last executing test programs: 54.818818088s ago: executing program 2 (id=227): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 54.79958469s ago: executing program 2 (id=229): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000051, &(0x7f0000000380)={0xa, 0x4e21, 0x800, @empty, 0x6}, 0x1c) 54.781085461s ago: executing program 2 (id=230): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032908000000dbdf251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10064806) 54.581220831s ago: executing program 2 (id=234): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000600)="$eJzs3c9rHNcdAPDv7lqyJKuV7ZbWdqE2uOD+wLv6QbHU9tJT24Oh1NBLC44irRVHK63QrhxL+CAnNx9yCAkJhBxyz1+QS3yKCYSck3vIITgkjgJJILBhZndlWdLKC5G1RvP5wGhn5q3m+94u36eZNzOaADLrXPIjFzEcER9FxEhz8dE3nGu+bDy4NZNMuWg0rnyZS9+XLLff2v69YxGxHhEDEfGff0Q8m9sZt7a6Nj9dqZSXW8ul+sJSqba6dvH6wvRcea68ODZ5aWpqcnRifKr7xgzuXXzn5efvXH73X/3vfPvS/XuvvP9eUq3hVtnWduynZtP74sSWdUci4m9PIlgPFFrtecxHz1Mq+f5+ERHn0/wfiUL6bQJZ0Gg0Gj80jnYqXm8Ah1Y+3QfO5YsR0ZzP54vF5j78L2MoX6nW6n+6Vl1ZnG3uKx+Pvvy165XyaOtY4Xj05ZLlsXT+4fL4tuWJiHQf+NXCYLpcnKlWZg+2qwO2OdbK/8FW/n9TaOY/kBG7H/J3PCgADhFDfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF078n+XG3aBQ+ffly8nU6N9//vsjdWV+eqNi7Pl2nxxYWWmOFNdXirOVatzv84XZ6oLj9tepVpdGvtzrNws1cu1eqm2unZ1obqyWL+a3td/tdx3IK0CunHi7N1Pkr/2638ZTKdEf6tMrsLh1mjkotf3IAO9Ueh1BwT0jKF/yC7H+MDjzvgNdCpY2v+6AAcj3+sKAD1z4bTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bru8Pyvn215dtdoRPw8Ij4u9B1tP+sLOAzyn+ci8sn+/4WR3w1vL+3PfZeeIuiPiBfevPL6zel6fXksWf/V5vr6G631472oP9Ctdp628xgAyK6NB7dm2tNBxv3i782LEHbGP9IamxxIz1EObeQeuVYht0/XLqzfjohTu8XPpWMjI60zH0MbhR3xT7Zec81NpPU9kj43ff/iH98j/ukt8X+7Jf6Zn/ypQDbcTfqf0d3yL5/mdGzm36P9z/A+XTvRuf/Lb/Z/hQ7939kuYzz31oufdYx/O+LMrvHb8QbSWNvjJ3W70F343P3///dXnQobbze3s1v8zQ1ERKm+sFSqra5dTP+P3Fx5cWzy0tTU5OjE+FQpHaMutUeqd/rrqQ/v7dX+oYfxByOiq/Yn6/7QXfvj+9988L9ze8T//fndv/+Te8RPKvrHLuN/Pf7pM53KkvizHT7//B7xk3UTXcavvfZPzxIHgKdIbXVtfrpSKS+bMWPGzOZMr3sm4El7mPS9rgkAAAAAAAAAAADQrc6XAY/s2+XEvW4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8GMAAAD//0Gh0nQ=") unshare(0x2040400) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f00000002c0)) 54.087072162s ago: executing program 2 (id=241): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xd6147000) mlockall(0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 53.728901787s ago: executing program 2 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 53.728743268s ago: executing program 32 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 6.387122654s ago: executing program 0 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x3, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @empty=0xe0000000, @multicast1}}}}}}, 0x26) mount(&(0x7f00000000c0)=@sg0, 0x0, 0x0, 0x808041, 0x0) 6.172320516s ago: executing program 0 (id=999): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000d40)={0x0, &(0x7f0000000d80)}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000000, 0x0, 0x0, 0x6, "000000000600000000ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) 5.290516625s ago: executing program 0 (id=1009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 1.49091752s ago: executing program 4 (id=1073): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.444220565s ago: executing program 4 (id=1074): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000006c0)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000740)='\x00', 0x1, 0x0, &(0x7f0000000780)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 1.207748488s ago: executing program 1 (id=1075): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x300, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 1.135648635s ago: executing program 4 (id=1076): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') 1.006941178s ago: executing program 4 (id=1079): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f00000005c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x207ffffe, 0x0, 0x0) 948.392034ms ago: executing program 4 (id=1080): pipe(&(0x7f0000000280)={0xffffffffffffffff}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 913.642928ms ago: executing program 1 (id=1082): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xf8, 0x0, 0x0, 0x41000}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 802.588809ms ago: executing program 1 (id=1084): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x6e, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 677.496582ms ago: executing program 0 (id=1061): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x800002100000001e, 0x0, 0x927b, 0x3, 0x0, 0x2000000000401, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) 656.637664ms ago: executing program 1 (id=1088): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/1, 0x1f80}], 0x310, &(0x7f0000000140)=[{&(0x7f0000000180)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') lseek(r1, 0x2000, 0x0) 473.237912ms ago: executing program 0 (id=1093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001dc0)=@delchain={0x86c, 0x65, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff1, 0x6}, {0x7feb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xf616}, @TCA_RATE={0x6, 0x5, {0x60, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x51b1}, @TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x820, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x3e4, 0x4, [@m_connmark={0xd0, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x786, 0x4, 0x1, 0xfff, 0x7}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0xffffffffffffffff, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xb5, 0x0, 0x29204a90, 0x80}, 0xf40f}}]}, {0x49, 0x6, "e7f58cfc7e03e007a538cb3e86b83301757f090c89f13ffc8804943c4325a975f15ac87e01411c97e86f61fefc3b58e58c631ef1398e47b2e0ced972a5dda4eccd25cbcace"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x124, 0x17, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe8c}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x77e15bd8, 0xc, 0x5, 0x7, 0x100}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf6e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xb1, 0x6, "27eda4e1b4078cf753f17646fcfdec0fb3b2cbf89a71c129686f0dd12fcc5420745ede73d3a1d2dd16b2d1a4ca7f13e3e66bc08819de4ecbe8b7413bc114f7fb37bb9b9999f6610ff2d52761f527657044d024b6a200d80bdde2547598c0a1bd8436617acc4694b7ea451c65c024115dea89d31afdb52f99635df9fcfd4fceea21e17b6ce494f0bd5964a006b2625cfb2bc904775fc25479295a6ce96e4c112bb85e6eb9aeb5a61bdba16fb0a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_sample={0x68, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40c}]}, {0x31, 0x6, "70315564cc86ad5ab092b9aba07e6c116a744d2c590e08db76313482d5cfd7bcd28d1234d3d440e390b5446536"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x184, 0x16, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'numa_maps\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x10001, 0x6, 0x3, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc, 0x10000, 0x20000000, 0x8001, 0x3}}, @TCA_DEF_DATA={0x8, 0x3, '/-{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x0, 0xffffffffffffffff, 0x7f, 0x7ff}}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0xe6, 0x6, "96a15188459aaa595c7d8135a2a8ea72f529f74887e73ea5d834b9fbc50b0eb09b048f08cd0e587045f56a243c0c5085746347f26295684d4effe9896ed04ea0856966c21540a5ea0adc6634d85dfceb98e2aff0a8885d64c4a48b2344a44194a64da2fa92913e5f1a8251eca99d7e3bce096156a467ca5f2b7e75c71d988e809103542dd251c7eb072ff66a92dc958963f0b3e3d59194f9ae528b584842993aa17fcd3ff586c13a9cc8b879f4e4834bc0143304763fb808ae5a6a3e0b99acae260e03d5d567f5e9868208899b821706bfc54c9dee5b3deb2bb4b51122678c54ffdc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x41c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x63a}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x3, 0x4, 0x7ff, 0x6, 0x200, 0x4, 0x31, 0x10c6, 0x80000000, 0x4, 0x9, 0x0, 0x5, 0x78, 0x6, 0x1, 0x2, 0x849a, 0x8, 0x6, 0xe22d, 0xc1c4, 0x4, 0x7, 0x7, 0x8, 0x4, 0x7, 0x8, 0x400, 0xffff, 0x8, 0x9, 0x101, 0x9, 0x853, 0x53, 0x3, 0x4, 0x4, 0x9, 0x2, 0xfffff7d7, 0x4, 0x3, 0xc0000, 0x0, 0x7ff, 0x8, 0x600000, 0x10, 0x9, 0x7, 0x3f8, 0xff, 0x10001, 0x5, 0xb, 0xc5, 0x8, 0x4, 0xa, 0x3ff, 0xfffffff8, 0xff5, 0x58d, 0xffffffff, 0x4de9dfc7, 0x5, 0x40, 0x5, 0x7, 0xc, 0x800000, 0xff, 0x2, 0x3, 0x10000, 0x7de, 0x2, 0x8, 0x8, 0x100, 0x46, 0x3e, 0x5, 0x4ba, 0x8, 0x8, 0x2, 0xa, 0xe, 0x2, 0x2, 0xffff0000, 0x7, 0x7, 0x3, 0x8, 0x2f, 0xfffffc76, 0xfffffffc, 0x1, 0x0, 0xfffffffd, 0x4, 0x81, 0x5953, 0x0, 0x5, 0x6, 0x80, 0xc, 0x0, 0x0, 0x5, 0x80000001, 0xfff, 0xf, 0x4, 0x10000, 0x800, 0x1, 0x0, 0x5, 0xffffffff, 0xfffffff7, 0xffffffad, 0x7, 0x9, 0x2, 0x5600, 0x5, 0x4, 0x5, 0x4, 0x1, 0x2, 0x8, 0xfffffffa, 0x5, 0x0, 0x6, 0x3, 0xf, 0x4, 0x9, 0x6, 0x7fff, 0x40, 0x7fffffff, 0x9, 0x20, 0x4, 0x47, 0x4, 0x5, 0x800, 0x7, 0x4, 0x7fff, 0x0, 0x7, 0x1, 0x10, 0x12, 0x401, 0x1, 0x7a, 0xf, 0x7fffffff, 0x286, 0x2, 0xffffffff, 0x0, 0xd, 0x7, 0x9, 0x3, 0x1, 0x0, 0x4, 0x8a10, 0x6, 0x6, 0x2, 0xb, 0xa, 0x7c5, 0x2, 0x8, 0x5, 0x7, 0x1, 0x6, 0x86c6, 0x8, 0x8000, 0x401, 0x4, 0x2, 0x3, 0x1, 0x40000000, 0x6565, 0xfffffffe, 0x1, 0x5, 0x80, 0x7ff, 0x1a, 0x9, 0x6, 0x1, 0xfffffffb, 0xffffffff, 0x800, 0xfffffffd, 0x1, 0xe, 0x9, 0x4, 0x7, 0x5b11bd4f, 0x1, 0xfffff000, 0x6841, 0xae, 0x8, 0x7fffffff, 0x856, 0x7fff, 0x7, 0x100, 0x0, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x0, 0x7fff, 0x77, 0x1, 0x0, 0x3, 0x94, 0x400, 0x10000, 0x6d9a, 0x5, 0x2]}]}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x84044}, 0x400c00c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 460.872894ms ago: executing program 3 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 437.977526ms ago: executing program 5 (id=1095): perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) symlinkat(&(0x7f00000000c0)='./file0/../file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00') readlinkat(r1, &(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000280)=""/171, 0xab) 406.395369ms ago: executing program 3 (id=1096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 387.418271ms ago: executing program 1 (id=1097): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000200)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 372.067793ms ago: executing program 3 (id=1098): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10008, 0x800000, 0x2, 0x2, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x213, &(0x7f0000000100)={0x0, 0x457a, 0x40, 0x3, 0x800001fe}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 355.600984ms ago: executing program 1 (id=1099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x40000000, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x3a, 0x3, @mcast2}, 0x1c, 0x0}, 0x30048b88) 355.135234ms ago: executing program 5 (id=1100): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000600), 0x10) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfffffdfd}}, 0x0) 327.555817ms ago: executing program 5 (id=1101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 308.799099ms ago: executing program 3 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0) mount(&(0x7f0000000340)=@filename='./dev/sda1\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x2904c, 0x8100, 0x10003, '\x00', [{0x801, 0x5, 0xcd, 0xffffffffffffffff}, {0x801, 0x6, 0x7fff, 0x0, 0x0, 0x9}]}) 265.991293ms ago: executing program 5 (id=1103): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0xfffffffffffffcd4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000200)="2405dd03b089714cfe649d11708beaa3ee1186aa7ec3994ff26ffa33f874ad30d77369180904a62d1cfca00965ddb62a51dcfeffffffcca43c7ee973b288b87b140d62994e4c26dc33621cf6431cb7c7425ced1e216b27d263e718eee129666f0689bf9825856049269d3c281aebf318fae0b081a51e12ec2e030080000042310000000000761c99d472e493f91700"/171, 0xab, 0x0, &(0x7f0000000080)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 265.543424ms ago: executing program 3 (id=1104): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0xa) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9b, 0x40}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x5, 0xc047, 0x53870845, 0x2, 0x81]}, &(0x7f0000000180)=0x54) 217.178309ms ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='byd', 0x3) 216.969478ms ago: executing program 5 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 215.496438ms ago: executing program 5 (id=1115): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000780), 0x5, 0x50a, &(0x7f0000001640)="$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") syz_mount_image$vfat(&(0x7f0000001b80), &(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x1, 0x0, &(0x7f0000001cc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) 567.04µs ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x7}, 0x1020, 0x0, 0xfffffffd, 0x5, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000980), 0x1, 0x490, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000500)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x66}}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 0s ago: executing program 3 (id=1118): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8804, 0xff, 0x9, 0x0, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') fchown(r0, 0xffffffffffffffff, 0xee01) kernel console output (not intermixed with test programs): loc error: size 2400, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 61.862954][ T4680] CPU: 0 UID: 0 PID: 4680 Comm: syz.5.408 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.862982][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.863004][ T4680] Call Trace: [ 61.863011][ T4680] [ 61.863019][ T4680] __dump_stack+0x1d/0x30 [ 61.863046][ T4680] dump_stack_lvl+0x95/0xd0 [ 61.863071][ T4680] dump_stack+0x15/0x1b [ 61.863094][ T4680] warn_alloc+0x146/0x1c0 [ 61.863141][ T4680] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 61.863174][ T4680] ? avc_has_perm_noaudit+0xac/0x160 [ 61.863268][ T4680] ? avc_has_perm_noaudit+0xac/0x160 [ 61.863292][ T4680] ? avc_has_perm+0x101/0x190 [ 61.863316][ T4680] ? bpf_check+0xd8c/0x20f0 [ 61.863339][ T4680] __vmalloc_noprof+0xa4/0xf0 [ 61.863444][ T4680] ? bpf_check+0xd8c/0x20f0 [ 61.863468][ T4680] bpf_check+0xd8c/0x20f0 [ 61.863541][ T4680] bpf_prog_load+0xf38/0x10a0 [ 61.863564][ T4680] ? avc_has_perm_noaudit+0xac/0x160 [ 61.863593][ T4680] __sys_bpf+0xbce/0xc50 [ 61.863616][ T4680] ? do_futex+0x300/0x460 [ 61.863763][ T4680] __x64_sys_bpf+0x69/0x80 [ 61.863796][ T4680] x64_sys_call+0xf26/0x2550 [ 61.863823][ T4680] do_syscall_64+0x112/0x360 [ 61.863913][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.863938][ T4680] RIP: 0033:0x7f305d45f559 [ 61.863961][ T4680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.863982][ T4680] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.864035][ T4680] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 61.864051][ T4680] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 61.864066][ T4680] RBP: 00007f305d4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.864080][ T4680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.864095][ T4680] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 61.864115][ T4680] [ 61.864123][ T4680] Mem-Info: [ 61.864129][ T4680] active_anon:41116 inactive_anon:0 isolated_anon:0 [ 61.864129][ T4680] active_file:0 inactive_file:27718 isolated_file:0 [ 61.864129][ T4680] unevictable:0 dirty:410 writeback:0 [ 61.864129][ T4680] slab_reclaimable:3421 slab_unreclaimable:18117 [ 61.864129][ T4680] mapped:29162 shmem:34841 pagetables:1224 [ 61.864129][ T4680] sec_pagetables:0 bounce:0 [ 61.864129][ T4680] kernel_misc_reclaimable:0 [ 61.864129][ T4680] free:1828806 free_pcp:15857 free_cma:0 [ 61.875792][ T4680] Node 0 active_anon:164232kB inactive_anon:0kB active_file:0kB inactive_file:110872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116648kB dirty:1640kB writeback:0kB shmem:139364kB kernel_stack:3584kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.875868][ T4680] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.875959][ T4680] lowmem_reserve[]: 0 2877 7856 7856 [ 61.875990][ T4680] Node 0 DMA32 free:2943056kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946580kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 61.876153][ T4680] lowmem_reserve[]: 0 0 4978 4978 [ 61.876248][ T4680] Node 0 Normal free:4356808kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:164232kB inactive_anon:0kB active_file:0kB inactive_file:110872kB unevictable:0kB writepending:1640kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:60100kB local_pcp:6772kB free_cma:0kB [ 61.876319][ T4680] lowmem_reserve[]: 0 0 0 0 [ 61.876349][ T4680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.876605][ T4680] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943056kB [ 61.876943][ T4680] Node 0 Normal: 17090*4kB (UME) 820*8kB (UME) 526*16kB (UME) 396*32kB (M) 382*64kB (UM) 141*128kB (UM) 36*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (U) 1024*4096kB (UM) = 4356872kB [ 61.883214][ T4680] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 61.883236][ T4680] 62555 total pagecache pages [ 61.883244][ T4680] 0 pages in swap cache [ 61.883252][ T4680] Free swap = 124996kB [ 61.883260][ T4680] Total swap = 124996kB [ 61.883268][ T4680] 2097051 pages RAM [ 61.883275][ T4680] 0 pages HighMem/MovableOnly [ 61.883283][ T4680] 82013 pages reserved [ 61.890275][ T4685] loop1: detected capacity change from 0 to 128 [ 61.930483][ T4686] loop3: detected capacity change from 0 to 512 [ 61.937013][ T4686] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.958251][ T4686] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.412: bad orphan inode 13 [ 61.958280][ T4686] loop3: lost filesystem error report for type 5 error -117 [ 61.963854][ T4686] ext4_test_bit(bit=12, block=18) = 1 [ 61.963872][ T4686] is_bad_inode(inode)=0 [ 61.963880][ T4686] NEXT_ORPHAN(inode)=0 [ 61.963888][ T4686] max_ino=32 [ 61.963895][ T4686] i_nlink=1 [ 61.964249][ T4686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 62.340048][ T4707] FAULT_INJECTION: forcing a failure. [ 62.340048][ T4707] name failslab, interval 1, probability 0, space 0, times 0 [ 62.340081][ T4707] CPU: 0 UID: 0 PID: 4707 Comm: syz.5.419 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.340107][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.340120][ T4707] Call Trace: [ 62.340128][ T4707] [ 62.340137][ T4707] __dump_stack+0x1d/0x30 [ 62.340163][ T4707] dump_stack_lvl+0x95/0xd0 [ 62.340187][ T4707] dump_stack+0x15/0x1b [ 62.340209][ T4707] should_fail_ex+0x262/0x280 [ 62.340234][ T4707] ? anon_vma_clone+0xc2/0x450 [ 62.340265][ T4707] should_failslab+0x8c/0xb0 [ 62.340293][ T4707] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 62.340322][ T4707] ? anon_vma_clone+0xc2/0x450 [ 62.340354][ T4707] anon_vma_clone+0xc2/0x450 [ 62.340390][ T4707] vma_modify+0x97d/0xd50 [ 62.340414][ T4707] vma_modify_flags+0x1be/0x250 [ 62.340441][ T4707] mlock_fixup+0x166/0x460 [ 62.340471][ T4707] apply_mlockall_flags+0x1d3/0x250 [ 62.340504][ T4707] __ia32_sys_munlockall+0xdb/0x190 [ 62.340533][ T4707] x64_sys_call+0x1a18/0x2550 [ 62.340561][ T4707] do_syscall_64+0x112/0x360 [ 62.340588][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.340611][ T4707] RIP: 0033:0x7f305d45f559 [ 62.340629][ T4707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.340649][ T4707] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 62.340672][ T4707] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 62.340688][ T4707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.340701][ T4707] RBP: 00007f305d6e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 62.340716][ T4707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.340729][ T4707] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 62.340748][ T4707] [ 62.401393][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 62.401409][ T29] audit: type=1326 audit(2000000001.830:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ca2ff559 code=0x7ffc0000 [ 62.405129][ T29] audit: type=1326 audit(2000000001.830:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f02ca2ff559 code=0x7ffc0000 [ 62.501300][ T4711] tap0: tun_chr_ioctl cmd 1074025677 [ 62.501353][ T4711] tap0: linktype set to 825 [ 62.503135][ T29] audit: type=1326 audit(2000000001.910:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ca2ff559 code=0x7ffc0000 [ 62.503246][ T29] audit: type=1326 audit(2000000001.930:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ca2ff559 code=0x7ffc0000 [ 62.503428][ T4711] tap0: tun_chr_ioctl cmd 35108 [ 62.504949][ T4711] tap0: tun_chr_ioctl cmd 2148553947 [ 62.873217][ T4686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 62.968808][ T4724] FAULT_INJECTION: forcing a failure. [ 62.968808][ T4724] name failslab, interval 1, probability 0, space 0, times 0 [ 62.968917][ T4724] CPU: 0 UID: 0 PID: 4724 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.969016][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.969050][ T4724] Call Trace: [ 62.969058][ T4724] [ 62.969068][ T4724] __dump_stack+0x1d/0x30 [ 62.969162][ T4724] dump_stack_lvl+0x95/0xd0 [ 62.969238][ T4724] dump_stack+0x15/0x1b [ 62.969262][ T4724] should_fail_ex+0x262/0x280 [ 62.969287][ T4724] ? alloc_vmap_area+0x1a2/0xde0 [ 62.969368][ T4724] should_failslab+0x8c/0xb0 [ 62.969471][ T4724] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 62.969501][ T4724] ? alloc_vmap_area+0x1a2/0xde0 [ 62.969542][ T4724] alloc_vmap_area+0x1a2/0xde0 [ 62.969589][ T4724] ? should_fail_ex+0xdb/0x280 [ 62.969689][ T4724] ? should_failslab+0x8c/0xb0 [ 62.969719][ T4724] ? __get_vm_area_node+0x125/0x1f0 [ 62.969862][ T4724] __get_vm_area_node+0x199/0x1f0 [ 62.969893][ T4724] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 62.969987][ T4724] ? bpf_check+0xd8c/0x20f0 [ 62.970046][ T4724] ? avc_has_perm_noaudit+0xac/0x160 [ 62.970075][ T4724] ? avc_has_perm_noaudit+0xac/0x160 [ 62.970099][ T4724] ? avc_has_perm+0x101/0x190 [ 62.970123][ T4724] ? bpf_check+0xd8c/0x20f0 [ 62.970202][ T4724] __vmalloc_noprof+0xa4/0xf0 [ 62.970232][ T4724] ? bpf_check+0xd8c/0x20f0 [ 62.970255][ T4724] bpf_check+0xd8c/0x20f0 [ 62.970290][ T4724] bpf_prog_load+0xf38/0x10a0 [ 62.970313][ T4724] ? avc_has_perm_noaudit+0xac/0x160 [ 62.970341][ T4724] __sys_bpf+0xbce/0xc50 [ 62.970364][ T4724] ? do_futex+0x300/0x460 [ 62.970393][ T4724] __x64_sys_bpf+0x69/0x80 [ 62.970451][ T4724] x64_sys_call+0xf26/0x2550 [ 62.970478][ T4724] do_syscall_64+0x112/0x360 [ 62.970506][ T4724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.970573][ T4724] RIP: 0033:0x7f33cdc4f559 [ 62.970591][ T4724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.970611][ T4724] RSP: 002b:00007f33cc69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.970635][ T4724] RAX: ffffffffffffffda RBX: 00007f33cded5fa0 RCX: 00007f33cdc4f559 [ 62.970651][ T4724] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 62.970679][ T4724] RBP: 00007f33cdce6b20 R08: 0000000000000000 R09: 0000000000000000 [ 62.970694][ T4724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.970708][ T4724] R13: 00007f33cded6038 R14: 00007f33cded5fa0 R15: 00007ffff4075f08 [ 62.970728][ T4724] [ 63.248321][ T4733] IPv4: Oversized IP packet from 127.202.26.0 [ 63.631761][ T4750] loop5: detected capacity change from 0 to 512 [ 63.648450][ T4750] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.661458][ T4750] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.438: bad orphan inode 13 [ 63.661486][ T4750] loop5: lost filesystem error report for type 5 error -117 [ 63.661585][ T4750] ext4_test_bit(bit=12, block=18) = 1 [ 63.661619][ T4750] is_bad_inode(inode)=0 [ 63.661626][ T4750] NEXT_ORPHAN(inode)=0 [ 63.661634][ T4750] max_ino=32 [ 63.661641][ T4750] i_nlink=1 [ 63.662086][ T4750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 63.735056][ T4756] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.983183][ T4750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 64.009577][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=4762 comm=syz.5.442 [ 64.245039][ T4773] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.446'. [ 64.392680][ T29] audit: type=1400 audit(2000000003.820:834): avc: denied { write } for pid=4782 comm="syz.5.450" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 64.392715][ T29] audit: type=1400 audit(2000000003.820:835): avc: denied { open } for pid=4782 comm="syz.5.450" path="/27/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 64.394164][ T29] audit: type=1400 audit(2000000003.820:836): avc: denied { read } for pid=4782 comm="syz.5.450" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 64.743434][ T29] audit: type=1400 audit(2000000004.160:837): avc: denied { firmware_load } for pid=4787 comm="syz.0.451" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 64.810564][ T29] audit: type=1400 audit(2000000004.240:838): avc: denied { setopt } for pid=4792 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.852521][ T4797] loop0: detected capacity change from 0 to 512 [ 64.870412][ T4797] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.455: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 64.870452][ T4797] loop0: lost filesystem error report for type 5 error -117 [ 64.870616][ T4797] EXT4-fs (loop0): 1 orphan inode deleted [ 64.871193][ T4797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.986294][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.012206][ T4807] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.069012][ T4729] loop4: detected capacity change from 0 to 2048 [ 65.089603][ T29] audit: type=1400 audit(2000000004.520:839): avc: denied { read } for pid=4816 comm="syz.0.463" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.553865][ T4848] FAULT_INJECTION: forcing a failure. [ 65.553865][ T4848] name failslab, interval 1, probability 0, space 0, times 0 [ 65.553908][ T4848] CPU: 1 UID: 0 PID: 4848 Comm: syz.1.476 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.553934][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.553950][ T4848] Call Trace: [ 65.553965][ T4848] [ 65.553974][ T4848] __dump_stack+0x1d/0x30 [ 65.554020][ T4848] dump_stack_lvl+0x95/0xd0 [ 65.554043][ T4848] dump_stack+0x15/0x1b [ 65.554064][ T4848] should_fail_ex+0x262/0x280 [ 65.554094][ T4848] ? ramfs_init_fs_context+0x31/0x80 [ 65.554218][ T4848] should_failslab+0x8c/0xb0 [ 65.554253][ T4848] __kmalloc_cache_noprof+0x5d/0x3e0 [ 65.554286][ T4848] ? alloc_fs_context+0x41/0x570 [ 65.554312][ T4848] ? ramfs_init_fs_context+0x31/0x80 [ 65.554392][ T4848] ramfs_init_fs_context+0x31/0x80 [ 65.554422][ T4848] alloc_fs_context+0x490/0x570 [ 65.554447][ T4848] fs_context_for_mount+0x22/0x30 [ 65.554468][ T4848] __se_sys_fsopen+0xee/0x230 [ 65.554568][ T4848] __x64_sys_fsopen+0x31/0x40 [ 65.554651][ T4848] x64_sys_call+0x1f0f/0x2550 [ 65.554683][ T4848] do_syscall_64+0x112/0x360 [ 65.554749][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.554776][ T4848] RIP: 0033:0x7fb836cdf559 [ 65.554793][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.554811][ T4848] RSP: 002b:00007fb83572f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 65.554833][ T4848] RAX: ffffffffffffffda RBX: 00007fb836f65fa0 RCX: 00007fb836cdf559 [ 65.554849][ T4848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 65.554869][ T4848] RBP: 00007fb836d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.554882][ T4848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.554905][ T4848] R13: 00007fb836f66038 R14: 00007fb836f65fa0 R15: 00007fff74933828 [ 65.554929][ T4848] [ 65.586840][ T4851] loop0: detected capacity change from 0 to 512 [ 65.591767][ T4851] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 65.591782][ T4851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.617162][ T4851] EXT4-fs (loop0): 1 orphan inode deleted [ 65.622551][ T4851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.622826][ T4851] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.635278][ T4851] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #12: block 13: comm syz.0.478: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 65.670915][ T4729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.692265][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.779670][ T4860] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 65.801869][ T4860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.874995][ T4860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.875255][ T4860] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 65.875760][ T4860] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 66.074945][ T4874] netlink: 48 bytes leftover after parsing attributes in process `syz.5.486'. [ 66.192155][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.433668][ T4905] syzkaller1: entered promiscuous mode [ 66.433691][ T4905] syzkaller1: entered allmulticast mode [ 67.199552][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.414008][ T4937] ip_tables: iptables: counters copy to user failed while replacing table [ 68.038303][ T356] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 68.211054][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 68.211074][ T29] audit: type=1400 audit(2000000007.630:882): avc: denied { bind } for pid=4958 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.264014][ T4912] loop1: detected capacity change from 0 to 2048 [ 68.784749][ T29] audit: type=1400 audit(2000000008.210:883): avc: denied { write } for pid=4980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.822923][ T29] audit: type=1400 audit(2000000008.250:884): avc: denied { write } for pid=4994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.935272][ T29] audit: type=1400 audit(2000000008.360:885): avc: denied { mount } for pid=5004 comm="syz.0.534" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.943001][ T5005] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 68.974404][ T5005] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 68.974674][ T5005] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 68.978004][ T5005] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 68.978025][ T5005] pci 0000:00:05.0: vgaarb: bridge control possible [ 68.978074][ T5005] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 68.978756][ T5005] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 69.026419][ T29] audit: type=1400 audit(2000000008.450:886): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.066727][ T4912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.136236][ T29] audit: type=1400 audit(2000000008.560:887): avc: denied { write } for pid=4911 comm="syz.1.502" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.211069][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.248176][ T5024] netlink: 44 bytes leftover after parsing attributes in process `syz.5.544'. [ 69.650432][ T5035] bridge0: port 3(batadv1) entered blocking state [ 69.654738][ T5035] bridge0: port 3(batadv1) entered disabled state [ 69.682033][ T5035] batadv1: entered allmulticast mode [ 69.776435][ T5035] batadv1: entered promiscuous mode [ 69.947013][ T29] audit: type=1400 audit(2000000009.370:888): avc: denied { write } for pid=5040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.957068][ T356] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 69.957085][ T356] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 70.012419][ T29] audit: type=1400 audit(2000000009.440:889): avc: denied { write } for pid=5051 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.122287][ T29] audit: type=1400 audit(2000000009.550:890): avc: denied { write } for pid=5055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.167208][ T29] audit: type=1400 audit(2000000009.590:891): avc: denied { write } for pid=5066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.247088][ T5073] FAULT_INJECTION: forcing a failure. [ 70.247088][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 70.247121][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz.5.552 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.247249][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.247264][ T5073] Call Trace: [ 70.247273][ T5073] [ 70.247282][ T5073] __dump_stack+0x1d/0x30 [ 70.247334][ T5073] dump_stack_lvl+0x95/0xd0 [ 70.247358][ T5073] dump_stack+0x15/0x1b [ 70.247383][ T5073] should_fail_ex+0x262/0x280 [ 70.247468][ T5073] ? nf_log_net_init+0x6e/0x850 [ 70.247496][ T5073] should_failslab+0x8c/0xb0 [ 70.247599][ T5073] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 70.247668][ T5073] ? proc_register+0x41d/0x4b0 [ 70.247696][ T5073] ? nf_log_net_init+0x6e/0x850 [ 70.247732][ T5073] kmemdup_noprof+0x2b/0x70 [ 70.247752][ T5073] nf_log_net_init+0x6e/0x850 [ 70.247777][ T5073] ops_init+0x22a/0x2e0 [ 70.247804][ T5073] setup_net+0x9f/0x230 [ 70.247827][ T5073] copy_net_ns+0x339/0x490 [ 70.247874][ T5073] create_new_namespaces+0x1f6/0x420 [ 70.247903][ T5073] unshare_nsproxy_namespaces+0x115/0x150 [ 70.247964][ T5073] ksys_unshare+0x3a3/0x690 [ 70.248000][ T5073] __x64_sys_unshare+0x1f/0x30 [ 70.248079][ T5073] x64_sys_call+0x1e33/0x2550 [ 70.248182][ T5073] do_syscall_64+0x112/0x360 [ 70.248212][ T5073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.248286][ T5073] RIP: 0033:0x7f305d45f559 [ 70.248337][ T5073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.248360][ T5073] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 70.248386][ T5073] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 70.248404][ T5073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 70.248420][ T5073] RBP: 00007f305d4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.248436][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.248518][ T5073] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 70.248541][ T5073] [ 70.264325][ T5081] tipc: Started in network mode [ 70.264372][ T5081] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 70.264580][ T5081] tipc: Enabled bearer , priority 10 [ 70.358182][ T5089] FAULT_INJECTION: forcing a failure. [ 70.358182][ T5089] name failslab, interval 1, probability 0, space 0, times 0 [ 70.358231][ T5089] CPU: 0 UID: 0 PID: 5089 Comm: syz.3.556 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.358329][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.358399][ T5089] Call Trace: [ 70.358406][ T5089] [ 70.358414][ T5089] __dump_stack+0x1d/0x30 [ 70.358442][ T5089] dump_stack_lvl+0x95/0xd0 [ 70.358468][ T5089] dump_stack+0x15/0x1b [ 70.358564][ T5089] should_fail_ex+0x262/0x280 [ 70.358590][ T5089] should_failslab+0x8c/0xb0 [ 70.358620][ T5089] __kvmalloc_node_noprof+0x14f/0x5b0 [ 70.358654][ T5089] ? sort_subprogs_topo+0x77/0xa10 [ 70.358690][ T5089] ? sort_subprogs_topo+0x77/0xa10 [ 70.358717][ T5089] sort_subprogs_topo+0x77/0xa10 [ 70.358794][ T5089] ? bpf_insn_is_cond_jump+0x7e/0xc0 [ 70.358859][ T5089] ? bpf_prune_dead_branches+0x51c/0x570 [ 70.358954][ T5089] bpf_check+0x1dbd/0x20f0 [ 70.358978][ T5089] bpf_prog_load+0xf38/0x10a0 [ 70.359001][ T5089] ? avc_has_perm_noaudit+0xac/0x160 [ 70.359062][ T5089] __sys_bpf+0xbce/0xc50 [ 70.359085][ T5089] ? do_futex+0x300/0x460 [ 70.359115][ T5089] __x64_sys_bpf+0x69/0x80 [ 70.359167][ T5089] x64_sys_call+0xf26/0x2550 [ 70.359194][ T5089] do_syscall_64+0x112/0x360 [ 70.359292][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.359365][ T5089] RIP: 0033:0x7f75b782f559 [ 70.359384][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.359404][ T5089] RSP: 002b:00007f75b627f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.359471][ T5089] RAX: ffffffffffffffda RBX: 00007f75b7ab5fa0 RCX: 00007f75b782f559 [ 70.359487][ T5089] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 70.359503][ T5089] RBP: 00007f75b78c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.359517][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.359532][ T5089] R13: 00007f75b7ab6038 R14: 00007f75b7ab5fa0 R15: 00007fff2fb6acb8 [ 70.359554][ T5089] [ 70.373067][ T5091] FAULT_INJECTION: forcing a failure. [ 70.373067][ T5091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.373100][ T5091] CPU: 0 UID: 0 PID: 5091 Comm: syz.0.557 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.373128][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.373142][ T5091] Call Trace: [ 70.373149][ T5091] [ 70.373158][ T5091] __dump_stack+0x1d/0x30 [ 70.373217][ T5091] dump_stack_lvl+0x95/0xd0 [ 70.373243][ T5091] dump_stack+0x15/0x1b [ 70.373265][ T5091] should_fail_ex+0x262/0x280 [ 70.373345][ T5091] should_fail+0xb/0x20 [ 70.373367][ T5091] should_fail_usercopy+0x1a/0x20 [ 70.373470][ T5091] set_fd_set+0x29/0x90 [ 70.373503][ T5091] core_sys_select+0x5a1/0x7a0 [ 70.373547][ T5091] ? set_user_sigmask+0x86/0x1a0 [ 70.373589][ T5091] __se_sys_pselect6+0x23f/0x2a0 [ 70.373626][ T5091] __x64_sys_pselect6+0x78/0x90 [ 70.373739][ T5091] x64_sys_call+0x1dfc/0x2550 [ 70.373780][ T5091] do_syscall_64+0x112/0x360 [ 70.373809][ T5091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.373833][ T5091] RIP: 0033:0x7f33cdc4f559 [ 70.373915][ T5091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.373937][ T5091] RSP: 002b:00007f33cc69f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 70.373961][ T5091] RAX: ffffffffffffffda RBX: 00007f33cded5fa0 RCX: 00007f33cdc4f559 [ 70.373978][ T5091] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.373993][ T5091] RBP: 00007f33cdce6b20 R08: 0000200000000280 R09: 0000000000000000 [ 70.374108][ T5091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.374129][ T5091] R13: 00007f33cded6038 R14: 00007f33cded5fa0 R15: 00007ffff4075f08 [ 70.374150][ T5091] [ 70.869892][ T5125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.070236][ T5138] FAULT_INJECTION: forcing a failure. [ 71.070236][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 71.070274][ T5138] CPU: 0 UID: 0 PID: 5138 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.070303][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.070325][ T5138] Call Trace: [ 71.070335][ T5138] [ 71.070345][ T5138] __dump_stack+0x1d/0x30 [ 71.070374][ T5138] dump_stack_lvl+0x95/0xd0 [ 71.070401][ T5138] dump_stack+0x15/0x1b [ 71.070424][ T5138] should_fail_ex+0x262/0x280 [ 71.070450][ T5138] ? anon_vma_clone+0xc2/0x450 [ 71.070484][ T5138] should_failslab+0x8c/0xb0 [ 71.070517][ T5138] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 71.070548][ T5138] ? anon_vma_clone+0xc2/0x450 [ 71.070583][ T5138] anon_vma_clone+0xc2/0x450 [ 71.070618][ T5138] vma_modify+0x9b3/0xd50 [ 71.070644][ T5138] vma_modify_flags+0x1be/0x250 [ 71.070674][ T5138] mlock_fixup+0x166/0x460 [ 71.070707][ T5138] apply_mlockall_flags+0x1d3/0x250 [ 71.070740][ T5138] __ia32_sys_munlockall+0xdb/0x190 [ 71.070770][ T5138] x64_sys_call+0x1a18/0x2550 [ 71.070800][ T5138] do_syscall_64+0x112/0x360 [ 71.070830][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.070855][ T5138] RIP: 0033:0x7f75b782f559 [ 71.070875][ T5138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.070895][ T5138] RSP: 002b:00007f75b627f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 71.070918][ T5138] RAX: ffffffffffffffda RBX: 00007f75b7ab5fa0 RCX: 00007f75b782f559 [ 71.070934][ T5138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.070949][ T5138] RBP: 00007f75b7ab5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 71.070964][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.070979][ T5138] R13: 00007f75b7ab6038 R14: 00007f75b7ab5fa0 R15: 00007fff2fb6acb8 [ 71.070998][ T5138] [ 71.376946][ T11] tipc: Node number set to 4269801488 [ 71.399953][ T5148] loop3: detected capacity change from 0 to 512 [ 71.416138][ T5148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.429207][ T5148] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 71.429331][ T5148] System zones: 0-2, 18-18, 34-34 [ 71.429473][ T5148] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.429973][ T5148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.576: bg 0: block 248: padding at end of block bitmap is not set [ 71.430057][ T5148] loop3: lost filesystem error report for type 5 error -117 [ 71.430199][ T5148] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.576: Failed to acquire dquot type 1 [ 71.430284][ T5148] loop3: lost filesystem error report for type 5 error -117 [ 71.430900][ T5148] EXT4-fs (loop3): 1 truncate cleaned up [ 71.431411][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.561176][ T5148] syz.3.576 (5148) used greatest stack depth: 9704 bytes left [ 71.562369][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.790799][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.579'. [ 71.800723][ T5159] loop1: detected capacity change from 0 to 512 [ 71.801376][ T5159] EXT4-fs: Ignoring removed bh option [ 71.801600][ T5159] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 71.826557][ T5159] EXT4-fs (loop1): 1 truncate cleaned up [ 71.828683][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.874008][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.973519][ T5167] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 71.993315][ T5167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.050275][ T5075] loop4: detected capacity change from 0 to 1024 [ 72.113677][ T5170] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 72.230449][ T5075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 72.242835][ T5075] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.283948][ T5075] EXT4-fs error (device loop4): ext4_get_journal_inode:5971: inode #32: comm syz.4.554: iget: special inode unallocated [ 72.315026][ T5075] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 72.326977][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 72.327001][ C0] EXT4-fs (loop4): initial error at time 2000000011: ext4_get_journal_inode:5971: inode 32 [ 72.327036][ C0] EXT4-fs (loop4): last error at time 2000000011: ext4_get_journal_inode:5971: inode 32 [ 72.363775][ T5075] EXT4-fs (loop4): no journal