last executing test programs: 2.173271562s ago: executing program 4 (id=3943): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 2.162486205s ago: executing program 0 (id=3944): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x5, &(0x7f00000000c0)=[{0x0, 0x6}, {0x3, 0x4}, {0xfa12, 0xffff}, {0x4, 0x8001}, {0x8, 0x9150}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.091791131s ago: executing program 4 (id=3947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.96242284s ago: executing program 3 (id=3950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x1, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) 1.906540482s ago: executing program 3 (id=3951): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) 1.801207476s ago: executing program 3 (id=3952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.721225764s ago: executing program 3 (id=3953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08c8e0507843b7d610", 0x1e}, {&(0x7f0000000380)="f2607be6d6be9135b8ad29ae40b3363abf7caa2df6e6b2a68ad614716d5ea3569659433aa151cd0412e7a7fb7631b1fece48af1fc0d26fc1c3242e", 0x3b}], 0x2, &(0x7f0000000480)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x6}]}}}], 0x30}}], 0x2, 0x4000801) 1.720575284s ago: executing program 3 (id=3954): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xc3e2, 0xd000003, 0x7}) 1.616246087s ago: executing program 3 (id=3955): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xa, @v={0x4, 0x1, 0x6, 0x6, 0x1, 0x2, 0x9f, {0x9, 0x3, "33a45de84a579bef"}, 0x2, 0x7f, 0xa8, 0x86}}, 0x19) 1.460081883s ago: executing program 2 (id=3956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001100)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$9p(r1, &(0x7f00000018c0)="4ac4", 0x2) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0) 1.459747273s ago: executing program 2 (id=3957): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050005"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.398762787s ago: executing program 2 (id=3958): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 1.363054804s ago: executing program 2 (id=3959): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f00000000c0)='attr/keycreate\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='270', 0x3) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000040)={0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x200, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x60046, 0x12280}, [@IFLA_ALT_IFNAME={0x0, 0x35, 'syz_tun\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x20000801) unshare(0x40000000) 1.227879265s ago: executing program 0 (id=3960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000", @ANYRESDEC], 0xffdd) 1.124402758s ago: executing program 1 (id=3961): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x4, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x18, 0x4}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) 1.122898828s ago: executing program 4 (id=3962): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) 1.073049109s ago: executing program 1 (id=3963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 979.96837ms ago: executing program 1 (id=3964): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) 979.62061ms ago: executing program 1 (id=3965): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 979.34134ms ago: executing program 4 (id=3966): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 909.418756ms ago: executing program 1 (id=3967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/110, 0x6e}], 0x1, &(0x7f0000000500)}, 0x7f}], 0x1, 0x10122, 0x0) 870.060365ms ago: executing program 4 (id=3968): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x1, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) 869.424485ms ago: executing program 4 (id=3969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2020000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb3d6dd5582203865}, 0x48) 700.836573ms ago: executing program 2 (id=3970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08c8e0507843b7d610", 0x1e}, {&(0x7f0000000380)="f2607be6d6be9135b8ad29ae40b3363abf7caa2df6e6b2a68ad614716d5ea3569659433aa151cd0412e7a7fb7631b1fece48af1fc0d26fc1c3242e", 0x3b}], 0x2, &(0x7f0000000480)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x6}]}}}], 0x30}}], 0x2, 0x4000801) 699.788483ms ago: executing program 0 (id=3971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x6, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x6, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0xc, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x800}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a311039dbee9", 0xfa}], 0x1}, 0x20000885) 658.021382ms ago: executing program 2 (id=3972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 479.969133ms ago: executing program 0 (id=3973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 447.47144ms ago: executing program 0 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 419.572096ms ago: executing program 0 (id=3975): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050005"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 1 (id=3976): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ould solve the problem. [ 183.104854][T13379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.105370][T13379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.105382][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.105416][T13379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.130686][T13379] hsr_slave_0: entered promiscuous mode [ 183.131072][T13379] hsr_slave_1: entered promiscuous mode [ 183.131354][T13379] debugfs: 'hsr0' already exists in 'hsr' [ 183.131370][T13379] Cannot create hsr debugfs directory [ 183.171637][T13487] netlink: 'syz.4.2958': attribute type 16 has an invalid length. [ 183.171656][T13487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2958'. [ 183.342288][T13379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.496482][T13379] bond0: (slave netdevsim2): Releasing backup interface [ 183.497901][T13379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.615573][T13379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.687636][T13379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.791256][T13379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.795889][T13379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.805849][T13379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.809856][T13379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.810798][T13379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.816546][T13379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.823716][T13379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.831050][T13379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.922055][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.936388][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.948143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.948179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.955756][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.955788][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.153072][T13379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.874779][T13379] veth0_vlan: entered promiscuous mode [ 184.877104][T13379] veth1_vlan: entered promiscuous mode [ 184.910511][T13379] veth0_macvtap: entered promiscuous mode [ 184.914144][T13379] veth1_macvtap: entered promiscuous mode [ 184.928400][T13379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.938138][T13379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.953786][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.953875][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.954093][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.954217][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.008278][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2994'. [ 185.124682][ T29] audit: type=1400 audit(1790334337.397:444): avc: denied { mount } for pid=13605 comm="syz.1.2997" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 185.160654][T13609] batman_adv: batadv0: Adding interface: syzkaller0 [ 185.160677][T13609] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.160747][T13609] batman_adv: batadv0: Interface activated: syzkaller0 [ 185.434515][T13613] netlink: 'syz.0.2999': attribute type 16 has an invalid length. [ 185.434583][T13613] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2999'. [ 185.539894][T13608] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 185.556948][T13608] batman_adv: batadv0: Removing interface: syzkaller0 [ 185.609481][ T3298] syz_tun (unregistering): left allmulticast mode [ 185.685250][T13637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3005'. [ 185.788570][T13641] syzkaller0: entered promiscuous mode [ 185.788593][T13641] syzkaller0: entered allmulticast mode [ 185.838274][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.857164][T13644] syzkaller0: entered promiscuous mode [ 185.857189][T13644] syzkaller0: entered allmulticast mode [ 185.949971][T13656] batman_adv: batadv0: Adding interface: syzkaller0 [ 185.949987][T13656] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.950019][T13656] batman_adv: batadv0: Interface activated: syzkaller0 [ 186.114133][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'. [ 186.121827][ T41] bond0: (slave netdevsim2): Releasing backup interface [ 186.139504][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.156126][T13655] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 186.171432][T13655] batman_adv: batadv0: Removing interface: syzkaller0 [ 186.189525][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.189558][T13611] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.189690][T13611] bridge_slave_0: entered allmulticast mode [ 186.190201][T13611] bridge_slave_0: entered promiscuous mode [ 186.218221][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.218254][T13611] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.218394][T13611] bridge_slave_1: entered allmulticast mode [ 186.218860][T13611] bridge_slave_1: entered promiscuous mode [ 186.272729][T13669] netlink: 'syz.2.3018': attribute type 16 has an invalid length. [ 186.272880][T13669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3018'. [ 186.279721][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.282088][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.284639][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.323358][T13611] team0: Port device team_slave_0 added [ 186.327561][T13611] team0: Port device team_slave_1 added [ 186.376549][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.382231][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.382254][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.382281][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.385521][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.385536][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.385564][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.478525][ T29] audit: type=1400 audit(1790334338.747:445): avc: denied { read write } for pid=13687 comm="syz.3.3027" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.478556][ T29] audit: type=1400 audit(1790334338.747:446): avc: denied { open } for pid=13687 comm="syz.3.3027" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.514637][T13611] hsr_slave_0: entered promiscuous mode [ 186.515154][T13611] hsr_slave_1: entered promiscuous mode [ 186.515393][T13611] debugfs: 'hsr0' already exists in 'hsr' [ 186.515415][T13611] Cannot create hsr debugfs directory [ 186.522362][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 186.522380][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'. [ 186.649606][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.653733][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.655322][ T41] bond0 (unregistering): Released all slaves [ 186.658873][ T29] audit: type=1400 audit(1790334338.927:447): avc: denied { create } for pid=13703 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.752009][ T41] tipc: Disabling bearer [ 186.752037][ T41] tipc: Left network mode [ 186.763564][ T41] IPVS: stopping master sync thread 7799 ... [ 186.785620][T13705] syzkaller0: entered promiscuous mode [ 186.785654][T13705] syzkaller0: entered allmulticast mode [ 186.791029][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.791047][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.791486][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.791501][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.798688][ T41] veth1_macvtap: left promiscuous mode [ 186.798736][ T41] veth0_macvtap: left promiscuous mode [ 186.798778][ T41] veth1_vlan: left promiscuous mode [ 186.798811][ T41] veth0_vlan: left promiscuous mode [ 186.906477][ T41] team0 (unregistering): Port device team_slave_1 removed [ 186.909323][ T41] team0 (unregistering): Port device team_slave_0 removed [ 187.127005][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'. [ 187.196100][ T41] IPVS: stop unused estimator thread 0... [ 187.295982][T13611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.300014][T13611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.321449][T13746] syzkaller0: