last executing test programs: 4.176616988s ago: executing program 2 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 4.037281691s ago: executing program 2 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x12}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 3.917793454s ago: executing program 2 (id=1130): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000001180)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./trace\x00', &(0x7f0000001200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000001240)='./trace/events/mac80211/enable\x00', 0x40000, 0x1) readv(r0, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 3.724916469s ago: executing program 2 (id=1135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) chmod(&(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x10) 3.568134253s ago: executing program 2 (id=1137): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e80)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7006050300"], 0x8) 3.358379938s ago: executing program 4 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3.245067021s ago: executing program 3 (id=1141): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240), 0x80, 0x63c, &(0x7f0000000500)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafF32tizs5rbnheyyZHcPu0u0zGgUK7IUa23L0mY+H5D05s1I7301enpvZjSaAEprOrtLI45ExJUkYqpt3mQ0Z04Xyz376MHV7JZEo/GbD5NIirzW8s+Lx4PZXdJ8zlvnI75V2Vzu8v3V63P1RtPDiJMrN26fXL6/emLpxty1hWsLN2dP/ez0mZmfz76xO3EeLB4vXPz19//2pz/8dPHt+okkzsbl6h/noyOO3TLdfHcjC7E9fywizmSJLu8L7KVK8XmsRsR3Yioq+VTTVCz9daiVAwaqUWn2T43xBlA6SQy7BsBwtMYBrW37QWwHj7Kn57L7e13iHyu23vfn20YHniVtW0ZZbsShXSh/LSK+eHD0X9kteuyHGNuFcnqW/ygivttt/Sd5/IfySLP400jbnpelZ4p9G1n9frmDOiRt6f4+fw93UNrLvkr87eshi/9s8Zjln+/x+lvt4pnumC5b+wNgONbPFR15NhCJjf4vGxm2xj/ROf5p/C8/NtTZd21H7/4v3YVX31o+/hvr1v+3+vv9eR+edozDklj75FL3l6x2Zrz3lwv/6FX+dNv4L7tl5bfGgn3Y8dDw6aOIox3x/zl/65MX6z/pMv7NFrnSZxm/eueDC73m7TD+HWs8jjjWdftnY1SapTqOTybROj55evbk4lJ9YaZ537WM/7/5+//0Kn/Y8Wfr/8BL8a9+rznn1es/y7vdZxn/vfT4RjO1b9O8yS3jT98fTy7nqfH8fqN5jScXi0WaD/fmVlbunHp1XVrL5I+zzfiP/6h7++8Rf77xMdH6yuzD7d9ef9b6Hu20w/X/vNHngr1k8c/3+Pxvtf7/3mcZn/7u7g+6zmi9JS/Fv7FPYmKbMQEAAAAAAEBZpfkx2CStvUinaa048PbtOJDWby2v/Hjx1t2b8xHH899DVtPWke6p5nSSTc8Wv4dtTZ/qmP5JRByOiH9WJvLp2tVqfX7YwQMAAAAAAAAAAAAAAAAAAMCIOFic//+8uB7Yx5U0rdWGXStgzwzyAnPAaNP+obzy9r8311sDRoz+H8qra/v3pQCloKlDeWn/UF7aP5SX9g/lpf1DefVu/5vmPBp0XQAAAACAXXP4h+tPxiJi7RcT+S0zXsyrDrVmwKB1tHFHAqFEKsOuADA0Lzp8p/9D6fS1jf9Z8eeAg68OMARJt8x8cNB4deNf7/pMAAAAAAAAAAAAAGAAjh1Zf5I4/x9KyWl/UF7bO/+/sv2nAiOj2x/++BMgKAfb+FByfewE2N9rhvP/AQAAAAAAAAAAAGDPTOa3JK0VPwOejDSt1SK+ERGHoposLtUXZiLimxHxbqW6L5ueHXalAQAAAAAAAAAAAAAAAAAA4DWzfH/1+ly9vnCnPfH5ppzXO9G64umo1Kc9EcnAi0ijI2ciIkYh9sEkxtpykoi1bM3vxisnO//8xCi8P0ViyF9MAAAAAAAAAAAAAAAAAABQQm3nHnd39N97XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Hsb1/8fXGLYMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX09fBgAA//925zoW") mkdir(&(0x7f0000000080)='./file1\x00', 0x4) 3.243802721s ago: executing program 4 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 3.032106296s ago: executing program 4 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./debug\x00', &(0x7f0000001180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./debug/clk/clk_summary\x00', 0x0, 0x0) unshare(0x28000600) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 2.940929368s ago: executing program 4 (id=1147): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="01154e00010000112233445588fbca010001160c", 0x22, 0x44011, &(0x7f00000002c0)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) 2.811884031s ago: executing program 4 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a0000000800050001000000500002801400010000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 2.690743664s ago: executing program 3 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) write(r0, &(0x7f0000000200)='0', 0x1) 2.600549606s ago: executing program 0 (id=1152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfe4f, &(0x7f0000000540)=ANY=[], 0x0) 2.499911269s ago: executing program 3 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x60, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1004, 0x6}, {0x1004}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x0) 2.424190921s ago: executing program 0 (id=1156): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r1, 0x0, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40000000, 0x0, 0x64) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) 2.217022056s ago: executing program 3 (id=1159): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="bc000000000000000000000007000000940401008616"], 0xc0}, 0x2400c880) 2.06404081s ago: executing program 3 (id=1160): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x17, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcc6]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.535842783s ago: executing program 1 (id=1161): r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000580)) 1.484763104s ago: executing program 1 (id=1162): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 1.427071445s ago: executing program 0 (id=1163): openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0xa0242, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x25) fcntl$notify(r0, 0x402, 0x21) unlinkat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x0) 1.425526335s ago: executing program 1 (id=1164): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x20, 0x28, 0x7, 0xfffff034}, {0x20, 0x6, 0x0, 0xfffbf00d}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 1.320025148s ago: executing program 1 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.319933548s ago: executing program 0 (id=1166): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)='8tQ', 0x3}, {0x0}], 0x2) sendmsg$can_j1939(r0, &(0x7f0000001600)={&(0x7f00000002c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0x6f1ec6ef3db0d83d}, 0x18, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000884) 1.314585888s ago: executing program 1 (id=1167): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r4 = getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0x3) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r7, &(0x7f0000000300)=[{{&(0x7f0000000340), 0x6e, 0x0}}], 0x1, 0x2022, &(0x7f00000003c0)) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000440)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x0) 1.266292949s ago: executing program 0 (id=1168): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), r1) preadv(r0, &(0x7f0000000980), 0x0, 0x9, 0x8001) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000ac0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 95.346278ms ago: executing program 4 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r1) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x8, 0x7ff, 0x9}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000b40), 0x56) sendmsg$kcm(r8, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r7, 0x42, 0x4000}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 95.126148ms ago: executing program 2 (id=1171): r0 = syz_create_resource$futex(&(0x7f0000000180)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000380)=0x1) futex(r1, 0xb, 0x1, 0x0, r0, 0x403) r2 = syz_create_resource$futex(&(0x7f0000000240)=0x4000000) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) 92.169547ms ago: executing program 3 (id=1172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000680)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@jqfmt_vfsold}, {@sysvgroups}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000b80)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 121.02µs ago: executing program 1 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000003240)={0x14, 0xa, 0xa, 0x103, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4) 0s ago: executing program 0 (id=1174): syz_open_procfs(0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000001940)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) syz_clone3(&(0x7f0000001980)={0x800000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): x381/0x410 [ 95.293374][ T5111] ? __x64_sys_futex+0xf0/0xf0 [ 95.298140][ T5111] ? __x64_sys_futex+0x1d/0xf0 [ 95.302915][ T5111] do_syscall_64+0x4c/0xa0 [ 95.307328][ T5111] ? clear_bhb_loop+0x60/0xb0 [ 95.312007][ T5111] ? clear_bhb_loop+0x60/0xb0 [ 95.316685][ T5111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.322572][ T5111] RIP: 0033:0x7f7a81b9e559 [ 95.326978][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.346575][ T5111] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.354985][ T5111] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 95.362969][ T5111] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a81e25fac [ 95.370933][ T5111] RBP: 00007f7a81e25fa0 R08: 00062269a896235e R09: 0000000000000000 [ 95.378919][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.386886][ T5111] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 95.394861][ T5111] [ 95.599652][ T5130] loop2: detected capacity change from 0 to 1024 [ 95.616238][ T5130] EXT4-fs: Ignoring removed bh option [ 95.676331][ T5130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.785960][ T5144] Zero length message leads to an empty skb [ 95.858407][ T5148] device syzkaller0 entered promiscuous mode [ 95.859448][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 95.930008][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 96.025046][ T5154] FAULT_INJECTION: forcing a failure. [ 96.025046][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 96.038130][ T5154] CPU: 0 PID: 5154 Comm: syz.4.291 Not tainted syzkaller #0 [ 96.045438][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.055507][ T5154] Call Trace: [ 96.058794][ T5154] [ 96.061749][ T5154] dump_stack_lvl+0x188/0x24e [ 96.066453][ T5154] ? show_regs_print_info+0x12/0x12 [ 96.071673][ T5154] ? load_image+0x410/0x410 [ 96.076193][ T5154] ? __might_sleep+0xd0/0xd0 [ 96.080773][ T5154] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.085786][ T5154] should_fail_ex+0x390/0x4c0 [ 96.090485][ T5154] should_failslab+0x5/0x20 [ 96.095011][ T5154] slab_pre_alloc_hook+0x59/0x300 [ 96.100048][ T5154] kmem_cache_alloc_lru+0x49/0x2e0 [ 96.105157][ T5154] ? __d_alloc+0x2e/0x6e0 [ 96.109479][ T5154] __d_alloc+0x2e/0x6e0 [ 96.113627][ T5154] d_alloc_parallel+0xdc/0x1590 [ 96.118472][ T5154] ? verify_lock_unused+0x140/0x140 [ 96.123667][ T5154] ? verify_lock_unused+0x140/0x140 [ 96.128864][ T5154] ? lockdep_softirqs_off+0x430/0x430 [ 96.134268][ T5154] ? lockdep_softirqs_off+0x430/0x430 [ 96.139634][ T5154] ? d_hash_and_lookup+0x1b0/0x1b0 [ 96.144783][ T5154] ? __init_waitqueue_head+0xa4/0x140 [ 96.150170][ T5154] __lookup_slow+0x134/0x3f0 [ 96.154753][ T5154] ? lookup_one_len+0x2d0/0x2d0 [ 96.159605][ T5154] ? down_read+0x1a8/0x2d0 [ 96.164034][ T5154] lookup_slow+0x53/0x70 [ 96.168276][ T5154] walk_component+0x2ad/0x3e0 [ 96.172950][ T5154] link_path_walk+0x6b1/0xea0 [ 96.177635][ T5154] ? handle_lookup_down+0x130/0x130 [ 96.182842][ T5154] path_openat+0x285/0x2f10 [ 96.187356][ T5154] ? kasan_set_track+0x60/0x70 [ 96.192121][ T5154] ? verify_lock_unused+0x140/0x140 [ 96.197320][ T5154] ? do_sys_openat2+0xdd/0x4f0 [ 96.202085][ T5154] ? do_filp_open+0x420/0x420 [ 96.206769][ T5154] do_filp_open+0x1ee/0x420 [ 96.211272][ T5154] ? vfs_tmpfile+0x470/0x470 [ 96.215860][ T5154] ? noop_direct_IO+0x10/0x10 [ 96.220538][ T5154] ? _raw_spin_unlock+0x24/0x40 [ 96.225396][ T5154] ? alloc_fd+0x590/0x640 [ 96.229736][ T5154] do_sys_openat2+0x14b/0x4f0 [ 96.234413][ T5154] ? do_sys_open+0xe0/0xe0 [ 96.238827][ T5154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.244809][ T5154] ? lock_chain_count+0x20/0x20 [ 96.249664][ T5154] __x64_sys_openat+0x135/0x160 [ 96.254522][ T5154] do_syscall_64+0x4c/0xa0 [ 96.258939][ T5154] ? clear_bhb_loop+0x60/0xb0 [ 96.263615][ T5154] ? clear_bhb_loop+0x60/0xb0 [ 96.268288][ T5154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.274179][ T5154] RIP: 0033:0x7fd6eff5ed8e [ 96.278588][ T5154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.298187][ T5154] RSP: 002b:00007fd6f0e52ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.306596][ T5154] RAX: ffffffffffffffda RBX: 00007fd6f0e536c0 RCX: 00007fd6eff5ed8e [ 96.314558][ T5154] RDX: 0000000000000002 RSI: 00007fd6f0e52f90 RDI: ffffffffffffff9c [ 96.322524][ T5154] RBP: 00007fd6f0035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 96.330485][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.338446][ T5154] R13: 00007fd6f0226038 R14: 00007fd6f0225fa0 R15: 00007ffcda37f138 [ 96.346423][ T5154] [ 96.588328][ T5170] FAULT_INJECTION: forcing a failure. [ 96.588328][ T5170] name fail_futex, interval 1, probability 0, space 0, times 0 [ 96.620876][ T5170] CPU: 1 PID: 5170 Comm: syz.4.298 Not tainted syzkaller #0 [ 96.628210][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.638279][ T5170] Call Trace: [ 96.641576][ T5170] [ 96.644517][ T5170] dump_stack_lvl+0x188/0x24e [ 96.649229][ T5170] ? show_regs_print_info+0x12/0x12 [ 96.654448][ T5170] ? load_image+0x410/0x410 [ 96.658975][ T5170] ? sched_slice+0x430/0x430 [ 96.663614][ T5170] should_fail_ex+0x390/0x4c0 [ 96.668315][ T5170] get_futex_key+0x1b1/0x1000 [ 96.672991][ T5170] ? futex_setup_timer+0xc0/0xc0 [ 96.677923][ T5170] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.683905][ T5170] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.688925][ T5170] ? lock_chain_count+0x20/0x20 [ 96.693775][ T5170] futex_wait_setup+0xb8/0x270 [ 96.698538][ T5170] ? futex_wait_multiple+0x920/0x920 [ 96.703816][ T5170] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 