found [ 72.363868][ T5075] EXT4-fs (loop4): can't get journal size [ 72.425869][ T5136] loop0: detected capacity change from 0 to 256 [ 72.479014][ T5075] EXT4-fs (loop4): filesystem is read-only [ 72.560367][ T5075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.576406][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 73.576425][ T29] audit: type=1400 audit(2000000012.990:905): avc: denied { remount } for pid=5135 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.841606][ T5188] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 7 (only 8 groups) [ 74.001279][ T5192] loop1: detected capacity change from 0 to 1024 [ 74.019773][ T5192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.020010][ T5192] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.023644][ T29] audit: type=1400 audit(2000000013.450:906): avc: denied { write } for pid=5191 comm="syz.1.591" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.091223][ T5192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.591: bg 0: block 112: padding at end of block bitmap is not set [ 74.093530][ T5192] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 74.093560][ T5192] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.093560][ T5192] [ 74.093576][ T5192] EXT4-fs (loop1): Total free blocks count 0 [ 74.093634][ T5192] EXT4-fs (loop1): Free/Dirty block details [ 74.093647][ T5192] EXT4-fs (loop1): free_blocks=0 [ 74.093662][ T5192] EXT4-fs (loop1): dirty_blocks=16 [ 74.093677][ T5192] EXT4-fs (loop1): Block reservation details [ 74.093693][ T5192] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 74.173478][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.175062][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.205116][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.206783][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.228121][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.228409][ T5191] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.229674][ T5192] EXT4-fs error (device loop1): ext4_map_blocks:895: inode #15: comm syz.1.591: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.296948][ T29] audit: type=1400 audit(2000000013.720:907): avc: denied { mounton } for pid=5196 comm="syz.5.592" path="/proc/125/task" dev="proc" ino=10135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.302043][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.317068][ T29] audit: type=1400 audit(2000000013.740:908): avc: denied { associate } for pid=5198 comm="syz.5.592" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.459881][ T5210] ip_tables: iptables: counters copy to user failed while replacing table [ 74.486866][ T5212] loop3: detected capacity change from 0 to 512 [ 74.521766][ T5212] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.521783][ T5212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.549200][ T5212] EXT4-fs (loop3): 1 truncate cleaned up [ 74.549597][ T5212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.554196][ T29] audit: type=1400 audit(2000000013.980:909): avc: denied { write } for pid=5211 comm="syz.3.599" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.687953][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.765341][ T5225] ip_tables: iptables: counters copy to user failed while replacing table [ 74.815211][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.837438][ T5230] syz.3.605 uses obsolete (PF_INET,SOCK_PACKET) [ 74.922170][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 75.050424][ T5240] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 75.060379][ T29] audit: type=1400 audit(2000000014.490:910): avc: denied { name_bind } for pid=5243 comm="syz.0.611" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 75.405402][ T29] audit: type=1400 audit(2000000014.830:911): avc: denied { watch } for pid=5257 comm="syz.4.616" path="/129/file0" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.409400][ T29] audit: type=1400 audit(2000000014.840:912): avc: denied { execute } for pid=5257 comm="syz.4.616" name="file0" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.409430][ T29] audit: type=1400 audit(2000000014.840:913): avc: denied { execute_no_trans } for pid=5257 comm="syz.4.616" path="/129/file0" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.504773][ T29] audit: type=1400 audit(2000000014.930:914): avc: denied { cpu } for pid=5261 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.151921][ T5250] loop1: detected capacity change from 0 to 1024 [ 76.215467][ T5250] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 76.229491][ T5250] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.268231][ T5250] EXT4-fs error (device loop1): ext4_get_journal_inode:5971: inode #32: comm syz.1.613: iget: special inode unallocated [ 76.268490][ T5250] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 76.273524][ T5250] EXT4-fs (loop1): no journal found [ 76.273854][ T5250] EXT4-fs (loop1): can't get journal size [ 76.277895][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 76.278075][ C1] EXT4-fs (loop1): initial error at time 2000000015: ext4_get_journal_inode:5971: inode 32 [ 76.278365][ C1] EXT4-fs (loop1): last error at time 2000000015: ext4_get_journal_inode:5971: inode 32 [ 76.466762][ T5250] EXT4-fs (loop1): filesystem is read-only [ 76.519685][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.519771][ T5275] loop5: detected capacity change from 0 to 512 [ 77.723240][ T5287] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 77.855990][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.018375][ T356] rpcbind: server 127.0.0.1 not responding, timed out [ 78.111990][ T5302] loop1: detected capacity change from 0 to 128 [ 78.225473][ T5312] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 78.260876][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.261819][ T5312] team0: Port device netdevsim2 added [ 78.263708][ T5293] loop4: detected capacity change from 0 to 512 [ 78.281878][ T5312] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 78.324719][ T5312] team0: Port device netdevsim2 removed [ 78.325355][ T5312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.326614][ T5312] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 78.466186][ T5325] FAULT_INJECTION: forcing a failure. [ 78.466186][ T5325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.466239][ T5325] CPU: 1 UID: 0 PID: 5325 Comm: syz.5.645 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.466269][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.466332][ T5325] Call Trace: [ 78.466340][ T5325] [ 78.466349][ T5325] __dump_stack+0x1d/0x30 [ 78.466394][ T5325] dump_stack_lvl+0x95/0xd0 [ 78.466433][ T5325] dump_stack+0x15/0x1b [ 78.466458][ T5325] should_fail_ex+0x262/0x280 [ 78.466556][ T5325] should_fail+0xb/0x20 [ 78.466580][ T5325] should_fail_usercopy+0x1a/0x20 [ 78.466608][ T5325] _copy_to_user+0x20/0xa0 [ 78.466684][ T5325] bpf_verifier_vlog+0x36e/0x5a0 [ 78.466722][ T5325] __btf_verifier_log+0x7f/0xb0 [ 78.466750][ T5325] __btf_verifier_log_type+0x22f/0x330 [ 78.466779][ T5325] btf_struct_check_meta+0x18e/0x6e0 [ 78.466866][ T5325] ? sort+0x6a/0xa0 [ 78.466895][ T5325] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 78.467049][ T5325] btf_parse_type_sec+0x28c/0x1590 [ 78.467089][ T5325] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 78.467125][ T5325] ? btf_parse_hdr+0x43a/0x440 [ 78.467153][ T5325] ? btf_parse_str_sec+0x1ae/0x1b0 [ 78.467335][ T5325] btf_new_fd+0x2ec/0x6a0 [ 78.467367][ T5325] bpf_btf_load+0x116/0x130 [ 78.467395][ T5325] __sys_bpf+0xbee/0xc50 [ 78.467427][ T5325] ? do_futex+0x300/0x460 [ 78.467459][ T5325] __x64_sys_bpf+0x69/0x80 [ 78.467592][ T5325] x64_sys_call+0xf26/0x2550 [ 78.467623][ T5325] do_syscall_64+0x112/0x360 [ 78.467673][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.467708][ T5325] RIP: 0033:0x7f305d45f559 [ 78.467734][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.467756][ T5325] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.467782][ T5325] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 78.467800][ T5325] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 78.467816][ T5325] RBP: 00007f305d4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.467833][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.467848][ T5325] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 78.467930][ T5325] [ 78.498394][ T356] nci: nci_rsp_packet: unsupported rsp opcode 0xf01 [ 78.571782][ T5302] syz.1.637: attempt to access beyond end of device [ 78.571782][ T5302] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 78.636391][ T5302] syz.1.637: attempt to access beyond end of device [ 78.636391][ T5302] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 78.671026][ T5293] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.633: bg 0: block 385: padding at end of block bitmap is not set [ 78.671697][ T5293] loop4: lost filesystem error report for type 5 error -117 [ 78.675482][ T5293] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 78.675516][ T5293] loop4: lost filesystem error report for type 5 error -117 [ 78.677857][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 78.678175][ C0] EXT4-fs (loop4): initial error at time 2000000018: ext4_validate_block_bitmap:445 [ 78.678208][ C0] EXT4-fs (loop4): last error at time 2000000018: ext4_mb_clear_bb:6678 [ 78.685951][ T5293] EXT4-fs (loop4): 2 truncates cleaned up [ 78.713022][ T5302] syz.1.637: attempt to access beyond end of device [ 78.713022][ T5302] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 78.713103][ T5302] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 78.713122][ T5302] syz.1.637: attempt to access beyond end of device [ 78.713122][ T5302] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 78.713146][ T5302] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 78.725395][ T5293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.347159][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.453624][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 79.453648][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 79.457132][ T5344] macvtap1: entered allmulticast mode [ 79.457152][ T5344] dummy0: entered allmulticast mode [ 79.457183][ T5344] dummy0: entered promiscuous mode [ 79.572428][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 79.572447][ T29] audit: type=1400 audit(2000000019.000:939): avc: denied { read write } for pid=5349 comm="syz.1.654" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 79.572476][ T29] audit: type=1400 audit(2000000019.000:940): avc: denied { open } for pid=5349 comm="syz.1.654" path="/139/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 79.572575][ T29] audit: type=1400 audit(2000000019.000:941): avc: denied { ioctl } for pid=5349 comm="syz.1.654" path="/139/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.330024][ T5334] loop3: detected capacity change from 0 to 1024 [ 80.430071][ T5334] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 80.431856][ T5334] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.445070][ T5334] EXT4-fs error (device loop3): ext4_get_journal_inode:5971: inode #32: comm syz.3.648: iget: special inode unallocated [ 80.445116][ T5334] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 80.447200][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 80.447243][ C0] EXT4-fs (loop3): initial error at time 2000000019: ext4_get_journal_inode:5971: inode 32 [ 80.447987][ C0] EXT4-fs (loop3): last error at time 2000000019: ext4_get_journal_inode:5971: inode 32 [ 80.449960][ T5334] EXT4-fs (loop3): no journal found [ 80.450048][ T5334] EXT4-fs (loop3): can't get journal size [ 80.503155][ T5334] EXT4-fs (loop3): filesystem is read-only [ 80.581586][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.756339][ T5367] vcan0: tx address claim with different name [ 80.825171][ T5373] loop5: detected capacity change from 0 to 512 [ 80.843579][ T5373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.843744][ T5373] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.007094][ T29] audit: type=1400 audit(2000000020.430:942): avc: denied { create } for pid=5372 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.076874][ T4165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.396738][ T5317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.483885][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 81.856980][ T5382] loop5: detected capacity change from 0 to 512 [ 81.885814][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 82.060650][ T29] audit: type=1326 audit(2000000021.490:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.4.683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ca2ff559 code=0x0 [ 82.094405][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.113617][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.113731][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.116733][ T5382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.116783][ T5382] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.156207][ T5382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002] [ 82.186304][ T5382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.285063][ T5382] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.667: Allocating blocks 42-43 which overlap fs metadata [ 82.286004][ T5382] loop5: lost filesystem error report for type 5 error -117 [ 82.287504][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 82.288125][ C1] EXT4-fs (loop5): initial error at time 2000000021: ext4_mb_mark_diskspace_used:4221 [ 82.288234][ C1] EXT4-fs (loop5): last error at time 2000000021: ext4_mb_mark_diskspace_used:4221 [ 82.328605][ T5382] EXT4-fs (loop5): Remounting filesystem read-only [ 82.330472][ T5382] Quota error (device loop5): write_blk: dquota write failed [ 82.334623][ T5382] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 82.343972][ T5382] EXT4-fs (loop5): 