entered promiscuous mode [ 187.321538][T13746] syzkaller0: entered allmulticast mode [ 187.324362][T13611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.330360][T13611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.337071][T13611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.352547][T13611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.354338][T13611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.360806][T13611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.507202][T13611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.527379][T13611] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.535888][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.535923][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.540899][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.540932][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.795084][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.941130][T13814] syzkaller0: entered promiscuous mode [ 187.941157][T13814] syzkaller0: entered allmulticast mode [ 188.592168][T13611] veth0_vlan: entered promiscuous mode [ 188.599270][T13611] veth1_vlan: entered promiscuous mode [ 188.637067][T13611] veth0_macvtap: entered promiscuous mode [ 188.641088][T13611] veth1_macvtap: entered promiscuous mode [ 188.655492][T13611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.666551][T13611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.683710][ T3666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.684098][ T3666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.684138][ T3666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.684172][ T3666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.686109][T13835] sctp: [Deprecated]: syz.2.3074 (pid 13835) Use of int in max_burst socket option deprecated. [ 188.686109][T13835] Use struct sctp_assoc_value instead [ 188.808599][T13847] FAULT_INJECTION: forcing a failure. [ 188.808599][T13847] name failslab, interval 1, probability 0, space 0, times 0 [ 188.808634][T13847] CPU: 0 UID: 0 PID: 13847 Comm: syz.4.2995 Not tainted syzkaller #0 PREEMPT(lazy) [ 188.808673][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.808687][T13847] Call Trace: [ 188.808695][T13847] [ 188.808705][T13847] __dump_stack+0x1d/0x30 [ 188.808799][T13847] dump_stack_lvl+0x95/0xd0 [ 188.808825][T13847] dump_stack+0x15/0x1b [ 188.808887][T13847] should_fail_ex+0x262/0x280 [ 188.808911][T13847] should_failslab+0x8c/0xb0 [ 188.808944][T13847] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 188.808979][T13847] ? __d_alloc+0x34/0x320 [ 188.809007][T13847] ? __d_alloc+0x34/0x320 [ 188.809046][T13847] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 188.809077][T13847] __d_alloc+0x34/0x320 [ 188.809104][T13847] ? d_alloc_pseudo+0x13/0x80 [ 188.809200][T13847] d_alloc_pseudo+0x1e/0x80 [ 188.809227][T13847] alloc_path_pseudo+0xa4/0x140 [ 188.809249][T13847] alloc_file_pseudo+0x55/0x120 [ 188.809329][T13847] anon_inode_getfd+0xbf/0x190 [ 188.809350][T13847] __se_sys_fsopen+0x193/0x1e0 [ 188.809413][T13847] __x64_sys_fsopen+0x31/0x40 [ 188.809442][T13847] x64_sys_call+0x1f0f/0x2550 [ 188.809534][T13847] do_syscall_64+0x112/0x360 [ 188.809560][T13847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.809585][T13847] RIP: 0033:0x7f2ee723e159 [ 188.809636][T13847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.809703][T13847] RSP: 002b:00007f2ee5c97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 188.809726][T13847] RAX: ffffffffffffffda RBX: 00007f2ee74c5fa0 RCX: 00007f2ee723e159 [ 188.809740][T13847] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001140 [ 188.809754][T13847] RBP: 00007f2ee72d506b R08: 0000000000000000 R09: 0000000000000000 [ 188.809769][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.809783][T13847] R13: 00007f2ee74c6038 R14: 00007f2ee74c5fa0 R15: 00007ffde768f7c8 [ 188.809815][T13847] [ 189.155653][T13869] loop3: detected capacity change from 0 to 512 [ 189.158860][T13869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 189.158895][T13869] System zones: 1-12 [ 189.160330][T13863] syzkaller0: entered promiscuous mode [ 189.160350][T13863] syzkaller0: entered allmulticast mode [ 189.171614][T13875] sctp: [Deprecated]: syz.0.3085 (pid 13875) Use of int in max_burst socket option deprecated. [ 189.171614][T13875] Use struct sctp_assoc_value instead [ 189.215954][T13869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.3084: missing EA_INODE flag [ 189.215985][T13869] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.217065][T13869] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3084: error while reading EA inode 12 err=-117 [ 189.217153][T13869] loop3: lost filesystem error report for type 5 error -117 [ 189.217873][T13869] EXT4-fs (loop3): 1 orphan inode deleted [ 189.218349][T13869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.677504][ T29] audit: type=1400 audit(1790334341.857:448): avc: denied { write } for pid=13867 comm="syz.3.3084" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.677536][ T29] audit: type=1400 audit(1790334341.857:449): avc: denied { add_name } for pid=13867 comm="syz.3.3084" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.677627][ T29] audit: type=1400 audit(1790334341.857:450): avc: denied { create } for pid=13867 comm="syz.3.3084" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 189.958419][T13890] __nla_validate_parse: 7 callbacks suppressed [ 189.958439][T13890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3090'. [ 190.068019][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 190.068037][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3095'. [ 190.095445][T13858] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.095480][T13858] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.095614][T13858] bridge_slave_0: entered allmulticast mode [ 190.096142][T13858] bridge_slave_0: entered promiscuous mode [ 190.106366][T13858] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.106401][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.106556][T13858] bridge_slave_1: entered allmulticast mode [ 190.107105][T13858] bridge_slave_1: entered promiscuous mode [ 190.139181][T13858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.141933][T13858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.186536][T13858] team0: Port device team_slave_0 added [ 190.187856][T13858] team0: Port device team_slave_1 added [ 190.214440][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.237340][T13858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.237354][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.237381][T13858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.277107][T13858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.277124][T13858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.277156][T13858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.290012][T13914] sctp: [Deprecated]: syz.3.3096 (pid 13914) Use of int in max_burst socket option deprecated. [ 190.290012][T13914] Use struct sctp_assoc_value instead [ 190.418832][T13858] hsr_slave_0: entered promiscuous mode [ 190.419315][T13858] hsr_slave_1: entered promiscuous mode [ 190.425872][T13858] debugfs: 'hsr0' already exists in 'hsr' [ 190.425890][T13858] Cannot create hsr debugfs directory [ 190.514853][T13937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3104'. [ 190.583832][T13932] syzkaller0: entered promiscuous mode [ 190.583915][T13932] syzkaller0: entered allmulticast mode [ 190.959552][T13952] batman_adv: batadv0: Adding interface: syzkaller0 [ 190.959678][T13952] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.959772][T13952] batman_adv: batadv0: Interface activated: syzkaller0 [ 191.003511][T13858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.480261][ T29] audit: type=1400 audit(1790334343.747:451): avc: denied { ioctl } for pid=13966 comm="syz.4.3114" path="/9/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1434 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 194.022460][T13951] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 194.072711][T13951] batman_adv: batadv0: Removing interface: syzkaller0 [ 194.095537][T13858] bond0: (slave netdevsim2): Releasing backup interface [ 194.097114][T13858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.168498][T13858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.210505][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3117'. [ 194.233243][T13858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.291010][T13983] syzkaller0: entered promiscuous mode [ 194.291032][T13983] syzkaller0: entered allmulticast mode [ 194.363222][T13986] syzkaller0: entered promiscuous mode [ 194.363246][T13986] syzkaller0: entered allmulticast mode [ 194.462193][T13858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.466864][T13858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.467756][T13858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.473562][T13858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.477776][T13858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.489419][T13858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.490233][T13858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.459673][T13858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.661805][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3131'. [ 197.680409][T14025] FAULT_INJECTION: forcing a failure. [ 197.680409][T14025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 197.680444][T14025] CPU: 0 UID: 0 PID: 14025 Comm: syz.3.3132 Not tainted syzkaller #0 PREEMPT(lazy) [ 197.680589][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.680667][T14025] Call Trace: [ 197.680675][T14025] [ 197.680683][T14025] __dump_stack+0x1d/0x30 [ 197.680713][T14025] dump_stack_lvl+0x95/0xd0 [ 197.680770][T14025] dump_stack+0x15/0x1b [ 197.680791][T14025] should_fail_ex+0x262/0x280 [ 197.680814][T14025] should_fail+0xb/0x20 [ 197.680914][T14025] get_futex_key+0x12d/0xb10 [ 197.680944][T14025] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 197.680983][T14025] futex_wait_setup+0x49/0x3e0 [ 197.681007][T14025] ? should_failslab+0x8c/0xb0 [ 197.681100][T14025] ? rb_insert_color+0x25c/0x2a0 [ 197.681135][T14025] ? __account_obj_stock+0x43d/0x720 [ 197.681164][T14025] __futex_wait+0xa9/0x260 [ 197.681228][T14025] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.681255][T14025] futex_wait+0x98/0x1c0 [ 197.681276][T14025] do_futex+0x391/0x460 [ 197.681303][T14025] __se_sys_futex+0x2f6/0x370 [ 197.681329][T14025] ? __se_sys_mount+0x2b0/0x2e0 [ 197.681378][T14025] __x64_sys_futex+0x78/0x90 [ 197.681467][T14025] x64_sys_call+0x22e2/0x2550 [ 197.681511][T14025] do_syscall_64+0x112/0x360 [ 197.681535][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.681561][T14025] RIP: 0033:0x7f0fbf08e159 [ 197.681626][T14025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.681646][T14025] RSP: 002b:00007f0fbdae70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.681672][T14025] RAX: ffffffffffffffda RBX: 00007f0fbf315fa8 RCX: 00007f0fbf08e159 [ 197.681689][T14025] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0fbf315fa8 [ 197.681705][T14025] RBP: 00007f0fbf315fa0 R08: 0000000000000000 R09: 0000000000000000 [ 197.681720][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.681795][T14025] R13: 00007f0fbf316038 R14: 00007ffd041116b0 R15: 00007ffd04111798 [ 197.681814][T14025] [ 197.940378][T13858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.944759][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3138'. [ 197.947228][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3138'. [ 197.954093][T13858] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.959556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.959590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.977021][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.977056][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.585992][T14044] batman_adv: batadv0: Adding interface: syzkaller0 [ 198.586007][T14044] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.586077][T14044] batman_adv: batadv0: Interface activated: syzkaller0 [ 198.592065][T14039] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 198.613930][T14039] batman_adv: batadv0: Removing interface: syzkaller0 [ 198.718046][T14047] batman_adv: batadv0: Adding interface: syzkaller0 [ 198.718060][T14047] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.718094][T14047] batman_adv: batadv0: Interface activated: syzkaller0 [ 198.989014][T14056] FAULT_INJECTION: forcing a failure. [ 198.989014][T14056] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.989048][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.3.3143 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.989081][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.989101][T14056] Call Trace: [ 198.989110][T14056] [ 198.989119][T14056] __dump_stack+0x1d/0x30 [ 198.989146][T14056] dump_stack_lvl+0x95/0xd0 [ 198.989201][T14056] dump_stack+0x15/0x1b [ 198.989222][T14056] should_fail_ex+0x262/0x280 [ 198.989248][T14056] should_fail+0xb/0x20 [ 198.989270][T14056] get_futex_key+0x12d/0xb10 [ 198.989296][T14056] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 