96.709700][ T5170] ? _raw_spin_unlock+0x40/0x40 [ 96.714548][ T5170] futex_wait+0x1b8/0x5c0 [ 96.718873][ T5170] ? futex_wait_setup+0x270/0x270 [ 96.723903][ T5170] ? percpu_counter_add_batch+0x135/0x150 [ 96.729627][ T5170] do_futex+0x310/0x320 [ 96.733783][ T5170] ? __ia32_sys_get_robust_list+0x100/0x100 [ 96.739689][ T5170] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.744737][ T5170] __se_sys_futex+0x381/0x410 [ 96.749427][ T5170] ? __x64_sys_futex+0xf0/0xf0 [ 96.754194][ T5170] ? __x64_sys_futex+0x1d/0xf0 [ 96.758954][ T5170] do_syscall_64+0x4c/0xa0 [ 96.763366][ T5170] ? clear_bhb_loop+0x60/0xb0 [ 96.768036][ T5170] ? clear_bhb_loop+0x60/0xb0 [ 96.772728][ T5170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.778616][ T5170] RIP: 0033:0x7fd6eff9e559 [ 96.783024][ T5170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.802627][ T5170] RSP: 002b:00007fd6f0e530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.811037][ T5170] RAX: ffffffffffffffda RBX: 00007fd6f0225fa8 RCX: 00007fd6eff9e559 [ 96.819041][ T5170] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd6f0225fa8 [ 96.827004][ T5170] RBP: 00007fd6f0225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 96.834969][ T5170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.842930][ T5170] R13: 00007fd6f0226038 R14: 00007ffcda37f050 R15: 00007ffcda37f138 [ 96.850908][ T5170] [ 96.896971][ T5174] loop2: detected capacity change from 0 to 512 [ 96.948747][ T5174] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.299: iget: bad i_size value: 38620345925642 [ 97.008007][ T5174] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.299: couldn't read orphan inode 15 (err -117) [ 97.035399][ T5174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.064300][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 97.265756][ T5185] FAULT_INJECTION: forcing a failure. [ 97.265756][ T5185] name fail_futex, interval 1, probability 0, space 0, times 0 [ 97.279508][ T5185] CPU: 0 PID: 5185 Comm: syz.1.304 Not tainted syzkaller #0 [ 97.286830][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.287019][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 97.296879][ T5185] Call Trace: [ 97.296889][ T5185] [ 97.296897][ T5185] dump_stack_lvl+0x188/0x24e [ 97.296927][ T5185] ? show_regs_print_info+0x12/0x12 [ 97.296948][ T5185] ? load_image+0x410/0x410 [ 97.326245][ T5185] ? neigh_release+0x80/0x80 [ 97.330826][ T5185] should_fail_ex+0x390/0x4c0 [ 97.335490][ T5185] get_futex_key+0x1b1/0x1000 [ 97.340175][ T5185] ? inet_ioctl+0x378/0x460 [ 97.344690][ T5185] ? inet_shutdown+0x370/0x370 [ 97.349440][ T5185] ? slab_free_freelist_hook+0x133/0x1b0 [ 97.355061][ T5185] ? futex_setup_timer+0xc0/0xc0 [ 97.359981][ T5185] ? tomoyo_path_number_perm+0x4fb/0x650 [ 97.365625][ T5185] ? __kmem_cache_free+0xb6/0x200 [ 97.370636][ T5185] futex_wake+0x123/0x4f0 [ 97.374961][ T5185] ? futex_wake_mark+0x150/0x150 [ 97.379897][ T5185] ? sock_do_ioctl+0x1b4/0x320 [ 97.384662][ T5185] do_futex+0x2e2/0x320 [ 97.388811][ T5185] ? __ia32_sys_get_robust_list+0x100/0x100 [ 97.394699][ T5185] __se_sys_futex+0x381/0x410 [ 97.399369][ T5185] ? __x64_sys_futex+0xf0/0xf0 [ 97.404134][ T5185] ? __x64_sys_futex+0x1d/0xf0 [ 97.408910][ T5185] do_syscall_64+0x4c/0xa0 [ 97.413320][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 97.417990][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 97.422675][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.428573][ T5185] RIP: 0033:0x7f7a81b9e559 [ 97.432982][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.452576][ T5185] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.460981][ T5185] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 97.468943][ T5185] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a81e25fac [ 97.476904][ T5185] RBP: 00007f7a81e25fa0 R08: 000de20e2b61b45c R09: 0000000000000000 [ 97.484867][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.492830][ T5185] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 97.500803][ T5185] [ 97.578963][ T5191] loop4: detected capacity change from 0 to 1024 [ 97.617685][ T5191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.636757][ T5191] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.688670][ T27] audit: type=1800 audit(1792382089.551:12): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.307" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 97.729124][ T5191] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 1: comm syz.4.307: lblock 1 mapped to illegal pblock 1 (length 5) [ 97.775850][ T5191] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.307: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 97.847581][ T5197] loop2: detected capacity change from 0 to 128 [ 97.948652][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 98.117829][ T5122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.228562][ T1172] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 98.375162][ T5220] Unsupported ieee802154 address type: 0 [ 98.517983][ T5226] FAULT_INJECTION: forcing a failure. [ 98.517983][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.530484][ T5215] fido_id[5215]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.570926][ T5226] CPU: 0 PID: 5226 Comm: syz.2.320 Not tainted syzkaller #0 [ 98.578250][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.588316][ T5226] Call Trace: [ 98.591606][ T5226] [ 98.594550][ T5226] dump_stack_lvl+0x188/0x24e [ 98.599256][ T5226] ? show_regs_print_info+0x12/0x12 [ 98.604476][ T5226] ? load_image+0x410/0x410 [ 98.609007][ T5226] ? __lock_acquire+0x7ea0/0x7ea0 [ 98.614051][ T5226] ? slab_free_freelist_hook+0x133/0x1b0 [ 98.619724][ T5226] should_fail_ex+0x390/0x4c0 [ 98.624484][ T5226] _copy_from_user+0x2c/0x170 [ 98.629185][ T5226] arp_ioctl+0x155/0x530 [ 98.633464][ T5226] ? neigh_release+0x80/0x80 [ 98.638082][ T5226] ? do_vfs_ioctl+0x1be3/0x1d40 [ 98.642953][ T5226] inet_ioctl+0x378/0x460 [ 98.647283][ T5226] ? inet_shutdown+0x370/0x370 [ 98.652039][ T5226] ? slab_free_freelist_hook+0x133/0x1b0 [ 98.657668][ T5226] ? tomoyo_path_number_perm+0x4fb/0x650 [ 98.663294][ T5226] ? __kmem_cache_free+0xb6/0x200 [ 98.668319][ T5226] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 98.673781][ T5226] sock_do_ioctl+0xfb/0x320 [ 98.678286][ T5226] ? sock_show_fdinfo+0xb0/0xb0 [ 98.683141][ T5226] sock_ioctl+0x48a/0x700 [ 98.687465][ T5226] ? sock_poll+0x420/0x420 [ 98.691881][ T5226] ? bpf_lsm_file_ioctl+0x5/0x10 [ 98.696816][ T5226] ? security_file_ioctl+0x7c/0xa0 [ 98.701919][ T5226] ? sock_poll+0x420/0x420 [ 98.706328][ T5226] __se_sys_ioctl+0xfa/0x170 [ 98.710914][ T5226] do_syscall_64+0x4c/0xa0 [ 98.715339][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 98.720017][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 98.724696][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.730580][ T5226] RIP: 0033:0x7f678799e559 [ 98.734995][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.754591][ T5226] RSP: 002b:00007f678890d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.763013][ T5226] RAX: ffffffffffffffda RBX: 00007f6787c25fa0 RCX: 00007f678799e559 [ 98.770981][ T5226] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000005 [ 98.778943][ T5226] RBP: 00007f6787a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 98.786903][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.794863][ T5226] R13: 00007f6787c26038 R14: 00007f6787c25fa0 R15: 00007ffc37875758 [ 98.802835][ T5226] [ 98.916877][ T5238] FAULT_INJECTION: forcing a failure. [ 98.916877][ T5238] name fail_futex, interval 1, probability 0, space 0, times 0 [ 98.951337][ T5238] CPU: 0 PID: 5238 Comm: syz.1.325 Not tainted syzkaller #0 [ 98.958662][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.968732][ T5238] Call Trace: [ 98.972026][ T5238] [ 98.974988][ T5238] dump_stack_lvl+0x188/0x24e [ 98.979694][ T5238] ? show_regs_print_info+0x12/0x12 [ 98.984913][ T5238] ? load_image+0x410/0x410 [ 98.989442][ T5238] ? release_firmware_map_entry+0x187/0x187 [ 98.995363][ T5238] ? plist_add+0x3d7/0x490 [ 98.999803][ T5238] ? verify_lock_unused+0x140/0x140 [ 99.005032][ T5238] should_fail_ex+0x390/0x4c0 [ 99.009746][ T5238] get_futex_key+0x1b1/0x1000 [ 99.014448][ T5238] ? __fget_files+0x28/0x460 [ 99.019102][ T5238] ? futex_setup_timer+0xc0/0xc0 [ 99.024064][ T5238] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.029119][ T5238] futex_wake+0x123/0x4f0 [ 99.033519][ T5238] ? __fget_files+0x28/0x460 [ 99.038147][ T5238] ? futex_wake_mark+0x150/0x150 [ 99.043107][ T5238] ? __fdget+0x18e/0x200 [ 99.047377][ T5238] do_futex+0x2e2/0x320 [ 99.051546][ T5238] ? security_bpf+0x7a/0xa0 [ 99.056078][ T5238] ? __ia32_sys_get_robust_list+0x100/0x100 [ 99.061990][ T5238] ? bpf_link_show_fdinfo+0x380/0x380 [ 99.067389][ T5238] __se_sys_futex+0x381/0x410 [ 99.072066][ T5238] ? __x64_sys_futex+0xf0/0xf0 [ 99.076827][ T5238] ? __x64_sys_futex+0x1d/0xf0 [ 99.081589][ T5238] do_syscall_64+0x4c/0xa0 [ 99.085999][ T5238] ? clear_bhb_loop+0x60/0xb0 [ 99.090675][ T5238] ? clear_bhb_loop+0x60/0xb0 [ 99.095350][ T5238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.101233][ T5238] RIP: 0033:0x7f7a81b9e559 [ 99.105638][ T5238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.125235][ T5238] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.133641][ T5238] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 99.141606][ T5238] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a81e25fac [ 99.149569][ T5238] RBP: 00007f7a81e25fa0 R08: 0034a044ad8c043a R09: 0000000000000000 [ 99.157534][ T5238] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 99.165496][ T5238] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 99.173483][ T5238] [ 99.457297][ T5263] loop3: detected capacity change from 0 to 512 [ 99.496718][ T5263] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 99.786198][ T5274] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 100.439513][ T5294] FAULT_INJECTION: forcing a failure. [ 100.439513][ T5294] name fail_futex, interval 1, probability 0, space 0, times 0 [ 100.459054][ T5294] CPU: 0 PID: 5294 Comm: syz.2.343 Not tainted syzkaller #0 [ 100.466380][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.476447][ T5294] Call Trace: [ 100.479736][ T5294] [ 100.482677][ T5294] dump_stack_lvl+0x188/0x24e [ 100.487385][ T5294] ? show_regs_print_info+0x12/0x12 [ 100.492606][ T5294] ? load_image+0x410/0x410 [ 100.497126][ T5294] ? neigh_release+0x80/0x80 [ 100.501738][ T5294] should_fail_ex+0x390/0x4c0 [ 100.506449][ T5294] get_futex_key+0x1b1/0x1000 [ 100.511148][ T5294] ? inet_ioctl+0x378/0x460 [ 100.515681][ T5294] ? inet_shutdown+0x370/0x370 [ 100.520459][ T5294] ? slab_free_freelist_hook+0x133/0x1b0 [ 100.526118][ T5294] ? futex_setup_timer+0xc0/0xc0 [ 100.531081][ T5294] ? tomoyo_path_number_perm+0x4fb/0x650 [ 100.536734][ T5294] ? __kmem_cache_free+0xb6/0x200 [ 100.541783][ T5294] futex_wake+0x123/0x4f0 [ 100.546152][ T5294] ? futex_wake_mark+0x150/0x150 [ 100.551116][ T5294] ? sock_do_ioctl+0x1b4/0x320 [ 100.555908][ T5294] do_futex+0x2e2/0x320 [ 100.560085][ T5294] ? __ia32_sys_get_robust_list+0x100/0x100 [ 100.566042][ T5294] __se_sys_futex+0x381/0x410 [ 100.570742][ T5294] ? __x64_sys_futex+0xf0/0xf0 [ 100.575528][ T5294] ? __x64_sys_futex+0x1d/0xf0 [ 100.580305][ T5294] do_syscall_64+0x4c/0xa0 [ 100.584737][ T5294] ? clear_bhb_loop+0x60/0xb0 [ 100.589429][ T5294] ? clear_bhb_loop+0x60/0xb0 [ 100.594126][ T5294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.600031][ T5294] RIP: 0033:0x7f678799e559 [ 100.604470][ T5294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.624086][ T5294] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.632516][ T5294] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 100.640513][ T5294] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 100.648509][ T5294] RBP: 00007f6787c25fa0 R08: 0018040caf8aa7ca R09: 0000000000000000 [ 100.656494][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.664513][ T5294] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 100.672526][ T5294] [ 101.035913][ T5319] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 101.244179][ T5332] loop3: detected capacity change from 0 to 512 [ 101.271415][ T5332] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 101.534876][ T5342] loop1: detected capacity change from 0 to 512 [ 101.580318][ T5342] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.653863][ T5342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.718485][ T5342] EXT4-fs (loop1): 1 truncate cleaned up [ 101.733961][ T5342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.835064][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 102.172391][ T5365] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 102.202586][ T5367] FAULT_INJECTION: forcing a failure. [ 102.202586][ T5367] name fail_futex, interval 1, probability 0, space 0, times 0 [ 102.261631][ T5367] CPU: 0 PID: 5367 Comm: syz.4.365 Not tainted syzkaller #0 [ 102.268979][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.279045][ T5367] Call Trace: [ 102.282335][ T5367] [ 102.285279][ T5367] dump_stack_lvl+0x188/0x24e [ 102.289983][ T5367] ? show_regs_print_info+0x12/0x12 [ 102.295203][ T5367] ? load_image+0x410/0x410 [ 102.299726][ T5367] ? neigh_release+0x80/0x80 [ 102.304348][ T5367] should_fail_ex+0x390/0x4c0 [ 102.309053][ T5367] get_futex_key+0x1b1/0x1000 [ 102.313746][ T5367] ? inet_ioctl+0x378/0x460 [ 102.318255][ T5367] ? inet_shutdown+0x370/0x370 [ 102.323010][ T5367] ? slab_free_freelist_hook+0x133/0x1b0 [ 102.328644][ T5367] ? futex_setup_timer+0xc0/0xc0 [ 102.333572][ T5367] ? tomoyo_path_number_perm+0x4fb/0x650 [ 102.339203][ T5367] ? __kmem_cache_free+0xb6/0x200 [ 102.344221][ T5367] futex_wake+0x123/0x4f0 [ 102.348547][ T5367] ? futex_wake_mark+0x150/0x150 [ 102.353488][ T5367] ? sock_do_ioctl+0x1b4/0x320 [ 102.358275][ T5367] do_futex+0x2e2/0x320 [ 102.362434][ T5367] ? __ia32_sys_get_robust_list+0x100/0x100 [ 102.368327][ T5367] __se_sys_futex+0x381/0x410 [ 102.373026][ T5367] ? __x64_sys_futex+0xf0/0xf0 [ 102.377786][ T5367] ? __x64_sys_futex+0x1d/0xf0 [ 102.382542][ T5367] do_syscall_64+0x4c/0xa0 [ 102.386950][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 102.391620][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 102.396298][ T5367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.402191][ T5367] RIP: 0033:0x7fd6eff9e559 [ 102.406611][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.426210][ T5367] RSP: 002b:00007fd6f0e530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.434615][ T5367] RAX: ffffffffffffffda RBX: 00007fd6f0225fa8 RCX: 00007fd6eff9e559 [ 102.442627][ T5367] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6f0225fac [ 102.450627][ T5367] RBP: 00007fd6f0225fa0 R08: 000a4e8731dd47f0 R09: 0000000000000000 [ 102.458591][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.466555][ T5367] R13: 00007fd6f0226038 R14: 00007ffcda37f050 R15: 00007ffcda37f138 [ 102.474530][ T5367] [ 102.856768][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 103.293853][ T5402] loop3: detected capacity change from 0 to 512 [ 103.335278][ T5402] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 103.589649][ T5415] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 103.820034][ T5420] FAULT_INJECTION: forcing a failure. [ 103.820034][ T5420] name fail_futex, interval 1, probability 0, space 0, times 0 [ 103.912284][ T5420] CPU: 0 PID: 5420 Comm: syz.2.381 Not tainted syzkaller #0 [ 103.919624][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.929692][ T5420] Call Trace: [ 103.932984][ T5420] [ 103.935927][ T5420] dump_stack_lvl+0x188/0x24e [ 103.940637][ T5420] ? show_regs_print_info+0x12/0x12 [ 103.945859][ T5420] ? load_image+0x410/0x410 [ 103.950384][ T5420] ? neigh_release+0x80/0x80 [ 103.955004][ T5420] should_fail_ex+0x390/0x4c0 [ 103.959712][ T5420] get_futex_key+0x1b1/0x1000 [ 103.964408][ T5420] ? inet_ioctl+0x378/0x460 [ 103.968948][ T5420] ? inet_shutdown+0x370/0x370 [ 103.973731][ T5420] ? slab_free_freelist_hook+0x133/0x1b0 [ 103.979392][ T5420] ? futex_setup_timer+0xc0/0xc0 [ 103.984355][ T5420] ? tomoyo_path_number_perm+0x4fb/0x650 [ 103.990014][ T5420] ? __kmem_cache_free+0xb6/0x200 [ 103.995061][ T5420] futex_wake+0x123/0x4f0 [ 103.999415][ T5420] ? futex_wake_mark+0x150/0x150 [ 104.004380][ T5420] ? sock_do_ioctl+0x1b4/0x320 [ 104.009180][ T5420] do_futex+0x2e2/0x320 [ 104.013360][ T5420] ? __ia32_sys_get_robust_list+0x100/0x100 [ 104.019325][ T5420] __se_sys_futex+0x381/0x410 [ 104.024030][ T5420] ? __x64_sys_futex+0xf0/0xf0 [ 104.028822][ T5420] ? __x64_sys_futex+0x1d/0xf0 [ 104.033609][ T5420] do_syscall_64+0x4c/0xa0 [ 104.038057][ T5420] ? clear_bhb_loop+0x60/0xb0 [ 104.042755][ T5420] ? clear_bhb_loop+0x60/0xb0 [ 104.047453][ T5420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.053383][ T5420] RIP: 0033:0x7f678799e559 [ 104.057816][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.077432][ T5420] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.085871][ T5420] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 104.093856][ T5420] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 104.101841][ T5420] RBP: 00007f6787c25fa0 R08: 002eaa63b3fa27b6 R09: 0000000000000000 [ 104.109827][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.117811][ T5420] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 104.125814][ T5420] [ 104.630390][ T5454] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 104.803127][ T5467] loop4: detected capacity change from 0 to 512 [ 104.845771][ T5471] device syzkaller0 entered promiscuous mode [ 104.859192][ T5473] capability: warning: `syz.3.398' uses deprecated v2 capabilities in a way that may be insecure [ 104.875740][ T5467] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 60416 [ 105.698040][ T5489] FAULT_INJECTION: forcing a failure. [ 105.698040][ T5489] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.786619][ T5491] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 106.138904][ T5489] CPU: 0 PID: 5489 Comm: syz.4.405 Not tainted syzkaller #0 [ 106.146240][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.156314][ T5489] Call Trace: [ 106.159596][ T5489] [ 106.162534][ T5489] dump_stack_lvl+0x188/0x24e [ 106.167229][ T5489] ? show_regs_print_info+0x12/0x12 [ 106.172441][ T5489] ? load_image+0x410/0x410 [ 106.176953][ T5489] ? neigh_release+0x80/0x80 [ 106.181560][ T5489] should_fail_ex+0x390/0x4c0 [ 106.186257][ T5489] get_futex_key+0x1b1/0x1000 [ 106.190948][ T5489] ? inet_ioctl+0x378/0x460 [ 106.195466][ T5489] ? inet_shutdown+0x370/0x370 [ 106.200237][ T5489] ? slab_free_freelist_hook+0x133/0x1b0 [ 106.205885][ T5489] ? futex_setup_timer+0xc0/0xc0 [ 106.210831][ T5489] ? tomoyo_path_number_perm+0x4fb/0x650 [ 106.216474][ T5489] ? __kmem_cache_free+0xb6/0x200 [ 106.221510][ T5489] futex_wake+0x123/0x4f0 [ 106.225857][ T5489] ? futex_wake_mark+0x150/0x150 [ 106.230812][ T5489] ? sock_do_ioctl+0x1b4/0x320 [ 106.235587][ T5489] do_futex+0x2e2/0x320 [ 106.239731][ T5489] ? __ia32_sys_get_robust_list+0x100/0x100 [ 106.245627][ T5489] __se_sys_futex+0x381/0x410 [ 106.250323][ T5489] ? __x64_sys_futex+0xf0/0xf0 [ 106.255109][ T5489] ? __x64_sys_futex+0x1d/0xf0 [ 106.259898][ T5489] do_syscall_64+0x4c/0xa0 [ 106.264326][ T5489] ? clear_bhb_loop+0x60/0xb0 [ 106.269015][ T5489] ? clear_bhb_loop+0x60/0xb0 [ 106.273704][ T5489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.279606][ T5489] RIP: 0033:0x7fd6eff9e559 [ 106.284031][ T5489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.301690][ T5493] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 106.303628][ T5489] RSP: 002b:00007fd6f0e530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.320025][ T5489] RAX: ffffffffffffffda RBX: 00007fd6f0225fa8 RCX: 00007fd6eff9e559 [ 106.328007][ T5489] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6f0225fac [ 106.335988][ T5489] RBP: 00007fd6f0225fa0 R08: 00278355b671bc1e R09: 0000000000000000 [ 106.343973][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.351951][ T5489] R13: 00007fd6f0226038 R14: 00007ffcda37f050 R15: 00007ffcda37f138 [ 106.359951][ T5489] [ 106.761653][ T5509] device syzkaller0 entered promiscuous mode [ 106.806054][ T5511] loop3: detected capacity change from 0 to 512 [ 106.848551][ T5511] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 106.963154][ T5521] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 107.118652][ T5526] FAULT_INJECTION: forcing a failure. [ 107.118652][ T5526] name fail_futex, interval 1, probability 0, space 0, times 0 [ 107.165960][ T5526] CPU: 1 PID: 5526 Comm: syz.1.420 Not tainted syzkaller #0 [ 107.173289][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.183358][ T5526] Call Trace: [ 107.186647][ T5526] [ 107.189627][ T5526] dump_stack_lvl+0x188/0x24e [ 107.194332][ T5526] ? show_regs_print_info+0x12/0x12 [ 107.199555][ T5526] ? load_image+0x410/0x410 [ 107.204079][ T5526] ? neigh_release+0x80/0x80 [ 107.208694][ T5526] should_fail_ex+0x390/0x4c0 [ 107.213404][ T5526] get_futex_key+0x1b1/0x1000 [ 107.218095][ T5526] ? inet_ioctl+0x378/0x460 [ 107.222618][ T5526] ? inet_shutdown+0x370/0x370 [ 107.227401][ T5526] ? slab_free_freelist_hook+0x133/0x1b0 [ 107.233051][ T5526] ? futex_setup_timer+0xc0/0xc0 [ 107.238007][ T5526] ? tomoyo_path_number_perm+0x4fb/0x650 [ 107.243661][ T5526] ? __kmem_cache_free+0xb6/0x200 [ 107.248707][ T5526] futex_wake+0x123/0x4f0 [ 107.253059][ T5526] ? futex_wake_mark+0x150/0x150 [ 107.258065][ T5526] ? sock_do_ioctl+0x1b4/0x320 [ 107.262850][ T5526] do_futex+0x2e2/0x320 [ 107.267029][ T5526] ? __ia32_sys_get_robust_list+0x100/0x100 [ 107.272953][ T5526] __se_sys_futex+0x381/0x410 [ 107.277651][ T5526] ? __x64_sys_futex+0xf0/0xf0 [ 107.282478][ T5526] ? __x64_sys_futex+0x1d/0xf0 [ 107.287260][ T5526] do_syscall_64+0x4c/0xa0 [ 107.291703][ T5526] ? clear_bhb_loop+0x60/0xb0 [ 107.296425][ T5526] ? clear_bhb_loop+0x60/0xb0 [ 107.301178][ T5526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.307086][ T5526] RIP: 0033:0x7f7a81b9e559 [ 107.311513][ T5526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.331131][ T5526] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.339576][ T5526] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 107.347559][ T5526] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a81e25fac [ 107.355544][ T5526] RBP: 00007f7a81e25fa0 R08: 0004f13cb84ec772 R09: 0000000000000000 [ 107.363529][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.371515][ T5526] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 107.379516][ T5526] [ 107.677405][ T5547] device syzkaller0 entered promiscuous mode [ 107.713210][ T5550] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 107.975645][ T5567] FAULT_INJECTION: forcing a failure. [ 107.975645][ T5567] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.023808][ T5567] CPU: 1 PID: 5567 Comm: syz.2.440 Not tainted syzkaller #0 [ 108.031135][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.041204][ T5567] Call Trace: [ 108.044504][ T5567] [ 108.047459][ T5567] dump_stack_lvl+0x188/0x24e [ 108.052162][ T5567] ? show_regs_print_info+0x12/0x12 [ 108.057385][ T5567] ? load_image+0x410/0x410 [ 108.061902][ T5567] ? neigh_release+0x80/0x80 [ 108.066517][ T5567] should_fail_ex+0x390/0x4c0 [ 108.071229][ T5567] get_futex_key+0x1b1/0x1000 [ 108.075924][ T5567] ? inet_ioctl+0x378/0x460 [ 108.080452][ T5567] ? inet_shutdown+0x370/0x370 [ 108.085237][ T5567] ? slab_free_freelist_hook+0x133/0x1b0 [ 108.090897][ T5567] ? futex_setup_timer+0xc0/0xc0 [ 108.095887][ T5567] ? tomoyo_path_number_perm+0x4fb/0x650 [ 108.101545][ T5567] ? __kmem_cache_free+0xb6/0x200 [ 108.106598][ T5567] futex_wake+0x123/0x4f0 [ 108.110945][ T5567] ? futex_wake_mark+0x150/0x150 [ 108.115911][ T5567] ? sock_do_ioctl+0x1b4/0x320 [ 108.120675][ T5567] do_futex+0x2e2/0x320 [ 108.124835][ T5567] ? __ia32_sys_get_robust_list+0x100/0x100 [ 108.130731][ T5567] __se_sys_futex+0x381/0x410 [ 108.135416][ T5567] ? __x64_sys_futex+0xf0/0xf0 [ 108.140177][ T5567] ? __x64_sys_futex+0x1d/0xf0 [ 108.144931][ T5567] do_syscall_64+0x4c/0xa0 [ 108.149342][ T5567] ? clear_bhb_loop+0x60/0xb0 [ 108.154011][ T5567] ? clear_bhb_loop+0x60/0xb0 [ 108.158704][ T5567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.164591][ T5567] RIP: 0033:0x7f678799e559 [ 108.168996][ T5567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.188594][ T5567] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.197005][ T5567] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 108.204972][ T5567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 108.212933][ T5567] RBP: 00007f6787c25fa0 R08: 003833cbb96fb176 R09: 0000000000000000 [ 108.220895][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.228858][ T5567] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 108.236829][ T5567] [ 108.369451][ T5582] loop2: detected capacity change from 0 to 512 [ 108.413554][ T5582] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 60416 [ 108.446185][ T5585] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 108.470199][ T5586] device syzkaller0 entered promiscuous mode [ 108.647507][ T5594] netlink: 64 bytes leftover after parsing attributes in process `syz.0.450'. [ 108.689869][ T5596] FAULT_INJECTION: forcing a failure. [ 108.689869][ T5596] name failslab, interval 1, probability 0, space 0, times 0 [ 108.702764][ T5596] CPU: 0 PID: 5596 Comm: syz.3.448 Not tainted syzkaller #0 [ 108.710054][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.720093][ T5596] Call Trace: [ 108.723359][ T5596] [ 108.726277][ T5596] dump_stack_lvl+0x188/0x24e [ 108.730949][ T5596] ? __wake_up+0x12e/0x1a0 [ 108.735357][ T5596] ? show_regs_print_info+0x12/0x12 [ 108.740542][ T5596] ? load_image+0x410/0x410 [ 108.745039][ T5596] should_fail_ex+0x390/0x4c0 [ 108.749710][ T5596] should_failslab+0x5/0x20 [ 108.754199][ T5596] slab_pre_alloc_hook+0x59/0x300 [ 108.759212][ T5596] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.764228][ T5596] kmem_cache_alloc+0x56/0x2f0 [ 108.768977][ T5596] ? __sigqueue_alloc+0x40c/0x520 [ 108.774032][ T5596] ? __sigqueue_alloc+0x32/0x520 [ 108.778962][ T5596] __sigqueue_alloc+0x40c/0x520 [ 108.783810][ T5596] __send_signal_locked+0x22f/0xde0 [ 108.789008][ T5596] do_notify_parent+0xb24/0xd10 [ 108.793852][ T5596] ? trace_signal_generate+0x260/0x260 [ 108.799312][ T5596] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.804338][ T5596] release_task+0x121c/0x1680 [ 108.809013][ T5596] ? do_exit+0x18d7/0x2570 [ 108.813418][ T5596] ? delayed_put_task_struct+0x2f0/0x2f0 [ 108.819060][ T5596] ? _raw_write_lock_irq+0xb7/0xf0 [ 108.824158][ T5596] ? _raw_write_lock_irqsave+0x100/0x100 [ 108.829777][ T5596] ? _raw_write_unlock_irq+0x1f/0x40 [ 108.835045][ T5596] ? lockdep_hardirqs_on+0x94/0x140 [ 108.840234][ T5596] do_exit+0x18d7/0x2570 [ 108.844477][ T5596] ? put_task_struct+0x80/0x80 [ 108.849239][ T5596] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.855212][ T5596] ? lock_chain_count+0x20/0x20 [ 108.860064][ T5596] ? _raw_spin_lock_irq+0xb7/0xf0 [ 108.865075][ T5596] do_group_exit+0x229/0x2e0 [ 108.869658][ T5596] ? lockdep_hardirqs_on+0x94/0x140 [ 108.874850][ T5596] get_signal+0x1259/0x1340 [ 108.879360][ T5596] arch_do_signal_or_restart+0xc4/0x1310 [ 108.884992][ T5596] ? do_futex+0x310/0x320 [ 108.889315][ T5596] ? get_sigframe_size+0x10/0x10 [ 108.894266][ T5596] ? __ia32_sys_get_robust_list+0x100/0x100 [ 108.900157][ T5596] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.905612][ T5596] exit_to_user_mode_loop+0x70/0x110 [ 108.910895][ T5596] exit_to_user_mode_prepare+0xee/0x180 [ 108.916433][ T5596] syscall_exit_to_user_mode+0x16/0x40 [ 108.921882][ T5596] do_syscall_64+0x58/0xa0 [ 108.926288][ T5596] ? clear_bhb_loop+0x60/0xb0 [ 108.930976][ T5596] ? clear_bhb_loop+0x60/0xb0 [ 108.935651][ T5596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.941541][ T5596] RIP: 0033:0x7fc285d9e559 [ 108.945941][ T5596] Code: Unable to access opcode bytes at 0x7fc285d9e52f. [ 108.952939][ T5596] RSP: 002b:00007fc286c140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.961337][ T5596] RAX: fffffffffffffe00 RBX: 00007fc286025fa8 RCX: 00007fc285d9e559 [ 108.969293][ T5596] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc286025fa8 [ 108.977249][ T5596] RBP: 00007fc286025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.985203][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.993161][ T5596] R13: 00007fc286026038 R14: 00007fff73850f10 R15: 00007fff73850ff8 [ 109.001130][ T5596] [ 109.600515][ T5632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.463'. [ 109.903385][ T5652] loop2: detected capacity change from 0 to 512 [ 109.950263][ T5652] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 60416 [ 110.257926][ T5664] netlink: 64 bytes leftover after parsing attributes in process `syz.0.477'. [ 110.437321][ T5672] loop4: detected capacity change from 0 to 512 [ 110.456386][ T5672] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.506638][ T5672] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.479: corrupted in-inode xattr [ 110.539203][ T5672] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.479: couldn't read orphan inode 15 (err -117) [ 110.560486][ T5672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.616776][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 110.707073][ T5678] program syz.0.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.824062][ T5684] FAULT_INJECTION: forcing a failure. [ 110.824062][ T5684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 110.867262][ T5684] CPU: 0 PID: 5684 Comm: syz.2.484 Not tainted syzkaller #0 [ 110.874593][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.884655][ T5684] Call Trace: [ 110.887943][ T5684] [ 110.890882][ T5684] dump_stack_lvl+0x188/0x24e [ 110.895595][ T5684] ? show_regs_print_info+0x12/0x12 [ 110.900830][ T5684] ? load_image+0x410/0x410 [ 110.905348][ T5684] ? neigh_release+0x80/0x80 [ 110.909965][ T5684] should_fail_ex+0x390/0x4c0 [ 110.914669][ T5684] get_futex_key+0x1b1/0x1000 [ 110.919365][ T5684] ? inet_ioctl+0x378/0x460 [ 110.923895][ T5684] ? inet_shutdown+0x370/0x370 [ 110.928679][ T5684] ? slab_free_freelist_hook+0x133/0x1b0 [ 110.934333][ T5684] ? futex_setup_timer+0xc0/0xc0 [ 110.939302][ T5684] ? tomoyo_path_number_perm+0x4fb/0x650 [ 110.944939][ T5684] ? __kmem_cache_free+0xb6/0x200 [ 110.950009][ T5684] futex_wake+0x123/0x4f0 [ 110.954370][ T5684] ? futex_wake_mark+0x150/0x150 [ 110.959314][ T5684] ? sock_do_ioctl+0x1b4/0x320 [ 110.964081][ T5684] do_futex+0x2e2/0x320 [ 110.968233][ T5684] ? __ia32_sys_get_robust_list+0x100/0x100 [ 110.974131][ T5684] __se_sys_futex+0x381/0x410 [ 110.978806][ T5684] ? __x64_sys_futex+0xf0/0xf0 [ 110.983568][ T5684] ? __x64_sys_futex+0x1d/0xf0 [ 110.988339][ T5684] do_syscall_64+0x4c/0xa0 [ 110.992762][ T5684] ? clear_bhb_loop+0x60/0xb0 [ 110.997434][ T5684] ? clear_bhb_loop+0x60/0xb0 [ 111.002107][ T5684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.007994][ T5684] RIP: 0033:0x7f678799e559 [ 111.012400][ T5684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.031998][ T5684] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.040410][ T5684] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 111.048373][ T5684] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 111.056337][ T5684] RBP: 00007f6787c25fa0 R08: 002f42fa3d2d2424 R09: 0000000000000000 [ 111.064301][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.072265][ T5684] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 111.080245][ T5684] [ 111.175171][ T5694] loop1: detected capacity change from 0 to 128 [ 111.198783][ T5694] ext4: Unknown parameter 'audit' [ 111.228541][ T5694] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 111.390461][ T5713] loop0: detected capacity change from 0 to 512 [ 111.416470][ T5713] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 60416 [ 111.960070][ T5730] FAULT_INJECTION: forcing a failure. [ 111.960070][ T5730] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.007084][ T5730] CPU: 1 PID: 5730 Comm: syz.1.501 Not tainted syzkaller #0 [ 112.014419][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.024488][ T5730] Call Trace: [ 112.027783][ T5730] [ 112.030732][ T5730] dump_stack_lvl+0x188/0x24e [ 112.035438][ T5730] ? show_regs_print_info+0x12/0x12 [ 112.040662][ T5730] ? load_image+0x410/0x410 [ 112.045185][ T5730] ? cgroup_rstat_updated+0xce/0x350 [ 112.050480][ T5730] ? rcu_read_lock_sched_held+0x86/0x110 [ 112.056120][ T5730] should_fail_ex+0x390/0x4c0 [ 112.060830][ T5730] get_futex_key+0x1b1/0x1000 [ 112.065527][ T5730] ? futex_setup_timer+0xc0/0xc0 [ 112.070479][ T5730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.076479][ T5730] ? __lock_acquire+0x7ea0/0x7ea0 [ 112.081526][ T5730] ? lock_chain_count+0x20/0x20 [ 112.086399][ T5730] futex_wait_setup+0xb8/0x270 [ 112.091182][ T5730] ? futex_wait_multiple+0x920/0x920 [ 112.096465][ T5730] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.102366][ T5730] ? _raw_spin_unlock+0x40/0x40 [ 112.107279][ T5730] futex_wait+0x1b8/0x5c0 [ 112.111612][ T5730] ? futex_wait_setup+0x270/0x270 [ 112.116647][ T5730] ? sock_do_ioctl+0x1b4/0x320 [ 112.121409][ T5730] do_futex+0x310/0x320 [ 112.125561][ T5730] ? __ia32_sys_get_robust_list+0x100/0x100 [ 112.131456][ T5730] __se_sys_futex+0x381/0x410 [ 112.136127][ T5730] ? __x64_sys_futex+0xf0/0xf0 [ 112.140920][ T5730] ? __x64_sys_futex+0x1d/0xf0 [ 112.145680][ T5730] do_syscall_64+0x4c/0xa0 [ 112.150104][ T5730] ? clear_bhb_loop+0x60/0xb0 [ 112.154780][ T5730] ? clear_bhb_loop+0x60/0xb0 [ 112.159452][ T5730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.165345][ T5730] RIP: 0033:0x7f7a81b9e559 [ 112.169758][ T5730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.189360][ T5730] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.197776][ T5730] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 112.205741][ T5730] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a81e25fa8 [ 112.213711][ T5730] RBP: 00007f7a81e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.221675][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.229650][ T5730] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 112.237636][ T5730] [ 112.828860][ T5768] loop3: detected capacity change from 0 to 512 [ 112.901596][ T5768] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 113.808789][ T5808] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 113.998878][ T5819] FAULT_INJECTION: forcing a failure. [ 113.998878][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.022362][ T5819] CPU: 1 PID: 5819 Comm: syz.4.538 Not tainted syzkaller #0 [ 114.029687][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.039743][ T5819] Call Trace: [ 114.043027][ T5819] [ 114.045995][ T5819] dump_stack_lvl+0x188/0x24e [ 114.050703][ T5819] ? show_regs_print_info+0x12/0x12 [ 114.055929][ T5819] ? load_image+0x410/0x410 [ 114.060452][ T5819] ? __lock_acquire+0x7ea0/0x7ea0 [ 114.065511][ T5819] should_fail_ex+0x390/0x4c0 [ 114.070217][ T5819] _copy_to_user+0x2c/0x130 [ 114.074793][ T5819] ucma_create_id+0x2ce/0x370 [ 114.079494][ T5819] ? __lock_acquire+0x7ea0/0x7ea0 [ 114.084538][ T5819] ? ucma_close+0x170/0x170 [ 114.089060][ T5819] ? __might_fault+0xa6/0x120 [ 114.093773][ T5819] ? __might_fault+0xc2/0x120 [ 114.098465][ T5819] ? __might_fault+0xa6/0x120 [ 114.103165][ T5819] ucma_write+0x24e/0x2f0 [ 114.107526][ T5819] ? ucma_get_global_nl_info+0x70/0x70 [ 114.113024][ T5819] ? common_file_perm+0x171/0x1c0 [ 114.118077][ T5819] ? fsnotify_perm+0x5a/0x550 [ 114.122765][ T5819] ? security_file_permission+0x75/0xa0 [ 114.128313][ T5819] ? ucma_get_global_nl_info+0x70/0x70 [ 114.133771][ T5819] vfs_write+0x2dc/0x9a0 [ 114.138023][ T5819] ? file_end_write+0x250/0x250 [ 114.142879][ T5819] ? __fget_files+0x28/0x460 [ 114.147470][ T5819] ? __fget_files+0x3fc/0x460 [ 114.152173][ T5819] ? __fdget_pos+0x1d4/0x360 [ 114.156762][ T5819] ? ksys_write+0x70/0x260 [ 114.161180][ T5819] ksys_write+0x14d/0x260 [ 114.165519][ T5819] ? __ia32_sys_read+0x80/0x80 [ 114.170291][ T5819] ? lockdep_hardirqs_on+0x94/0x140 [ 114.175486][ T5819] do_syscall_64+0x4c/0xa0 [ 114.179895][ T5819] ? clear_bhb_loop+0x60/0xb0 [ 114.184565][ T5819] ? clear_bhb_loop+0x60/0xb0 [ 114.189239][ T5819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.195126][ T5819] RIP: 0033:0x7fd6eff9e559 [ 114.199532][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.219131][ T5819] RSP: 002b:00007fd6f0e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.227539][ T5819] RAX: ffffffffffffffda RBX: 00007fd6f0225fa0 RCX: 00007fd6eff9e559 [ 114.235514][ T5819] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 [ 114.243476][ T5819] RBP: 00007fd6f0035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 114.251468][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.259428][ T5819] R13: 00007fd6f0226038 R14: 00007fd6f0225fa0 R15: 00007ffcda37f138 [ 114.267402][ T5819] [ 114.364871][ T5830] loop1: detected capacity change from 0 to 512 [ 114.406010][ T5830] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 60416 [ 114.789980][ T5843] loop0: detected capacity change from 0 to 4096 [ 114.874266][ T5843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.069776][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 115.166885][ T5857] loop3: detected capacity change from 0 to 128 [ 115.212328][ T5858] FAULT_INJECTION: forcing a failure. [ 115.212328][ T5858] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.248943][ T5857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.304131][ T5857] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.342810][ T5858] CPU: 0 PID: 5858 Comm: syz.1.555 Not tainted syzkaller #0 [ 115.350137][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.360194][ T5858] Call Trace: [ 115.363465][ T5858] [ 115.366385][ T5858] dump_stack_lvl+0x188/0x24e [ 115.371069][ T5858] ? show_regs_print_info+0x12/0x12 [ 115.376289][ T5858] ? load_image+0x410/0x410 [ 115.380809][ T5858] ? neigh_release+0x80/0x80 [ 115.385425][ T5858] should_fail_ex+0x390/0x4c0 [ 115.390141][ T5858] get_futex_key+0x1b1/0x1000 [ 115.394846][ T5858] ? inet_ioctl+0x378/0x460 [ 115.399372][ T5858] ? inet_shutdown+0x370/0x370 [ 115.404160][ T5858] ? slab_free_freelist_hook+0x133/0x1b0 [ 115.409812][ T5858] ? futex_setup_timer+0xc0/0xc0 [ 115.414766][ T5858] ? tomoyo_path_number_perm+0x4fb/0x650 [ 115.420427][ T5858] ? __kmem_cache_free+0xb6/0x200 [ 115.425479][ T5858] futex_wake+0x123/0x4f0 [ 115.429820][ T5858] ? futex_wake_mark+0x150/0x150 [ 115.434761][ T5858] ? sock_do_ioctl+0x1b4/0x320 [ 115.439554][ T5858] do_futex+0x2e2/0x320 [ 115.443709][ T5858] ? __ia32_sys_get_robust_list+0x100/0x100 [ 115.449603][ T5858] __se_sys_futex+0x381/0x410 [ 115.454287][ T5858] ? __x64_sys_futex+0xf0/0xf0 [ 115.459075][ T5858] ? __x64_sys_futex+0x1d/0xf0 [ 115.463856][ T5858] do_syscall_64+0x4c/0xa0 [ 115.468287][ T5858] ? clear_bhb_loop+0x60/0xb0 [ 115.472985][ T5858] ? clear_bhb_loop+0x60/0xb0 [ 115.477697][ T5858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.483608][ T5858] RIP: 0033:0x7f7a81b9e559 [ 115.488090][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.507712][ T5858] RSP: 002b:00007f7a7fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.516143][ T5858] RAX: ffffffffffffffda RBX: 00007f7a81e25fa8 RCX: 00007f7a81b9e559 [ 115.524127][ T5858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a81e25fac [ 115.532103][ T5858] RBP: 00007f7a81e25fa0 R08: 000ae71dc2eff26e R09: 0000000000000000 [ 115.540077][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.548058][ T5858] R13: 00007f7a81e26038 R14: 00007ffca6ac6de0 R15: 00007ffca6ac6ec8 [ 115.556049][ T5858] [ 115.575035][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 115.846433][ T5885] loop4: detected capacity change from 0 to 512 [ 115.917171][ T5885] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 60416 [ 116.669247][ T5918] loop1: detected capacity change from 0 to 512 [ 116.700974][ T5918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.722572][ T5918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 116.730576][ T5918] System zones: 1-12 [ 116.782014][ T5918] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.571: bad orphan inode 131072 [ 116.816135][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.926892][ T5923] FAULT_INJECTION: forcing a failure. [ 116.926892][ T5923] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.977450][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 117.011805][ T5923] CPU: 1 PID: 5923 Comm: syz.3.572 Not tainted syzkaller #0 [ 117.019143][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.029213][ T5923] Call Trace: [ 117.032507][ T5923] [ 117.035458][ T5923] dump_stack_lvl+0x188/0x24e [ 117.040161][ T5923] ? show_regs_print_info+0x12/0x12 [ 117.045384][ T5923] ? load_image+0x410/0x410 [ 117.049947][ T5923] ? neigh_release+0x80/0x80 [ 117.054563][ T5923] should_fail_ex+0x390/0x4c0 [ 117.059273][ T5923] get_futex_key+0x1b1/0x1000 [ 117.063969][ T5923] ? inet_ioctl+0x378/0x460 [ 117.068496][ T5923] ? inet_shutdown+0x370/0x370 [ 117.073281][ T5923] ? slab_free_freelist_hook+0x133/0x1b0 [ 117.078939][ T5923] ? futex_setup_timer+0xc0/0xc0 [ 117.083897][ T5923] ? tomoyo_path_number_perm+0x4fb/0x650 [ 117.089551][ T5923] ? __kmem_cache_free+0xb6/0x200 [ 117.094612][ T5923] futex_wake+0x123/0x4f0 [ 117.098971][ T5923] ? futex_wake_mark+0x150/0x150 [ 117.103930][ T5923] ? sock_do_ioctl+0x1b4/0x320 [ 117.108700][ T5923] do_futex+0x2e2/0x320 [ 117.112877][ T5923] ? __ia32_sys_get_robust_list+0x100/0x100 [ 117.118768][ T5923] __se_sys_futex+0x381/0x410 [ 117.123464][ T5923] ? __x64_sys_futex+0xf0/0xf0 [ 117.128227][ T5923] ? __x64_sys_futex+0x1d/0xf0 [ 117.132997][ T5923] do_syscall_64+0x4c/0xa0 [ 117.137408][ T5923] ? clear_bhb_loop+0x60/0xb0 [ 117.142076][ T5923] ? clear_bhb_loop+0x60/0xb0 [ 117.146751][ T5923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.152650][ T5923] RIP: 0033:0x7fc285d9e559 [ 117.157069][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.176673][ T5923] RSP: 002b:00007fc286c140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.185083][ T5923] RAX: ffffffffffffffda RBX: 00007fc286025fa8 RCX: 00007fc285d9e559 [ 117.193047][ T5923] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc286025fac [ 117.201013][ T5923] RBP: 00007fc286025fa0 R08: 003538db452e6a70 R09: 0000000000000000 [ 117.208980][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.217018][ T5923] R13: 00007fc286026038 R14: 00007fff73850f10 R15: 00007fff73850ff8 [ 117.225001][ T5923] [ 117.619966][ T5952] loop1: detected capacity change from 0 to 512 [ 117.634170][ T5954] device syzkaller1 entered promiscuous mode [ 117.709612][ T5952] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 60416 [ 118.138197][ T5980] loop4: detected capacity change from 0 to 512 [ 118.155673][ T5982] FAULT_INJECTION: forcing a failure. [ 118.155673][ T5982] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.205426][ T5982] CPU: 0 PID: 5982 Comm: syz.0.593 Not tainted syzkaller #0 [ 118.212760][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.222825][ T5982] Call Trace: [ 118.226122][ T5982] [ 118.229075][ T5982] dump_stack_lvl+0x188/0x24e [ 118.233793][ T5982] ? show_regs_print_info+0x12/0x12 [ 118.239017][ T5982] ? load_image+0x410/0x410 [ 118.243545][ T5982] ? neigh_release+0x80/0x80 [ 118.248168][ T5982] should_fail_ex+0x390/0x4c0 [ 118.252876][ T5982] get_futex_key+0x1b1/0x1000 [ 118.257572][ T5982] ? inet_ioctl+0x378/0x460 [ 118.262095][ T5982] ? inet_shutdown+0x370/0x370 [ 118.266875][ T5982] ? slab_free_freelist_hook+0x133/0x1b0 [ 118.272504][ T5982] ? futex_setup_timer+0xc0/0xc0 [ 118.277433][ T5982] ? tomoyo_path_number_perm+0x4fb/0x650 [ 118.283069][ T5982] ? __kmem_cache_free+0xb6/0x200 [ 118.288125][ T5982] futex_wake+0x123/0x4f0 [ 118.292452][ T5982] ? futex_wake_mark+0x150/0x150 [ 118.297396][ T5982] ? sock_do_ioctl+0x1b4/0x320 [ 118.302157][ T5982] do_futex+0x2e2/0x320 [ 118.306307][ T5982] ? __ia32_sys_get_robust_list+0x100/0x100 [ 118.312210][ T5982] __se_sys_futex+0x381/0x410 [ 118.316883][ T5982] ? __x64_sys_futex+0xf0/0xf0 [ 118.321640][ T5982] ? __x64_sys_futex+0x1d/0xf0 [ 118.326398][ T5982] do_syscall_64+0x4c/0xa0 [ 118.330817][ T5982] ? clear_bhb_loop+0x60/0xb0 [ 118.335497][ T5982] ? clear_bhb_loop+0x60/0xb0 [ 118.340173][ T5982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.346084][ T5982] RIP: 0033:0x7fe3c399e559 [ 118.350501][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.370112][ T5982] RSP: 002b:00007fe3c1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.378519][ T5982] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa8 RCX: 00007fe3c399e559 [ 118.386486][ T5982] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3c25fac [ 118.394467][ T5982] RBP: 00007fe3c3c25fa0 R08: 00075396c6cba152 R09: 0000000000000000 [ 118.402440][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.410431][ T5982] R13: 00007fe3c3c26038 R14: 00007ffd1d7aaa90 R15: 00007ffd1d7aab78 [ 118.418416][ T5982] [ 118.429481][ T5980] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.451044][ T5980] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.499960][ T5980] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 118.520537][ T5980] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 118.540925][ T5980] System zones: 0-2, 18-18, 34-34 [ 118.585111][ T5980] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.592: bad orphan inode 15 [ 118.627545][ T5980] ext4_test_bit(bit=14, block=18) = 1 [ 118.648543][ T5980] is_bad_inode(inode)=0 [ 118.670492][ T5980] NEXT_ORPHAN(inode)=2264924160 [ 118.695341][ T5980] max_ino=32 [ 118.708695][ T5980] i_nlink=0 [ 118.774066][ T5980] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.592: corrupted inode contents [ 118.819493][ T5980] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.592: mark_inode_dirty error [ 118.859138][ T5980] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.592: corrupted inode contents [ 118.904771][ T5980] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.592: mark_inode_dirty error [ 118.944182][ T5980] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2953: inode #15: comm syz.4.592: mark inode dirty (error -117) [ 118.983873][ T5980] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 119.031086][ T5980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.095706][ T5980] EXT4-fs error (device loop4): ext4_search_dir:1551: inode #11: block 4: comm syz.4.592: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=33012, size=4096 fake=1 [ 119.126046][ T6009] FAULT_INJECTION: forcing a failure. [ 119.126046][ T6009] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.180921][ T6009] CPU: 1 PID: 6009 Comm: syz.0.601 Not tainted syzkaller #0 [ 119.188255][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.198371][ T6009] Call Trace: [ 119.201670][ T6009] [ 119.204608][ T6009] dump_stack_lvl+0x188/0x24e [ 119.209308][ T6009] ? show_regs_print_info+0x12/0x12 [ 119.214531][ T6009] ? load_image+0x410/0x410 [ 119.219064][ T6009] ? release_firmware_map_entry+0x187/0x187 [ 119.224983][ T6009] ? plist_add+0x3d7/0x490 [ 119.229421][ T6009] ? verify_lock_unused+0x140/0x140 [ 119.234639][ T6009] should_fail_ex+0x390/0x4c0 [ 119.239324][ T6009] get_futex_key+0x1b1/0x1000 [ 119.244001][ T6009] ? __fget_files+0x28/0x460 [ 119.248593][ T6009] ? futex_setup_timer+0xc0/0xc0 [ 119.253525][ T6009] ? __lock_acquire+0x7ea0/0x7ea0 [ 119.258566][ T6009] futex_wake+0x123/0x4f0 [ 119.262901][ T6009] ? __fget_files+0x28/0x460 [ 119.267543][ T6009] ? futex_wake_mark+0x150/0x150 [ 119.272486][ T6009] ? fput+0x150/0x1a0 [ 119.276465][ T6009] do_futex+0x2e2/0x320 [ 119.280611][ T6009] ? security_bpf+0x7a/0xa0 [ 119.285112][ T6009] ? __ia32_sys_get_robust_list+0x100/0x100 [ 119.291000][ T6009] ? bpf_link_show_fdinfo+0x380/0x380 [ 119.296374][ T6009] __se_sys_futex+0x381/0x410 [ 119.301069][ T6009] ? __x64_sys_futex+0xf0/0xf0 [ 119.305837][ T6009] ? __x64_sys_futex+0x1d/0xf0 [ 119.310596][ T6009] do_syscall_64+0x4c/0xa0 [ 119.315009][ T6009] ? clear_bhb_loop+0x60/0xb0 [ 119.319681][ T6009] ? clear_bhb_loop+0x60/0xb0 [ 119.324357][ T6009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.330251][ T6009] RIP: 0033:0x7fe3c399e559 [ 119.334663][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.354262][ T6009] RSP: 002b:00007fe3c1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.362695][ T6009] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa8 RCX: 00007fe3c399e559 [ 119.370665][ T6009] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3c25fac [ 119.378632][ T6009] RBP: 00007fe3c3c25fa0 R08: 000589d348117f98 R09: 0000000000000000 [ 119.386597][ T6009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.394559][ T6009] R13: 00007fe3c3c26038 R14: 00007ffd1d7aaa90 R15: 00007ffd1d7aab78 [ 119.402573][ T6009] [ 119.486060][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 119.501700][ T6018] loop2: detected capacity change from 0 to 512 [ 119.575301][ T6018] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 60416 [ 119.608928][ T6021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.740557][ T6027] FAULT_INJECTION: forcing a failure. [ 119.740557][ T6027] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.760883][ T6027] CPU: 1 PID: 6027 Comm: syz.4.606 Not tainted syzkaller #0 [ 119.768206][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.778291][ T6027] Call Trace: [ 119.781587][ T6027] [ 119.784528][ T6027] dump_stack_lvl+0x188/0x24e [ 119.789232][ T6027] ? show_regs_print_info+0x12/0x12 [ 119.794453][ T6027] ? load_image+0x410/0x410 [ 119.798990][ T6027] ? neigh_release+0x80/0x80 [ 119.803637][ T6027] should_fail_ex+0x390/0x4c0 [ 119.808322][ T6027] get_futex_key+0x1b1/0x1000 [ 119.812994][ T6027] ? inet_ioctl+0x378/0x460 [ 119.817502][ T6027] ? inet_shutdown+0x370/0x370 [ 119.822262][ T6027] ? slab_free_freelist_hook+0x133/0x1b0 [ 119.827887][ T6027] ? futex_setup_timer+0xc0/0xc0 [ 119.832816][ T6027] ? tomoyo_path_number_perm+0x4fb/0x650 [ 119.838444][ T6027] ? __kmem_cache_free+0xb6/0x200 [ 119.843481][ T6027] futex_wake+0x123/0x4f0 [ 119.847807][ T6027] ? futex_wake_mark+0x150/0x150 [ 119.852766][ T6027] ? sock_do_ioctl+0x1b4/0x320 [ 119.857537][ T6027] do_futex+0x2e2/0x320 [ 119.861688][ T6027] ? __ia32_sys_get_robust_list+0x100/0x100 [ 119.867581][ T6027] __se_sys_futex+0x381/0x410 [ 119.872304][ T6027] ? __x64_sys_futex+0xf0/0xf0 [ 119.877068][ T6027] ? __x64_sys_futex+0x1d/0xf0 [ 119.881843][ T6027] do_syscall_64+0x4c/0xa0 [ 119.886254][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 119.890924][ T6027] ? clear_bhb_loop+0x60/0xb0 [ 119.895596][ T6027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.901487][ T6027] RIP: 0033:0x7fd6eff9e559 [ 119.905893][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.925519][ T6027] RSP: 002b:00007fd6f0e530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.933927][ T6027] RAX: ffffffffffffffda RBX: 00007fd6f0225fa8 RCX: 00007fd6eff9e559 [ 119.941894][ T6027] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6f0225fac [ 119.949856][ T6027] RBP: 00007fd6f0225fa0 R08: 0029e5afc8de6d06 R09: 0000000000000000 [ 119.957818][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.965782][ T6027] R13: 00007fd6f0226038 R14: 00007ffcda37f050 R15: 00007ffcda37f138 [ 119.973780][ T6027] [ 120.742549][ T6066] FAULT_INJECTION: forcing a failure. [ 120.742549][ T6066] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.775479][ T6066] CPU: 0 PID: 6066 Comm: syz.0.617 Not tainted syzkaller #0 [ 120.782801][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.792867][ T6066] Call Trace: [ 120.796158][ T6066] [ 120.799101][ T6066] dump_stack_lvl+0x188/0x24e [ 120.803805][ T6066] ? show_regs_print_info+0x12/0x12 [ 120.809027][ T6066] ? load_image+0x410/0x410 [ 120.813554][ T6066] ? release_firmware_map_entry+0x187/0x187 [ 120.819470][ T6066] ? plist_add+0x3d7/0x490 [ 120.823913][ T6066] ? verify_lock_unused+0x140/0x140 [ 120.829138][ T6066] should_fail_ex+0x390/0x4c0 [ 120.833849][ T6066] get_futex_key+0x1b1/0x1000 [ 120.838548][ T6066] ? __fget_files+0x28/0x460 [ 120.843142][ T6066] ? futex_setup_timer+0xc0/0xc0 [ 120.848076][ T6066] ? __lock_acquire+0x7ea0/0x7ea0 [ 120.853105][ T6066] futex_wake+0x123/0x4f0 [ 120.857428][ T6066] ? __fget_files+0x28/0x460 [ 120.862014][ T6066] ? futex_wake_mark+0x150/0x150 [ 120.866947][ T6066] ? fput+0x150/0x1a0 [ 120.870924][ T6066] do_futex+0x2e2/0x320 [ 120.875068][ T6066] ? security_bpf+0x7a/0xa0 [ 120.879561][ T6066] ? __ia32_sys_get_robust_list+0x100/0x100 [ 120.885447][ T6066] ? bpf_link_show_fdinfo+0x380/0x380 [ 120.890831][ T6066] __se_sys_futex+0x381/0x410 [ 120.895520][ T6066] ? __x64_sys_futex+0xf0/0xf0 [ 120.900281][ T6066] ? __x64_sys_futex+0x1d/0xf0 [ 120.905039][ T6066] do_syscall_64+0x4c/0xa0 [ 120.909449][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 120.914122][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 120.918797][ T6066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.924681][ T6066] RIP: 0033:0x7fe3c399e559 [ 120.929089][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.948684][ T6066] RSP: 002b:00007fe3c1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.957092][ T6066] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa8 RCX: 00007fe3c399e559 [ 120.965053][ T6066] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3c25fac [ 120.973015][ T6066] RBP: 00007fe3c3c25fa0 R08: 002a7e464a31bb64 R09: 0000000000000000 [ 120.980976][ T6066] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.988939][ T6066] R13: 00007fe3c3c26038 R14: 00007ffd1d7aaa90 R15: 00007ffd1d7aab78 [ 120.996918][ T6066] [ 121.031612][ T6068] FAULT_INJECTION: forcing a failure. [ 121.031612][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 121.087182][ T6068] CPU: 1 PID: 6068 Comm: syz.3.618 Not tainted syzkaller #0 [ 121.094509][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.104574][ T6068] Call Trace: [ 121.107866][ T6068] [ 121.110812][ T6068] dump_stack_lvl+0x188/0x24e [ 121.115521][ T6068] ? show_regs_print_info+0x12/0x12 [ 121.120737][ T6068] ? load_image+0x410/0x410 [ 121.125248][ T6068] ? __might_sleep+0xd0/0xd0 [ 121.129835][ T6068] ? __lock_acquire+0x7ea0/0x7ea0 [ 121.134867][ T6068] should_fail_ex+0x390/0x4c0 [ 121.139551][ T6068] should_failslab+0x5/0x20 [ 121.144049][ T6068] slab_pre_alloc_hook+0x59/0x300 [ 121.149069][ T6068] ? memcg_list_lru_alloc+0x22d/0xb00 [ 121.154455][ T6068] __kmem_cache_alloc_node+0x4f/0x270 [ 121.159821][ T6068] ? memcg_list_lru_alloc+0x22d/0xb00 [ 121.165189][ T6068] __kmalloc+0xa3/0x240 [ 121.169360][ T6068] memcg_list_lru_alloc+0x22d/0xb00 [ 121.174560][ T6068] ? slab_pre_alloc_hook+0xb1/0x300 [ 121.179750][ T6068] ? memcg_reparent_list_lrus+0x850/0x850 [ 121.185470][ T6068] ? get_obj_cgroup_from_current+0xd0/0x280 [ 121.191365][ T6068] ? get_obj_cgroup_from_current+0xd0/0x280 [ 121.197254][ T6068] slab_pre_alloc_hook+0x2ad/0x300 [ 121.202366][ T6068] ? slab_pre_alloc_hook+0xb1/0x300 [ 121.207563][ T6068] kmem_cache_alloc_lru+0x49/0x2e0 [ 121.212667][ T6068] ? hugetlbfs_alloc_inode+0xef/0x140 [ 121.218041][ T6068] hugetlbfs_alloc_inode+0xef/0x140 [ 121.223235][ T6068] ? hugetlbfs_fill_super+0x910/0x910 [ 121.228612][ T6068] new_inode_pseudo+0x5f/0x1c0 [ 121.233378][ T6068] new_inode+0x25/0x1d0 [ 121.237527][ T6068] ? resv_map_alloc+0x1c0/0x2b0 [ 121.242373][ T6068] hugetlbfs_get_inode+0x78/0x510 [ 121.247396][ T6068] hugetlb_file_setup+0x27b/0x610 [ 121.252457][ T6068] newseg+0x412/0xb00 [ 121.256439][ T6068] ? rwsem_write_trylock+0x135/0x1c0 [ 121.261722][ T6068] ? ksys_shmget+0x140/0x140 [ 121.266318][ T6068] ipcget+0x1cd/0xe10 [ 121.270295][ T6068] ? do_futex+0x310/0x320 [ 121.274619][ T6068] ? __ia32_sys_get_robust_list+0x100/0x100 [ 121.280514][ T6068] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 121.286147][ T6068] __x64_sys_shmget+0x13d/0x180 [ 121.290998][ T6068] ? lock_chain_count+0x20/0x20 [ 121.295857][ T6068] ? shm_more_checks+0x80/0x80 [ 121.300621][ T6068] ? lockdep_hardirqs_on+0x94/0x140 [ 121.305826][ T6068] do_syscall_64+0x4c/0xa0 [ 121.310237][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 121.314908][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 121.319578][ T6068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.325466][ T6068] RIP: 0033:0x7fc285d9e559 [ 121.329901][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.349512][ T6068] RSP: 002b:00007fc286c14028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 121.357918][ T6068] RAX: ffffffffffffffda RBX: 00007fc286025fa0 RCX: 00007fc285d9e559 [ 121.365881][ T6068] RDX: 0000000000000800 RSI: 000000000000c000 RDI: 0000000000000000 [ 121.373845][ T6068] RBP: 00007fc285e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 121.381814][ T6068] R10: 000020000013c000 R11: 0000000000000246 R12: 0000000000000000 [ 121.389778][ T6068] R13: 00007fc286026038 R14: 00007fc286025fa0 R15: 00007fff73850ff8 [ 121.397755][ T6068] [ 121.438077][ T6073] loop4: detected capacity change from 0 to 4096 [ 121.523435][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.616591][ T6080] FAULT_INJECTION: forcing a failure. [ 121.616591][ T6080] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.621750][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 121.636346][ T6082] loop1: detected capacity change from 0 to 512 [ 121.687930][ T6082] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 60416 [ 121.711041][ T6080] CPU: 0 PID: 6080 Comm: syz.2.623 Not tainted syzkaller #0 [ 121.718372][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.728439][ T6080] Call Trace: [ 121.731729][ T6080] [ 121.734674][ T6080] dump_stack_lvl+0x188/0x24e [ 121.739381][ T6080] ? show_regs_print_info+0x12/0x12 [ 121.744620][ T6080] ? load_image+0x410/0x410 [ 121.749145][ T6080] ? neigh_release+0x80/0x80 [ 121.753763][ T6080] should_fail_ex+0x390/0x4c0 [ 121.758477][ T6080] get_futex_key+0x1b1/0x1000 [ 121.763170][ T6080] ? inet_ioctl+0x378/0x460 [ 121.767710][ T6080] ? inet_shutdown+0x370/0x370 [ 121.772495][ T6080] ? slab_free_freelist_hook+0x133/0x1b0 [ 121.778159][ T6080] ? futex_setup_timer+0xc0/0xc0 [ 121.783111][ T6080] ? tomoyo_path_number_perm+0x4fb/0x650 [ 121.788786][ T6080] ? __kmem_cache_free+0xb6/0x200 [ 121.793840][ T6080] futex_wake+0x123/0x4f0 [ 121.798195][ T6080] ? futex_wake_mark+0x150/0x150 [ 121.803169][ T6080] ? sock_do_ioctl+0x1b4/0x320 [ 121.807959][ T6080] do_futex+0x2e2/0x320 [ 121.812133][ T6080] ? __ia32_sys_get_robust_list+0x100/0x100 [ 121.818054][ T6080] __se_sys_futex+0x381/0x410 [ 121.822779][ T6080] ? __x64_sys_futex+0xf0/0xf0 [ 121.827568][ T6080] ? __x64_sys_futex+0x1d/0xf0 [ 121.832356][ T6080] do_syscall_64+0x4c/0xa0 [ 121.836794][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 121.841490][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 121.846189][ T6080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.852100][ T6080] RIP: 0033:0x7f678799e559 [ 121.856535][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.876153][ T6080] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.884583][ T6080] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 121.892562][ T6080] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 121.900537][ T6080] RBP: 00007f6787c25fa0 R08: 0022bea1cb56016e R09: 0000000000000000 [ 121.908530][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.916513][ T6080] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 121.924521][ T6080] [ 122.067846][ T6094] process 'syz.4.625' launched '/dev/fd/7' with NULL argv: empty string added [ 122.317705][ T6105] loop3: detected capacity change from 0 to 512 [ 122.390866][ T6105] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.628: corrupted inode contents [ 122.464504][ T6105] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 122.502418][ T6105] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.628: corrupted inode contents [ 122.562259][ T6105] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.628: mark_inode_dirty error [ 122.622429][ T6105] EXT4-fs (loop3): 1 orphan inode deleted [ 122.628304][ T6105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.634267][ T6114] FAULT_INJECTION: forcing a failure. [ 122.634267][ T6114] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.687375][ T6114] CPU: 1 PID: 6114 Comm: syz.2.631 Not tainted syzkaller #0 [ 122.694708][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.704773][ T6114] Call Trace: [ 122.708059][ T6114] [ 122.711006][ T6114] dump_stack_lvl+0x188/0x24e [ 122.715720][ T6114] ? show_regs_print_info+0x12/0x12 [ 122.720944][ T6114] ? load_image+0x410/0x410 [ 122.725474][ T6114] ? release_firmware_map_entry+0x187/0x187 [ 122.731388][ T6114] ? plist_add+0x3d7/0x490 [ 122.735822][ T6114] ? verify_lock_unused+0x140/0x140 [ 122.741072][ T6114] should_fail_ex+0x390/0x4c0 [ 122.745778][ T6114] get_futex_key+0x1b1/0x1000 [ 122.750471][ T6114] ? __fget_files+0x28/0x460 [ 122.755086][ T6114] ? futex_setup_timer+0xc0/0xc0 [ 122.760036][ T6114] ? __lock_acquire+0x7ea0/0x7ea0 [ 122.765087][ T6114] futex_wake+0x123/0x4f0 [ 122.769437][ T6114] ? __fget_files+0x28/0x460 [ 122.774045][ T6114] ? futex_wake_mark+0x150/0x150 [ 122.779007][ T6114] ? fput+0x150/0x1a0 [ 122.783042][ T6114] do_futex+0x2e2/0x320 [ 122.787215][ T6114] ? security_bpf+0x7a/0xa0 [ 122.791735][ T6114] ? __ia32_sys_get_robust_list+0x100/0x100 [ 122.797642][ T6114] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.803051][ T6114] __se_sys_futex+0x381/0x410 [ 122.807788][ T6114] ? __x64_sys_futex+0xf0/0xf0 [ 122.812571][ T6114] ? __x64_sys_futex+0x1d/0xf0 [ 122.817351][ T6114] do_syscall_64+0x4c/0xa0 [ 122.821799][ T6114] ? clear_bhb_loop+0x60/0xb0 [ 122.826491][ T6114] ? clear_bhb_loop+0x60/0xb0 [ 122.831185][ T6114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.837095][ T6114] RIP: 0033:0x7f678799e559 [ 122.841521][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.861146][ T6114] RSP: 002b:00007f678890d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.869578][ T6114] RAX: ffffffffffffffda RBX: 00007f6787c25fa8 RCX: 00007f678799e559 [ 122.877582][ T6114] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6787c25fac [ 122.885574][ T6114] RBP: 00007f6787c25fa0 R08: 002357384ca94fcc R09: 0000000000000000 [ 122.893556][ T6114] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 122.901539][ T6114] R13: 00007f6787c26038 R14: 00007ffc37875670 R15: 00007ffc37875758 [ 122.909548][ T6114] [ 122.933576][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 123.114590][ T6133] FAULT_INJECTION: forcing a failure. [ 123.114590][ T6133] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.170282][ T27] audit: type=1326 audit(1792382115.031:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.171559][ T6133] CPU: 0 PID: 6133 Comm: syz.4.636 Not tainted syzkaller #0 [ 123.201384][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.211450][ T6133] Call Trace: [ 123.214739][ T6133] [ 123.217684][ T6133] dump_stack_lvl+0x188/0x24e [ 123.222385][ T6133] ? show_regs_print_info+0x12/0x12 [ 123.224077][ T27] audit: type=1326 audit(1792382115.031:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.227589][ T6133] ? load_image+0x410/0x410 [ 123.227615][ T6133] ? neigh_release+0x80/0x80 [ 123.227640][ T6133] should_fail_ex+0x390/0x4c0 [ 123.255828][ T27] audit: type=1326 audit(1792382115.031:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.255876][ T6133] get_futex_key+0x1b1/0x1000 [ 123.260508][ T27] audit: type=1326 audit(1792382115.031:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.265091][ T6133] ? inet_ioctl+0x378/0x460 [ 123.265118][ T6133] ? inet_shutdown+0x370/0x370 [ 123.265138][ T6133] ? slab_free_freelist_hook+0x133/0x1b0 [ 123.265163][ T6133] ? futex_setup_timer+0xc0/0xc0 [ 123.265181][ T6133] ? tomoyo_path_number_perm+0x4fb/0x650 [ 123.265201][ T6133] ? __kmem_cache_free+0xb6/0x200 [ 123.265225][ T6133] futex_wake+0x123/0x4f0 [ 123.265248][ T6133] ? futex_wake_mark+0x150/0x150 [ 123.265272][ T6133] ? sock_do_ioctl+0x1b4/0x320 [ 123.265298][ T6133] do_futex+0x2e2/0x320 [ 123.265319][ T6133] ? __ia32_sys_get_robust_list+0x100/0x100 [ 123.265344][ T6133] __se_sys_futex+0x381/0x410 [ 123.265368][ T6133] ? __x64_sys_futex+0xf0/0xf0 [ 123.381423][ T6133] ? __x64_sys_futex+0x1d/0xf0 [ 123.386194][ T6133] do_syscall_64+0x4c/0xa0 [ 123.390635][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 123.395316][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 123.400011][ T6133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.405895][ T6133] RIP: 0033:0x7fd6eff9e559 [ 123.410301][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.429898][ T6133] RSP: 002b:00007fd6f0e530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.438306][ T6133] RAX: ffffffffffffffda RBX: 00007fd6f0225fa8 RCX: 00007fd6eff9e559 [ 123.446270][ T6133] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd6f0225fac [ 123.454232][ T6133] RBP: 00007fd6f0225fa0 R08: 0004f13ccd4decf2 R09: 0000000000000000 [ 123.462193][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.470164][ T6133] R13: 00007fd6f0226038 R14: 00007ffcda37f050 R15: 00007ffcda37f138 [ 123.478150][ T6133] [ 123.492628][ T27] audit: type=1326 audit(1792382115.141:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.516829][ T27] audit: type=1326 audit(1792382115.351:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 123.605367][ T6141] futex_wake_op: syz.2.638 tries to shift op by 144; fix this program [ 124.234418][ T27] audit: type=1326 audit(1792382115.361:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 124.280781][ T27] audit: type=1326 audit(1792382115.361:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 124.380767][ T27] audit: type=1326 audit(1792382115.361:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 124.451056][ T27] audit: type=1326 audit(1792382115.361:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc285d9e559 code=0x7ffc0000 [ 124.484952][ T6151] loop4: detected capacity change from 0 to 512 [ 124.503833][ T6151] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 60416 [ 124.958601][ T6179] FAULT_INJECTION: forcing a failure. [ 124.958601][ T6179] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.025370][ T6179] CPU: 0 PID: 6179 Comm: syz.3.654 Not tainted syzkaller #0 [ 125.032715][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.042784][ T6179] Call Trace: [ 125.046073][ T6179] [ 125.049014][ T6179] dump_stack_lvl+0x188/0x24e [ 125.053714][ T6179] ? show_regs_print_info+0x12/0x12 [ 125.058934][ T6179] ? load_image+0x410/0x410 [ 125.063469][ T6179] ? neigh_release+0x80/0x80 [ 125.068089][ T6179] should_fail_ex+0x390/0x4c0 [ 125.072799][ T6179] get_futex_key+0x1b1/0x1000 [ 125.077496][ T6179] ? inet_ioctl+0x378/0x460 [ 125.082044][ T6179] ? inet_shutdown+0x370/0x370 [ 125.086831][ T6179] ? slab_free_freelist_hook+0x133/0x1b0 [ 125.092486][ T6179] ? futex_setup_timer+0xc0/0xc0 [ 125.097436][ T6179] ? tomoyo_path_number_perm+0x4fb/0x650 [ 125.103089][ T6179] ? __kmem_cache_free+0xb6/0x200 [ 125.108136][ T6179] futex_wake+0x123/0x4f0 [ 125.112487][ T6179] ? futex_wake_mark+0x150/0x150 [ 125.117450][ T6179] ? sock_do_ioctl+0x1b4/0x320 [ 125.122237][ T6179] do_futex+0x2e2/0x320 [ 125.126413][ T6179] ? __ia32_sys_get_robust_list+0x100/0x100 [ 125.132393][ T6179] __se_sys_futex+0x381/0x410 [ 125.137095][ T6179] ? __x64_sys_futex+0xf0/0xf0 [ 125.141886][ T6179] ? __x64_sys_futex+0x1d/0xf0 [ 125.146666][ T6179] do_syscall_64+0x4c/0xa0 [ 125.151107][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 125.155799][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 125.160497][ T6179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.166409][ T6179] RIP: 0033:0x7fc285d9e559 [ 125.170888][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.190519][ T6179] RSP: 002b:00007fc286c140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.195435][ T6187] loop0: detected capacity change from 0 to 