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.405672][ T5475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.420498][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.498803][ T5475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.581264][ T5632] loop2: detected capacity change from 0 to 512 [ 114.628579][ T5632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.641578][ T5632] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.689788][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.700022][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 114.712799][ T5475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.725460][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.737030][ T5475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.751968][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 114.793485][ T28] audit: type=1400 audit(1777095136.370:917): avc: denied { append } for pid=5623 comm="syz.2.668" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.864137][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.215806][ T28] audit: type=1400 audit(1777095136.790:918): avc: denied { ioctl } for pid=5655 comm="syz.4.671" path="socket:[13390]" dev="sockfs" ino=13390 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.242589][ T5657] 9p: Bad value for 'rfdno' [ 115.275768][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.313002][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.363553][ T28] audit: type=1400 audit(1777095136.830:919): avc: denied { append } for pid=5655 comm="syz.4.671" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.403135][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.410369][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.445291][ T5666] loop3: detected capacity change from 0 to 512 [ 115.495045][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.502163][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.523671][ T5666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.542057][ T5668] loop1: detected capacity change from 0 to 1024 [ 115.563681][ T5668] EXT4-fs: dax option not supported [ 115.591950][ T5666] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.731477][ T5675] loop1: detected capacity change from 0 to 512 [ 115.756004][ T5675] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.029299][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.203848][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.340479][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.433268][ T5707] loop1: detected capacity change from 0 to 256 [ 116.582853][ T5475] veth0_vlan: entered promiscuous mode [ 116.599223][ T5707] FAT-fs (loop1): Directory bread(block 64) failed [ 116.610463][ T5475] veth1_vlan: entered promiscuous mode [ 116.644521][ T5707] FAT-fs (loop1): Directory bread(block 65) failed [ 116.657965][ T5707] FAT-fs (loop1): Directory bread(block 66) failed [ 116.665652][ T5707] FAT-fs (loop1): Directory bread(block 67) failed [ 116.673162][ T5707] FAT-fs (loop1): Directory bread(block 68) failed [ 116.680028][ T5707] FAT-fs (loop1): Directory bread(block 69) failed [ 116.706414][ T5475] veth0_macvtap: entered promiscuous mode [ 116.713159][ T5707] FAT-fs (loop1): Directory bread(block 70) failed [ 116.730211][ T5707] FAT-fs (loop1): Directory bread(block 71) failed [ 116.737853][ T5475] veth1_macvtap: entered promiscuous mode [ 116.744124][ T5707] FAT-fs (loop1): Directory bread(block 72) failed [ 116.752040][ T5707] FAT-fs (loop1): Directory bread(block 73) failed [ 116.774751][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.788033][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.838355][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.853892][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.871065][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.885950][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.946694][ T5730] loop3: detected capacity change from 0 to 512 [ 116.979544][ T5730] EXT4-fs (loop3): 1 truncate cleaned up [ 116.989129][ T5730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.005570][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 117.030042][ T5730] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.685: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 117.063493][ T5735] xt_hashlimit: size too large, truncated to 1048576 [ 117.066338][ T5732] loop2: detected capacity change from 0 to 256 [ 117.091410][ T5732] vfat: Unknown parameter 'u‘' [ 117.268333][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.383413][ T5745] xt_l2tp: missing protocol rule (udp|l2tpip) [ 117.691462][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.704952][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.714735][ T5745] loop2: detected capacity change from 0 to 128 [ 117.745907][ T5745] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.800975][ T5745] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.843357][ T28] audit: type=1400 audit(1777095139.420:920): avc: denied { create } for pid=5744 comm="syz.2.689" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.931289][ T5760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.957233][ T5759] FAT-fs (loop5): Directory bread(block 64) failed [ 118.035581][ T5759] FAT-fs (loop5): Directory bread(block 65) failed [ 118.042692][ T5760] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.072676][ T5759] FAT-fs (loop5): Directory bread(block 66) failed [ 118.104498][ T5759] FAT-fs (loop5): Directory bread(block 67) failed [ 118.111328][ T5759] FAT-fs (loop5): Directory bread(block 68) failed [ 118.118150][ T5759] FAT-fs (loop5): Directory bread(block 69) failed [ 118.124912][ T5759] FAT-fs (loop5): Directory bread(block 70) failed [ 118.131572][ T5759] FAT-fs (loop5): Directory bread(block 71) failed [ 118.138211][ T5759] FAT-fs (loop5): Directory bread(block 72) failed [ 118.144868][ T5759] FAT-fs (loop5): Directory bread(block 73) failed [ 118.252887][ T5772] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.278130][ T5772] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.695: Allocating blocks 41-42 which overlap fs metadata [ 118.292227][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 118.292464][ T5772] Quota error (device loop3): write_blk: dquota write failed [ 118.299814][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 118.299832][ C0] EXT4-fs (loop3): initial error at time 1777095139: ext4_mb_mark_diskspace_used:4222 [ 118.299855][ C0] EXT4-fs (loop3): last error at time 1777095139: ext4_mb_mark_diskspace_used:4222 [ 118.332732][ T5772] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 118.341872][ T5772] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.695: Allocating blocks 41-42 which overlap fs metadata [ 118.355698][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 118.357141][ T5772] Quota error (device loop3): write_blk: dquota write failed [ 118.382168][ T5772] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 118.394710][ T5772] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.695: Failed to acquire dquot type 1 [ 118.449312][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 118.450425][ T5772] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 118.484514][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.695: corrupted inode contents [ 118.502543][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.502791][ T5772] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.695: mark_inode_dirty error [ 118.543707][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.544171][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.695: corrupted inode contents [ 118.574562][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.574914][ T5772] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.695: mark_inode_dirty error [ 118.613840][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.614142][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.695: corrupted inode contents [ 118.645488][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.645666][ T5772] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 118.681685][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.689622][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 118.690859][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.695: corrupted inode contents [ 118.720310][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.722663][ T5772] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.695: mark_inode_dirty error [ 118.730357][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.756876][ T5772] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 118.757169][ T5772] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 118.814325][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 118.814690][ T5772] EXT4-fs (loop3): 1 truncate cleaned up [ 118.854278][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.032180][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.184779][ T5783] set_capacity_and_notify: 3 callbacks suppressed [ 119.184803][ T5783] loop2: detected capacity change from 0 to 256 [ 119.244987][ T5783] vfat: Unknown parameter 'u‘' [ 120.402170][ T5799] rdma_op ffff88811ba0b180 conn xmit_rdma 0000000000000000 [ 121.242905][ T5813] loop4: detected capacity change from 0 to 512 [ 121.289860][ T5811] rdma_op ffff88811afd7980 conn xmit_rdma 0000000000000000 [ 121.323763][ T5813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.339077][ T5813] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.350588][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'. [ 121.360628][ T5813] autofs4:pid:5813:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 121.377241][ T5813] autofs4:pid:5813:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 121.556313][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.597674][ T5819] netlink: 'syz.4.710': attribute type 5 has an invalid length. [ 121.651492][ T5819] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 121.678765][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 121.827270][ T5833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65509 sclass=netlink_route_socket pid=5833 comm=syz.4.714 [ 121.887240][ T28] audit: type=1400 audit(1777095143.470:921): avc: denied { ioctl } for pid=5834 comm="syz.2.715" path="socket:[13756]" dev="sockfs" ino=13756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.975671][ T5833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13452 sclass=netlink_route_socket pid=5833 comm=syz.4.714 [ 122.000132][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 122.165002][ T5836] loop4: detected capacity change from 0 to 128 [ 122.621150][ T5854] rdma_op ffff88813b088d80 conn xmit_rdma 0000000000000000 [ 123.055963][ T5865] FAULT_INJECTION: forcing a failure. [ 123.055963][ T5865] name failslab, interval 1, probability 0, space 0, times 0 [ 123.074873][ T5867] loop4: detected capacity change from 0 to 512 [ 123.144511][ T5867] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 123.151167][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.3.722 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.151206][ T5865] Tainted: [W]=WARN [ 123.151215][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.151271][ T5865] Call Trace: [ 123.151307][ T5865] [ 123.151344][ T5865] __dump_stack+0x1d/0x30 [ 123.151439][ T5865] dump_stack_lvl+0x95/0xd0 [ 123.151565][ T5865] dump_stack+0x15/0x1b [ 123.151631][ T5865] should_fail_ex+0x263/0x280 [ 123.151722][ T5865] should_failslab+0x8c/0xb0 [ 123.151831][ T5865] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 123.152030][ T5865] ? __alloc_skb+0x2d6/0x690 [ 123.152147][ T5865] __alloc_skb+0x2d6/0x690 [ 123.152264][ T5865] ? __alloc_skb+0x200/0x690 [ 123.152374][ T5865] netlink_alloc_large_skb+0xbf/0xf0 [ 123.152502][ T5865] netlink_sendmsg+0x40c/0x6f0 [ 123.152594][ T5865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.152697][ T5865] ____sys_sendmsg+0x563/0x5b0 [ 123.152875][ T5865] ___sys_sendmsg+0x195/0x1e0 [ 123.153003][ T5865] __x64_sys_sendmsg+0xd4/0x160 [ 123.153090][ T5865] x64_sys_call+0x194c/0x3020 [ 123.153186][ T5865] do_syscall_64+0x12c/0x3b0 [ 123.153332][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.153408][ T5865] RIP: 0033:0x7fc1981acdd9 [ 123.153462][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.153529][ T5865] RSP: 002b:00007fc196c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.153598][ T5865] RAX: ffffffffffffffda RBX: 00007fc198425fa0 RCX: 00007fc1981acdd9 [ 123.153650][ T5865] RDX: 0000000000000098 RSI: 0000200000000040 RDI: 0000000000000005 [ 123.153732][ T5865] RBP: 00007fc196c07090 R08: 0000000000000000 R09: 0000000000000000 [ 123.153775][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.153818][ T5865] R13: 00007fc198426038 R14: 00007fc198425fa0 R15: 00007ffc2c4fa398 [ 123.153900][ T5865] [ 123.414096][ T28] audit: type=1400 audit(1777095144.990:922): avc: denied { setopt } for pid=5868 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.434710][ T5869] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 123.463314][ T5874] ================================================================== [ 123.471440][ T5874] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 123.478955][ T5874] [ 123.481294][ T5874] write to 0xffff888104325700 of 8 bytes by task 5868 on cpu 0: [ 123.488953][ T5874] mas_wmb_replace+0x234/0x1760 [ 123.493846][ T5874] mas_wr_store_entry+0x54ff/0x5ad0 [ 123.499163][ T5874] mas_store_prealloc+0x43e/0x690 [ 123.503205][ T28] audit: type=1400 audit(1777095145.050:923): avc: denied { create } for pid=5861 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.504216][ T5874] vma_complete+0x3c7/0x850 [ 123.528619][ T5874] __split_vma+0x593/0x640 [ 123.533086][ T5874] vma_modify+0xb4b/0xca0 [ 123.537465][ T5874] vma_modify_flags+0x182/0x210 [ 123.542366][ T5874] mprotect_fixup+0x3a2/0x680 [ 123.547082][ T5874] do_mprotect_pkey+0x6ae/0x960 [ 123.552007][ T5874] __x64_sys_mprotect+0x48/0x60 [ 123.556880][ T5874] x64_sys_call+0x2768/0x3020 [ 123.561672][ T5874] do_syscall_64+0x12c/0x3b0 [ 123.566282][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.572197][ T5874] [ 123.574537][ T5874] read to 0xffff888104325700 of 8 bytes by task 5874 on cpu 1: [ 123.582101][ T5874] mtree_range_walk+0x350/0x490 [ 123.587008][ T5874] mas_walk+0x1cc/0x370 [ 123.591189][ T5874] lock_vma_under_rcu+0xc9/0x210 [ 123.596159][ T5874] do_user_addr_fault+0x232/0x1050 [ 123.601295][ T5874] exc_page_fault+0x62/0xa0 [ 123.605837][ T5874] asm_exc_page_fault+0x26/0x30 [ 123.610720][ T5874] [ 123.613058][ T5874] value changed: 0xffff888105065801 -> 0xffff888104325700 [ 123.620174][ T5874] [ 123.622504][ T5874] Reported by Kernel Concurrency Sanitizer on: [ 123.628683][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.724 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.639483][ T5874] Tainted: [W]=WARN [ 123.643292][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.653356][ T5874] ================================================================== [ 123.675811][ T5877] FAULT_INJECTION: forcing a failure. [ 123.675811][ T5877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.689135][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.2.723 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.689169][ T5877] Tainted: [W]=WARN [ 123.689286][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.689302][ T5877] Call Trace: [ 123.689362][ T5877] [ 123.689373][ T5877] __dump_stack+0x1d/0x30 [ 123.689471][ T5877] dump_stack_lvl+0x95/0xd0 [ 123.689495][ T5877] dump_stack+0x15/0x1b [ 123.689514][ T5877] should_fail_ex+0x263/0x280 [ 123.689548][ T5877] should_fail+0xb/0x20 [ 123.689627][ T5877] should_fail_usercopy+0x1a/0x20 [ 123.689656][ T5877] _copy_from_iter+0xcf/0xea0 [ 123.689688][ T5877] ? alloc_pages_mpol+0x217/0x260 [ 123.689723][ T5877] copy_page_from_iter+0x161/0x1f0 [ 123.689793][ T5877] tun_get_user+0xbe3/0x27e0 [ 123.689861][ T5877] ? ref_tracker_alloc+0x1eb/0x2f0 [ 123.689895][ T5877] tun_chr_write_iter+0x15e/0x210 [ 123.689929][ T5877] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 123.690025][ T5877] vfs_write+0x5a6/0x9f0 [ 123.690065][ T5877] ksys_write+0xdc/0x1a0 [ 123.690094][ T5877] __x64_sys_write+0x40/0x50 [ 123.690160][ T5877] x64_sys_call+0x27e1/0x3020 [ 123.690187][ T5877] do_syscall_64+0x12c/0x3b0 [ 123.690286][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.690309][ T5877] RIP: 0033:0x7f563439d60e [ 123.690395][ T5877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.690418][ T5877] RSP: 002b:00007f5632e15fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.690442][ T5877] RAX: ffffffffffffffda RBX: 00007f5632e166c0 RCX: 00007f563439d60e [ 123.690461][ T5877] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 00000000000000c8 [ 123.690478][ T5877] RBP: 00007f5632e16090 R08: 0000000000000000 R09: 0000000000000000 [ 123.690565][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.690581][ T5877] R13: 00007f5634656128 R14: 00007f5634656090 R15: 00007ffe04299b38 [ 123.690608][ T5877]