198.989355][T14056] futex_wait_setup+0x49/0x3e0 [ 198.989377][T14056] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 198.989411][T14056] ? hrtimer_active+0xe4/0x110 [ 198.989477][T14056] __futex_wait+0xa9/0x260 [ 198.989498][T14056] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.989521][T14056] futex_wait+0x98/0x1c0 [ 198.989543][T14056] do_futex+0x391/0x460 [ 198.989606][T14056] __se_sys_futex+0x2f6/0x370 [ 198.989689][T14056] ? __se_sys_mount+0x2b0/0x2e0 [ 198.989713][T14056] __x64_sys_futex+0x78/0x90 [ 198.989742][T14056] x64_sys_call+0x22e2/0x2550 [ 198.989781][T14056] do_syscall_64+0x112/0x360 [ 198.989802][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.989893][T14056] RIP: 0033:0x7f0fbf08e159 [ 198.989936][T14056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.989955][T14056] RSP: 002b:00007f0fbdae70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.989978][T14056] RAX: ffffffffffffffda RBX: 00007f0fbf315fa8 RCX: 00007f0fbf08e159 [ 198.989993][T14056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0fbf315fa8 [ 198.990055][T14056] RBP: 00007f0fbf315fa0 R08: 0000000000000000 R09: 0000000000000000 [ 198.990069][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.990082][T14056] R13: 00007f0fbf316038 R14: 00007ffd041116b0 R15: 00007ffd04111798 [ 198.990137][T14056] [ 199.051561][T14049] netlink: 'syz.1.3142': attribute type 16 has an invalid length. [ 199.051608][T14049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3142'. [ 199.077580][T14046] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 199.084885][T14046] batman_adv: batadv0: Removing interface: syzkaller0 [ 199.126963][T13858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.327020][T13858] veth0_vlan: entered promiscuous mode [ 199.331989][T13858] veth1_vlan: entered promiscuous mode [ 199.354883][T13858] veth0_macvtap: entered promiscuous mode [ 199.359941][T13858] veth1_macvtap: entered promiscuous mode [ 199.373231][T13858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.379121][T13858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.115460][ T3662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.115553][ T3662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.115610][ T3662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.115647][ T3662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.176216][T14089] batman_adv: batadv0: Adding interface: syzkaller0 [ 200.176234][T14089] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.176302][T14089] batman_adv: batadv0: Interface activated: syzkaller0 [ 200.232670][T14088] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 200.243621][T14088] batman_adv: batadv0: Removing interface: syzkaller0 [ 200.306711][T14107] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3078'. [ 200.377481][T14113] ip_tables: iptables: counters copy to user failed while replacing table [ 200.438629][T14114] netlink: 'syz.0.3161': attribute type 16 has an invalid length. [ 200.438682][T14114] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3161'. [ 201.097161][T14110] batman_adv: batadv0: Adding interface: syzkaller0 [ 201.097186][T14110] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.097222][T14110] batman_adv: batadv0: Interface activated: syzkaller0 [ 201.195614][T14104] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 201.198588][T14104] batman_adv: batadv0: Removing interface: syzkaller0 [ 201.504257][T14157] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3173'. [ 201.728917][T14142] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.729004][T14142] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.729271][T14142] bridge_slave_0: entered allmulticast mode [ 201.729804][T14142] bridge_slave_0: entered promiscuous mode [ 201.773464][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.773501][T14142] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.773616][T14142] bridge_slave_1: entered allmulticast mode [ 201.774131][T14142] bridge_slave_1: entered promiscuous mode [ 201.812065][T14142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.823818][T14142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.850308][T14142] team0: Port device team_slave_0 added [ 201.853435][T14142] team0: Port device team_slave_1 added [ 201.876646][T14142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.876710][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.876737][T14142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.877460][T14142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.877474][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.877506][T14142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.914557][T14142] hsr_slave_0: entered promiscuous mode [ 201.914892][T14142] hsr_slave_1: entered promiscuous mode [ 201.915106][T14142] debugfs: 'hsr0' already exists in 'hsr' [ 201.915121][T14142] Cannot create hsr debugfs directory [ 203.129444][T14142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.140835][T14142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.143540][T14142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.146976][T14142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.147365][T14142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.150884][T14142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.151758][T14142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.155218][T14142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.219739][T14196] loop4: detected capacity change from 0 to 8192 [ 203.225281][T14196] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.226226][ T29] audit: type=1400 audit(1790334355.497:452): avc: denied { mount } for pid=14194 comm="syz.4.3186" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 203.254640][T14142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.286117][T14142] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.293691][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.293722][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.301197][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.301232][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.368394][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 203.608131][T14219] netlink: 'syz.2.3193': attribute type 16 has an invalid length. [ 203.608203][T14219] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3193'. [ 203.683692][T14142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.846672][T14142] veth0_vlan: entered promiscuous mode [ 203.850122][T14142] veth1_vlan: entered promiscuous mode [ 203.883760][T14142] veth0_macvtap: entered promiscuous mode [ 203.894824][T14142] veth1_macvtap: entered promiscuous mode [ 203.935422][T14142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.943413][T14242] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 203.945484][T14142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.993717][ T103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.994055][ T103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.994091][ T103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.994179][ T103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.170492][ T29] audit: type=1400 audit(1790334356.437:453): avc: denied { unmount } for pid=13611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.358188][T14263] batman_adv: batadv0: Adding interface: syzkaller0 [ 204.358207][T14263] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.358291][T14263] batman_adv: batadv0: Interface activated: syzkaller0 [ 204.502401][T14275] batman_adv: batadv0: Adding interface: syzkaller0 [ 204.502419][T14275] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.502451][T14275] batman_adv: batadv0: Interface activated: syzkaller0 [ 204.510391][T14271] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 204.551980][T14271] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.555746][T14280] loop1: detected capacity change from 0 to 512 [ 204.556505][T14280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 204.556520][T14280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.566702][T14280] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.3214: Invalid block bitmap block 0 in block_group 0 [ 204.566743][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.566868][T14280] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 204.566887][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567006][T14280] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.3214: attempt to clear invalid blocks 983261 len 1 [ 204.567034][T14280] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.567175][T14280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.3214: Invalid inode table block 0 in block_group 0 [ 204.567254][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567345][T14280] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 204.567363][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567569][T14280] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 204.567587][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567693][T14280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.3214: Invalid inode table block 0 in block_group 0 [ 204.567774][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567874][T14280] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 204.567892][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.567988][T14280] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.3214: mark_inode_dirty error [ 204.568012][T14280] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.568151][T14280] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 204.568183][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.568280][T14280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.3214: Invalid inode table block 0 in block_group 0 [ 204.568382][T14280] loop1: lost filesystem error report for type 5 error -117 [ 204.568671][T14280] EXT4-fs (loop1): 1 truncate cleaned up [ 204.569326][T14280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.574124][T14280] EXT4-fs (loop1): shut down requested (0) [ 204.603099][T14262] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 204.629720][T14262] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.668577][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.672817][ T29] audit: type=1400 audit(1790334356.947:454): avc: denied { read } for pid=2966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 204.672889][ T29] audit: type=1400 audit(1790334356.947:455): avc: denied { search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.672946][ T29] audit: type=1400 audit(1790334356.947:456): avc: denied { write search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.673055][ T29] audit: type=1400 audit(1790334356.947:457): avc: denied { add_name } for pid=2966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.673077][ T29] audit: type=1400 audit(1790334356.947:458): avc: denied { create } for pid=2966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.673099][ T29] audit: type=1400 audit(1790334356.947:459): avc: denied { append open } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.673192][ T29] audit: type=1400 audit(1790334356.947:460): avc: denied { getattr } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.832615][T14293] FAULT_INJECTION: forcing a failure. [ 204.832615][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 204.832647][T14293] CPU: 1 UID: 0 PID: 14293 Comm: syz.0.3221 Not tainted syzkaller #0 PREEMPT(lazy) [ 204.832771][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.832785][T14293] Call Trace: [ 204.832792][T14293] [ 204.832801][T14293] __dump_stack+0x1d/0x30 [ 204.832837][T14293] dump_stack_lvl+0x95/0xd0 [ 204.832860][T14293] dump_stack+0x15/0x1b [ 204.832939][T14293] should_fail_ex+0x262/0x280 [ 204.832979][T14293] should_failslab+0x8c/0xb0 [ 204.833078][T14293] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 204.833187][T14293] ? vsnprintf+0x857/0x8c0 [ 204.833213][T14293] ? sidtab_sid2str_get+0xa0/0x130 [ 204.833235][T14293] ? sidtab_sid2str_get+0xa0/0x130 [ 204.833330][T14293] kmemdup_noprof+0x2b/0x70 [ 204.833361][T14293] sidtab_sid2str_get+0xa0/0x130 [ 204.833383][T14293] security_sid_to_context_core+0x179/0x2d0 [ 204.833407][T14293] security_sid_to_context+0x27/0x40 [ 204.833428][T14293] avc_audit_post_callback+0x9d/0x520 [ 204.833466][T14293] ? audit_log_lsm_data+0x759/0xbb0 [ 204.833672][T14293] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 204.833698][T14293] common_lsm_audit+0x1ba/0x230 [ 204.833751][T14293] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 204.833778][T14293] slow_avc_audit+0x14c/0x190 [ 204.833804][T14293] avc_has_perm+0x144/0x190 [ 204.833922][T14293] selinux_socket_create+0xfd/0x180 [ 204.833952][T14293] security_socket_create+0x4c/0x90 [ 204.833981][T14293] __sock_create+0xe1/0x580 [ 204.834034][T14293] ? __se_sys_setns+0xd08/0xff0 [ 204.834067][T14293] __sys_socket+0xaf/0x180 [ 204.834097][T14293] __x64_sys_socket+0x3f/0x50 [ 204.834155][T14293] x64_sys_call+0x246e/0x2550 [ 204.834181][T14293] do_syscall_64+0x112/0x360 [ 204.834202][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.834225][T14293] RIP: 0033:0x7fa3a520e159 [ 204.834311][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.834330][T14293] RSP: 