1024 [ 125.198932][ T6179] RAX: ffffffffffffffda RBX: 00007fc286025fa8 RCX: 00007fc285d9e559 [ 125.198956][ T6179] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc286025fac [ 125.198970][ T6179] RBP: 00007fc286025fa0 R08: 0037029ecfb81142 R09: 0000000000000000 [ 125.198982][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.237235][ T6179] R13: 00007fc286026038 R14: 00007fff73850f10 R15: 00007fff73850ff8 [ 125.245234][ T6179] [ 125.254781][ T6187] EXT4-fs: inline encryption not supported [ 125.288197][ T6187] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 125.326121][ T6187] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 125.365292][ T6187] EXT4-fs (loop0): invalid journal inode [ 125.377645][ T6187] EXT4-fs (loop0): can't get journal size [ 125.402317][ T6187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.519730][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 125.632953][ T6204] loop0: detected capacity change from 0 to 128 [ 125.678291][ T6204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.688288][ T6204] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.700177][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 125.920135][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 125.989213][ T6215] loop1: detected capacity change from 0 to 1024 [ 126.001767][ T6217] loop3: detected capacity change from 0 to 512 [ 126.046243][ T6217] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 126.056839][ T6215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.065935][ T6215] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.129456][ T6222] loop2: detected capacity change from 0 to 512 [ 126.149271][ T6224] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.669: lblock 0 mapped to illegal pblock 0 (length 1) [ 126.227867][ T6225] FAULT_INJECTION: forcing a failure. [ 126.227867][ T6225] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.278357][ T6225] CPU: 0 PID: 6225 Comm: syz.0.671 Not tainted syzkaller #0 [ 126.285683][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.295760][ T6225] Call Trace: [ 126.299051][ T6225] [ 126.301999][ T6225] dump_stack_lvl+0x188/0x24e [ 126.306704][ T6225] ? show_regs_print_info+0x12/0x12 [ 126.311927][ T6225] ? load_image+0x410/0x410 [ 126.316471][ T6225] ? neigh_release+0x80/0x80 [ 126.321091][ T6225] should_fail_ex+0x390/0x4c0 [ 126.325800][ T6225] get_futex_key+0x1b1/0x1000 [ 126.330494][ T6225] ? inet_ioctl+0x378/0x460 [ 126.335064][ T6225] ? inet_shutdown+0x370/0x370 [ 126.339855][ T6225] ? slab_free_freelist_hook+0x133/0x1b0 [ 126.345516][ T6225] ? futex_setup_timer+0xc0/0xc0 [ 126.350470][ T6225] ? tomoyo_path_number_perm+0x4fb/0x650 [ 126.356126][ T6225] ? __kmem_cache_free+0xb6/0x200 [ 126.361180][ T6225] futex_wake+0x123/0x4f0 [ 126.365535][ T6225] ? futex_wake_mark+0x150/0x150 [ 126.370496][ T6225] ? sock_do_ioctl+0x1b4/0x320 [ 126.375325][ T6225] do_futex+0x2e2/0x320 [ 126.379508][ T6225] ? __ia32_sys_get_robust_list+0x100/0x100 [ 126.385422][ T6225] __se_sys_futex+0x381/0x410 [ 126.390120][ T6225] ? __x64_sys_futex+0xf0/0xf0 [ 126.394908][ T6225] ? __x64_sys_futex+0x1d/0xf0 [ 126.399700][ T6225] do_syscall_64+0x4c/0xa0 [ 126.404168][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 126.408857][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 126.413554][ T6225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.419468][ T6225] RIP: 0033:0x7fe3c399e559 [ 126.423898][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.443519][ T6225] RSP: 002b:00007fe3c1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.451950][ T6225] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa8 RCX: 00007fe3c399e559 [ 126.459937][ T6225] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3c25fac [ 126.467929][ T6225] RBP: 00007fe3c3c25fa0 R08: 000b7fb45162b83c R09: 0000000000000000 [ 126.475915][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.483900][ T6225] R13: 00007fe3c3c26038 R14: 00007ffd1d7aaa90 R15: 00007ffd1d7aab78 [ 126.491910][ T6225] [ 126.529469][ T6222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.550466][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 126.609361][ T6222] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.813021][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 127.003518][ T6251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.158768][ T6260] loop2: detected capacity change from 0 to 128 [ 127.250822][ T6260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.292952][ T6265] FAULT_INJECTION: forcing a failure. [ 127.292952][ T6265] name fail_futex, interval 1, probability 0, space 0, times 0 [ 127.332833][ T6265] CPU: 0 PID: 6265 Comm: syz.0.686 Not tainted syzkaller #0 [ 127.335093][ T6260] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.340143][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.360440][ T6265] Call Trace: [ 127.363742][ T6265] [ 127.366679][ T6265] dump_stack_lvl+0x188/0x24e [ 127.371410][ T6265] ? show_regs_print_info+0x12/0x12 [ 127.376640][ T6265] ? load_image+0x410/0x410 [ 127.381165][ T6265] ? neigh_release+0x80/0x80 [ 127.385802][ T6265] should_fail_ex+0x390/0x4c0 [ 127.390508][ T6265] get_futex_key+0x1b1/0x1000 [ 127.395208][ T6265] ? inet_ioctl+0x378/0x460 [ 127.399737][ T6265] ? inet_shutdown+0x370/0x370 [ 127.404513][ T6265] ? slab_free_freelist_hook+0x133/0x1b0 [ 127.410163][ T6265] ? futex_setup_timer+0xc0/0xc0 [ 127.415155][ T6265] ? tomoyo_path_number_perm+0x4fb/0x650 [ 127.417883][ T6276] Bluetooth: MGMT ver 1.22 [ 127.420792][ T6265] ? __kmem_cache_free+0xb6/0x200 [ 127.420823][ T6265] futex_wake+0x123/0x4f0 [ 127.420850][ T6265] ? futex_wake_mark+0x150/0x150 [ 127.439745][ T6265] ? sock_do_ioctl+0x1b4/0x320 [ 127.444535][ T6265] do_futex+0x2e2/0x320 [ 127.448700][ T6265] ? __ia32_sys_get_robust_list+0x100/0x100 [ 127.454606][ T6265] __se_sys_futex+0x381/0x410 [ 127.459278][ T6265] ? __x64_sys_futex+0xf0/0xf0 [ 127.464046][ T6265] ? __x64_sys_futex+0x1d/0xf0 [ 127.468803][ T6265] do_syscall_64+0x4c/0xa0 [ 127.473212][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 127.477882][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 127.482553][ T6265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.488440][ T6265] RIP: 0033:0x7fe3c399e559 [ 127.492860][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.512458][ T6265] RSP: 002b:00007fe3c1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.520867][ T6265] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa8 RCX: 00007fe3c399e559 [ 127.528836][ T6265] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3c25fac [ 127.536800][ T6265] RBP: 00007fe3c3c25fa0 R08: 000fabd1d2ca2ebe R09: 0000000000000000 [ 127.544764][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.552727][ T6265] R13: 00007fe3c3c26038 R14: 00007ffd1d7aaa90 R15: 00007ffd1d7aab78 [ 127.560702][ T6265] [ 127.701286][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 127.736621][ T6282] loop0: detected capacity change from 0 to 512 [ 127.811126][ T6282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.844393][ T6282] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.863071][ T6289] loop1: detected capacity change from 0 to 512 [ 127.877612][ T6291] loop3: detected capacity change from 0 to 256 [ 127.884985][ T6288] device syzkaller1 entered promiscuous mode [ 127.898377][ T6291] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.917094][ T6289] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 60416 [ 127.987489][ T6291] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.346640][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 129.133159][ T6326] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 129.563863][ T6357] loop1: detected capacity change from 0 to 512 [ 129.594167][ T6357] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 60416 [ 129.621136][ T4278] Bluetooth: hci0: command 0x0c3a tx timeout [ 129.627284][ T4277] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 130.753170][ T6415] netem: change failed [ 131.093331][ T6431] loop3: detected capacity change from 0 to 512 [ 131.107266][ T6431] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 60416 [ 131.974381][ T6464] device syzkaller0 entered promiscuous mode [ 132.587415][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.593771][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.639003][ T6490] device syzkaller0 entered promiscuous mode [ 132.674519][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.773'. [ 133.543665][ T6525] loop3: detected capacity change from 0 to 512 [ 133.585230][ T6525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.595615][ T6525] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.606709][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.695475][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 133.695490][ T27] audit: type=1804 audit(1792382125.561:35): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.788" name="/newroot/172/bus/file1" dev="loop3" ino=15 res=1 errno=0 [ 133.918878][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 134.054064][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 134.215015][ T6553] ip_tables: iptables: counters copy to user failed while replacing table [ 134.380207][ T6558] loop2: detected capacity change from 0 to 512 [ 134.420193][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.802: missing EA_INODE flag [ 134.446539][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.802: error while reading EA inode 2 err=-117 [ 134.526505][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.802: inode #3584: comm syz.2.802: iget: illegal inode # [ 134.590412][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.802: error while reading EA inode 3584 err=-117 [ 134.648930][ T6558] EXT4-fs (loop2): 1 orphan inode deleted [ 134.654987][ T6558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 135.338864][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 135.699754][ T6594] loop4: detected capacity change from 0 to 512 [ 135.793402][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.814459][ T6594] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.969581][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 136.392460][ T6628] loop1: detected capacity change from 0 to 512 [ 136.460349][ T6628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.481447][ T6628] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.546079][ T6633] ip_tables: iptables: counters copy to user failed while replacing table [ 136.610962][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 136.770388][ T6641] loop0: detected capacity change from 0 to 1024 [ 136.821978][ T6641] EXT4-fs: Ignoring removed nobh option [ 136.827583][ T6641] EXT4-fs: quotafile must be on filesystem root [ 137.015512][ T6652] loop3: detected capacity change from 0 to 128 [ 137.072554][ T6658] loop0: detected capacity change from 0 to 128 [ 137.095899][ T6658] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 137.107529][ T6652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.132150][ T6652] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.403807][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 138.184608][ T6696] loop1: detected capacity change from 0 to 1024 [ 138.236537][ T6696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.458789][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 138.803338][ T6721] loop1: detected capacity change from 0 to 512 [ 138.861754][ T6721] EXT4-fs: Ignoring removed bh option [ 138.871560][ T6721] EXT4-fs: Mount option(s) incompatible with ext2 [ 138.989928][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.870'. [ 139.214366][ T6741] device macvtap0 entered promiscuous mode [ 139.707455][ T6767] program syz.1.