last executing test programs: 5.47029244s ago: executing program 4 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x27, 0x3f, 0x0, &(0x7f0000000600)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.229980039s ago: executing program 4 (id=54): r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x3, 0x240, &(0x7f0000000380)="$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") r1 = openat(r0, &(0x7f00000005c0)='./file0\x00', 0x101800, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000021c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.036709649s ago: executing program 4 (id=60): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 2.973896215s ago: executing program 4 (id=62): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10092, &(0x7f0000000200), 0xff, 0x249, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0xa880, 0x97) getdents64(r0, 0x0, 0x0) 2.82729138s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x210008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='3', @ANYRESDEC], 0x5c) 2.778240666s ago: executing program 3 (id=68): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000080), 0xfc, 0x575, &(0x7f00000000c0)="$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") r0 = io_uring_setup(0x35d4, &(0x7f0000002c80)={0x0, 0xbd46, 0x1000, 0x4002, 0x2d}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004e00)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0b53cb8100080900", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64], 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002d40)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003dc0)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.53805939s ago: executing program 4 (id=71): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x184d2, &(0x7f00000027c0)=ANY=[], 0x83, 0x27b, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2.515506912s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r1, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}, @TIPC_NLA_PROP_WIN={0x44, 0x3, 0xa1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 2.375756186s ago: executing program 4 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006e00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000006e40)='./debug\x00', &(0x7f0000006e80)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006ec0)='./debug/failslab/times\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write(r1, &(0x7f0000006f00)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000006f40)='./debug/failslab/probability\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) write(r2, &(0x7f0000006f80)='5', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000006fc0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000007000)='1', 0x1) syz_mount_image$ext4(&(0x7f0000007040)='ext4\x00', &(0x7f0000007080)='./debug\x00', 0x380831, &(0x7f00000070c0), 0x4, 0xbaf, &(0x7f0000007100)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) mount(&(0x7f0000007dc0)=@filename='mtd0\x00', &(0x7f0000007e00)='./file0\x00', &(0x7f0000007e40)='jffs2\x00', 0x800000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000007e80)={0x1, 'macvlan1\x00'}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) 2.3430751s ago: executing program 2 (id=75): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x200000, @crypt}}) 2.280417617s ago: executing program 2 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000800)) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000840)={[{@nfs_export_on}, {@nfs_export_off}, {@verity_require}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x34, 0x64, 0x30, 0x62, 0x36, 0x62], 0x2d, [0x31, 0x62, 0x36, 0x5b], 0x2d, [0x63, 0x35, 0x31, 0x53], 0x2d, [0x33, 0x34, 0x30, 0x64], 0x2d, [0x34, 0x32, 0x62, 0x62, 0x32, 0x37, 0x38, 0x38]}}}]}) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) lseek(r4, 0x2000, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) 1.821557003s ago: executing program 1 (id=77): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@minixdf}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0xb, 0x2, 0x7, 0x401, 0x3}) 1.65778892s ago: executing program 3 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300bd7000fbdbdf252d00000020000180140002006c6f0000000000007a7df93031c899f2080001"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40006) 1.649650701s ago: executing program 1 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x2f, 0x107, 0x70bd2c, 0x25cfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x34000041}, 0x0) 1.513296475s ago: executing program 3 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./dev\x00', &(0x7f0000000dc0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/console\x00', 0x1, 0x1) write(r0, &(0x7f0000000000)="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", 0xbb1) 1.384444218s ago: executing program 2 (id=82): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10092, &(0x7f0000000200), 0xff, 0x249, &(0x7f0000000240)="$eJzs3T9oM2UcB/DvXRJr3jfIqy6C+AdERAvldRNcXifhBSlFRFChIuKitEJtcWudXBx0VunkUsTN6ihdiosiOFXtUBdBi4PFQYdIcqnUNuKf1Jz0Ph+43F1yz/2e4+77JBkuCdBYV5JcS9JKMpukk6Q4ucHd1XRltLrZ3V1M+v3HfyyG21XrleN2l5NsJHkoyU5Z5MV2srb99MHPe4/e98Zq5973tp/qTvUgRw4P9h87enf+9Q+vP7j2+Zffzxe5lt4fjuv8FWOeaxfJLf9Fsf+Jol13D/g7Fl794KtB7m9Ncs8w/52UqU7emys37HTywDt/1vatH764fZp9Bc5fv98ZvAdu9IHGKZP0UpRzSarlspybqz7Df926VL60vPLK7AvLq0vP1z1SAedl+L3345mPLp/K/3etKv/AxdVL9p9Y2PpmsHzUqrs3wFTcUc0G+Z99dv3+yD80jvxDc8k/NJf8Q3PJPzTSTOQfGk3+obnkH5pL/qG55B+a62T+AYBm6c+cuSW4GP4sAHDh1T3+AAAAAAAAAAAAAAAAAAAAZ212dxePp2nV/PTt5PCRJO1x9VvD/yNObhw+XvqpGGz2u6JqNpFn7ppwBxN6v+a7r2/6tqbC3Wr22Z011R9ZX0o2Xktytd0+e/0Vo+vv37v5L17vPDdhgX+oOLX+8JPTrX/ar1v11r++l3wyGH+ujht/ytw2nI8ff3qD8zdh/Zd/mXAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATM1vAQAA//8mi2g4") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0xa880, 0x97) getdents64(r0, 0x0, 0x0) 1.292394277s ago: executing program 1 (id=84): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) mknodat$md(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x6180, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, 0x0) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 1.246316422s ago: executing program 1 (id=86): io_setup(0x2, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 1.152312842s ago: executing program 3 (id=88): syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.145897812s ago: executing program 2 (id=89): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@minixdf}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0xb, 0x2, 0x7, 0x401, 0x3}) 896.422048ms ago: executing program 0 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracefs\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='-:p1 ./file0:', 0xd) 896.353758ms ago: executing program 0 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_a, @from_mac, {0xf, 0x4}}}}]}, 0x4c}}, 0x4040) 717.049836ms ago: executing program 1 (id=94): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x10, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x13) 425.521406ms ago: executing program 3 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000240)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 305.739448ms ago: executing program 0 (id=96): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x11, {0x0, 0x7, 0xc, 0xc, 0x9, 0x9, 0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x0, 0xffffffff}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 266.484722ms ago: executing program 0 (id=97): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, 0x0, 0x0) 231.427296ms ago: executing program 2 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 180.513241ms ago: executing program 0 (id=99): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000200)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 180.365251ms ago: executing program 0 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x8002, 0x5a, 0x0, 0x0, 