002b:00007fa3a3c66fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 204.834353][T14293] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa3a520e159 [ 204.834410][T14293] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 204.834423][T14293] RBP: 00007fa3a52a506b R08: 0000000000000000 R09: 0000000000000000 [ 204.834468][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.834482][T14293] R13: 00007fa3a5496038 R14: 00007fa3a5495fa0 R15: 00007fff97ea4f58 [ 204.834501][T14293] [ 204.845652][ T29] audit: type=1400 audit(1790334357.107:461): avc: denied { create } for pid=14292 comm="syz.0.3221" ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.508482][T14315] batman_adv: batadv0: Adding interface: syzkaller0 [ 205.508498][T14315] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.508595][T14315] batman_adv: batadv0: Interface activated: syzkaller0 [ 207.937194][T14314] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 207.965221][T14314] batman_adv: batadv0: Removing interface: syzkaller0 [ 208.358711][ T29] audit: type=1400 audit(1790334360.627:462): avc: denied { create } for pid=14379 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.362115][ T29] audit: type=1400 audit(1790334360.627:463): avc: denied { setopt } for pid=14379 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.362305][ T29] audit: type=1400 audit(1790334360.627:464): avc: denied { write } for pid=14379 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.399227][T14372] syzkaller0: entered promiscuous mode [ 208.399268][T14372] syzkaller0: entered allmulticast mode [ 208.526918][T14389] syzkaller0: entered promiscuous mode [ 208.526967][T14389] syzkaller0: entered allmulticast mode [ 210.265534][T14398] loop2: detected capacity change from 0 to 512 [ 210.265973][T14398] EXT4-fs: test_dummy_encryption option not supported [ 210.276735][T14398] FAULT_INJECTION: forcing a failure. [ 210.276735][T14398] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.276765][T14398] CPU: 0 UID: 0 PID: 14398 Comm: syz.2.3256 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.276813][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.276885][T14398] Call Trace: [ 210.276893][T14398] [ 210.276901][T14398] __dump_stack+0x1d/0x30 [ 210.276929][T14398] dump_stack_lvl+0x95/0xd0 [ 210.276952][T14398] dump_stack+0x15/0x1b [ 210.277027][T14398] should_fail_ex+0x262/0x280 [ 210.277124][T14398] should_fail+0xb/0x20 [ 210.277146][T14398] get_futex_key+0x12d/0xb10 [ 210.277172][T14398] ? down_read+0x77/0xb0 [ 210.277236][T14398] futex_wake+0x89/0x400 [ 210.277258][T14398] do_futex+0x3f8/0x460 [ 210.277288][T14398] __se_sys_futex+0x2f6/0x370 [ 210.277378][T14398] __x64_sys_futex+0x78/0x90 [ 210.277408][T14398] x64_sys_call+0x22e2/0x2550 [ 210.277472][T14398] do_syscall_64+0x112/0x360 [ 210.277494][T14398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.277517][T14398] RIP: 0033:0x7f522811e159 [ 210.277536][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.277664][T14398] RSP: 002b:00007f5226b770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.277687][T14398] RAX: ffffffffffffffda RBX: 00007f52283a5fa8 RCX: 00007f522811e159 [ 210.277702][T14398] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52283a5fac [ 210.277834][T14398] RBP: 00007f52283a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 210.277849][T14398] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 210.277864][T14398] R13: 00007f52283a6038 R14: 00007fffa16c3f90 R15: 00007fffa16c4078 [ 210.277930][T14398] [ 210.280143][ T29] audit: type=1400 audit(1790334362.547:465): avc: denied { create } for pid=14397 comm="syz.2.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 211.335001][T14401] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.540489][T14405] loop2: detected capacity change from 0 to 4096 [ 211.541316][T14405] EXT4-fs: test_dummy_encryption option not supported [ 211.661733][ T29] audit: type=1400 audit(1790334363.927:466): avc: denied { mount } for pid=14423 comm="syz.2.3268" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 212.557706][ T29] audit: type=1400 audit(1790334364.827:467): avc: denied { unmount } for pid=13858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 212.772635][T14454] syzkaller0: entered promiscuous mode [ 212.772656][T14454] syzkaller0: entered allmulticast mode [ 212.885656][T14465] batman_adv: batadv0: Adding interface: syzkaller0 [ 212.885672][T14465] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.885710][T14465] batman_adv: batadv0: Interface activated: syzkaller0 [ 213.476479][T14464] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 213.496495][T14464] batman_adv: batadv0: Removing interface: syzkaller0 [ 213.534454][T14467] syzkaller0: entered promiscuous mode [ 213.534476][T14467] syzkaller0: entered allmulticast mode [ 213.565951][T14473] loop1: detected capacity change from 0 to 512 [ 213.583389][T14473] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 213.583450][T14473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 213.583472][T14473] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3287: Failed to acquire dquot type 1 [ 213.583494][T14473] loop1: lost filesystem error report for type 5 error -117 [ 213.585378][T14473] EXT4-fs (loop1): 1 truncate cleaned up [ 213.585838][T14473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.585940][T14473] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.688004][T14484] FAULT_INJECTION: forcing a failure. [ 213.688004][T14484] name failslab, interval 1, probability 0, space 0, times 0 [ 213.688045][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.3.3290 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.688074][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.688088][T14484] Call Trace: [ 213.688096][T14484] [ 213.688105][T14484] __dump_stack+0x1d/0x30 [ 213.688200][T14484] dump_stack_lvl+0x95/0xd0 [ 213.688231][T14484] dump_stack+0x15/0x1b [ 213.688255][T14484] should_fail_ex+0x262/0x280 [ 213.688284][T14484] ? v9fs_init_fs_context+0x33/0x220 [ 213.688331][T14484] should_failslab+0x8c/0xb0 [ 213.688360][T14484] __kmalloc_cache_noprof+0x7a/0x400 [ 213.688389][T14484] ? v9fs_init_fs_context+0x33/0x220 [ 213.688460][T14484] ? alloc_fs_context+0x41/0x570 [ 213.688488][T14484] v9fs_init_fs_context+0x33/0x220 [ 213.688578][T14484] alloc_fs_context+0x490/0x570 [ 213.688605][T14484] fs_context_for_mount+0x22/0x30 [ 213.688632][T14484] do_new_mount+0xe7/0x8d0 [ 213.688678][T14484] ? security_capable+0x7b/0x90 [ 213.688707][T14484] path_mount+0x4ad/0xb90 [ 213.688740][T14484] __se_sys_mount+0x28c/0x2e0 [ 213.688802][T14484] __x64_sys_mount+0x67/0x80 [ 213.688879][T14484] x64_sys_call+0xc3b/0x2550 [ 213.688993][T14484] do_syscall_64+0x112/0x360 [ 213.689026][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.689083][T14484] RIP: 0033:0x7f0fbf08e159 [ 213.689103][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.689201][T14484] RSP: 002b:00007f0fbdae7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.689228][T14484] RAX: ffffffffffffffda RBX: 00007f0fbf315fa0 RCX: 00007f0fbf08e159 [ 213.689287][T14484] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00002000000000c0 [ 213.689305][T14484] RBP: 00007f0fbf12506b R08: 0000200000000440 R09: 0000000000000000 [ 213.689322][T14484] R10: 0000000001200040 R11: 0000000000000246 R12: 0000000000000000 [ 213.689393][T14484] R13: 00007f0fbf316038 R14: 00007f0fbf315fa0 R15: 00007ffd04111798 [ 213.689417][T14484] [ 213.689507][ T29] audit: type=1400 audit(1790334365.957:468): avc: denied { mounton } for pid=14483 comm="syz.3.3290" path="/73/proc/168/task/169/fail-nth" dev="proc" ino=35115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 214.397156][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 214.434848][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.471944][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3291'. [ 214.588179][T14497] loop2: detected capacity change from 0 to 256 [ 214.591686][T14497] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.614198][ T29] audit: type=1400 audit(1790334366.887:469): avc: denied { mounton } for pid=14495 comm="syz.2.3296" path="/32/file1/file1" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 215.405052][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'. [ 216.235715][T14540] netlink: 'syz.0.3302': attribute type 16 has an invalid length. [ 216.235735][T14540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3302'. [ 216.290084][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3311'. [ 216.344602][ T103] IPVS: starting estimator thread 0... [ 216.442807][T14548] IPVS: using max 2400 ests per chain, 120000 per kthread [ 218.688231][ T29] audit: type=1400 audit(1790334370.957:470): avc: denied { read } for pid=14558 comm="syz.1.3317" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.805867][T14579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3319'. [ 219.279747][T14586] sctp: [Deprecated]: syz.2.3323 (pid 14586) Use of int in max_burst socket option deprecated. [ 219.279747][T14586] Use struct sctp_assoc_value instead [ 219.538054][T14588] netlink: 'syz.2.3324': attribute type 16 has an invalid length. [ 219.538091][T14588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3324'. [ 219.798312][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3335'. [ 219.814040][T14614] sctp: [Deprecated]: syz.3.3334 (pid 14614) Use of int in max_burst socket option deprecated. [ 219.814040][T14614] Use struct sctp_assoc_value instead [ 219.924589][T14627] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 219.927451][T14627] loop4: detected capacity change from 0 to 128 [ 220.025034][T14627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.025562][T14627] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.054974][ T29] audit: type=1400 audit(1790334372.297:471): avc: denied { write } for pid=14616 comm="syz.4.3336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.055020][ T29] audit: type=1400 audit(1790334372.297:472): avc: denied { create } for pid=14616 comm="syz.4.3336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 220.055096][ T29] audit: type=1400 audit(1790334372.307:473): avc: denied { write open } for pid=14616 comm="syz.4.3336" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 220.055176][ T29] audit: type=1400 audit(1790334372.307:474): avc: denied { write } for pid=14616 comm="syz.4.3336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.055220][ T29] audit: type=1400 audit(1790334372.307:475): avc: denied { create } for pid=14616 comm="syz.4.3336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 220.055302][ T29] audit: type=1400 audit(1790334372.307:476): avc: denied { write } for pid=14616 comm="syz.4.3336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.055385][ T29] audit: type=1400 audit(1790334372.307:477): avc: denied { append } for pid=14616 comm="syz.4.3336" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 220.055523][ T29] audit: type=1400 audit(1790334372.317:478): avc: denied { write } for pid=14616 comm="syz.4.3336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.055567][ T29] audit: type=1400 audit(1790334372.317:479): avc: denied { write } for pid=14616 comm="syz.4.3336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.858108][T14637] Invalid ELF header type: 2 != 1 [ 221.022240][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 221.594769][T14648] sctp: [Deprecated]: syz.1.3348 (pid 14648) Use of int in max_burst socket option deprecated. [ 221.594769][T14648] Use struct sctp_assoc_value instead [ 221.715770][T13611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.830724][T14668] FAULT_INJECTION: forcing a failure. [ 221.830724][T14668] name failslab, interval 1, probability 0, space 0, times 0 [ 221.830816][T14668] CPU: 0 UID: 0 PID: 14668 Comm: syz.3.3356 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.830842][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.830906][T14668] Call Trace: [ 221.830915][T14668] [ 221.830928][T14668] __dump_stack+0x1d/0x30 [ 221.830955][T14668] dump_stack_lvl+0x95/0xd0 [ 221.830984][T14668] dump_stack+0x15/0x1b [ 221.831007][T14668] should_fail_ex+0x262/0x280 [ 221.831042][T14668] ? prepare_creds+0x38/0x550 [ 221.831071][T14668] should_failslab+0x8c/0xb0 [ 221.831103][T14668] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 221.831212][T14668] ? prepare_creds+0x38/0x550 [ 221.831239][T14668] prepare_creds+0x38/0x550 [ 221.831263][T14668] cap_task_prctl+0x582/0x6b0 [ 221.831287][T14668] security_task_prctl+0x85/0x160 [ 221.831310][T14668] __se_sys_prctl+0x6c/0x13b0 [ 221.831343][T14668] __x64_sys_prctl+0x67/0x80 [ 221.831374][T14668] x64_sys_call+0x2421/0x2550 [ 221.831561][T14668] do_syscall_64+0x112/0x360 [ 221.831583][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.831605][T14668] RIP: 0033:0x7f0fbf08e159 [ 221.831677][T14668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.831697][T14668] RSP: 002b:00007f0fbdae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 221.831723][T14668] RAX: ffffffffffffffda RBX: 00007f0fbf315fa0 RCX: 00007f0fbf08e159 [ 221.831739][T14668] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001c [ 221.831754][T14668] RBP: 00007f0fbf12506b R08: 