1 truncate cleaned up [ 82.350403][ T5382] EXT4-fs (loop5): pa ffff8881058df460: logic 1, phys. 41, len 23 [ 82.404753][ T5440] loop1: detected capacity change from 0 to 256 [ 82.405121][ T5440] vfat: Bad value for 'utf8' [ 82.443039][ T5382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.480726][ T5445] loop3: detected capacity change from 0 to 128 [ 82.483272][ T5445] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.483450][ T5445] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.484217][ T5445] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.548212][ T5451] loop1: detected capacity change from 0 to 164 [ 82.548529][ T5451] iso9660: Unknown parameter ' .NBO' [ 82.619707][ T5382] syz.5.667 (5382) used greatest stack depth: 8968 bytes left [ 82.630811][ T4165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.736981][ T29] audit: type=1400 audit(2000000022.160:944): avc: denied { read write } for pid=5457 comm="syz.3.699" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 82.737067][ T29] audit: type=1400 audit(2000000022.160:945): avc: denied { open } for pid=5457 comm="syz.3.699" path="/154/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 82.983474][ T29] audit: type=1326 audit(2000000022.410:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.4.702" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ca2ff559 code=0x7ffc0000 [ 83.039307][ T5476] loop4: detected capacity change from 0 to 512 [ 83.193632][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 83.193656][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 83.514817][ T5501] loop1: detected capacity change from 0 to 1024 [ 83.515453][ T5501] EXT4-fs: Ignoring removed bh option [ 83.542283][ T5509] ip_tables: iptables: counters copy to user failed while replacing table [ 83.544901][ T5501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.578016][ T5513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.656456][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.808423][ T5536] capability: warning: `syz.5.732' uses 32-bit capabilities (legacy support in use) [ 84.022360][ T5528] loop3: detected capacity change from 0 to 512 [ 84.111883][ T5551] loop0: detected capacity change from 0 to 1024 [ 84.113968][ T5551] EXT4-fs: Ignoring removed bh option [ 84.125008][ T5551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.229061][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.330305][ T5528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.728: bg 0: block 385: padding at end of block bitmap is not set [ 84.331591][ T5528] loop3: lost filesystem error report for type 5 error -117 [ 84.337440][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 84.338487][ C1] EXT4-fs (loop3): initial error at time 2000000023: ext4_validate_block_bitmap:445 [ 84.338808][ C1] EXT4-fs (loop3): last error at time 2000000023: ext4_validate_block_bitmap:445 [ 84.379817][ T5528] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 84.379995][ T5528] loop3: lost filesystem error report for type 5 error -117 [ 84.397422][ T5528] EXT4-fs (loop3): 2 truncates cleaned up [ 84.463943][ T5528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.582434][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.601391][ T5563] loop4: detected capacity change from 0 to 512 [ 84.618708][ T5563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.618782][ T5563] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.637981][ T5565] loop3: detected capacity change from 0 to 2048 [ 84.658237][ T5565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.695751][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 84.695770][ T29] audit: type=1400 audit(2000000024.120:967): avc: denied { write } for pid=5564 comm="syz.3.739" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.696810][ T5565] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.696878][ T5565] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.696952][ T5565] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.696952][ T5565] [ 84.696969][ T5565] EXT4-fs (loop3): Total free blocks count 0 [ 84.697099][ T5565] EXT4-fs (loop3): Free/Dirty block details [ 84.697113][ T5565] EXT4-fs (loop3): free_blocks=2415919504 [ 84.697129][ T5565] EXT4-fs (loop3): dirty_blocks=32 [ 84.697143][ T5565] EXT4-fs (loop3): Block reservation details [ 84.697156][ T5565] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 84.697208][ T29] audit: type=1400 audit(2000000024.120:968): avc: denied { execute } for pid=5564 comm="syz.3.739" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.824860][ T29] audit: type=1400 audit(2000000024.190:969): avc: denied { write } for pid=5561 comm="syz.4.738" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.849154][ T74] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 84.968149][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 84.998819][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.047086][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.157948][ T29] audit: type=1326 audit(2000000024.590:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b782f559 code=0x7ffc0000 [ 85.158282][ T29] audit: type=1326 audit(2000000024.590:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b782f559 code=0x7ffc0000 [ 85.158391][ T29] audit: type=1326 audit(2000000024.590:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b782f559 code=0x7ffc0000 [ 85.159518][ T29] audit: type=1326 audit(2000000024.590:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75b782f559 code=0x7ffc0000 [ 85.244139][ T29] audit: type=1326 audit(2000000024.670:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75b77efd8e code=0x7ffc0000 [ 85.244183][ T29] audit: type=1326 audit(2000000024.670:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75b77efd8e code=0x7ffc0000 [ 85.266943][ T29] audit: type=1326 audit(2000000024.680:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.3.749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75b77efd8e code=0x7ffc0000 [ 85.329122][ T5596] FAULT_INJECTION: forcing a failure. [ 85.329122][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.329231][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.5.753 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.329258][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.329272][ T5596] Call Trace: [ 85.329280][ T5596] [ 85.329365][ T5596] __dump_stack+0x1d/0x30 [ 85.329393][ T5596] dump_stack_lvl+0x95/0xd0 [ 85.329466][ T5596] dump_stack+0x15/0x1b [ 85.329488][ T5596] should_fail_ex+0x262/0x280 [ 85.329514][ T5596] should_fail+0xb/0x20 [ 85.329558][ T5596] should_fail_usercopy+0x1a/0x20 [ 85.329584][ T5596] strncpy_from_user+0x27/0x250 [ 85.329620][ T5596] strncpy_from_user_nofault+0x67/0xf0 [ 85.329652][ T5596] bpf_probe_read_user_str+0x2a/0x70 [ 85.329722][ T5596] ? 0xffffffffa0408b2c [ 85.329740][ T5596] bpf_prog_8f682f9b13dc690e+0x43/0x49 [ 85.329760][ T5596] bpf_dispatcher_xdp_func+0x25/0x30 [ 85.329797][ T5596] bpf_test_run+0x231/0x620 [ 85.329873][ T5596] ? bpf_test_run+0x198/0x620 [ 85.329907][ T5596] bpf_prog_test_run_xdp+0x587/0x9e0 [ 85.329977][ T5596] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.330018][ T5596] bpf_prog_test_run+0x208/0x340 [ 85.330043][ T5596] __sys_bpf+0x914/0xc50 [ 85.330100][ T5596] ? do_futex+0x300/0x460 [ 85.330196][ T5596] __x64_sys_bpf+0x69/0x80 [ 85.330282][ T5596] x64_sys_call+0xf26/0x2550 [ 85.330310][ T5596] do_syscall_64+0x112/0x360 [ 85.330339][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.330370][ T5596] RIP: 0033:0x7f305d45f559 [ 85.330387][ T5596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.330408][ T5596] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.330432][ T5596] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 85.330500][ T5596] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 85.330515][ T5596] RBP: 00007f305d4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.330530][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.330544][ T5596] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 85.330565][ T5596] [ 85.585344][ T5602] loop4: detected capacity change from 0 to 512 [ 85.587393][ T5602] FAT-fs (loop4): bogus logical sector size 0 [ 85.587413][ T5602] FAT-fs (loop4): Can't find a valid FAT filesystem [ 86.092018][ T5635] FAULT_INJECTION: forcing a failure. [ 86.092018][ T5635] name failslab, interval 1, probability 0, space 0, times 0 [ 86.092055][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.092113][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.092125][ T5635] Call Trace: [ 86.092133][ T5635] [ 86.092143][ T5635] __dump_stack+0x1d/0x30 [ 86.092171][ T5635] dump_stack_lvl+0x95/0xd0 [ 86.092238][ T5635] dump_stack+0x15/0x1b [ 86.092265][ T5635] should_fail_ex+0x262/0x280 [ 86.092290][ T5635] should_failslab+0x8c/0xb0 [ 86.092368][ T5635] __kvmalloc_node_noprof+0x14f/0x5b0 [ 86.092408][ T5635] ? nf_hook_entries_grow+0x1cb/0x460 [ 86.092444][ T5635] ? nf_hook_entries_grow+0x1cb/0x460 [ 86.092488][ T5635] nf_hook_entries_grow+0x1cb/0x460 [ 86.092529][ T5635] __nf_register_net_hook+0x16e/0x4d0 [ 86.092660][ T5635] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 86.092696][ T5635] nf_register_net_hook+0x88/0x130 [ 86.092727][ T5635] nf_register_net_hooks+0x44/0x150 [ 86.092825][ T5635] nf_synproxy_ipv4_init+0x67/0xb0 [ 86.092942][ T5635] synproxy_tg4_check+0x10b/0x160 [ 86.092975][ T5635] xt_check_target+0x3c2/0x5d0 [ 86.093009][ T5635] ? mutex_unlock+0x4e/0x90 [ 86.093121][ T5635] ? xt_find_target+0x204/0x240 [ 86.093151][ T5635] translate_table+0xd32/0x1120 [ 86.093178][ T5635] do_ipt_set_ctl+0x735/0x970 [ 86.093272][ T5635] ? _raw_spin_lock_bh+0x57/0xb0 [ 86.093313][ T5635] nf_setsockopt+0x199/0x1b0 [ 86.093338][ T5635] ip_setsockopt+0x102/0x110 [ 86.093365][ T5635] tcp_setsockopt+0x98/0xb0 [ 86.093429][ T5635] sock_common_setsockopt+0x69/0x80 [ 86.093451][ T5635] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.093479][ T5635] __sys_setsockopt+0x184/0x200 [ 86.093515][ T5635] __x64_sys_setsockopt+0x64/0x80 [ 86.093606][ T5635] x64_sys_call+0x248f/0x2550 [ 86.093632][ T5635] do_syscall_64+0x112/0x360 [ 86.093660][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.093683][ T5635] RIP: 0033:0x7f02ca2ff559 [ 86.093756][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.093810][ T5635] RSP: 002b:00007f02c8d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.093857][ T5635] RAX: ffffffffffffffda RBX: 00007f02ca585fa0 RCX: 00007f02ca2ff559 [ 86.093873][ T5635] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 86.093889][ T5635] RBP: 00007f02ca396b20 R08: 00000000000002c0 R09: 0000000000000000 [ 86.093906][ T5635] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 86.093923][ T5635] R13: 00007f02ca586038 R14: 00007f02ca585fa0 R15: 00007fffb4c63338 [ 86.093947][ T5635] [ 86.220089][ T5637] xt_hashlimit: size too large, truncated to 1048576 [ 86.594793][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.594821][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.594834][ T5647] FAULT_INJECTION: forcing a failure. [ 86.594834][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 86.594895][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz.0.776 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.594925][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.594941][ T5647] Call Trace: [ 86.594949][ T5647] [ 86.594958][ T5647] __dump_stack+0x1d/0x30 [ 86.595043][ T5647] dump_stack_lvl+0x95/0xd0 [ 86.595066][ T5647] dump_stack+0x15/0x1b [ 86.595167][ T5647] should_fail_ex+0x262/0x280 [ 86.595195][ T5647] ? add_modify_gid+0xe4/0x550 [ 86.595268][ T5647] should_failslab+0x8c/0xb0 [ 86.595309][ T5647] __kmalloc_cache_noprof+0x5d/0x3e0 [ 86.595375][ T5647] ? add_modify_gid+0xe4/0x550 [ 86.595397][ T5647] add_modify_gid+0xe4/0x550 [ 86.595417][ T5647] ib_cache_update+0x308/0x6f0 [ 86.595471][ T5647] ib_cache_setup_one+0x2ad/0x300 [ 86.595512][ T5647] ib_register_device+0x7ba/0xa40 [ 86.595537][ T5647] siw_newlink+0x62d/0x670 [ 86.595611][ T5647] nldev_newlink+0x3a8/0x430 [ 86.595659][ T5647] ? __pfx_nldev_newlink+0x10/0x10 [ 86.595688][ T5647] rdma_nl_rcv+0x439/0x570 [ 86.595725][ T5647] ? selinux_nlmsg_lookup+0x9b/0x870 [ 86.595765][ T5647] netlink_unicast+0x665/0x740 [ 86.595802][ T5647] netlink_sendmsg+0x5ef/0x740 [ 86.595831][ T5647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.595865][ T5647] ____sys_sendmsg+0x54a/0x590 [ 86.595971][ T5647] ___sys_sendmsg+0x195/0x1e0 [ 86.596012][ T5647] __x64_sys_sendmsg+0xd4/0x160 [ 86.596067][ T5647] x64_sys_call+0x22ab/0x2550 [ 86.596094][ T5647] do_syscall_64+0x112/0x360 [ 86.596168][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.596288][ T5647] RIP: 0033:0x7f33cdc4f559 [ 86.596306][ T5647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.596325][ T5647] RSP: 002b:00007f33cc69f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.596346][ T5647] RAX: ffffffffffffffda RBX: 00007f33cded5fa0 RCX: 00007f33cdc4f559 [ 86.596361][ T5647] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000004 [ 86.596378][ T5647] RBP: 00007f33cdce6b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.596433][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.596447][ T5647] R13: 00007f33cded6038 R14: 00007f33cded5fa0 R15: 00007ffff4075f08 [ 86.596476][ T5647] [ 86.596704][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.679959][ T5652] FAULT_INJECTION: forcing a failure. [ 86.679959][ T5652] name failslab, interval 1, probability 0, space 0, times 0 [ 86.679991][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.1.778 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.680019][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.680071][ T5652] Call Trace: [ 86.680079][ T5652] [ 86.680089][ T5652] __dump_stack+0x1d/0x30 [ 86.680118][ T5652] dump_stack_lvl+0x95/0xd0 [ 86.680143][ T5652] dump_stack+0x15/0x1b [ 86.680165][ T5652] should_fail_ex+0x262/0x280 [ 86.680310][ T5652] ? copy_mm+0xb5/0x340 [ 86.680385][ T5652] should_failslab+0x8c/0xb0 [ 86.680415][ T5652] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 86.680523][ T5652] ? copy_mm+0xb5/0x340 [ 86.680628][ T5652] copy_mm+0xb5/0x340 [ 86.680655][ T5652] copy_process+0x10e9/0x23f0 [ 86.680718][ T5652] kernel_clone+0x1c0/0x5f0 [ 86.680746][ T5652] ? do_futex+0x391/0x460 [ 86.680803][ T5652] __x64_sys_clone+0x143/0x180 [ 86.680839][ T5652] x64_sys_call+0x2479/0x2550 [ 86.680866][ T5652] do_syscall_64+0x112/0x360 [ 86.680904][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.680963][ T5652] RIP: 0033:0x7fb836cdf559 [ 86.680982][ T5652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.681003][ T5652] RSP: 002b:00007fb83572efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 86.681027][ T5652] RAX: ffffffffffffffda RBX: 00007fb836f65fa0 RCX: 00007fb836cdf559 [ 86.681044][ T5652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 86.681059][ T5652] RBP: 00007fb836d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.681094][ T5652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 86.681108][ T5652] R13: 00007fb836f66038 R14: 00007fb836f65fa0 R15: 00007fff74933828 [ 86.681129][ T5652] [ 86.739579][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.739934][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.740238][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.740976][ T5654] netlink: 'syz.1.779': attribute type 7 has an invalid length. [ 86.770346][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.770681][ T5647] wg1 speed is unknown, defaulting to 1000 [ 86.833919][ T5659] loop5: detected capacity change from 0 to 512 [ 86.868196][ T5659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.868326][ T5659] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.940158][ T5669] loop4: detected capacity change from 0 to 512 [ 86.959875][ T5669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.959938][ T5669] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.978791][ T4165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.255989][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 87.256020][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 87.262488][ T5688] gretap0: entered promiscuous mode [ 87.285578][ T5688] gretap0: left promiscuous mode [ 87.292153][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.319286][ T5693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 87.319322][ T5693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 87.328228][ T5693] gretap0: entered promiscuous mode [ 87.346458][ T5693] gretap0: left promiscuous mode [ 87.470868][ T5703] syz.4.798: attempt to access beyond end of device [ 87.470868][ T5703] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 87.512820][ T5705] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 87.520641][ T5705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.573333][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.702907][ T5720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.805'. [ 87.831189][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 88.808509][ T5756] set_capacity_and_notify: 2 callbacks suppressed [ 88.808528][ T5756] loop4: detected capacity change from 0 to 1024 [ 88.808927][ T5756] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.023597][ T5778] loop3: detected capacity change from 0 to 128 [ 89.024103][ T5778] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.252451][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 90.252472][ T29] audit: type=1400 audit(2000000285.680:1045): avc: denied { bind } for pid=5806 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.252499][ T29] audit: type=1400 audit(2000000285.680:1046): avc: denied { name_bind } for pid=5806 comm="syz.1.843" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 90.252643][ T29] audit: type=1400 audit(2000000285.680:1047): avc: denied { node_bind } for pid=5806 comm="syz.1.843" saddr=::8001:0:20:0 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 zXt&Kb)hGYή/&%M\_tw'[ 90.333031][ T29] audit: type=1400 audit(2000000285.760:1048): avc: denied { append } for pid=5804 comm="syz.0.841" name="uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 90.333131][ T29] audit: type=1400 audit(2000000285.760:1049): avc: denied { open } for pid=5804 comm="syz.0.841" path="/158/tracing/uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 90.360153][ T29] audit: type=1400 audit(2000000285.770:1050): avc: denied { mount } for pid=5810 comm="syz.4.842" name="/" dev="hugetlbfs" ino=10871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 ,rXNFE$#Cy01:՜x|'Nin-BYrP)n?!T;+\)zD258ZT~Ir [ "{ T٫y=]\,4Tٳ؃#E]s1/&%{;g:բA?#~#vD3O}vieHVJ0BK,ӴMWN~aehUMV̪Նh>O5ꈺW EEbzyzۏH6piF-B]IC-9mPQ ٺ^s; '|Q&nZ8.YTH/4ݍYOfFzjG\Y'EGGGX=nH%?;a1s^I `Z%ѺN&4oMiB>М|DbQfO\rv:d\o,QNI?m2.x${3ϯЀBA}\FrMGo$7h1!8OXe* %Il\yO* 3 3ԣ w/z)UZ#L^-.=ZE9X}ֵ: ?%=\h /)>C#AyXXuw[pO\̠7X6N{wf4 7g[};pv@ |Cwa n%)!})KxZ+ sDr1 kU"ۡ~ nfT2rػꋎElXC5ݝ %xX9ӥH~%?0Qa\Z \?kn؂ d*^ Jx'ؼc 6G n "YVDk{"`ɄSBi84Ϙ;<38ވV]mMuӝp]o$:nZN&`M^,c.~i@X,rmQs?F8n>([ 90.557813][ T5820] loop5: detected capacity change from 0 to 512 n|b JKwNG넿 ~eepIb3 RKŢ󶟷x'2l ?Uj{;c_[ 90.571511][ T5820] EXT4-fs: Ignoring removed nobh option \'轸%(,@[ 90.571538][ T5820] EXT4-fs: Ignoring removed oldalloc option @?RDuLPGy [ 90.573996][ T5820] EXT4-fs: old and new quota format mixing =hWxf[ 90.587773][ T29] audit: type=1400 audit(2000000286.010:1051): avc: denied { write } for pid=5819 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 0/yY2y;MjxvJ %hu~wTp+Aa#kt1 `A$@h\BEm|v~TtpKX-/z <;a9w_e̿B]|m g>[a>,!@g{Sdn$}'B\eٳ]xG0ʾg.nczz(t|^@/[͆,TyMuؐfEVEbb6@zL]AbՖiQIuiU|15}3`5Oۯ;F-u*~Ά鏬#,4Lp(hsTVS5!j"ˠ@;1qشw4׳{KL  EuBapD4 ~4{ABy9\6a"U J&5V}ư&*|л",]#=^sH{xcL(7eK`(xVΞ/mhN+Q>y֓F`ѸPP;b*5wxcI}>9SaI'H)BՁ]G0r&Bxwۥw.^pfp8QF·!D4 r36'CK'zdkgxXv/Lou'Y@fĈͪ^$zTyA-$EAW 5#ʀ5d>"nu?9Mq!4[ŗ|<ߓljyIdq>hJlNm1RG|*lشl/}-Z(NTj-py.dmL,ۑ3\Fq+oۆ8mj|P ?IBͨjzb~deZ0XbDn P̴Ma1 8PgsrYהfdfBnKo{-"FJÛW4?[8{)av XO:͏hn5So n`$-Ju],[fY7bG"S$6h ב`t A3'?EqZJTRX8'<+^+F\}fo7_[ 90.800725][ T5830] gretap0: left promiscuous mode mshk9j.Q>{ =)H1jy|"wjΤ5GK\v^=]$'fFwwG2C9jTV(c8ӈ_"eB7+ĩ.TAڲ A<4׋ '{E_33qZyJ?pxMo ؄<2g滓N*7ɮIa)>V)\8%AM^XF!WHSQ"m3FẰ睊!Z6> Y ^,ck?8gY6|'!HȘnjH9Ն $!溩b&M^ϊYHX+VXl]Z=+"QN[Q /4~ULhv$JYpӎa:zXIz, 9Z^p6aO[ǰV1O谝z2 XG؉Rn `";Şkl ڤM2ZVN"q/@]&dDSkc/l::BtmDyT^դv"Z4[ 90.884670][ T29] audit: type=1400 audit(2000000286.310:1052): avc: denied { add_name } for pid=5844 comm="syz.1.858" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 D {7Q~o,x| [ 90.884869][ T29] audit: type=1400 audit(2000000286.310:1053): avc: denied { create } for pid=5844 comm="syz.1.858" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 ,* "V dV[ 90.885632][ T29] audit: type=1400 audit(2000000286.310:1054): avc: denied { remove_name } for pid=5844 comm="syz.1.858" name="rd_mcp_0" dev="configfs" ino=10945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 X\_G1YeX (-+q tty E &P|ؙ͠_I!C3m`፾<,`$W%0wd7ڭ^3ߔkT{(eT<KFԜV儔+C>Q/ϫ[ 90.984208][ T5848] FAULT_INJECTION: forcing a failure. [ 90.984208][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.984246][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.984328][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.984343][ T5848] Call Trace: [ 90.984351][ T5848] [ 90.984359][ T5848] __dump_stack+0x1d/0x30 [ 90.984390][ T5848] dump_stack_lvl+0x95/0xd0 [ 90.984543][ T5848] dump_stack+0x15/0x1b [ 90.984565][ T5848] should_fail_ex+0x262/0x280 [ 90.984589][ T5848] should_fail+0xb/0x20 [ 90.984650][ T5848] should_fail_usercopy+0x1a/0x20 [ 90.984678][ T5848] _copy_to_user+0x20/0xa0 [ 90.984704][ T5848] __x64_sys_clock_adjtime+0x167/0x1d0 [ 90.984742][ T5848] x64_sys_call+0x1f3b/0x2550 [ 90.984814][ T5848] do_syscall_64+0x112/0x360 [ 90.984845][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.984872][ T5848] RIP: 0033:0x7f33cdc4f559 [ 90.984897][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.984976][ T5848] RSP: 002b:00007f33cc69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 90.985000][ T5848] RAX: ffffffffffffffda RBX: 00007f33cded5fa0 RCX: 00007f33cdc4f559 [ 90.985021][ T5848] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000000 [ 90.985110][ T5848] RBP: 00007f33cdce6b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.985126][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.985141][ T5848] R13: 00007f33cded6038 R14: 00007f33cded5fa0 R15: 00007ffff4075f08 [ 90.985162][ T5848] [ 92.718035][ T3440] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 92.718109][ T3440] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 92.718204][ T3440] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 92.718242][ T3440] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 92.733336][ T5911] __nla_validate_parse: 4 callbacks suppressed [ 92.733366][ T5911] netlink: 32 bytes leftover after parsing attributes in process `syz.5.886'. [ 92.776074][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 92.778366][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 92.803696][ T5915] xt_hashlimit: size too large, truncated to 1048576 [ 92.865176][ T5923] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 92.880189][ T5923] bond3: entered promiscuous mode [ 92.880332][ T5923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.918199][ T5923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.919223][ T5923] bond3: (slave bond4): making interface the new active one [ 92.919244][ T5923] bond4: entered promiscuous mode [ 92.923532][ T5923] bond3: (slave bond4): Enslaving as an active interface with an up link [ 93.552927][ T5945] FAULT_INJECTION: forcing a failure. [ 93.552927][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 93.552965][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.552995][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.553074][ T5945] Call Trace: [ 93.553082][ T5945] [ 93.553092][ T5945] __dump_stack+0x1d/0x30 [ 93.553180][ T5945] dump_stack_lvl+0x95/0xd0 [ 93.553209][ T5945] dump_stack+0x15/0x1b [ 93.553235][ T5945] should_fail_ex+0x262/0x280 [ 93.553275][ T5945] ? sctp_add_bind_addr+0x71/0x1e0 [ 93.553334][ T5945] should_failslab+0x8c/0xb0 [ 93.553428][ T5945] __kmalloc_cache_noprof+0x5d/0x3e0 [ 93.553466][ T5945] ? sctp_add_bind_addr+0x71/0x1e0 [ 93.553570][ T5945] sctp_add_bind_addr+0x71/0x1e0 [ 93.553603][ T5945] sctp_copy_local_addr_list+0x1b4/0x250 [ 93.553652][ T5945] sctp_copy_one_addr+0x7f/0x280 [ 93.553734][ T5945] sctp_bind_addr_copy+0x79/0x290 [ 93.553773][ T5945] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 93.553803][ T5945] sctp_connect_new_asoc+0x1c3/0x3a0 [ 93.553918][ T5945] sctp_sendmsg+0x105f/0x1d00 [ 93.553960][ T5945] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.553998][ T5945] inet_sendmsg+0xc5/0xd0 [ 93.554026][ T5945] ? __pfx_inet_sendmsg+0x10/0x10 [ 93.554053][ T5945] ____sys_sendmsg+0x4ed/0x590 [ 93.554147][ T5945] ___sys_sendmsg+0x195/0x1e0 [ 93.554192][ T5945] __sys_sendmmsg+0x1a0/0x310 [ 93.554235][ T5945] __x64_sys_sendmmsg+0x57/0x70 [ 93.554340][ T5945] x64_sys_call+0x1fb4/0x2550 [ 93.554372][ T5945] do_syscall_64+0x112/0x360 [ 93.554405][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.554433][ T5945] RIP: 0033:0x7f75b782f559 [ 93.554455][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.554478][ T5945] RSP: 002b:00007f75b627f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.554505][ T5945] RAX: ffffffffffffffda RBX: 00007f75b7ab5fa0 RCX: 00007f75b782f559 [ 93.554563][ T5945] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 93.554581][ T5945] RBP: 00007f75b78c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.554597][ T5945] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 93.554613][ T5945] R13: 00007f75b7ab6038 R14: 00007f75b7ab5fa0 R15: 00007fff2fb6acb8 [ 93.554637][ T5945] [ 94.105722][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 94.105761][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.105855][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.112075][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 94.112105][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.112207][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.135722][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 94.135781][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.135864][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.157658][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 94.157683][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.157712][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.158372][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 94.158396][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.158425][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.161738][ T5958] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 94.161822][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.161849][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.163593][ T5963] vhci_hcd: connection closed [ 94.163877][ T3440] vhci_hcd vhci_hcd.5: stop threads [ 94.163899][ T3440] vhci_hcd vhci_hcd.5: release socket [ 94.163914][ T3440] vhci_hcd vhci_hcd.5: disconnect device [ 94.163937][ T5969] vhci_hcd: connection closed [ 94.164154][ T3440] vhci_hcd vhci_hcd.5: stop threads [ 94.164173][ T3440] vhci_hcd vhci_hcd.5: release socket [ 94.164187][ T3440] vhci_hcd vhci_hcd.5: disconnect device [ 94.166720][ T5959] vhci_hcd: connection closed [ 94.166885][ T5961] vhci_hcd: connection closed [ 94.173642][ T5971] vhci_hcd: connection closed [ 94.193808][ T3440] vhci_hcd vhci_hcd.5: stop threads [ 94.193831][ T3440] vhci_hcd vhci_hcd.5: release socket [ 94.193848][ T3440] vhci_hcd vhci_hcd.5: disconnect device [ 94.197185][ T3440] vhci_hcd vhci_hcd.5: stop threads [ 94.197204][ T3440] vhci_hcd vhci_hcd.5: release socket [ 94.197220][ T3440] vhci_hcd vhci_hcd.5: disconnect device [ 94.197349][ T3440] vhci_hcd vhci_hcd.5: stop threads [ 94.197364][ T3440] vhci_hcd vhci_hcd.5: release socket [ 94.197421][ T3440] vhci_hcd vhci_hcd.5: disconnect device [ 94.257446][ T5967] vhci_hcd: connection closed [ 94.257863][ T356] vhci_hcd vhci_hcd.5: stop threads [ 94.257883][ T356] vhci_hcd vhci_hcd.5: release socket [ 94.257952][ T356] vhci_hcd vhci_hcd.5: disconnect device [ 94.660243][ T6010] FAULT_INJECTION: forcing a failure. [ 94.660243][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 94.660418][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.3.922 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.660512][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.660527][ T6010] Call Trace: [ 94.660536][ T6010] [ 94.660546][ T6010] __dump_stack+0x1d/0x30 [ 94.660576][ T6010] dump_stack_lvl+0x95/0xd0 [ 94.660671][ T6010] dump_stack+0x15/0x1b [ 94.660696][ T6010] should_fail_ex+0x262/0x280 [ 94.660724][ T6010] ? __register_sysctl_table+0x52/0xbe0 [ 94.660802][ T6010] should_failslab+0x8c/0xb0 [ 94.660835][ T6010] __kmalloc_noprof+0xb6/0x4b0 [ 94.660867][ T6010] ? __register_sysctl_table+0x52/0xbe0 [ 94.660961][ T6010] __register_sysctl_table+0x52/0xbe0 [ 94.660987][ T6010] register_pidns_sysctls+0xd9/0x130 [ 94.661055][ T6010] copy_pid_ns+0x396/0x640 [ 94.661086][ T6010] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 94.661117][ T6010] ? create_new_namespaces+0x38/0x420 [ 94.661147][ T6010] create_new_namespaces+0x168/0x420 [ 94.661218][ T6010] unshare_nsproxy_namespaces+0x115/0x150 [ 94.661245][ T6010] ksys_unshare+0x3a3/0x690 [ 94.661281][ T6010] __x64_sys_unshare+0x1f/0x30 [ 94.661339][ T6010] x64_sys_call+0x1e33/0x2550 [ 94.661367][ T6010] do_syscall_64+0x112/0x360 [ 94.661417][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661444][ T6010] RIP: 0033:0x7f75b782f559 [ 94.661464][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.661486][ T6010] RSP: 002b:00007f75b627f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.661512][ T6010] RAX: ffffffffffffffda RBX: 00007f75b7ab5fa0 RCX: 00007f75b782f559 [ 94.661536][ T6010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 94.661552][ T6010] RBP: 00007f75b78c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.661569][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.661584][ T6010] R13: 00007f75b7ab6038 R14: 00007f75b7ab5fa0 R15: 00007fff2fb6acb8 [ 94.661606][ T6010] [ 94.982757][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 94.988054][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 95.081711][ T3379] Process accounting resumed [ 95.134452][ T6048] loop1: detected capacity change from 0 to 256 [ 95.485803][ T6006] loop0: detected capacity change from 0 to 512 [ 95.643168][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.646542][ T6006] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.684602][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 95.684619][ T29] audit: type=1400 audit(2000000291.093:1069): avc: denied { write } for pid=6005 comm="syz.0.920" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.090622][ T6075] FAULT_INJECTION: forcing a failure. [ 96.090622][ T6075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.090715][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: syz.3.954 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.090750][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.090846][ T6075] Call Trace: [ 96.090855][ T6075] [ 96.090865][ T6075] __dump_stack+0x1d/0x30 [ 96.090900][ T6075] dump_stack_lvl+0x95/0xd0 [ 96.090927][ T6075] dump_stack+0x15/0x1b [ 96.090972][ T6075] should_fail_ex+0x262/0x280 [ 96.091000][ T6075] should_fail+0xb/0x20 [ 96.091060][ T6075] should_fail_usercopy+0x1a/0x20 [ 96.091089][ T6075] _copy_to_user+0x20/0xa0 [ 96.091119][ T6075] bpf_verifier_vlog+0x455/0x5a0 [ 96.091149][ T6075] __btf_verifier_log+0x7f/0xb0 [ 96.091238][ T6075] __btf_verifier_log_type+0x302/0x330 [ 96.091267][ T6075] btf_datasec_check_meta+0x2a6/0x640 [ 96.091299][ T6075] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 96.091352][ T6075] ? sort+0x6a/0xa0 [ 96.091418][ T6075] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 96.091494][ T6075] btf_parse_type_sec+0x28c/0x1590 [ 96.091608][ T6075] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 96.091679][ T6075] ? btf_parse_hdr+0x43a/0x440 [ 96.091709][ T6075] ? btf_parse_str_sec+0x1ae/0x1b0 [ 96.091821][ T6075] btf_new_fd+0x2ec/0x6a0 [ 96.091855][ T6075] bpf_btf_load+0x116/0x130 [ 96.091885][ T6075] __sys_bpf+0xbee/0xc50 [ 96.091910][ T6075] ? do_futex+0x300/0x460 [ 96.092047][ T6075] __x64_sys_bpf+0x69/0x80 [ 96.092084][ T6075] x64_sys_call+0xf26/0x2550 [ 96.092137][ T6075] do_syscall_64+0x112/0x360 [ 96.092178][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.092205][ T6075] RIP: 0033:0x7f75b782f559 [ 96.092226][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.092250][ T6075] RSP: 002b:00007f75b627f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.092277][ T6075] RAX: ffffffffffffffda RBX: 00007f75b7ab5fa0 RCX: 00007f75b782f559 [ 96.092333][ T6075] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 96.092350][ T6075] RBP: 00007f75b78c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.092367][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.092384][ T6075] R13: 00007f75b7ab6038 R14: 00007f75b7ab5fa0 R15: 00007fff2fb6acb8 [ 96.092406][ T6075] [ 96.458084][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.489271][ T6079] FAULT_INJECTION: forcing a failure. [ 96.489271][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 96.489309][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.0.946 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.489385][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.489400][ T6079] Call Trace: [ 96.489409][ T6079] [ 96.489419][ T6079] __dump_stack+0x1d/0x30 [ 96.489448][ T6079] dump_stack_lvl+0x95/0xd0 [ 96.489474][ T6079] dump_stack+0x15/0x1b [ 96.489498][ T6079] should_fail_ex+0x262/0x280 [ 96.489567][ T6079] ? copy_pid_ns+0x1b8/0x640 [ 96.489596][ T6079] should_failslab+0x8c/0xb0 [ 96.489701][ T6079] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 96.489731][ T6079] ? copy_pid_ns+0x1b8/0x640 [ 96.489761][ T6079] copy_pid_ns+0x1b8/0x640 [ 96.489838][ T6079] ? copy_mnt_ns+0xf4/0x720 [ 96.489872][ T6079] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 96.489940][ T6079] ? create_new_namespaces+0x38/0x420 [ 96.489969][ T6079] create_new_namespaces+0x168/0x420 [ 96.489995][ T6079] unshare_nsproxy_namespaces+0x115/0x150 [ 96.490023][ T6079] ksys_unshare+0x3a3/0x690 [ 96.490128][ T6079] __x64_sys_unshare+0x1f/0x30 [ 96.490165][ T6079] x64_sys_call+0x1e33/0x2550 [ 96.490198][ T6079] do_syscall_64+0x112/0x360 [ 96.490283][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.490381][ T6079] RIP: 0033:0x7f33cdc4f559 [ 96.490400][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.490422][ T6079] RSP: 002b:00007f33cc69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.490496][ T6079] RAX: ffffffffffffffda RBX: 00007f33cded5fa0 RCX: 00007f33cdc4f559 [ 96.490513][ T6079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 96.490536][ T6079] RBP: 00007f33cdce6b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.490555][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.490570][ T6079] R13: 00007f33cded6038 R14: 00007f33cded5fa0 R15: 00007ffff4075f08 [ 96.490591][ T6079] [ 96.508375][ T6081] netlink: 'syz.3.948': attribute type 6 has an invalid length. [ 96.811164][ T6098] FAULT_INJECTION: forcing a failure. [ 96.811164][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 96.811248][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.811267][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.811295][ T6098] Call Trace: [ 96.811300][ T6098] [ 96.811305][ T6098] __dump_stack+0x1d/0x30 [ 96.811358][ T6098] dump_stack_lvl+0x95/0xd0 [ 96.811374][ T6098] dump_stack+0x15/0x1b [ 96.811389][ T6098] should_fail_ex+0x262/0x280 [ 96.811486][ T6098] should_failslab+0x8c/0xb0 [ 96.811506][ T6098] __kvmalloc_node_noprof+0x14f/0x5b0 [ 96.811527][ T6098] ? nf_hook_entries_grow+0x1cb/0x460 [ 96.811631][ T6098] ? nf_hook_entries_grow+0x1cb/0x460 [ 96.811691][ T6098] nf_hook_entries_grow+0x1cb/0x460 [ 96.811713][ T6098] ? __pfx___nf_hook_entries_free+0x10/0x10 [ 96.811848][ T6098] __nf_register_net_hook+0x16e/0x4d0 [ 96.811917][ T6098] nf_register_net_hook+0xcf/0x130 [ 96.811950][ T6098] nf_tables_register_hook+0x131/0x150 [ 96.811967][ T6098] nf_tables_newchain+0x1575/0x1610 [ 96.812062][ T6098] nfnetlink_rcv+0xbf7/0x1740 [ 96.812112][ T6098] netlink_unicast+0x665/0x740 [ 96.812198][ T6098] netlink_sendmsg+0x5ef/0x740 [ 96.812219][ T6098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.812238][ T6098] ____sys_sendmsg+0x54a/0x590 [ 96.812260][ T6098] ___sys_sendmsg+0x195/0x1e0 [ 96.812318][ T6098] __x64_sys_sendmsg+0xd4/0x160 [ 96.812341][ T6098] x64_sys_call+0x22ab/0x2550 [ 96.812359][ T6098] do_syscall_64+0x112/0x360 [ 96.812376][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.812467][ T6098] RIP: 0033:0x7fb836cdf559 [ 96.812502][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.812516][ T6098] RSP: 002b:00007fb83572f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.812532][ T6098] RAX: ffffffffffffffda RBX: 00007fb836f65fa0 RCX: 00007fb836cdf559 [ 96.812546][ T6098] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 96.812556][ T6098] RBP: 00007fb836d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.812565][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.812574][ T6098] R13: 00007fb836f66038 R14: 00007fb836f65fa0 R15: 00007fff74933828 [ 96.812653][ T6098] [ 96.903809][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 96.904150][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 97.003723][ T6106] FAULT_INJECTION: forcing a failure. [ 97.003723][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 97.003793][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.1.960 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.003821][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.003834][ T6106] Call Trace: [ 97.003844][ T6106] [ 97.003854][ T6106] __dump_stack+0x1d/0x30 [ 97.003882][ T6106] dump_stack_lvl+0x95/0xd0 [ 97.003907][ T6106] dump_stack+0x15/0x1b [ 97.003929][ T6106] should_fail_ex+0x262/0x280 [ 97.003962][ T6106] ? copy_pid_ns+0x1b8/0x640 [ 97.004044][ T6106] should_failslab+0x8c/0xb0 [ 97.004075][ T6106] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 97.004103][ T6106] ? copy_pid_ns+0x1b8/0x640 [ 97.004141][ T6106] copy_pid_ns+0x1b8/0x640 [ 97.004223][ T6106] ? copy_utsname+0x67/0x3b0 [ 97.004251][ T6106] create_new_namespaces+0x168/0x420 [ 97.004279][ T6106] unshare_nsproxy_namespaces+0x115/0x150 [ 97.004306][ T6106] ksys_unshare+0x3a3/0x690 [ 97.004369][ T6106] __x64_sys_unshare+0x1f/0x30 [ 97.004401][ T6106] x64_sys_call+0x1e33/0x2550 [ 97.004510][ T6106] do_syscall_64+0x112/0x360 [ 97.004538][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.004562][ T6106] RIP: 0033:0x7fb836cdf559 [ 97.004584][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.004604][ T6106] RSP: 002b:00007fb83572f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.004628][ T6106] RAX: ffffffffffffffda RBX: 00007fb836f65fa0 RCX: 00007fb836cdf559 [ 97.004665][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 97.004680][ T6106] RBP: 00007fb836d76b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.004696][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.004710][ T6106] R13: 00007fb836f66038 R14: 00007fb836f65fa0 R15: 00007fff74933828 [ 97.004731][ T6106]                                                                                                                                                                                     [ 98.388692][ T29] audit: type=1400 audit(2000000293.814:1071): avc: denied { search } for pid=6167 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.388722][ T29] audit: type=1400 audit(2000000293.814:1072): avc: denied { read write } for pid=6167 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 98.388956][ T29] audit: type=1400 audit(2000000293.814:1073): avc: denied { open } for pid=6167 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 98.389152][ T29] audit: type=1400 audit(2000000293.814:1074): avc: denied { lock } for pid=6167 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 98.389796][ T29] audit: type=1400 audit(2000000293.814:1075): avc: denied { read } for pid=6167 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 99.211126][ T6187] loop4: detected capacity change from 0 to 8192 [ 99.220346][ T6187] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09) [ 99.220376][ T6187] FAT-fs (loop4): Filesystem has been set read-only [ 99.220418][ T6187] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09) [ 99.220457][ T6187] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09) [ 99.314367][ T6194] ip_tables: iptables: counters copy to user failed while replacing table [ 99.364537][ T6198] FAULT_INJECTION: forcing a failure. [ 99.364537][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.364572][ T6198] CPU: 0 UID: 0 PID: 6198 Comm: syz.4.1000 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.364600][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.364694][ T6198] Call Trace: [ 99.364702][ T6198] [ 99.364711][ T6198] __dump_stack+0x1d/0x30 [ 99.364744][ T6198] dump_stack_lvl+0x95/0xd0 [ 99.364769][ T6198] dump_stack+0x15/0x1b [ 99.364791][ T6198] should_fail_ex+0x262/0x280 [ 99.364855][ T6198] should_fail+0xb/0x20 [ 99.364878][ T6198] should_fail_usercopy+0x1a/0x20 [ 99.364908][ T6198] _copy_to_user+0x20/0xa0 [ 99.364955][ T6198] bpf_verifier_vlog+0x36e/0x5a0 [ 99.364986][ T6198] btf_verifier_log+0xb2/0xf0 [ 99.365024][ T6198] btf_parse_str_sec+0x15c/0x1b0 [ 99.365073][ T6198] btf_new_fd+0x2ac/0x6a0 [ 99.365138][ T6198] bpf_btf_load+0x116/0x130 [ 99.365166][ T6198] __sys_bpf+0xbee/0xc50 [ 99.365191][ T6198] ? do_futex+0x300/0x460 [ 99.365300][ T6198] __x64_sys_bpf+0x69/0x80 [ 99.365343][ T6198] x64_sys_call+0xf26/0x2550 [ 99.365382][ T6198] do_syscall_64+0x112/0x360 [ 99.365414][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.365522][ T6198] RIP: 0033:0x7f02ca2ff559 [ 99.365539][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.365561][ T6198] RSP: 002b:00007f02c8d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.365587][ T6198] RAX: ffffffffffffffda RBX: 00007f02ca585fa0 RCX: 00007f02ca2ff559 [ 99.365606][ T6198] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 99.365679][ T6198] RBP: 00007f02ca396b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.365695][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.365733][ T6198] R13: 00007f02ca586038 R14: 00007f02ca585fa0 R15: 00007fffb4c63338 [ 99.365827][ T6198] [ 99.896654][ T6192] loop3: detected capacity change from 0 to 512 [ 100.099768][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.122851][ T6192] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.530868][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.566403][ T6228] FAULT_INJECTION: forcing a failure. [ 100.566403][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 100.566438][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.1.1012 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.566522][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.566563][ T6228] Call Trace: [ 100.566571][ T6228] [ 100.566579][ T6228] __dump_stack+0x1d/0x30 [ 100.566610][ T6228] dump_stack_lvl+0x95/0xd0 [ 100.566637][ T6228] dump_stack+0x15/0x1b [ 100.566660][ T6228] should_fail_ex+0x262/0x280 [ 100.566714][ T6228] ? __kernfs_new_node+0x70/0x440 [ 100.566738][ T6228] should_failslab+0x8c/0xb0 [ 100.566772][ T6228] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 100.566808][ T6228] ? __kernfs_new_node+0x70/0x440 [ 100.566834][ T6228] __kernfs_new_node+0x70/0x440 [ 100.566855][ T6228] ? __rcu_read_unlock+0x4e/0x70 [ 100.566883][ T6228] ? up_write+0x19/0x60 [ 100.566958][ T6228] ? kernfs_link_sibling+0x2f5/0x320 [ 100.566993][ T6228] ? __rcu_read_unlock+0x4e/0x70 [ 100.567021][ T6228] kernfs_new_node+0x107/0x140                                                                                                                                                                                                                                       syzkaller syzkaller login: [ 102.284815][ T6260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.309713][ T6260] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.606972][ T29] audit: type=1400 audit(2000000298.036:1083): avc: denied { sys_module } for pid=6326 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.652655][ T4165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.683406][ T6331] loop3: detected capacity change from 0 to 512 [ 102.702838][ T6331] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 102.702857][ T6331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.716383][ T6331] EXT4-fs (loop3): 1 truncate cleaned up [ 102.716868][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.724077][ T29] audit: type=1400 audit(2000000298.146:1084): avc: denied { write } for pid=6330 comm="syz.3.1052" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.763749][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.881045][ T6326] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.930816][ T6326] wg1 speed is unknown, defaulting to 1000 [ 103.036636][ T6356] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.086546][ T6364] ip_tables: iptables: counters copy to user failed while replacing table [ 103.101061][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.101094][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.101154][ T6326] bridge_slave_0: entered allmulticast mode [ 103.101979][ T6326] bridge_slave_0: entered promiscuous mode [ 103.102858][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.102887][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.103064][ T6326] bridge_slave_1: entered allmulticast mode [ 103.103554][ T6326] bridge_slave_1: entered promiscuous mode [ 103.121904][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.124830][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.145505][ T6326] team0: Port device team_slave_0 added [ 103.146335][ T6326] team0: Port device team_slave_1 added [ 103.159853][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.159869][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.159901][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.160490][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.160504][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.160566][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.191888][ T6326] hsr_slave_0: entered promiscuous mode [ 103.192204][ T6326] hsr_slave_1: entered promiscuous mode [ 103.192562][ T6326] debugfs: 'hsr0' already exists in 'hsr' [ 103.192578][ T6326] Cannot create hsr debugfs directory [ 103.307376][ T29] audit: type=1400 audit(2000000298.737:1085): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.333164][ T6326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.333208][ T6326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.403382][ T6326] bond0: (slave netdevsim2): Releasing backup interface [ 103.420364][ T6326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.420535][ T6326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.429703][ T6325] loop1: detected capacity change from 0 to 512 [ 103.508715][ T6326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.508756][ T6326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.613981][ T6326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.614024][ T6326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.757515][ T6386] loop4: detected capacity change from 0 to 1024 [ 103.769013][ T6386] EXT4-fs: Ignoring removed bh option [ 103.805797][ T6386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.826493][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.828021][ T6326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.833347][ T6326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.833954][ T6326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.838881][ T6325] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.901651][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.902910][ T6326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.903515][ T6326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.917512][ T6326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.919427][ T6326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.944842][ T6326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.983152][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.983191][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.983266][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.983315][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.043821][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.064482][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.065204][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.070362][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.119957][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.120000][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.121376][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.121409][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.155787][ T6326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.295391][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.383103][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.413438][ T6421] loop5: detected capacity change from 0 to 256 [ 104.520405][ T6431] FAULT_INJECTION: forcing a failure. [ 104.520405][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.520443][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.5.1078 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.520475][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.520530][ T6431] Call Trace: [ 104.520538][ T6431] [ 104.520545][ T6431] __dump_stack+0x1d/0x30 [ 104.520571][ T6431] dump_stack_lvl+0x95/0xd0 [ 104.520674][ T6431] dump_stack+0x15/0x1b [ 104.520697][ T6431] should_fail_ex+0x262/0x280 [ 104.520771][ T6431] should_fail+0xb/0x20 [ 104.520794][ T6431] should_fail_usercopy+0x1a/0x20 [ 104.520822][ T6431] _copy_from_user+0x1c/0xb0 [ 104.520850][ T6431] __x64_sys_futimesat+0x9b/0x1e0 [ 104.520934][ T6431] x64_sys_call+0x21c4/0x2550 [ 104.520995][ T6431] do_syscall_64+0x112/0x360 [ 104.521023][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.521049][ T6431] RIP: 0033:0x7f305d45f559 [ 104.521089][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.521114][ T6431] RSP: 002b:00007f305beb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 104.521142][ T6431] RAX: ffffffffffffffda RBX: 00007f305d6e5fa0 RCX: 00007f305d45f559 [ 104.521158][ T6431] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.521171][ T6431] RBP: 00007f305d4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.521187][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.521203][ T6431] R13: 00007f305d6e6038 R14: 00007f305d6e5fa0 R15: 00007fff42221e98 [ 104.521226][ T6431] [ 104.608145][ T6326] veth0_vlan: entered promiscuous mode [ 104.615035][ T6326] veth1_vlan: entered promiscuous mode [ 104.644193][ T6437] netlink: 'syz.1.1082': attribute type 3 has an invalid length. [ 104.644216][ T6437] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 104.644230][ T6437] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1082'. [ 104.666138][ T6326] veth0_macvtap: entered promiscuous mode [ 104.667978][ T6326] veth1_macvtap: entered promiscuous mode [ 104.679520][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.687738][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.740907][ T356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742622][ T356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742671][ T356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742814][ T356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.842521][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1087'. [ 105.059878][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 105.059976][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 105.230104][ T6499] pimreg: entered allmulticast mode [ 105.481702][ T6507] ================================================================== [ 105.481738][ T6507] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 105.481781][ T6507] [ 105.481786][ T6507] write to 0xffff888103d9ac48 of 8 bytes by interrupt on cpu 0: [ 105.481808][ T6507] ps2_interrupt+0x50d/0x550 [ 105.481837][ T6507] serio_interrupt+0x66/0xf0 [ 105.481872][ T6507] i8042_handle_data+0x388/0x680 [ 105.481894][ T6507] i8042_interrupt+0x15/0x90 [ 105.481913][ T6507] __handle_irq_event_percpu+0x8b/0x480 [ 105.481938][ T6507] handle_irq_event+0x64/0xf0 [ 105.481964][ T6507] handle_edge_irq+0x155/0x440 [ 105.481985][ T6507] __common_interrupt+0x60/0xb0 [ 105.482018][ T6507] common_interrupt+0x7e/0x90 [ 105.482051][ T6507] asm_common_interrupt+0x26/0x40 [ 105.482075][ T6507] kcsan_setup_watchpoint+0x429/0x4a0 [ 105.482109][ T6507] free_pages_and_swap_cache+0x246/0x3b0 [ 105.482131][ T6507] tlb_flush_mmu+0x54f/0x6b0 [ 105.482150][ T6507] __zap_vma_range+0x259f/0x2c50 [ 105.482176][ T6507] unmap_vmas+0x1fb/0x2e0 [ 105.482205][ T6507] exit_mmap+0x1a2/0x5e0 [ 105.482224][ T6507] __mmput+0x28/0x1c0 [ 105.482248][ T6507] mmput+0x3b/0x50 [ 105.482267][ T6507] exit_mm+0x11b/0x1b0 [ 105.482298][ T6507] do_exit+0x437/0x14f0 [ 105.482327][ T6507] do_group_exit+0xfe/0x140 [ 105.482358][ T6507] get_signal+0xe02/0xf00 [ 105.482380][ T6507] arch_do_signal_or_restart+0x96/0x480 [ 105.482415][ T6507] exit_to_user_mode_loop+0x15d/0x8c0 [ 105.482445][ T6507] do_syscall_64+0x212/0x360 [ 105.482479][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.482499][ T6507] [ 105.482506][ T6507] read to 0xffff888103d9ac48 of 8 bytes by task 6507 on cpu 1: [ 105.482523][ T6507] ps2_do_sendbyte+0x106/0x320 [ 105.482552][ T6507] __ps2_command+0x3b9/0xa90 [ 105.482580][ T6507] ps2_command+0x52/0x90 [ 105.482609][ T6507] psmouse_set_resolution+0x7d/0xd0 [ 105.482635][ T6507] psmouse_attr_set_protocol+0x555/0xad0 [ 105.482660][ T6507] psmouse_attr_set_helper+0x2a3/0x450 [ 105.482684][ T6507] dev_attr_store+0x4a/0x70 [ 105.482708][ T6507] sysfs_kf_write+0xfe/0x120 [ 105.482736][ T6507] kernfs_fop_write_iter+0x1d2/0x2e0 [ 105.482758][ T6507] vfs_write+0x57a/0x990 [ 105.482782][ T6507] ksys_write+0xdc/0x1a0 [ 105.482810][ T6507] __x64_sys_write+0x40/0x50 [ 105.482836][ T6507] x64_sys_call+0x154e/0x2550 [ 105.482863][ T6507] do_syscall_64+0x112/0x360 [ 105.482884][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.482927][ T6507] [ 105.482933][ T6507] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 105.482947][ T6507] [ 105.482951][ T6507] Reported by Kernel Concurrency Sanitizer on: [ 105.482962][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.482989][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.483001][ T6507] ================================================================== [ 105.484933][ T6507] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 105.901581][ T6511] loop5: detected capacity change from 0 to 512 [ 106.284986][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.285070][ T6511] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.341387][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 106.341415][ T29] audit: type=1400 audit(2000000301.748:1146): avc: denied { write } for pid=6510 comm="syz.5.1115" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.489740][ T6531] loop4: detected capacity change from 0 to 512 [ 106.550149][ T4165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.575641][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.575901][ T6531] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.618712][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.