0x5, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x94, 0x70d}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=101): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000dc0)={'ip6gre0\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 21.000840][ T28] audit: type=1400 audit(1793718673.041:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.001942][ T279] cgroup: Unknown subsys name 'net' [ 21.023669][ T28] audit: type=1400 audit(1793718673.041:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.051490][ T28] audit: type=1400 audit(1793718673.071:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.051655][ T279] cgroup: Unknown subsys name 'devices' [ 21.191759][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.197523][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.330403][ T28] audit: type=1400 audit(1793718673.371:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.353704][ T28] audit: type=1400 audit(1793718673.371:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.367990][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.378613][ T28] audit: type=1400 audit(1793718673.371:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.410170][ T28] audit: type=1400 audit(1793718673.431:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.415207][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.436084][ T28] audit: type=1400 audit(1793718673.431:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.470363][ T28] audit: type=1400 audit(1793718673.451:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.496152][ T28] audit: type=1400 audit(1793718673.451:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.324949][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.332083][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.339548][ T287] device bridge_slave_0 entered promiscuous mode [ 22.348628][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.355733][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.363152][ T287] device bridge_slave_1 entered promiscuous mode [ 22.422773][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.429917][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.437377][ T290] device bridge_slave_0 entered promiscuous mode [ 22.457899][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.465143][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.472657][ T290] device bridge_slave_1 entered promiscuous mode [ 22.508710][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.515849][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.523277][ T289] device bridge_slave_0 entered promiscuous mode [ 22.530240][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.537368][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.544878][ T288] device bridge_slave_0 entered promiscuous mode [ 22.557980][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.565072][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.572505][ T289] device bridge_slave_1 entered promiscuous mode [ 22.579031][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.586110][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.593463][ T288] device bridge_slave_1 entered promiscuous mode [ 22.636644][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.643783][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.651245][ T291] device bridge_slave_0 entered promiscuous mode [ 22.679271][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.686514][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.693950][ T291] device bridge_slave_1 entered promiscuous mode [ 22.818312][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.825404][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.832721][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.839744][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.859859][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.866944][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.874239][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.881281][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.905377][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.912462][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.919821][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.926892][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.952638][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.959706][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.967033][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.974082][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.993024][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.000356][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.007589][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.015074][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.022617][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.029927][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.037385][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.044889][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.053755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.062270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.088454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.096381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.104073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.112673][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.120018][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.127762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.136183][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143249][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.172992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.181215][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.188850][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.196584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.205832][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.212904][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.220912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.229046][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.236091][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.243437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.251617][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.258627][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.266031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.274110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.300597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.308928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.317129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.325380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.333561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.341672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.350163][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357177][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.370547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.379020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.387279][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.394344][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.413786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.422138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.431132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.439115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.447571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.455987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.464307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.473036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.481561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.489580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.505510][ T288] device veth0_vlan entered promiscuous mode [ 