0000000000000000 R09: 0000000000000000 [ 221.831769][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.831783][T14668] R13: 00007f0fbf316038 R14: 00007f0fbf315fa0 R15: 00007ffd04111798 [ 221.831845][T14668] [ 222.028108][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.028251][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.035668][T14672] sctp: [Deprecated]: syz.4.3359 (pid 14672) Use of int in max_burst socket option deprecated. [ 222.035668][T14672] Use struct sctp_assoc_value instead [ 222.147181][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 222.575572][T14692] loop1: detected capacity change from 0 to 512 [ 222.625260][T14692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.625348][T14692] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.640431][T14692] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3364: corrupted inode contents [ 222.640658][T14692] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.3364: mark_inode_dirty error [ 222.640962][T14692] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3364: corrupted inode contents [ 222.641146][T14692] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3364: mark_inode_dirty error [ 222.642652][T14692] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.3364: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 222.642652][T14692] [ 222.642826][T14692] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.3364: corrupted inode contents [ 222.642988][T14692] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.3364: mark_inode_dirty error [ 222.643139][T14692] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 222.910408][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.036166][T14711] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.109107][T14718] FAULT_INJECTION: forcing a failure. [ 223.109107][T14718] name failslab, interval 1, probability 0, space 0, times 0 [ 223.109225][T14718] CPU: 1 UID: 0 PID: 14718 Comm: syz.3.3372 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.109254][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.109284][T14718] Call Trace: [ 223.109292][T14718] [ 223.109302][T14718] __dump_stack+0x1d/0x30 [ 223.109332][T14718] dump_stack_lvl+0x95/0xd0 [ 223.109372][T14718] dump_stack+0x15/0x1b [ 223.109396][T14718] should_fail_ex+0x262/0x280 [ 223.109424][T14718] ? prepare_creds+0x38/0x550 [ 223.109455][T14718] should_failslab+0x8c/0xb0 [ 223.109524][T14718] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 223.109557][T14718] ? prepare_creds+0x38/0x550 [ 223.109591][T14718] prepare_creds+0x38/0x550 [ 223.109621][T14718] cap_task_prctl+0x582/0x6b0 [ 223.109669][T14718] security_task_prctl+0x85/0x160 [ 223.109697][T14718] __se_sys_prctl+0x6c/0x13b0 [ 223.109733][T14718] __x64_sys_prctl+0x67/0x80 [ 223.109818][T14718] x64_sys_call+0x2421/0x2550 [ 223.109842][T14718] do_syscall_64+0x112/0x360 [ 223.109863][T14718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.109887][T14718] RIP: 0033:0x7f0fbf08e159 [ 223.109958][T14718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.109981][T14718] RSP: 002b:00007f0fbdae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 223.110006][T14718] RAX: ffffffffffffffda RBX: 00007f0fbf315fa0 RCX: 00007f0fbf08e159 [ 223.110023][T14718] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001c [ 223.110036][T14718] RBP: 00007f0fbf12506b R08: 0000000000000000 R09: 0000000000000000 [ 223.110049][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.110142][T14718] R13: 00007f0fbf316038 R14: 00007f0fbf315fa0 R15: 00007ffd04111798 [ 223.110165][T14718] [ 224.024090][T14728] syzkaller0: entered promiscuous mode [ 224.024110][T14728] syzkaller0: entered allmulticast mode [ 224.195238][T14743] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.360238][T14753] syzkaller0: entered promiscuous mode [ 224.360261][T14753] syzkaller0: entered allmulticast mode [ 224.519380][T14762] syzkaller0: entered promiscuous mode [ 224.519401][T14762] syzkaller0: entered allmulticast mode [ 224.807888][T14780] loop4: detected capacity change from 0 to 8192 [ 224.808576][T14780] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.029683][T14675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.141819][T14785] syzkaller0: entered promiscuous mode [ 225.141844][T14785] syzkaller0: entered allmulticast mode [ 225.156731][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 225.186699][ T103] IPVS: starting estimator thread 0... [ 225.273008][T14797] IPVS: using max 2736 ests per chain, 136800 per kthread [ 225.640524][T14822] FAULT_INJECTION: forcing a failure. [ 225.640524][T14822] name failslab, interval 1, probability 0, space 0, times 0 [ 225.640557][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.1.3415 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.640582][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.640596][T14822] Call Trace: [ 225.640605][T14822] [ 225.640615][T14822] __dump_stack+0x1d/0x30 [ 225.640719][T14822] dump_stack_lvl+0x95/0xd0 [ 225.640744][T14822] dump_stack+0x15/0x1b [ 225.640770][T14822] should_fail_ex+0x262/0x280 [ 225.640796][T14822] ? prepare_creds+0x38/0x550 [ 225.640877][T14822] should_failslab+0x8c/0xb0 [ 225.640913][T14822] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 225.640957][T14822] ? prepare_creds+0x38/0x550 [ 225.640983][T14822] prepare_creds+0x38/0x550 [ 225.641073][T14822] cap_task_prctl+0x582/0x6b0 [ 225.641179][T14822] security_task_prctl+0x85/0x160 [ 225.641207][T14822] __se_sys_prctl+0x6c/0x13b0 [ 225.641245][T14822] __x64_sys_prctl+0x67/0x80 [ 225.641395][T14822] x64_sys_call+0x2421/0x2550 [ 225.641427][T14822] do_syscall_64+0x112/0x360 [ 225.641451][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.641477][T14822] RIP: 0033:0x7f2aec9de159 [ 225.641578][T14822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.641603][T14822] RSP: 002b:00007f2aeb437028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 225.641628][T14822] RAX: ffffffffffffffda RBX: 00007f2aecc65fa0 RCX: 00007f2aec9de159 [ 225.641644][T14822] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001c [ 225.641714][T14822] RBP: 00007f2aeca7506b R08: 0000000000000000 R09: 0000000000000000 [ 225.641731][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.641813][T14822] R13: 00007f2aecc66038 R14: 00007f2aecc65fa0 R15: 00007ffc83219a88 [ 225.641835][T14822] [ 225.745995][T14826] syzkaller0: entered promiscuous mode [ 225.746027][T14826] syzkaller0: entered allmulticast mode [ 228.320305][T14808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.419265][T14847] loop3: detected capacity change from 0 to 512 [ 228.517101][T14841] syzkaller0: entered promiscuous mode [ 228.519295][T14841] syzkaller0: entered allmulticast mode [ 228.571530][T14847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.571645][T14847] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.576591][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 228.576607][ T29] audit: type=1400 audit(1790334380.837:485): avc: denied { read write } for pid=14846 comm="syz.3.3425" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.576634][ T29] audit: type=1400 audit(1790334380.837:486): avc: denied { open } for pid=14846 comm="syz.3.3425" path="/98/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.100084][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.162433][ T29] audit: type=1400 audit(1790334381.427:487): avc: denied { allowed } for pid=14861 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.188161][T14860] syzkaller0: entered promiscuous mode [ 229.188180][T14860] syzkaller0: entered allmulticast mode [ 232.587267][T14919] FAULT_INJECTION: forcing a failure. [ 232.587267][T14919] name failslab, interval 1, probability 0, space 0, times 0 [ 232.587344][T14919] CPU: 1 UID: 0 PID: 14919 Comm: syz.1.3452 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.587445][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.587459][T14919] Call Trace: [ 232.587467][T14919] [ 232.587475][T14919] __dump_stack+0x1d/0x30 [ 232.587513][T14919] dump_stack_lvl+0x95/0xd0 [ 232.587561][T14919] dump_stack+0x15/0x1b [ 232.587584][T14919] should_fail_ex+0x262/0x280 [ 232.587649][T14919] ? prepare_creds+0x38/0x550 [ 232.587679][T14919] should_failslab+0x8c/0xb0 [ 232.587713][T14919] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 232.587797][T14919] ? prepare_creds+0x38/0x550 [ 232.587828][T14919] prepare_creds+0x38/0x550 [ 232.587857][T14919] cap_task_prctl+0x582/0x6b0 [ 232.587916][T14919] security_task_prctl+0x85/0x160 [ 232.587941][T14919] __se_sys_prctl+0x6c/0x13b0 [ 232.588054][T14919] __x64_sys_prctl+0x67/0x80 [ 232.588092][T14919] x64_sys_call+0x2421/0x2550 [ 232.588123][T14919] do_syscall_64+0x112/0x360 [ 232.588157][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.588180][T14919] RIP: 0033:0x7f2aec9de159 [ 232.588199][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.588219][T14919] RSP: 002b:00007f2aeb437028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 232.588244][T14919] RAX: ffffffffffffffda RBX: 00007f2aecc65fa0 RCX: 00007f2aec9de159 [ 232.588288][T14919] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001c [ 232.588302][T14919] RBP: 00007f2aeca7506b R08: 0000000000000000 R09: 0000000000000000 [ 232.588316][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.588330][T14919] R13: 00007f2aecc66038 R14: 00007f2aecc65fa0 R15: 00007ffc83219a88 [ 232.588349][T14919] [ 232.652980][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 232.726225][ T29] audit: type=1400 audit(1790334384.997:488): avc: denied { write } for pid=14926 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 232.850358][ T29] audit: type=1400 audit(1790334385.117:489): avc: denied { name_bind } for pid=14928 comm="syz.2.3456" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 232.992453][T14941] ieee802154 phy0 wpan0: encryption failed: -90 [ 233.072814][ T29] audit: type=1400 audit(1790334385.257:490): avc: denied { write } for pid=14926 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.514434][T14938] loop4: detected capacity change from 0 to 8192 [ 233.515291][T14938] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.868321][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3473'. [ 234.050829][T14992] loop3: detected capacity change from 0 to 2048 [ 234.070494][T14992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.070668][T14992] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.152899][ T29] audit: type=1400 audit(1790334386.347:491): avc: denied { write } for pid=14974 comm="syz.3.3471" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.152953][ T29] audit: type=1400 audit(1790334386.347:492): avc: denied { read } for pid=14974 comm="syz.3.3471" path="/109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.090014][T15020] ieee802154 phy0 wpan0: encryption failed: -90 [ 235.884925][T15028] sctp: [Deprecated]: syz.4.3487 (pid 15028) Use of int in max_burst socket option deprecated. [ 235.884925][T15028] Use struct sctp_assoc_value instead [ 235.979511][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.924137][ T29] audit: type=1400 audit(1790334389.197:493): avc: denied { ioctl } for pid=15070 comm="syz.4.3502" path="socket:[37205]" dev="sockfs" ino=37205 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.987491][T15084] sctp: [Deprecated]: syz.4.3508 (pid 15084) Use of int in max_burst socket option deprecated. [ 236.987491][T15084] Use struct sctp_assoc_value instead [ 237.090081][T15101] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 237.179332][T15091] loop4: detected capacity change from 0 to 8192 [ 237.181711][T15091] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.305280][T15116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27678 sclass=netlink_route_socket pid=15116 comm=syz.0.3516 [ 237.305531][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3516'. [ 237.462427][ T29] audit: type=1400 audit(1790334389.657:494): avc: denied { connect } for pid=15107 comm="syz.2.3513" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.557803][T15123] capability: warning: `syz.1.3517' uses deprecated v2 capabilities in a way that may be insecure [ 238.559043][T15136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3522'. [ 238.624261][T15145] loop1: detected capacity change from 0 to 512 [ 238.691126][T15145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.698960][T15145] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 238.704965][ T29] audit: type=1400 audit(1790334390.967:495): avc: denied { write } for pid=15143 comm="syz.1.3527" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.705001][ T29] audit: type=1400 audit(1790334390.967:496): avc: denied { append } for pid=15143 comm="syz.1.3527" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.705028][ T29] audit: type=1400 audit(1790334390.967:497): avc: denied { write } for pid=15143 comm="syz.1.3527" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.705055][ T29] audit: type=1400 audit(1790334390.967:498): avc: denied { ioctl } for pid=15143 comm="syz.1.3527" path="/74/file0/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.809420][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.925759][T15178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3536'. [ 