23.513920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.521906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.529842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.537530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.545230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.553782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.562094][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.569112][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.576724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.584589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.592716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.600599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.608548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.616224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.623849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.631667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.639058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.646783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.654555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.672290][ T288] device veth1_macvtap entered promiscuous mode [ 23.679460][ T290] device veth0_vlan entered promiscuous mode [ 23.685983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.694421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.702827][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.709863][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.717758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.725808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.733884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.741992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.750376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.758553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.766863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.779076][ T287] device veth0_vlan entered promiscuous mode [ 23.796903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.805548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.814239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.823116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.831686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.839882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.856724][ T291] device veth0_vlan entered promiscuous mode [ 23.866372][ T289] device veth0_vlan entered promiscuous mode [ 23.876846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.885674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.885846][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.894122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.909129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.917919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.926301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.934422][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.942475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.950576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.958018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.965534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.972951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.985679][ T287] device veth1_macvtap entered promiscuous mode [ 24.000044][ T290] device veth1_macvtap entered promiscuous mode [ 24.004886][ T310] loop0: detected capacity change from 0 to 512 [ 24.014101][ T289] device veth1_macvtap entered promiscuous mode [ 24.021673][ T310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.030340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.035707][ T310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.048573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.061369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.069807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.072938][ T310] EXT4-fs (loop0): 1 truncate cleaned up [ 24.078424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.084046][ T310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.092133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.108176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.117154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.125878][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.134744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.144221][ T291] device veth1_macvtap entered promiscuous mode [ 24.164417][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.173234][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.198896][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.204936][ T318] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 24.210378][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.225528][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.234739][ T320] tipc: Can't bind to reserved service type 2 [ 24.235638][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.250675][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.259416][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.268266][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.276768][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.285859][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.294217][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.343153][ T329] loop2: detected capacity change from 0 to 2048 [ 24.358878][ T332] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 24.376562][ T329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.395276][ T336] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 24.404610][ T336] device syzkaller0 entered promiscuous mode [ 24.419830][ T287] EXT4-fs (loop2): unmounting filesystem. [ 24.426116][ T336] tipc: Started in network mode [ 24.432035][ T336] tipc: Node identity b2fe5c2fc48f, cluster identity 4711 [ 24.439552][ T336] tipc: Enabled bearer , priority 0 [ 24.459005][ T346] loop2: detected capacity change from 0 to 512 [ 24.465577][ T335] tipc: Resetting bearer [ 24.477121][ T335] tipc: Disabling bearer [ 24.483657][ T346] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 24.504019][ T346] EXT4-fs (loop2): 1 truncate cleaned up [ 24.511118][ T346] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 24.844231][ T288] EXT4-fs (loop0): unmounting filesystem. [ 24.982401][ T287] EXT4-fs (loop2): unmounting filesystem. [ 24.994615][ T370] FAULT_INJECTION: forcing a failure. [ 24.994615][ T370] name fail_futex, interval 1, probability 0, space 0, times 1 [ 25.007949][ T370] CPU: 1 PID: 370 Comm: syz.0.22 Not tainted syzkaller #0 [ 25.015175][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.025261][ T370] Call Trace: [ 25.028556][ T370] [ 25.031502][ T370] __dump_stack+0x21/0x24 [ 25.035851][ T370] dump_stack_lvl+0x110/0x170 [ 25.040546][ T370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.045595][ T370] dump_stack+0x15/0x24 [ 25.049770][ T370] should_fail_ex+0x3bf/0x510 [ 25.054469][ T370] should_fail+0xb/0x10 [ 25.058653][ T370] get_futex_key+0x143/0xb10 [ 25.063280][ T370] ? __cfi_get_futex_key+0x10/0x10 [ 25.065957][ T308] device offline error, dev sda, sector 606326 op 0x1:(WRITE) flags 0x4000 phys_seg 35 prio class 2 [ 25.068412][ T370] ? alloc_file+0x82/0x600 [ 25.080664][ T308] device offline error, dev sda, sector 606832 op 0x1:(WRITE) flags 0x4000 phys_seg 48 prio class 2 [ 25.083614][ T370] futex_wake+0x150/0x8e0 [ 25.095201][ T308] device offline error, dev sda, sector 607344 op 0x1:(WRITE) flags 0x4000 phys_seg 39 prio class 2 [ 25.098697][ T370] ? alloc_file_pseudo+0x1aa/0x200 [ 25.109751][ T308] device offline error, dev sda, sector 607856 op 0x1:(WRITE) flags 0x4000 phys_seg 47 prio class 2 [ 25.114550][ T370] ? __cfi_futex_wake+0x10/0x10 [ 25.114579][ T370] ? preempt_count_add+0x90/0x1b0 [ 25.114597][ T370] do_futex+0x2bf/0x430 [ 25.114611][ T370] ? map_create+0x9ab/0xcf0 [ 25.125677][ T308] device offline error, dev sda, sector 608368 op 0x1:(WRITE) flags 0x4000 phys_seg 55 prio class 2 [ 25.130190][ T370] ? __cfi_do_futex+0x10/0x10 [ 25.130212][ T370] ? __sys_bpf+0x34e/0x850 [ 25.130227][ T370] __se_sys_futex+0x136/0x310 [ 25.137521][ T308] device offline error, dev sda, sector 608880 op 0x1:(WRITE) flags 0x0 phys_seg 37 prio class 2 [ 25.139396][ T370] ? __x64_sys_futex+0x100/0x100 [ 25.183716][ T370] ? xfd_validate_state+0x70/0x150 [ 25.188831][ T370] ? __kasan_check_write+0x14/0x20 [ 25.193931][ T370] __x64_sys_futex+0xe5/0x100 [ 25.198598][ T370] x64_sys_call+0x7ec/0x9a0 [ 25.203088][ T370] do_syscall_64+0x4c/0xa0 [ 25.207517][ T370] ? clear_bhb_loop+0x30/0x80 [ 25.212191][ T370] ? clear_bhb_loop+0x30/0x80 [ 25.216942][ T370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.222825][ T370] RIP: 0033:0x7f3954d9fb19 [ 25.227237][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.246828][ T370] RSP: 002b:00007f39537f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 25.255242][ T370] RAX: ffffffffffffffda RBX: 00007f3955025fa8 RCX: 00007f3954d9fb19 [ 25.263209][ T370] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3955025fac [ 25.271164][ T370] RBP: 00007f3955025fa0 R08: 003950c28e6827c0 R09: 0000000000000000 [ 25.279121][ T370] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 25.287076][ T370] R13: 00007f3955026038 R14: 00007ffd6f2d85e0 R15: 00007ffd6f2d86c8 [ 25.295054][ T370] [ 25.306354][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 76110) [ 25.320165][ T376] 9pnet_virtio: no channels available for device syz [ 25.322611][ T308] device offline error, dev sda, sector 609182 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 2 [ 25.338025][ T308] device offline error, dev sda, sector 609688 op 0x1:(WRITE) flags 0x4000 phys_seg 55 prio class 2 [ 25.349341][ T308] device offline error, dev sda, sector 610200 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 2 [ 25.360761][ T308] device offline error, dev sda, sector 610712 op 0x1:(WRITE) flags 0x4000 phys_seg 60 prio class 2 [ 25.382683][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 76403) [ 25.399253][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 76715) [ 25.412203][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 76891) [ 25.424025][ T359] Buffer I/O error on device sda1, logical block 76725 [ 25.426936][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 77866) [ 25.431034][ T359] Buffer I/O error on device sda1, logical block 76726 [ 25.449739][ T359] Buffer I/O error on device sda1, logical block 76727 [ 25.453298][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 77871) [ 25.468348][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 77900) [ 25.483782][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 77982) [ 25.487154][ T359] Buffer I/O error on device sda1, logical block 76728 [ 25.499241][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 77988) [ 25.502945][ T359] Buffer I/O error on device sda1, logical block 76729 [ 25.521111][ T308] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 78039) [ 25.522911][ T359] Buffer I/O error on device sda1, logical block 76730 [ 25.539808][ T359] Buffer I/O error on device sda1, logical block 76731 [ 25.547146][ T359] Buffer I/O error on device sda1, logical block 76732 [ 25.556003][ T359] Buffer I/O error on device sda1, logical block 76733 [ 25.563045][ T359] Buffer I/O error on device sda1, logical block 76734 [ 25.575904][ T374] Buffer I/O error on dev sda1, logical block 135, lost async page write [ 25.585472][ T374] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 25.589506][ T66] Aborting journal on device sda1-8. [ 25.594406][ T374] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 25.599535][ T66] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 25.607956][ T374] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 25.616675][ T385] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.28: Detected aborted journal [ 25.625259][ T374] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 25.638422][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 25.645357][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 25.652114][ T385] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 25.663415][ T374] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 25.671601][ T385] EXT4-fs (sda1): I/O error while writing superblock [ 25.680194][ T279] EXT4-fs (sda1): previous I/O error to superblock detected [ 25.686646][ T385] EXT4-fs (sda1): Remounting filesystem read-only [ 25.694158][ T279] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 25.700326][ T374] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 25.708604][ T279] EXT4-fs (sda1): I/O error while writing superblock [ 25.718395][ T385] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.28: Detected aborted journal [ 25.734506][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 25.734769][ T385] EXT4-fs (sda1): I/O error while writing superblock [ 25.747687][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 25.747952][ T385] EXT4-fs (sda1): Remounting filesystem read-only [ 25.760075][ T279] EXT4-fs (sda1): I/O error while writing superblock [ 25.765744][ T385] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.28: Detected aborted journal [ 25.776395][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 25.783495][ T385] EXT4-fs (sda1): I/O error while writing superblock [ 25.794566][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 25.807060][ T365] udevd[365]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 25.808816][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 25.826117][ T393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.31: Detected aborted journal [ 25.828890][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 25.843717][ T393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.31: Detected aborted journal [ 25.864194][ T374] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 26.265351][ T412] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 26.282085][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 26.282099][ T28] audit: type=1400 audit(1793718678.321:165): avc: denied { bind } for pid=415 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.346335][ T28] audit: type=1400 audit(1793718678.381:166): avc: denied { bind } for pid=420 comm="syz.3.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.367974][ T28] audit: type=1400 audit(1793718678.381:167): avc: denied { name_bind } for pid=420 comm="syz.3.44" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.388868][ T28] audit: type=1400 audit(1793718678.381:168): avc: denied { node_bind } for pid=420 comm="syz.3.44" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 28.059950][ C1] sched: RT throttling activated [ 29.086819][ T444] loop4: detected capacity change from 0 to 128 [ 29.096895][ T447] loop2: detected capacity change from 0 to 512 [ 29.109037][ T447] EXT4-fs: Ignoring removed oldalloc option [ 29.119927][ T28] audit: type=1400 audit(1793718681.151:169): avc: denied { append } for pid=450 comm="syz.3.57" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.153910][ T28] audit: type=1400 audit(1793718681.161:170): avc: denied { block_suspend } for pid=448 comm="syz.1.56" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.176071][ T28] audit: type=1400 audit(1793718681.191:171): avc: denied { mount } for pid=442 comm="syz.4.54" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.213653][ T28] audit: type=1400 audit(1793718681.241:172): avc: denied { append } for pid=452 comm="syz.3.58" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.271685][ T447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.313601][ T447] EXT4-fs warning (device loop2): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 29.334949][ T28] audit: type=1400 audit(1793718681.301:173): avc: denied { sqpoll } for pid=456 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.376860][ T467] loop4: detected capacity change from 0 to 128 [ 29.423900][ T287] EXT4-fs (loop2): unmounting filesystem. [ 29.435908][ T467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.454343][ T28] audit: type=1400 audit(1793718681.301:174): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.491042][ T467] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.567243][ T480] loop3: detected capacity change from 0 to 512 [ 29.577116][ T484] Write-error on swap-device (8:0:270086) [ 29.584194][ T483] loop2: detected capacity change from 0 to 512 Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.577116][ T484] Write-error on swap-device (8:0:270086) [ 29.602728][ T480] ======================================================= [ 29.602728][ T480] WARNING: The mand mount option has been deprecated and [ 29.602728][ T480] and is ignored by this kernel. Remove the mand [ 29.602728][ T480] option from the mount to silence this warning. [ 29.602728][ T480] ======================================================= [ 29.640375][ T467] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.62: No space for directory leaf checksum. Please run e2fsck -D. [ 29.656579][ T484] Write-error on swap-device (8:0:270094) Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.656579][ T484] Write-error on swap-device (8:0:270094) [ 29.686932][ T484] Write-error on swap-device (8:0:270102) Nov 3 15:11:21 [ 29.695411][ T483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. syzkaller kern.a[ 29.705077][ T467] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.62: Directory block failed checksum lert kernel: [ 29.686932][ T4[ 29.720047][ T483] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) 84] Write-error [ 29.732146][ T484] Write-error on swap-device (8:0:270110) on swap-device ([ 29.738593][ T484] Write-error on swap-device (8:0:270118) 8:0:270102) Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.732146][ T484] Write-error on swap-device (8:0:270110) Nov[ 29.756287][ T484] Write-error on swap-device (8:0:270126) 3 15:11:21 syzkaller kern.alert kernel: [ 29.738593][ T484] Write-error on swap-device (8:0[ 29.770628][ T291] EXT4-fs (loop4): unmounting filesystem. :270118) Nov 3 15:11:21 syzkaller kern.alert k[ 29.780194][ T484] Write-error on swap-device (8:0:270134) ernel: [ 29.756287][ T484] Write-error on swap-device (8:0:270126) Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.780194][ T484] Write-error on swap-device ([ 29.800108][ T287] EXT4-fs (loop2): unmounting filesystem. 8:0:270134) [ 29.807834][ T480] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.68: bad orphan inode 15 [ 29.818100][ T484] Write-error on swap-device (8:0:270142) Nov 3 15:11:21 syzkaller kern.alert kernel: [ [ 29.828457][ T489] loop4: detected capacity change from 0 to 256 29.818100][ T4[ 29.836480][ T484] Write-error on swap-device (8:0:270150) 84] Write-error on swap-device (8:0:270142) Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.836480][ T484] Write-error on swap-device (8:0[ 29.854783][ T480] ext4_test_bit(bit=14, block=18) = 1 :270150) [ 29.873456][ T484] Write-error on swap-device (8:0:270622) Nov 3 15:11:21 syzkaller kern.alert kernel: [ 29.873456][ T484] Write-error on swap-device ([ 29.887633][ T480] is_bad_inode(inode)=0 8:0:270622) [ 29.896692][ T491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 29.919044][ T480] NEXT_ORPHAN(inode)=1023 [ 29.930127][ T480] max_ino=32 [ 29.940029][ T480] i_nlink=0 [ 29.943428][ T480] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #15: comm syz.3.68: corrupted xattr block 19 [ 29.992125][ T495] FAULT_INJECTION: forcing a failure. [ 29.992125][ T495] name failslab, interval 1, probability 5, space 0, times 100 [ 30.005790][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 30.012938][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.023010][ T495] Call Trace: [ 30.026313][ T495] [ 30.029263][ T495] __dump_stack+0x21/0x24 [ 30.033787][ T495] dump_stack_lvl+0x110/0x170 [ 30.038482][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.043526][ T495] ? selinux_kernfs_init_security+0x143/0x450 [ 30.049728][ T495] dump_stack+0x15/0x24 [ 30.053991][ T495] should_fail_ex+0x3bf/0x510 [ 30.058711][ T495] ? __kernfs_new_node+0xe1/0x670 [ 30.063753][ T495] __should_failslab+0xac/0xf0 [ 30.068540][ T495] should_failslab+0x9/0x20 [ 30.073323][ T495] kmem_cache_alloc+0x3b/0x320 [ 30.078289][ T495] __kernfs_new_node+0xe1/0x670 [ 30.083249][ T495] ? clear_nonspinnable+0x60/0x60 [ 30.088546][ T495] ? rwsem_write_trylock+0x136/0x300 [ 30.093837][ T495] ? kernfs_new_node+0x260/0x260 [ 30.098788][ T495] ? up_write+0x7b/0x290 [ 30.103049][ T495] kernfs_new_node+0x150/0x260 [ 30.108676][ T495] __kernfs_create_file+0x4e/0x270 [ 30.114327][ T495] sysfs_add_file_mode_ns+0x1ce/0x270 [ 30.119703][ T495] internal_create_group+0x6b7/0xeb0 [ 30.124995][ T495] ? sysfs_create_group+0x30/0x30 [ 30.130027][ T495] ? __kasan_check_write+0x14/0x20 [ 30.135137][ T495] sysfs_create_group+0x1f/0x30 [ 30.139992][ T495] loop_configure+0xda0/0x1520 [ 30.144760][ T495] lo_ioctl+0x229/0x1fd0 [ 30.149002][ T495] ? _raw_spin_unlock+0x4c/0x70 [ 30.153850][ T495] ? find_inode_fast+0x3c2/0x3f0 [ 30.158790][ T495] ? __cfi_lo_ioctl+0x10/0x10 [ 30.163471][ T495] ? iget_locked+0x840/0x840 [ 30.168102][ T495] ? __kasan_check_write+0x14/0x20 [ 30.173357][ T495] ? 0xffffffffa0004440 [ 30.177606][ T495] ? is_bpf_text_address+0x177/0x190 [ 30.182912][ T495] ? kernel_text_address+0xa0/0xd0 [ 30.188074][ T495] ? __kernel_text_address+0xd/0x30 [ 30.193306][ T495] ? unwind_get_return_address+0x4d/0x90 [ 30.198973][ T495] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.205164][ T495] ? arch_stack_walk+0xfc/0x150 [ 30.210020][ T495] ? avc_has_extended_perms+0x869/0xed0 [ 30.215563][ T495] ? memcpy+0x56/0x70 [ 30.219550][ T495] ? avc_has_extended_perms+0x9d5/0xed0 [ 30.225185][ T495] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 30.231081][ T495] ? kasan_save_free_info+0x2b/0x40 [ 30.236398][ T495] ? ____kasan_slab_free+0x132/0x180 [ 30.241693][ T495] ? __kasan_slab_free+0x11/0x20 [ 30.246631][ T495] ? slab_free_freelist_hook+0xc2/0x190 [ 30.252170][ T495] ? kmem_cache_free+0x12d/0x300 [ 30.257112][ T495] ? __asan_set_shadow_00+0xe/0x10 [ 30.262229][ T495] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 30.267077][ T495] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 30.272709][ T495] ? blkdev_common_ioctl+0x681/0x2010 [ 30.278083][ T495] ? ioctl_has_perm+0x1b8/0x4f0 [ 30.282938][ T495] ? blkdev_bszset+0x1f0/0x1f0 [ 30.287698][ T495] ? ioctl_has_perm+0x3a6/0x4f0 [ 30.292552][ T495] ? do_sys_openat2+0x715/0x820 [ 30.297410][ T495] ? __cfi_lo_ioctl+0x10/0x10 [ 30.302088][ T495] blkdev_ioctl+0x367/0x720 [ 30.306595][ T495] ? __cfi_blkdev_ioctl+0x10/0x10 [ 30.311619][ T495] ? security_file_ioctl+0x95/0xc0 [ 30.316727][ T495] ? __cfi_blkdev_ioctl+0x10/0x10 [ 30.321753][ T495] __se_sys_ioctl+0x12f/0x1b0 [ 30.327141][ T495] __x64_sys_ioctl+0x7b/0x90 [ 30.332172][ T495] x64_sys_call+0x58b/0x9a0 [ 30.336677][ T495] do_syscall_64+0x4c/0xa0 [ 30.341609][ T495] ? clear_bhb_loop+0x30/0x80 [ 30.346371][ T495] ? clear_bhb_loop+0x30/0x80 [ 30.351046][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.357023][ T495] RIP: 0033:0x7f0022b9f7ab [ 30.361434][ T495] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 30.381297][ T495] RSP: 002b:00007f0023a18db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.389705][ T495] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0022b9f7ab [ 30.397758][ T495] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 30.405722][ T495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.413684][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 30.421649][ T495] R13: 00007f0023a18ee0 R14: 00007f0023a18ea0 R15: 00007f00191f8000 [ 30.429622][ T495] [ 30.433473][ T480] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 30.459232][ T480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.475216][ T484] syz.1.69 (484) used greatest stack depth: 21608 bytes left [ 30.484793][ T495] loop4: detected capacity change from 0 to 4096 [ 30.491645][ T480] ext4 filesystem being mounted at /17/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 30.506364][ T501] loop1: detected capacity change from 0 to 512 [ 30.513907][ T501] EXT4-fs: Ignoring removed oldalloc option [ 30.531864][ T501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.550416][ T453] blk_print_req_error: 66 callbacks suppressed [ 30.550431][ T453] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.580755][ T501] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2 (only 1 groups) [ 30.602502][ T495] FAULT_INJECTION: forcing a failure. [ 30.602502][ T495] name failslab, interval 1, probability 5, space 0, times 99 [ 30.616381][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 30.623513][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.633581][ T495] Call Trace: [ 30.636861][ T495] [ 30.639786][ T495] __dump_stack+0x21/0x24 [ 30.644121][ T495] dump_stack_lvl+0x110/0x170 [ 30.647408][ T279] EXT4-fs error: 157 callbacks suppressed [ 30.647422][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.648800][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.648826][ T495] dump_stack+0x15/0x24 [ 30.648840][ T495] should_fail_ex+0x3bf/0x510 [ 30.648858][ T495] ? security_inode_alloc+0x33/0x120 [ 30.648881][ T495] __should_failslab+0xac/0xf0 [ 30.648902][ T495] should_failslab+0x9/0x20 [ 30.656138][ T289] EXT4-fs (loop3): unmounting filesystem. [ 30.665882][ T495] kmem_cache_alloc+0x3b/0x320 [ 30.665919][ T495] security_inode_alloc+0x33/0x120 [ 30.665942][ T495] inode_init_always+0x6ee/0x950 [ 30.678614][ T506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.78: Detected aborted journal [ 30.679805][ T495] new_inode_pseudo+0xa2/0x1f0 [ 30.685343][ T506] EXT4-fs: 151 callbacks suppressed [ 30.685355][ T506] EXT4-fs (sda1): Remounting filesystem read-only [ 30.689831][ T495] __sock_create+0x12c/0x7c0 [ 30.696064][ T506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.78: Detected aborted journal [ 30.700131][ T495] __sys_socket+0xcd/0x1a0 [ 30.700160][ T495] __x64_sys_socket+0x7a/0x90 [ 30.700178][ T495] x64_sys_call+0x449/0x9a0 [ 30.700195][ T495] do_syscall_64+0x4c/0xa0 [ 30.700210][ T495] ? clear_bhb_loop+0x30/0x80 [ 30.711089][ T506] EXT4-fs (sda1): Remounting filesystem read-only [ 30.714976][ T495] ? clear_bhb_loop+0x30/0x80 [ 30.731471][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.735663][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.743618][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 30.746644][ T495] RIP: 0033:0x7f0022b9fb19 [ 30.767159][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.770960][ T495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.770977][ T495] RSP: 002b:00007f0023a19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 30.770994][ T495] RAX: ffffffffffffffda RBX: 00007f0022e25fa0 RCX: 00007f0022b9fb19 [ 30.771005][ T495] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 30.771014][ T495] RBP: 00007f0022c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 30.771023][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.775807][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 30.780092][ T495] R13: 00007f0022e26038 R14: 00007f0022e25fa0 R15: 00007fff68a7b7d8 [ 30.780111][ T495] [ 30.787886][ T508] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.80: Detected aborted journal [ 30.794230][ T495] socket: no more sockets [ 30.803729][ T509] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.81: Detected aborted journal [ 30.808856][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.814939][ T509] EXT4-fs (sda1): Remounting filesystem read-only [ 30.819774][ T290] EXT4-fs (loop1): unmounting filesystem. [ 30.831275][ T508] EXT4-fs (sda1): Remounting filesystem read-only [ 30.851872][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 30.890076][ T508] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.80: Detected aborted journal [ 30.891587][ T494] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.74: Detected aborted journal [ 30.898048][ T509] EXT4-fs (sda1): Remounting filesystem read-only [ 30.905511][ T494] EXT4-fs (sda1): Remounting filesystem read-only [ 30.908567][ T508] EXT4-fs (sda1): Remounting filesystem read-only [ 30.942619][ T495] FAULT_INJECTION: forcing a failure. [ 30.942619][ T495] name failslab, interval 1, probability 5, space 0, times 98 [ 30.961830][ T514] loop2: detected capacity change from 0 to 128 [ 30.984747][ T295] hid-generic 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 30.993692][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 31.040950][ T521] udevd[521]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 31.047284][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.047297][ T495] Call Trace: [ 31.047303][ T495] [ 31.047309][ T495] __dump_stack+0x21/0x24 [ 31.077285][ T495] dump_stack_lvl+0x110/0x170 [ 31.077315][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.077334][ T495] dump_stack+0x15/0x24 [ 31.077349][ T495] should_fail_ex+0x3bf/0x510 [ 31.077370][ T495] ? security_file_alloc+0x33/0x130 [ 31.077396][ T495] __should_failslab+0xac/0xf0 [ 31.077418][ T495] should_failslab+0x9/0x20 [ 31.077436][ T495] kmem_cache_alloc+0x3b/0x320 [ 31.077458][ T495] ? __alloc_file+0x28/0x2a0 [ 31.077480][ T495] security_file_alloc+0x33/0x130 [ 31.077503][ T495] __alloc_file+0xb5/0x2a0 [ 31.077531][ T495] alloc_empty_file+0x97/0x180 [ 31.077552][ T495] alloc_file+0x59/0x600 [ 31.077571][ T495] ? _raw_spin_unlock+0x4c/0x70 [ 31.077588][ T495] alloc_file_pseudo+0x180/0x200 [ 31.077609][ T495] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 31.077629][ T495] ? _raw_spin_unlock+0x4c/0x70 [ 31.077645][ T495] ? alloc_fd+0x4c1/0x570 [ 31.077663][ T495] sock_alloc_file+0xba/0x270 [ 31.077683][ T495] __sys_socket+0x138/0x1a0 [ 31.077704][ T495] __x64_sys_socket+0x7a/0x90 [ 31.077725][ T495] x64_sys_call+0x449/0x9a0 [ 31.077746][ T495] do_syscall_64+0x4c/0xa0 [ 31.077763][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.077783][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.077804][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.077823][ T495] RIP: 0033:0x7f0022b9fb19 [ 31.077838][ T495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.077852][ T495] RSP: 002b:00007f0023a18fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 31.077872][ T495] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f0022b9fb19 [ 31.077883][ T495] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 31.077892][ T495] RBP: 00007f0022c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 31.077902][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.077911][ T495] R13: 00007f0022e26038 R14: 00007f0022e25fa0 R15: 00007fff68a7b7d8 [ 31.077927][ T495] [ 31.084056][ T514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.084223][ T514] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.086474][ T514] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.82: No space for directory leaf checksum. Please run e2fsck -D. [ 31.119197][ T495] FAULT_INJECTION: forcing a failure. [ 31.119197][ T495] name failslab, interval 1, probability 5, space 0, times 97 [ 31.122796][ T514] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.82: Directory block failed checksum [ 31.132217][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 31.344739][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.354792][ T495] Call Trace: [ 31.358085][ T495] [ 31.361033][ T495] __dump_stack+0x21/0x24 [ 31.365386][ T495] dump_stack_lvl+0x110/0x170 [ 31.370085][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.375161][ T495] dump_stack+0x15/0x24 [ 31.379338][ T495] should_fail_ex+0x3bf/0x510 [ 31.384040][ T495] ? vm_area_dup+0x65/0x280 [ 31.388662][ T495] __should_failslab+0xac/0xf0 [ 31.393444][ T495] should_failslab+0x9/0x20 [ 31.397939][ T495] kmem_cache_alloc+0x3b/0x320 [ 31.402692][ T495] vm_area_dup+0x65/0x280 [ 31.407012][ T495] __split_vma+0x1c6/0x980 [ 31.411431][ T495] do_mas_align_munmap+0x314/0x1330 [ 31.416641][ T495] ? mas_state_walk+0x7ab/0xa80 [ 31.421662][ T495] ? do_mas_munmap+0x2b0/0x2b0 [ 31.426430][ T495] ? mas_walk+0x207/0x250 [ 31.430752][ T495] do_mas_munmap+0x23d/0x2b0 [ 31.435336][ T495] __vm_munmap+0x1af/0x310 [ 31.439766][ T495] ? vm_munmap+0x30/0x30 [ 31.444004][ T495] __x64_sys_munmap+0x6b/0x80 [ 31.448677][ T495] x64_sys_call+0x8a/0x9a0 [ 31.453089][ T495] do_syscall_64+0x4c/0xa0 [ 31.457521][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.462192][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.466944][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.472855][ T495] RIP: 0033:0x7f0022b9f947 [ 31.477311][ T495] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.496908][ T495] RSP: 002b:00007f0023a17d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 31.505318][ T495] RAX: ffffffffffffffda RBX: 00007f001c000000 RCX: 00007f0022b9f947 [ 31.513315][ T495] RDX: 0000000000000000 RSI: 00000000015f8000 RDI: 00007f0020000000 [ 31.521279][ T495] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 31.529275][ T495] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 31.537244][ T495] R13: 0000000000001000 R14: 00007f0020000000 R15: 0000000002a08000 [ 31.545240][ T495] [ 31.550508][ T287] EXT4-fs (loop2): unmounting filesystem. [ 31.554787][ T510] bridge0: port 3(syz_tun) entered blocking state [ 31.563174][ T495] FAULT_INJECTION: forcing a failure. [ 31.563174][ T495] name failslab, interval 1, probability 5, space 0, times 96 [ 31.576562][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 31.576576][ T28] audit: type=1400 audit(1793718683.611:203): avc: denied { ioctl } for pid=536 comm="syz.3.88" path="socket:[16335]" dev="sockfs" ino=16335 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.577127][ T510] bridge0: port 3(syz_tun) entered disabled state [ 31.600082][ T495] CPU: 0 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 31.620916][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.631084][ T495] Call Trace: [ 31.634363][ T495] [ 31.637285][ T495] __dump_stack+0x21/0x24 [ 31.641621][ T495] dump_stack_lvl+0x110/0x170 [ 31.646290][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.651311][ T495] dump_stack+0x15/0x24 [ 31.655476][ T495] should_fail_ex+0x3bf/0x510 [ 31.660154][ T495] ? vm_area_dup+0x27/0x280 [ 31.664660][ T495] __should_failslab+0xac/0xf0 [ 31.669429][ T495] should_failslab+0x9/0x20 [ 31.673929][ T495] kmem_cache_alloc+0x3b/0x320 [ 31.678785][ T495] vm_area_dup+0x27/0x280 [ 31.683126][ T495] ? __split_vma+0x1b0/0x980 [ 31.687794][ T495] __split_vma+0x1c6/0x980 [ 31.692390][ T495] ? __vm_enough_memory+0x11a/0x360 [ 31.697588][ T495] split_vma+0x7c/0xd0 [ 31.701665][ T495] mprotect_fixup+0x56f/0x940 [ 31.706598][ T495] ? mas_prev_slot+0x8a7/0x8e0 [ 31.711365][ T495] ? __cfi_mprotect_fixup+0x10/0x10 [ 31.716560][ T495] ? security_file_mprotect+0x95/0xc0 [ 31.721934][ T495] do_mprotect_pkey+0x80a/0xbe0 [ 31.726790][ T495] ? prot_none_test+0x10/0x10 [ 31.731473][ T495] ? __this_cpu_preempt_check+0x13/0x20 [ 31.737012][ T495] ? xfd_validate_state+0x70/0x150 [ 31.742118][ T495] ? fpregs_restore_userregs+0x128/0x260 [ 31.747776][ T495] __x64_sys_mprotect+0x80/0x90 [ 31.752621][ T495] x64_sys_call+0x997/0x9a0 [ 31.757118][ T495] do_syscall_64+0x4c/0xa0 [ 31.761611][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.766288][ T495] ? clear_bhb_loop+0x30/0x80 [ 31.770962][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.776848][ T495] RIP: 0033:0x7f0022b9f917 [ 31.781259][ T495] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.801029][ T495] RSP: 002b:00007f0023a17d18 EFLAGS: 00000286 ORIG_RAX: 000000000000000a [ 31.809440][ T495] RAX: ffffffffffffffda RBX: 00007f001c000000 RCX: 00007f0022b9f917 [ 31.817405][ T495] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f001c000000 [ 31.825366][ T495] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 31.833328][ T495] R10: 0000000000000022 R11: 0000000000000286 R12: 0000000004000000 [ 31.841290][ T495] R13: 0000000000001000 R14: 00007f0020000000 R15: 0000000002a08000 [ 31.849259][ T495] [ 31.853901][ T542] loop2: detected capacity change from 0 to 512 [ 31.860309][ T495] FAULT_INJECTION: forcing a failure. [ 31.860309][ T495] name failslab, interval 1, probability 5, space 0, times 95 [ 31.860335][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 31.860352][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.860360][ T495] Call Trace: [ 31.860365][ T495] [ 31.860371][ T495] __dump_stack+0x21/0x24 [ 31.880829][ T510] device syz_tun entered promiscuous mode [ 31.890190][ T495] dump_stack_lvl+0x110/0x170 [ 31.890221][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.890235][ T495] dump_stack+0x15/0x24 [ 31.890247][ T495] should_fail_ex+0x3bf/0x510 [ 31.890264][ T495] ? vm_area_dup+0x65/0x280 [ 31.904305][ T542] EXT4-fs: Ignoring removed oldalloc option [ 31.906576][ T495] __should_failslab+0xac/0xf0 [ 31.906610][ T495] should_failslab+0x9/0x20 [ 31.917050][ T510] bridge0: port 3(syz_tun) entered blocking state [ 31.920444][ T495] kmem_cache_alloc+0x3b/0x320 [ 31.920477][ T495] vm_area_dup+0x65/0x280 [ 31.920495][ T495] __split_vma+0x1c6/0x980 [ 31.925199][ T510] bridge0: port 3(syz_tun) entered forwarding state [ 31.929660][ T495] ? mas_find+0xdf/0x380 [ 31.953700][ T28] audit: type=1400 audit(1793718683.991:204): avc: denied { read write } for pid=545 comm="syz.0.96" name="ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.955974][ T495] do_mas_align_munmap+0x787/0x1330 [ 31.961573][ T28] audit: type=1400 audit(1793718683.991:205): avc: denied { open } for pid=545 comm="syz.0.96" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.964709][ T495] ? percpu_counter_add_batch+0x13c/0x160 [ 31.971713][ T28] audit: type=1400 audit(1793718684.001:206): avc: denied { cmd } for pid=545 comm="syz.0.96" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 31.975507][ T495] ? mas_state_walk+0x7ab/0xa80 [ 32.002961][ T542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.003956][ T495] ? do_mas_munmap+0x2b0/0x2b0 [ 32.045288][ T542] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 2 (only 1 groups) [ 32.056451][ T495] ? mas_walk+0x207/0x250 [ 32.056487][ T495] do_mas_munmap+0x23d/0x2b0 [ 32.056510][ T495] __vm_munmap+0x1af/0x310 [ 32.056530][ T495] ? vm_munmap+0x30/0x30 [ 32.087102][ T28] audit: type=1400 audit(1793718684.121:207): avc: denied { bind } for pid=554 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.089663][ T495] ? xfd_validate_state+0x70/0x150 [ 32.099180][ T28] audit: type=1400 audit(1793718684.141:208): avc: denied { connect } for pid=554 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.102861][ T495] ? fpregs_restore_userregs+0x128/0x260 [ 32.102891][ T495] __x64_sys_munmap+0x6b/0x80 [ 32.102915][ T495] x64_sys_call+0x8a/0x9a0 [ 32.127177][ T28] audit: type=1400 audit(1793718684.141:209): avc: denied { write } for pid=554 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.127450][ T495] do_syscall_64+0x4c/0xa0 [ 32.186329][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.191027][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.195712][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.201642][ T495] RIP: 0033:0x7f0022b9f947 [ 32.206043][ T495] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.225819][ T495] RSP: 002b:00007f0023a17d18 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 32.234226][ T495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0022b9f947 [ 32.242216][ T495] RDX: 0000000000000003 RSI: 0000000004000000 RDI: 00007f001c000000 [ 32.250196][ T495] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 32.258173][ T495] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 32.266143][ T495] R13: 0000000000001000 R14: 00007f0020000000 R15: 0000000002a08000 [ 32.274129][ T495] [ 32.278796][ T495] FAULT_INJECTION: forcing a failure. [ 32.278796][ T495] name failslab, interval 1, probability 5, space 0, times 94 [ 32.279140][ T287] EXT4-fs (loop2): unmounting filesystem. [ 32.291637][ T495] CPU: 1 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 32.291660][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.291669][ T495] Call Trace: [ 32.291674][ T495] [ 32.291680][ T495] __dump_stack+0x21/0x24 [ 32.291703][ T495] dump_stack_lvl+0x110/0x170 [ 32.329745][ T495] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.334764][ T495] ? stack_trace_save+0xa6/0xf0 [ 32.339609][ T495] dump_stack+0x15/0x24 [ 32.343753][ T495] should_fail_ex+0x3bf/0x510 [ 32.348418][ T495] ? mas_alloc_nodes+0x2d8/0x850 [ 32.353355][ T495] __should_failslab+0xac/0xf0 [ 32.358141][ T495] should_failslab+0x9/0x20 [ 32.362652][ T495] kmem_cache_alloc+0x3b/0x320 [ 32.367449][ T495] mas_alloc_nodes+0x2d8/0x850 [ 32.372252][ T495] mas_preallocate+0xe3d/0x1430 [ 32.377115][ T495] ? __cfi_mas_preallocate+0x10/0x10 [ 32.382431][ T495] ? rwsem_write_trylock+0x136/0x300 [ 32.387718][ T495] vma_expand+0x437/0xad0 [ 32.392046][ T495] mmap_region+0xf04/0x2130 [ 32.396546][ T495] ? __cfi_mmap_region+0x10/0x10 [ 32.401486][ T495] ? cap_mmap_addr+0x165/0x2e0 [ 32.406240][ T495] ? get_unmapped_area+0x30c/0x370 [ 32.411351][ T495] do_mmap+0x858/0xdd0 [ 32.415419][ T495] ? __cfi_do_mmap+0x10/0x10 [ 32.420028][ T495] ? rwsem_wake+0x104/0x2a0 [ 32.424533][ T495] ? rwsem_spin_on_owner+0x3a0/0x3a0 [ 32.429992][ T495] vm_mmap_pgoff+0x206/0x3f0 [ 32.434594][ T495] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 32.439907][ T495] ? xfd_validate_state+0x70/0x150 [ 32.445022][ T495] ksys_mmap_pgoff+0xf6/0x1d0 [ 32.449698][ T495] ? __kasan_check_write+0x14/0x20 [ 32.454807][ T495] __x64_sys_mmap+0xfa/0x110 [ 32.459411][ T495] x64_sys_call+0x8fd/0x9a0 [ 32.464009][ T495] do_syscall_64+0x4c/0xa0 [ 32.468422][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.473134][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.477815][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.483804][ T495] RIP: 0033:0x7f0022b9f882 [ 32.488298][ T495] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 32.507898][ T495] RSP: 002b:00007f0023a17d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 32.516313][ T495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0022b9f882 [ 32.524994][ T495] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 32.533141][ T495] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 32.541417][ T495] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 32.549414][ T495] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f0022c55883 [ 32.557402][ T495] [ 32.561184][ T495] ------------[ cut here ]------------ [ 32.566790][ T495] kernel BUG at mm/mmap.c:2854! [ 32.571057][ T561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 32.577285][ T495] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 32.586559][ T495] CPU: 0 PID: 495 Comm: syz.4.74 Not tainted syzkaller #0 [ 32.593682][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.603839][ T495] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 32.609330][ T495] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 b9 4c 09 00 e9 d2 f9 ff ff e8 af af c3 ff 0f 0b e8 a8 af c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 32.628955][ T495] RSP: 0018:ffffc9000e1e7a40 EFLAGS: 00010246 [ 32.630977][ T28] audit: type=1400 audit(1793718684.621:210): avc: denied { create } for pid=564 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.635031][ T495] RAX: ffffffff81adc278 RBX: 00007f001c000000 RCX: 0000000000080000 [ 32.635047][ T495] RDX: ffffc90003a93000 RSI: 000000000007ffff RDI: 0000000000080000 [ 32.635058][ T495] RBP: ffffc9000e1e7c30 R08: ffff88810d2ae540 R09: 0000000000000003 [ 32.674701][ T28] audit: type=1400 audit(1793718684.621:211): avc: denied { bind } for pid=564 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.678296][ T495] R10: 0000000000000003 R11: 0000000000000002 R12: 00007f001bffffff [ 32.678310][ T495] R13: 00007f001c000000 R14: dffffc0000000000 R15: 00007f0014000000 [ 32.678322][ T495] FS: 00007f0023a196c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.719976][ T28] audit: type=1400 audit(1793718684.621:212): avc: denied { listen } for pid=564 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.722285][ T495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.748231][ T495] CR2: 00007ff95a3ed200 CR3: 000000010cca5000 CR4: 00000000003506b0 [ 32.756204][ T495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.764266][ T495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.772593][ T495] Call Trace: [ 32.775874][ T495] [ 32.778911][ T495] ? __cfi_mmap_region+0x10/0x10 [ 32.783855][ T495] ? cap_mmap_addr+0x165/0x2e0 [ 32.788705][ T495] ? get_unmapped_area+0x30c/0x370 [ 32.793812][ T495] do_mmap+0x858/0xdd0 [ 32.797897][ T495] ? __cfi_do_mmap+0x10/0x10 [ 32.802526][ T495] ? rwsem_wake+0x104/0x2a0 [ 32.804202][ T569] futex_wake_op: syz.2.105 tries to shift op by 144; fix this program [ 32.807051][ T495] ? rwsem_spin_on_owner+0x3a0/0x3a0 [ 32.815543][ T569] futex_wake_op: syz.2.105 tries to shift op by 144; fix this program [ 32.820595][ T495] vm_mmap_pgoff+0x206/0x3f0 [ 32.820624][ T495] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 32.820638][ T495] ? xfd_validate_state+0x70/0x150 [ 32.820660][ T495] ksys_mmap_pgoff+0xf6/0x1d0 [ 32.848516][ T495] ? __kasan_check_write+0x14/0x20 [ 32.853648][ T495] __x64_sys_mmap+0xfa/0x110 [ 32.858328][ T495] x64_sys_call+0x8fd/0x9a0 [ 32.862835][ T495] do_syscall_64+0x4c/0xa0 [ 32.867331][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.872266][ T495] ? clear_bhb_loop+0x30/0x80 [ 32.877211][ T495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.883103][ T495] RIP: 0033:0x7f0022b9f882 [ 32.887508][ T495] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 32.907283][ T495] RSP: 002b:00007f0023a17d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 32.915695][ T495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0022b9f882 [ 32.924035][ T495] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 32.932010][ T495] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 32.939981][ T495] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 32.948038][ T495] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f0022c55883 [ 32.956332][ T495] [ 32.959371][ T495] Modules linked in: [ 32.966271][ T495] ---[ end trace 0000000000000000 ]--- [ 32.972001][ T495] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 32.977677][ T495] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 b9 4c 09 00 e9 d2 f9 ff ff e8 af af c3 ff 0f 0b e8 a8 af c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 32.998072][ T495] RSP: 0018:ffffc9000e1e7a40 EFLAGS: 00010246 [ 33.004445][ T495] RAX: ffffffff81adc278 RBX: 00007f001c000000 RCX: 0000000000080000 [ 33.012548][ T495] RDX: ffffc90003a93000 RSI: 000000000007ffff RDI: 0000000000080000 [ 33.020910][ T495] RBP: ffffc9000e1e7c30 R08: ffff88810d2ae540 R09: 0000000000000003 [ 33.029031][ T495] R10: 0000000000000003 R11: 0000000000000002 R12: 00007f001bffffff [ 33.037079][ T495] R13: 00007f001c000000 R14: dffffc0000000000 R15: 00007f0014000000 [ 33.045100][ T495] FS: 00007f0023a196c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.054067][ T495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.060711][ T495] CR2: 00007ff23bdf72f8 CR3: 000000010cca5000 CR4: 00000000003506a0 [ 33.068691][ T495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.076709][ T495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.084708][ T495] Kernel panic - not syncing: Fatal exception [ 33.091020][ T495] Kernel Offset: disabled [ 33.095359][ T495] Rebooting in 86400 seconds..