239.806867][T15193] batman_adv: batadv0: Adding interface: syzkaller0 [ 239.806885][T15193] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.806939][T15193] batman_adv: batadv0: Interface activated: syzkaller0 [ 239.972383][T15187] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 239.985408][T15187] batman_adv: batadv0: Removing interface: syzkaller0 [ 239.986870][ T29] audit: type=1400 audit(1790334392.257:499): avc: denied { bind } for pid=15203 comm="syz.0.3546" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.040407][T15209] loop1: detected capacity change from 0 to 512 [ 240.040771][T15209] EXT4-fs: Ignoring removed nobh option [ 240.057837][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.3549: corrupted inode contents [ 240.057872][T15209] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.058114][T15209] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #3: comm syz.1.3549: mark_inode_dirty error [ 240.058155][T15209] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.058627][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.3549: corrupted inode contents [ 240.058655][T15209] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.058809][T15209] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3549: mark_inode_dirty error [ 240.058835][T15209] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.059035][T15209] Quota error (device loop1): write_blk: dquota write failed [ 240.059064][T15209] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 240.059090][T15209] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3549: Failed to acquire dquot type 0 [ 240.059134][T15209] loop1: lost filesystem error report for type 5 error -117 [ 240.059638][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3549: corrupted inode contents [ 240.059665][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.059864][T15209] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #16: comm syz.1.3549: mark_inode_dirty error [ 240.059893][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.060075][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3549: corrupted inode contents [ 240.060123][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.060252][T15209] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3549: mark_inode_dirty error [ 240.060346][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.060485][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3549: corrupted inode contents [ 240.060534][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.060774][T15209] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 240.060795][T15209] loop1: lost filesystem error report for type 5 error -117 [ 240.060982][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3549: corrupted inode contents [ 240.061011][T15209] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.061124][T15209] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.3549: mark_inode_dirty error [ 240.061427][T15209] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 240.061447][T15209] loop1: lost filesystem error report for type 5 error -117 [ 240.061842][T15209] EXT4-fs (loop1): 1 truncate cleaned up [ 240.062344][T15209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.085680][T15209] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.105860][T15209] EXT4-fs (loop1): shut down requested (1) [ 240.106366][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.106397][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.112931][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.112965][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.113844][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 240.113873][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.113892][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.113940][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.114017][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.114035][T15209] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 240.114321][ T29] audit: type=1400 audit(1790334392.387:500): avc: denied { write } for pid=15208 comm="syz.1.3549" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.114348][ T29] audit: type=1400 audit(1790334392.387:501): avc: denied { add_name } for pid=15208 comm="syz.1.3549" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.114386][ T29] audit: type=1400 audit(1790334392.387:502): avc: denied { link } for pid=15208 comm="syz.1.3549" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 240.147364][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3551'. [ 240.199942][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.594934][T15244] loop3: detected capacity change from 0 to 512 [ 240.595231][T15244] EXT4-fs: test_dummy_encryption option not supported [ 240.951348][T15250] pimreg: entered allmulticast mode [ 241.066926][T15252] batman_adv: batadv0: Adding interface: syzkaller0 [ 241.066941][T15252] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.067125][T15252] batman_adv: batadv0: Interface activated: syzkaller0 [ 241.268403][T15251] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 241.286687][T15251] batman_adv: batadv0: Removing interface: syzkaller0 [ 241.626805][T15295] veth0: entered promiscuous mode [ 241.626947][T15294] veth0: left promiscuous mode [ 242.974852][T15339] loop4: detected capacity change from 0 to 512 [ 243.035616][T15340] netlink: 'syz.0.3591': attribute type 16 has an invalid length. [ 243.035735][T15340] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3591'. [ 243.067572][T15339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.067640][T15339] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.071793][ T29] audit: type=1400 audit(1790334395.337:503): avc: denied { write } for pid=15337 comm="syz.4.3590" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.247162][T13611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.297145][T15369] batman_adv: batadv0: Adding interface: syzkaller0 [ 243.297161][T15369] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.297217][T15369] batman_adv: batadv0: Interface activated: syzkaller0 [ 243.501061][T15368] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 243.508120][T15368] batman_adv: batadv0: Removing interface: syzkaller0 [ 243.646567][T15403] loop4: detected capacity change from 0 to 4096 [ 243.652856][T15403] EXT4-fs: inline encryption not supported [ 243.652909][T15403] EXT4-fs: test_dummy_encryption option not supported [ 243.686056][T15410] loop3: detected capacity change from 0 to 512 [ 243.707098][T15406] loop1: detected capacity change from 0 to 8192 [ 243.708080][T15406] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.733693][T15410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.733801][T15410] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.741997][ T29] audit: type=1400 audit(1790334396.007:504): avc: denied { write } for pid=15407 comm="syz.3.3612" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.802318][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 243.835013][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.931866][T15433] loop4: detected capacity change from 0 to 512 [ 243.944622][T15433] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 243.950160][T15433] EXT4-fs (loop4): 1 truncate cleaned up [ 243.969041][T15433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.994389][ T29] audit: type=1400 audit(1790334396.267:505): avc: denied { read } for pid=15434 comm="syz.3.3620" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 243.994495][ T29] audit: type=1400 audit(1790334396.267:506): avc: denied { open } for pid=15434 comm="syz.3.3620" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 244.817728][T15463] batman_adv: batadv0: Adding interface: syzkaller0 [ 244.817744][T15463] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.817776][T15463] batman_adv: batadv0: Interface activated: syzkaller0 [ 244.818677][T13611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.822113][T15441] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 244.856808][T15441] batman_adv: batadv0: Removing interface: syzkaller0 [ 244.905670][T15473] FAULT_INJECTION: forcing a failure. [ 244.905670][T15473] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 244.905773][T15473] CPU: 0 UID: 0 PID: 15473 Comm: syz.0.3628 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.905798][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.905854][T15473] Call Trace: [ 244.905862][T15473] [ 244.905871][T15473] __dump_stack+0x1d/0x30 [ 244.905899][T15473] dump_stack_lvl+0x95/0xd0 [ 244.905936][T15473] dump_stack+0x15/0x1b [ 244.905962][T15473] should_fail_ex+0x262/0x280 [ 244.905991][T15473] should_fail+0xb/0x20 [ 244.906033][T15473] should_fail_usercopy+0x1a/0x20 [ 244.906063][T15473] _copy_from_user+0x1c/0xb0 [ 244.906091][T15473] __sys_bpf+0x1e2/0xc30 [ 244.906194][T15473] ? do_futex+0x300/0x460 [ 244.906228][T15473] __x64_sys_bpf+0x69/0x80 [ 244.906249][T15473] x64_sys_call+0xf26/0x2550 [ 244.906275][T15473] do_syscall_64+0x112/0x360 [ 244.906330][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.906357][T15473] RIP: 0033:0x7fa3a520e159 [ 244.906399][T15473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.906453][T15473] RSP: 002b:00007fa3a3c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.906480][T15473] RAX: ffffffffffffffda RBX: 00007fa3a5495fa0 RCX: 00007fa3a520e159 [ 244.906498][T15473] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 244.906515][T15473] RBP: 00007fa3a52a506b R08: 0000000000000000 R09: 0000000000000000 [ 244.906573][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.906587][T15473] R13: 00007fa3a5496038 R14: 00007fa3a5495fa0 R15: 00007fff97ea4f58 [ 244.906606][T15473] [ 244.967467][T15478] loop3: detected capacity change from 0 to 512 [ 244.970758][T15478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.974873][T15478] EXT4-fs (loop3): 1 truncate cleaned up [ 244.975546][T15478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.020268][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.315451][T15505] tmpfs: Unknown parameter '00000000000000000000000' [ 245.334511][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 245.961711][T15518] syzkaller0: entered promiscuous mode [ 245.961767][T15518] syzkaller0: entered allmulticast mode [ 246.497828][T15530] batman_adv: batadv0: Adding interface: syzkaller0 [ 246.497845][T15530] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.499836][T15530] batman_adv: batadv0: Interface activated: syzkaller0 [ 246.765175][T15540] tmpfs: Unknown parameter '00000000000000000000000' [ 246.860271][T15529] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 246.963117][T15529] batman_adv: batadv0: Removing interface: syzkaller0 [ 247.119582][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 247.119601][ T29] audit: type=1326 audit(1790334399.387:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15564 comm="syz.2.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522811e159 code=0x7ffc0000 [ 247.121888][ T29] audit: type=1326 audit(1790334399.387:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15564 comm="syz.2.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f522811e159 code=0x7ffc0000 [ 247.122584][ T29] audit: type=1326 audit(1790334399.387:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15564 comm="syz.2.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522811e159 code=0x7ffc0000 [ 247.123153][ T29] audit: type=1326 audit(1790334399.387:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15564 comm="syz.2.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522811e159 code=0x7ffc0000 [ 247.571137][T15582] ieee802154 phy0 wpan0: encryption failed: -90 [ 247.771016][T15586] FAULT_INJECTION: forcing a failure. [ 247.771016][T15586] name fail_futex, interval 1, probability 0, space 0, times 0 [ 247.771137][T15586] CPU: 1 UID: 0 PID: 15586 Comm: syz.4.3670 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.771168][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.771197][T15586] Call Trace: [ 247.771205][T15586] [ 247.771215][T15586] __dump_stack+0x1d/0x30 [ 247.771246][T15586] dump_stack_lvl+0x95/0xd0 [ 247.771273][T15586] dump_stack+0x15/0x1b [ 247.771297][T15586] should_fail_ex+0x262/0x280 [ 247.771334][T15586] should_fail+0xb/0x20 [ 247.771386][T15586] get_futex_key+0x12d/0xb10 [ 247.771414][T15586] futex_wait_setup+0x49/0x3e0 [ 247.771436][T15586] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 247.771471][T15586] __futex_wait+0xa9/0x260 [ 247.771496][T15586] ? __pfx_futex_wake_mark+0x10/0x10 [ 247.771520][T15586] futex_wait+0x98/0x1c0 [ 247.771547][T15586] do_futex+0x391/0x460 [ 247.771577][T15586] __se_sys_futex+0x2f6/0x370 [ 247.771665][T15586] ? xfd_validate_state+0x45/0xf0 [ 247.771700][T15586] __x64_sys_futex+0x78/0x90 [ 247.771732][T15586] x64_sys_call+0x22e2/0x2550 [ 247.771769][T15586] do_syscall_64+0x112/0x360 [ 247.771794][T15586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.771830][T15586] RIP: 0033:0x7f2ee723e159 [ 247.771847][T15586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.771885][T15586] RSP: 002b:00007f2ee5c970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.771959][T15586] RAX: ffffffffffffffda RBX: 00007f2ee74c5fa8 RCX: 00007f2ee723e159 [ 247.771977][T15586] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ee74c5fa8 [ 247.771993][T15586] RBP: 00007f2ee74c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 247.772009][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.772023][T15586] R13: 00007f2ee74c6038 R14: 00007ffde768f6e0 R15: 00007ffde768f7c8 [ 247.772041][T15586] [ 248.153917][T15594] batman_adv: batadv0: Adding interface: syzkaller0 [ 248.153944][T15594] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.153993][T15594] batman_adv: batadv0: Interface activated: syzkaller0 [ 248.272891][ T29] audit: type=1326 audit(1790334400.537:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.0.3676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a520e159 code=0x0 [ 248.387920][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3680'. [ 248.412930][T15593] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 248.436232][T15593] batman_adv: batadv0: Removing interface: syzkaller0 [ 248.520298][T15622] loop1: detected capacity change from 0 to 128 [ 248.533148][ T29] audit: type=1400 audit(1790334400.807:515): avc: denied { mount } for pid=15623 comm="syz.0.3687" name="/" dev="hugetlbfs" ino=37857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 248.540509][T15622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 248.540560][T15622] System zones: 1-3, 19-19, 35-36 [ 248.542153][T15622] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 248.542394][T15622] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.738938][ T29] audit: type=1400 audit(1790334401.007:516): avc: denied { mount } for pid=15631 comm="syz.2.3689" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 248.769580][T15643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3693'. [ 248.770510][T14142] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.792780][ T29] audit: type=1400 audit(1790334401.067:517): avc: denied { write } for pid=15636 comm="syz.3.3692" name="usb_gadget" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.792818][ T29] audit: type=1400 audit(1790334401.067:518): avc: denied { add_name } for pid=15636 comm="syz.3.3692" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.793571][ T29] audit: type=1400 audit(1790334401.067:519): avc: denied { create } for pid=15636 comm="syz.3.3692" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 249.007765][T15658] tmpfs: Unknown parameter '00000000000000000000000' [ 249.094288][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3705'. [ 252.321651][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3719'. [ 252.501741][T15704] loop1: detected capacity change from 0 to 1024 [ 252.515059][T15704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 252.515097][T15704] System zones: 0-1, 3-12 [ 252.515864][T15704] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.517196][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 252.517213][ T29] audit: type=1400 audit(1790334404.787:523): avc: denied { write } for pid=15703 comm="syz.1.3720" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.604082][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 253.839979][T15767] batman_adv: batadv0: Adding interface: syzkaller0 [ 253.839997][T15767] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.840031][T15767] batman_adv: batadv0: Interface activated: syzkaller0 [ 254.039590][T15766] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 254.085460][T15766] batman_adv: batadv0: Removing interface: syzkaller0 [ 254.135680][T15776] syzkaller0: entered promiscuous mode [ 254.135705][T15776] syzkaller0: entered allmulticast mode [ 254.149476][T15777] netlink: 'syz.3.3749': attribute type 16 has an invalid length. [ 254.149509][T15777] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3749'. [ 254.157999][T15784] FAULT_INJECTION: forcing a failure. [ 254.157999][T15784] name failslab, interval 1, probability 0, space 0, times 0 [ 254.158029][T15784] CPU: 1 UID: 0 PID: 15784 Comm: syz.1.3754 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.158054][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.158067][T15784] Call Trace: [ 254.158075][T15784] [ 254.158083][T15784] __dump_stack+0x1d/0x30 [ 254.158176][T15784] dump_stack_lvl+0x95/0xd0 [ 254.158254][T15784] dump_stack+0x15/0x1b [ 254.158289][T15784] should_fail_ex+0x262/0x280 [ 254.158314][T15784] ? __get_vm_area_node+0x125/0x1f0 [ 254.158344][T15784] should_failslab+0x8c/0xb0 [ 254.158467][T15784] __kmalloc_cache_node_noprof+0x81/0x420 [ 254.158499][T15784] ? try_charge_memcg+0x269/0xae0 [ 254.158558][T15784] ? __get_vm_area_node+0x125/0x1f0 [ 254.158624][T15784] ? __css_rstat_updated+0xbb/0x280 [ 254.158691][T15784] __get_vm_area_node+0x125/0x1f0 [ 254.158722][T15784] __vmalloc_node_range_noprof+0x262/0x1000 [ 254.158795][T15784] ? copy_process+0x5a3/0x2350 [ 254.158818][T15784] ? __obj_cgroup_charge+0x194/0x250 [ 254.158941][T15784] ? __refill_obj_stock+0x1f8/0x3d0 [ 254.158967][T15784] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 254.159074][T15784] __vmalloc_node_noprof+0x89/0xc0 [ 254.159105][T15784] ? copy_process+0x5a3/0x2350 [ 254.159207][T15784] ? copy_process+0x5a3/0x2350 [ 254.159231][T15784] dup_task_struct+0x22a/0x750 [ 254.159325][T15784] copy_process+0x5a3/0x2350 [ 254.159355][T15784] kernel_clone+0x1c0/0x5f0 [ 254.159426][T15784] __x64_sys_clone+0x143/0x180 [ 254.159458][T15784] x64_sys_call+0x2479/0x2550 [ 254.159517][T15784] do_syscall_64+0x112/0x360 [ 254.159540][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.159602][T15784] RIP: 0033:0x7f2aec9de159 [ 254.159620][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.159639][T15784] RSP: 002b:00007f2aeb436fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 254.159661][T15784] RAX: ffffffffffffffda RBX: 00007f2aecc65fa0 RCX: 00007f2aec9de159 [ 254.159690][T15784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 254.159704][T15784] RBP: 00007f2aeca7506b R08: 0000000000000000 R09: 0000000000000000 [ 254.159718][T15784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.159731][T15784] R13: 00007f2aecc66038 R14: 00007f2aecc65fa0 R15: 00007ffc83219a88 [ 254.159751][T15784] [ 254.165590][T15784] syz.1.3754: vmalloc error: size 16384, align 0x4000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 254.165715][T15784] CPU: 1 UID: 0 PID: 15784 Comm: syz.1.3754 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.165759][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.165772][T15784] Call Trace: [ 254.165779][T15784] [ 254.165786][T15784] __dump_stack+0x1d/0x30 [ 254.165812][T15784] dump_stack_lvl+0x95/0xd0 [ 254.165907][T15784] dump_stack+0x15/0x1b [ 254.165927][T15784] warn_alloc+0x146/0x1c0 [ 254.165970][T15784] __vmalloc_node_range_noprof+0x28a/0x1000 [ 254.166002][T15784] ? __obj_cgroup_charge+0x194/0x250 [ 254.166088][T15784] ? __refill_obj_stock+0x1f8/0x3d0 [ 254.166113][T15784] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 254.166180][T15784] __vmalloc_node_noprof+0x89/0xc0 [ 254.166211][T15784] ? copy_process+0x5a3/0x2350 [ 254.166259][T15784] ? copy_process+0x5a3/0x2350 [ 254.166283][T15784] dup_task_struct+0x22a/0x750 [ 254.166307][T15784] copy_process+0x5a3/0x2350 [ 254.166400][T15784] kernel_clone+0x1c0/0x5f0 [ 254.166428][T15784] __x64_sys_clone+0x143/0x180 [ 254.166481][T15784] x64_sys_call+0x2479/0x2550 [ 254.166508][T15784] do_syscall_64+0x112/0x360 [ 254.166531][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.166554][T15784] RIP: 0033:0x7f2aec9de159 [ 254.166573][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.166635][T15784] RSP: 002b:00007f2aeb436fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 254.166656][T15784] RAX: ffffffffffffffda RBX: 00007f2aecc65fa0 RCX: 00007f2aec9de159 [ 254.166705][T15784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 254.166719][T15784] RBP: 00007f2aeca7506b R08: 0000000000000000 R09: 0000000000000000 [ 254.166733][T15784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.166802][T15784] R13: 00007f2aecc66038 R14: 00007f2aecc65fa0 R15: 00007ffc83219a88 [ 254.166823][T15784] [ 254.166839][T15784] Mem-Info: [ 254.166845][T15784] active_anon:16954 inactive_anon:12 isolated_anon:0 [ 254.166845][T15784] active_file:9983 inactive_file:12784 isolated_file:0 [ 254.166845][T15784] unevictable:0 dirty:198 writeback:0 [ 254.166845][T15784] slab_reclaimable:3512 slab_unreclaimable:21575 [ 254.166845][T15784] mapped:29315 shmem:266 pagetables:1130 [ 254.166845][T15784] sec_pagetables:0 bounce:0 [ 254.166845][T15784] kernel_misc_reclaimable:0 [ 254.166845][T15784] free:1858720 free_pcp:17653 free_cma:0 [ 254.166957][T15784] Node 0 active_anon:67816kB inactive_anon:48kB active_file:39932kB inactive_file:51136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117260kB dirty:792kB writeback:0kB shmem:1064kB kernel_stack:4480kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 254.168496][T15784] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.168564][T15784] lowmem_reserve[]: 0 2878 7856 7856 [ 254.168619][T15784] Node 0 DMA32 free:2943684kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947208kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 254.168832][T15784] lowmem_reserve[]: 0 0 4978 4978 [ 254.168861][T15784] Node 0 Normal free:4475836kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:67816kB inactive_anon:48kB active_file:39932kB inactive_file:51136kB unevictable:0kB writepending:792kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:67088kB local_pcp:22596kB free_cma:0kB [ 254.168994][T15784] lowmem_reserve[]: 0 0 0 0 [ 254.169061][T15784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 254.169332][T15784] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943684kB [ 254.169580][T15784] Node 0 Normal: 574*4kB (UME) 390*8kB (UM) 664*16kB (UME) 129*32kB (UM) 64*64kB (UM) 196*128kB (UM) 137*256kB (UM) 45*512kB (UME) 16*1024kB (UM) 11*2048kB (UM) 1057*4096kB (UM) = 4475848kB [ 254.169878][T15784] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 254.169957][T15784] 23059 total pagecache pages [ 254.169966][T15784] 30 pages in swap cache [ 254.169973][T15784] Free swap = 124876kB [ 254.170053][T15784] Total swap = 124996kB [ 254.170060][T15784] 2097051 pages RAM [ 254.170067][T15784] 0 pages HighMem/MovableOnly [ 254.170075][T15784] 81852 pages reserved [ 254.240096][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3756'. [ 254.328393][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 254.347529][T15795] team0: Device wg0 is of different type [ 254.552072][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3766'. [ 254.650203][T15817] syzkaller0: entered promiscuous mode [ 254.650224][T15817] syzkaller0: entered allmulticast mode [ 254.654778][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 254.721409][T15826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3770'. [ 254.768618][T15829] syz.1.3773 (15829): /proc/15828/oom_adj is deprecated, please use /proc/15828/oom_score_adj instead. [ 255.002368][T15842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3778'. [ 255.008909][T15822] syzkaller0: entered promiscuous mode [ 255.008931][T15822] syzkaller0: entered allmulticast mode [ 255.151487][ T29] audit: type=1400 audit(1790334407.417:524): avc: denied { sqpoll } for pid=15862 comm="syz.3.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 255.282603][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'. [ 256.106947][T15970] tmpfs: Bad value for 'mpol' [ 256.173762][T15958] loop4: detected capacity change from 0 to 8192 [ 256.174611][T15958] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.242032][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3803'. [ 257.578347][T16066] syzkaller0: entered promiscuous mode [ 257.578430][T16066] syzkaller0: entered allmulticast mode [ 257.918828][T16095] loop4: detected capacity change from 0 to 256 [ 258.590283][T16118] loop3: detected capacity change from 0 to 4096 [ 258.604817][T16118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.625742][ T29] audit: type=1400 audit(1790334410.907:525): avc: denied { write } for pid=16117 comm="syz.3.3829" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.625803][T16118] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.3829: invalid fast symlink length 131109 [ 258.696233][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.800564][T16141] netlink: 'syz.2.3837': attribute type 25 has an invalid length. [ 259.172839][ T29] audit: type=1400 audit(1790334411.417:526): avc: denied { accept } for pid=16162 comm="syz.0.3845" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.265275][T16181] netlink: 'syz.2.3852': attribute type 16 has an invalid length. [ 260.265323][T16181] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3852'. [ 260.933861][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3859'. [ 260.963035][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3859'. [ 261.329202][T16215] syzkaller0: entered promiscuous mode [ 261.329224][T16215] syzkaller0: entered allmulticast mode [ 261.979265][T16230] loop1: detected capacity change from 0 to 512 [ 261.982459][T16230] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.3873: bg 0: block 5: invalid block bitmap [ 261.982490][T16230] loop1: lost filesystem error report for type 5 error -117 [ 261.982614][T16230] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 261.982690][T16230] loop1: lost filesystem error report for type 5 error -117 [ 261.982764][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 261.982785][ C0] EXT4-fs (loop1): initial error at time 1790334414: ext4_validate_block_bitmap:436 [ 261.982812][ C0] EXT4-fs (loop1): last error at time 1790334414: ext4_mb_clear_bb:6680 [ 261.983601][T16230] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3873: invalid indirect mapped block 3 (level 2) [ 261.983647][T16230] fserror_report: 1 callbacks suppressed [ 261.983661][T16230] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.990643][T16232] loop3: detected capacity change from 0 to 512 [ 262.003153][T16230] EXT4-fs (loop1): 1 orphan inode deleted [ 262.003182][T16230] EXT4-fs (loop1): 1 truncate cleaned up [ 262.003628][T16230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.019755][T16232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.019824][T16232] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.094208][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.094727][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.175192][T16245] netlink: 'syz.2.3880': attribute type 4 has an invalid length. [ 262.826771][T16271] loop3: detected capacity change from 0 to 512 [ 262.834047][T16271] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.3889: corrupted in-inode xattr: invalid ea_ino [ 262.834104][T16271] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.834370][T16271] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3889: couldn't read orphan inode 15 (err -117) [ 262.834472][T16271] loop3: lost filesystem error report for type 5 error -117 [ 262.835944][T16271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.973011][ T29] audit: type=1400 audit(1790334415.247:527): avc: denied { write } for pid=16268 comm="syz.3.3889" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.974012][T16271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3889: bg 0: block 265: padding at end of block bitmap is not set [ 263.360127][T16288] FAULT_INJECTION: forcing a failure. [ 263.360127][T16288] name failslab, interval 1, probability 0, space 0, times 0 [ 263.360173][T16288] CPU: 1 UID: 0 PID: 16288 Comm: syz.4.3894 Not tainted syzkaller #0 PREEMPT(lazy) [ 263.360281][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.360296][T16288] Call Trace: [ 263.360313][T16288] [ 263.360322][T16288] __dump_stack+0x1d/0x30 [ 263.360348][T16288] dump_stack_lvl+0x95/0xd0 [ 263.360425][T16288] dump_stack+0x15/0x1b [ 263.360450][T16288] should_fail_ex+0x262/0x280 [ 263.360479][T16288] ? offload_action_alloc+0x29/0x190 [ 263.360500][T16288] should_failslab+0x8c/0xb0 [ 263.360529][T16288] __kmalloc_noprof+0xd0/0x4d0 [ 263.360573][T16288] ? offload_action_alloc+0x29/0x190 [ 263.360595][T16288] offload_action_alloc+0x29/0x190 [ 263.360620][T16288] tcf_action_offload_add_ex+0x12a/0x3c0 [ 263.360675][T16288] tcf_action_init+0x369/0x700 [ 263.360749][T16288] tc_ctl_action+0x29e/0x860 [ 263.360787][T16288] ? __pfx_tc_ctl_action+0x10/0x10 [ 263.360827][T16288] rtnetlink_rcv_msg+0x6a7/0x720 [ 263.360859][T16288] netlink_rcv_skb+0x11e/0x220 [ 263.360960][T16288] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.361032][T16288] rtnetlink_rcv+0x1c/0x30 [ 263.361056][T16288] netlink_unicast+0x5a9/0x680 [ 263.361084][T16288] netlink_sendmsg+0x5be/0x6f0 [ 263.361271][T16288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.361357][T16288] ____sys_sendmsg+0x532/0x580 [ 263.361386][T16288] ___sys_sendmsg+0x195/0x1e0 [ 263.361420][T16288] __x64_sys_sendmsg+0xd4/0x160 [ 263.361450][T16288] x64_sys_call+0x22ab/0x2550 [ 263.361558][T16288] do_syscall_64+0x112/0x360 [ 263.361579][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.361644][T16288] RIP: 0033:0x7f2ee723e159 [ 263.361660][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.361698][T16288] RSP: 002b:00007f2ee5c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.361725][T16288] RAX: ffffffffffffffda RBX: 00007f2ee74c5fa0 RCX: 00007f2ee723e159 [ 263.361741][T16288] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 263.361889][T16288] RBP: 00007f2ee72d506b R08: 0000000000000000 R09: 0000000000000000 [ 263.361905][T16288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.361920][T16288] R13: 00007f2ee74c6038 R14: 00007f2ee74c5fa0 R15: 00007ffde768f7c8 [ 263.361939][T16288] [ 263.396853][T16291] loop1: detected capacity change from 0 to 512 [ 263.400760][T16291] EXT4-fs: Ignoring removed nobh option [ 263.411819][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.458625][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.3895: corrupted inode contents [ 263.458653][T16291] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.458898][T16291] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #3: comm syz.1.3895: mark_inode_dirty error [ 263.458924][T16291] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.459354][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.3895: corrupted inode contents [ 263.459379][T16291] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.460563][T16291] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3895: mark_inode_dirty error [ 263.460675][T16291] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.460801][T16291] Quota error (device loop1): write_blk: dquota write failed [ 263.460826][T16291] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 263.460848][T16291] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3895: Failed to acquire dquot type 0 [ 263.460881][T16291] loop1: lost filesystem error report for type 5 error -117 [ 263.462076][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3895: corrupted inode contents [ 263.462102][T16291] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.462271][T16291] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #16: comm syz.1.3895: mark_inode_dirty error [ 263.462335][T16291] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.462574][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3895: corrupted inode contents [ 263.462598][T16291] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.463851][T16291] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3895: mark_inode_dirty error [ 263.463877][T16291] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.464007][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3895: corrupted inode contents [ 263.464111][T16291] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 263.464136][T16291] loop1: lost filesystem error report for type 5 error -117 [ 263.464235][T16291] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.3895: corrupted inode contents [ 263.464386][T16291] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.3895: mark_inode_dirty error [ 263.464524][T16291] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 263.464542][T16291] loop1: lost filesystem error report for type 5 error -117 [ 263.465025][T16291] EXT4-fs (loop1): 1 truncate cleaned up [ 263.465398][T16291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.465463][T16291] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.485939][T16291] EXT4-fs (loop1): shut down requested (1) [ 263.486207][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486234][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486362][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486382][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486562][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 263.486589][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486615][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486647][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486760][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.486778][T16291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 263.486837][ T29] audit: type=1400 audit(1790334415.767:528): avc: denied { write } for pid=16290 comm="syz.1.3895" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.555562][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.669283][T16309] batman_adv: batadv0: Adding interface: syzkaller0 [ 263.669345][T16309] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.669403][T16309] batman_adv: batadv0: Interface activated: syzkaller0 [ 264.110548][T16306] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 264.132019][T16306] batman_adv: batadv0: Removing interface: syzkaller0 [ 264.271409][ T29] audit: type=1400 audit(1790334416.537:529): avc: denied { getopt } for pid=16334 comm="syz.0.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.295358][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 264.369166][ T29] audit: type=1400 audit(1790334416.637:530): avc: denied { read } for pid=16342 comm="syz.1.3916" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.415602][T16357] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3919'. [ 264.583479][T16366] loop3: detected capacity change from 0 to 4096 [ 264.583919][T16366] EXT4-fs: Ignoring removed i_version option [ 264.584001][T16366] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.584032][T16366] EXT4-fs: test_dummy_encryption option not supported [ 265.409360][T16398] syzkaller0: entered promiscuous mode [ 265.409383][T16398] syzkaller0: entered allmulticast mode [ 265.560088][T16415] loop1: detected capacity change from 0 to 512 [ 265.574384][T16415] EXT4-fs (loop1): 1 truncate cleaned up [ 265.576980][T16415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.606763][T14142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.984965][T16472] loop3: detected capacity change from 0 to 512 [ 265.991476][T16472] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.3954: bg 0: block 5: invalid block bitmap [ 265.991513][T16472] loop3: lost filesystem error report for type 5 error -117 [ 265.991705][T16472] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 265.991727][T16472] loop3: lost filesystem error report for type 5 error -117 [ 265.991930][T16472] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3954: invalid indirect mapped block 3 (level 2) [ 265.992786][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 265.992809][ C1] EXT4-fs (loop3): initial error at time 1790334418: ext4_validate_block_bitmap:436 [ 265.992830][ C1] EXT4-fs (loop3): last error at time 1790334418: ext4_free_branches:1023: inode 11 [ 265.995078][T16472] EXT4-fs (loop3): 1 orphan inode deleted [ 265.995098][T16472] EXT4-fs (loop3): 1 truncate cleaned up [ 265.995783][T16472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.232469][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 266.523649][T13379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.573681][T16535] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 266.663161][T16532] syzkaller0: entered promiscuous mode [ 266.663263][T16532] syzkaller0: entered allmulticast mode [ 266.714940][ T29] audit: type=1400 audit(1790334418.987:531): avc: denied { read } for pid=16549 comm="syz.1.3965" name="trace_pipe" dev="tracefs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 266.714977][ T29] audit: type=1400 audit(1790334418.987:532): avc: denied { open } for pid=16549 comm="syz.1.3965" path="/161/mnt/trace_pipe" dev="tracefs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 267.163124][T16588] syzkaller0: entered promiscuous mode [ 267.163150][T16588] syzkaller0: entered allmulticast mode [ 267.646297][T16647] ================================================================== [ 267.646338][T16647] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 267.646383][T16647] [ 267.646390][T16647] write to 0xffff88811e01ecb0 of 8 bytes by task 71 on cpu 0: [ 267.646408][T16647] release_task+0x710/0xb90 [ 267.646439][T16647] wait_consider_task+0x10ef/0x15f0 [ 267.646475][T16647] __do_wait+0x33c/0x500 [ 267.646500][T16647] do_wait+0xb6/0x230 [ 267.646529][T16647] kernel_wait+0x72/0x100 [ 267.646565][T16647] call_usermodehelper_exec_work+0x9c/0x160 [ 267.646601][T16647] process_scheduled_works+0x56a/0xa50 [ 267.646633][T16647] worker_thread+0x569/0x750 [ 267.646662][T16647] kthread+0x223/0x270 [ 267.646683][T16647] ret_from_fork+0x146/0x330 [ 267.646715][T16647] ret_from_fork_asm+0x1a/0x30 [ 267.646743][T16647] [ 267.646751][T16647] read to 0xffff88811e01e780 of 3456 bytes by task 16647 on cpu 1: [ 267.646771][T16647] memcpy_and_pad+0x48/0x80 [ 267.646805][T16647] arch_dup_task_struct+0x2c/0x40 [ 267.646847][T16647] dup_task_struct+0x6d/0x750 [ 267.646872][T16647] copy_process+0x5a3/0x2350 [ 267.646894][T16647] kernel_clone+0x1c0/0x5f0 [ 267.646918][T16647] __se_sys_clone3+0x1f5/0x230 [ 267.646946][T16647] __x64_sys_clone3+0x31/0x40 [ 267.646974][T16647] x64_sys_call+0x437/0x2550 [ 267.647003][T16647] do_syscall_64+0x112/0x360 [ 267.647024][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.647047][T16647] [ 267.647052][T16647] Reported by Kernel Concurrency Sanitizer on: [ 267.647065][T16647] CPU: 1 UID: 0 PID: 16647 Comm: syz.1.3976 Not tainted syzkaller #0 PREEMPT(lazy) [ 267.647094][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.647108][T16647] ================================================================== [ 269.537389][T16531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512