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.032415][ T6784] loop4: detected capacity change from 0 to 512 [ 140.099992][ T6784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.172178][ T6784] EXT4-fs (loop4): 1 truncate cleaned up [ 140.195053][ T6784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.270845][ T6784] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.895: bad extra_isize 62 (inode size 256) [ 140.368361][ T6784] EXT4-fs (loop4): Remounting filesystem read-only [ 140.394076][ T6784] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.895: bad extra_isize 62 (inode size 256) [ 140.441160][ T6784] EXT4-fs (loop4): Remounting filesystem read-only [ 140.549134][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 140.841016][ T6813] FAULT_INJECTION: forcing a failure. [ 140.841016][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.875218][ T6813] CPU: 1 PID: 6813 Comm: syz.3.909 Not tainted syzkaller #0 [ 140.882540][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.892595][ T6813] Call Trace: [ 140.895872][ T6813] [ 140.898796][ T6813] dump_stack_lvl+0x188/0x24e [ 140.903476][ T6813] ? show_regs_print_info+0x12/0x12 [ 140.908670][ T6813] ? load_image+0x410/0x410 [ 140.913164][ T6813] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.918186][ T6813] ? slab_free_freelist_hook+0x133/0x1b0 [ 140.923819][ T6813] should_fail_ex+0x390/0x4c0 [ 140.928496][ T6813] _copy_from_user+0x2c/0x170 [ 140.933171][ T6813] arp_ioctl+0x155/0x530 [ 140.937411][ T6813] ? neigh_release+0x80/0x80 [ 140.941996][ T6813] ? do_vfs_ioctl+0x1be3/0x1d40 [ 140.946851][ T6813] inet_ioctl+0x378/0x460 [ 140.951176][ T6813] ? inet_shutdown+0x370/0x370 [ 140.955930][ T6813] ? slab_free_freelist_hook+0x133/0x1b0 [ 140.961561][ T6813] ? tomoyo_path_number_perm+0x4fb/0x650 [ 140.967185][ T6813] ? __kmem_cache_free+0xb6/0x200 [ 140.972216][ T6813] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 140.977674][ T6813] sock_do_ioctl+0xfb/0x320 [ 140.982173][ T6813] ? sock_show_fdinfo+0xb0/0xb0 [ 140.987027][ T6813] sock_ioctl+0x48a/0x700 [ 140.991354][ T6813] ? sock_poll+0x420/0x420 [ 140.995771][ T6813] ? bpf_lsm_file_ioctl+0x5/0x10 [ 141.000711][ T6813] ? security_file_ioctl+0x7c/0xa0 [ 141.005817][ T6813] ? sock_poll+0x420/0x420 [ 141.010227][ T6813] __se_sys_ioctl+0xfa/0x170 [ 141.014815][ T6813] do_syscall_64+0x4c/0xa0 [ 141.019225][ T6813] ? clear_bhb_loop+0x60/0xb0 [ 141.024046][ T6813] ? clear_bhb_loop+0x60/0xb0 [ 141.028731][ T6813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.034627][ T6813] RIP: 0033:0x7fc285d9e559 [ 141.039046][ T6813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.058655][ T6813] RSP: 002b:00007fc286c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.067072][ T6813] RAX: ffffffffffffffda RBX: 00007fc286025fa0 RCX: 00007fc285d9e559 [ 141.075039][ T6813] RDX: 0000000000000000 RSI: 0000000000008955 RDI: 0000000000000006 [ 141.083004][ T6813] RBP: 00007fc285e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 141.090970][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.098933][ T6813] R13: 00007fc286026038 R14: 00007fc286025fa0 R15: 00007fff73850ff8 [ 141.106951][ T6813] [ 141.118829][ T6821] FAULT_INJECTION: forcing a failure. [ 141.118829][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.165033][ T6821] CPU: 1 PID: 6821 Comm: syz.2.908 Not tainted syzkaller #0 [ 141.172389][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.182471][ T6821] Call Trace: [ 141.185772][ T6821] [ 141.188764][ T6821] dump_stack_lvl+0x188/0x24e [ 141.193467][ T6821] ? show_regs_print_info+0x12/0x12 [ 141.198696][ T6821] ? load_image+0x410/0x410 [ 141.203230][ T6821] ? __lock_acquire+0x7ea0/0x7ea0 [ 141.208288][ T6821] should_fail_ex+0x390/0x4c0 [ 141.212996][ T6821] _copy_from_user+0x2c/0x170 [ 141.217704][ T6821] __sys_bpf+0x2ea/0x780 [ 141.221980][ T6821] ? bpf_link_show_fdinfo+0x380/0x380 [ 141.227391][ T6821] ? lock_chain_count+0x20/0x20 [ 141.232271][ T6821] __x64_sys_bpf+0x78/0x90 [ 141.236724][ T6821] do_syscall_64+0x4c/0xa0 [ 141.241157][ T6821] ? clear_bhb_loop+0x60/0xb0 [ 141.245853][ T6821] ? clear_bhb_loop+0x60/0xb0 [ 141.250592][ T6821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.256502][ T6821] RIP: 0033:0x7f678799e559 [ 141.260926][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.280551][ T6821] RSP: 002b:00007f678890d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.289007][ T6821] RAX: ffffffffffffffda RBX: 00007f6787c25fa0 RCX: 00007f678799e559 [ 141.296994][ T6821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 141.304980][ T6821] RBP: 00007f6787a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 141.312963][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.320954][ T6821] R13: 00007f6787c26038 R14: 00007f6787c25fa0 R15: 00007ffc37875758 [ 141.328976][ T6821] [ 141.727008][ T6835] loop1: detected capacity change from 0 to 8192 [ 142.020899][ T6835] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff3f) [ 142.029147][ T6835] FAT-fs (loop1): Filesystem has been set read-only [ 142.727914][ T6844] syz.4.916 (6844): drop_caches: 2 [ 143.532281][ T6906] FAULT_INJECTION: forcing a failure. [ 143.532281][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 143.556504][ T6906] CPU: 1 PID: 6906 Comm: syz.4.934 Not tainted syzkaller #0 [ 143.563829][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.573903][ T6906] Call Trace: [ 143.577190][ T6906] [ 143.580127][ T6906] dump_stack_lvl+0x188/0x24e [ 143.584824][ T6906] ? show_regs_print_info+0x12/0x12 [ 143.590036][ T6906] ? load_image+0x410/0x410 [ 143.594553][ T6906] ? __might_sleep+0xd0/0xd0 [ 143.599149][ T6906] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.604202][ T6906] should_fail_ex+0x390/0x4c0 [ 143.608902][ T6906] should_failslab+0x5/0x20 [ 143.613410][ T6906] slab_pre_alloc_hook+0x59/0x300 [ 143.618449][ T6906] ? lockdep_softirqs_off+0x430/0x430 [ 143.623846][ T6906] kmem_cache_alloc+0x56/0x2f0 [ 143.628631][ T6906] ? security_inode_alloc+0x30/0x110 [ 143.633938][ T6906] security_inode_alloc+0x30/0x110 [ 143.639070][ T6906] inode_init_always+0x910/0xc90 [ 143.644030][ T6906] new_inode_pseudo+0x91/0x1c0 [ 143.648810][ T6906] __sock_create+0x129/0x940 [ 143.653445][ T6906] __sys_socketpair+0x232/0x540 [ 143.658315][ T6906] __x64_sys_socketpair+0x97/0xb0 [ 143.663354][ T6906] do_syscall_64+0x4c/0xa0 [ 143.667789][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 143.672471][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 143.677175][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.683091][ T6906] RIP: 0033:0x7fd6eff9e559 [ 143.687516][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.707135][ T6906] RSP: 002b:00007fd6f0e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 143.715574][ T6906] RAX: ffffffffffffffda RBX: 00007fd6f0225fa0 RCX: 00007fd6eff9e559 [ 143.723558][ T6906] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 143.731543][ T6906] RBP: 00007fd6f0035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 143.739531][ T6906] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 143.747522][ T6906] R13: 00007fd6f0226038 R14: 00007fd6f0225fa0 R15: 00007ffcda37f138 [ 143.755523][ T6906] [ 143.777005][ T6906] socket: no more sockets [ 143.832653][ T6815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.072951][ T6919] loop1: detected capacity change from 0 to 512 [ 144.112932][ T6919] FAT-fs (loop1): bogus number of FAT sectors [ 144.120203][ T6919] FAT-fs (loop1): Can't find a valid FAT filesystem [ 144.752893][ T6952] FAULT_INJECTION: forcing a failure. [ 144.752893][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 144.778173][ T6952] CPU: 1 PID: 6952 Comm: syz.3.954 Not tainted syzkaller #0 [ 144.785499][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.795577][ T6952] Call Trace: [ 144.798901][ T6952] [ 144.801838][ T6952] dump_stack_lvl+0x188/0x24e [ 144.806539][ T6952] ? show_regs_print_info+0x12/0x12 [ 144.811805][ T6952] ? load_image+0x410/0x410 [ 144.816321][ T6952] ? __might_sleep+0xd0/0xd0 [ 144.820921][ T6952] ? __lock_acquire+0x7ea0/0x7ea0 [ 144.825985][ T6952] should_fail_ex+0x390/0x4c0 [ 144.830683][ T6952] should_failslab+0x5/0x20 [ 144.835197][ T6952] slab_pre_alloc_hook+0x59/0x300 [ 144.840236][ T6952] ? key_alloc+0x346/0x1030 [ 144.844760][ T6952] __kmem_cache_alloc_node+0x4f/0x270 [ 144.850158][ T6952] ? key_alloc+0x346/0x1030 [ 144.854683][ T6952] __kmalloc_node_track_caller+0xa0/0x240 [ 144.860417][ T6952] kmemdup+0x27/0x60 [ 144.864342][ T6952] key_alloc+0x346/0x1030 [ 144.868698][ T6952] keyring_alloc+0x41/0xa0 [ 144.873123][ T6952] join_session_keyring+0x137/0x440 [ 144.878327][ T6952] lookup_user_key+0x516/0x1110 [ 144.883180][ T6952] ? lookup_user_key_possessed+0x40/0x40 [ 144.888807][ T6952] ? do_futex+0x310/0x320 [ 144.893130][ T6952] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 144.899128][ T6952] ? strncpy_from_user+0x1dc/0x340 [ 144.904257][ T6952] __se_sys_add_key+0x311/0x410 [ 144.909104][ T6952] ? __x64_sys_add_key+0xc0/0xc0 [ 144.914039][ T6952] ? lockdep_hardirqs_on+0x94/0x140 [ 144.919235][ T6952] ? __x64_sys_add_key+0x1c/0xc0 [ 144.924170][ T6952] do_syscall_64+0x4c/0xa0 [ 144.928601][ T6952] ? clear_bhb_loop+0x60/0xb0 [ 144.933273][ T6952] ? clear_bhb_loop+0x60/0xb0 [ 144.937944][ T6952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.943831][ T6952] RIP: 0033:0x7fc285d9e559 [ 144.948241][ T6952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.967847][ T6952] RSP: 002b:00007fc286c14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 144.976255][ T6952] RAX: ffffffffffffffda RBX: 00007fc286025fa0 RCX: 00007fc285d9e559 [ 144.984256][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 144.992235][ T6952] RBP: 00007fc285e35ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 145.000205][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.008200][ T6952] R13: 00007fc286026038 R14: 00007fc286025fa0 R15: 00007fff73850ff8 [ 145.016186][ T6952] [ 145.023218][ T6959] capability: warning: `syz.4.956' uses 32-bit capabilities (legacy support in use) [ 145.524433][ T6982] loop0: detected capacity change from 0 to 128 [ 145.560137][ T6982] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.574246][ T6982] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.735069][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 145.942716][ T6996] FAULT_INJECTION: forcing a failure. [ 145.942716][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 145.955646][ T6996] CPU: 1 PID: 6996 Comm: syz.0.972 Not tainted syzkaller #0 [ 145.962959][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.973026][ T6996] Call Trace: [ 145.976323][ T6996] [ 145.979269][ T6996] dump_stack_lvl+0x188/0x24e [ 145.983974][ T6996] ? show_regs_print_info+0x12/0x12 [ 145.989193][ T6996] ? load_image+0x410/0x410 [ 145.993719][ T6996] ? __lock_acquire+0x7ea0/0x7ea0 [ 145.998764][ T6996] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.004767][ T6996] ? __lock_acquire+0x7ea0/0x7ea0 [ 146.009822][ T6996] should_fail_ex+0x390/0x4c0 [ 146.014537][ T6996] should_failslab+0x5/0x20 [ 146.019060][ T6996] slab_pre_alloc_hook+0x59/0x300 [ 146.024112][ T6996] ? copy_net_ns+0x10b/0x5b0 [ 146.028733][ T6996] __kmem_cache_alloc_node+0x4f/0x270 [ 146.034127][ T6996] ? copy_net_ns+0x10b/0x5b0 [ 146.038743][ T6996] __kmalloc+0xa3/0x240 [ 146.042924][ T6996] copy_net_ns+0x10b/0x5b0 [ 146.047369][ T6996] create_new_namespaces+0x3ce/0x700 [ 146.052693][ T6996] unshare_nsproxy_namespaces+0x116/0x160 [ 146.058438][ T6996] ksys_unshare+0x4f6/0x8e0 [ 146.062973][ T6996] ? sighand_ctor+0x40/0x40 [ 146.067499][ T6996] ? lock_chain_count+0x20/0x20 [ 146.072371][ T6996] ? syscall_enter_from_user_mode+0x21/0x80 [ 146.078263][ T6996] __x64_sys_unshare+0x34/0x40 [ 146.083041][ T6996] do_syscall_64+0x4c/0xa0 [ 146.087470][ T6996] ? clear_bhb_loop+0x60/0xb0 [ 146.092141][ T6996] ? clear_bhb_loop+0x60/0xb0 [ 146.096811][ T6996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.102705][ T6996] RIP: 0033:0x7fe3c399e559 [ 146.107133][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.126757][ T6996] RSP: 002b:00007fe3c1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 146.135176][ T6996] RAX: ffffffffffffffda RBX: 00007fe3c3c25fa0 RCX: 00007fe3c399e559 [ 146.143173][ T6996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 146.151164][ T6996] RBP: 00007fe3c3a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 146.159143][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.167314][ T6996] R13: 00007fe3c3c26038 R14: 00007fe3c3c25fa0 R15: 00007ffd1d7aab78 [ 146.175313][ T6996] [ 146.386192][ T4351] smpboot: CPU 1 is now offline [ 146.545404][ T7014] loop0: detected capacity change from 0 to 1024 [ 146.591906][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.731446][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 146.824320][ T7025] loop4: detected capacity change from 0 to 512 [ 146.840238][ T7026] loop3: detected capacity change from 0 to 736 [ 146.855986][ T7025] journal_path: Lookup failure for './file0' [ 146.883158][ T7025] EXT4-fs: error: could not find journal device path [ 147.078723][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.988'. [ 147.446130][ T6941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.539213][ T7047] loop0: detected capacity change from 0 to 512 [ 147.687529][ T7055] loop4: detected capacity change from 0 to 512 [ 147.734172][ T7047] EXT4-fs (loop0): 1 truncate cleaned up [ 147.831250][ T7055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.870766][ T7047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.894135][ T7055] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.097313][ T27] audit: type=1800 audit(1792382139.961:36): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.998" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 148.236070][ T27] audit: type=1800 audit(1792382139.991:37): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 148.273628][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 148.375442][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 148.443462][ T7081] loop4: detected capacity change from 0 to 512 [ 148.528252][ T7081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.580375][ T7081] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.658404][ T7081] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 2 (only 1 groups) [ 148.735047][ T7098] FAULT_INJECTION: forcing a failure. [ 148.735047][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 148.787984][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 148.801079][ T7098] CPU: 0 PID: 7098 Comm: syz.1.1011 Not tainted syzkaller #0 [ 148.808451][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.818484][ T7098] Call Trace: [ 148.821770][ T7098] [ 148.824685][ T7098] dump_stack_lvl+0x188/0x24e [ 148.829349][ T7098] ? show_regs_print_info+0x12/0x12 [ 148.834533][ T7098] ? load_image+0x410/0x410 [ 148.839015][ T7098] ? __lock_acquire+0x7ea0/0x7ea0 [ 148.844026][ T7098] should_fail_ex+0x390/0x4c0 [ 148.848689][ T7098] should_failslab+0x5/0x20 [ 148.853170][ T7098] slab_pre_alloc_hook+0x59/0x300 [ 148.858179][ T7098] ? kvmalloc_node+0x6c/0x180 [ 148.862842][ T7098] __kmem_cache_alloc_node+0x4f/0x270 [ 148.868197][ T7098] ? kvmalloc_node+0x6c/0x180 [ 148.872851][ T7098] __kmalloc_node+0xa2/0x240 [ 148.877419][ T7098] ? __nf_register_net_hook+0x232/0x910 [ 148.882961][ T7098] kvmalloc_node+0x6c/0x180 [ 148.887445][ T7098] nf_hook_entries_grow+0x31a/0x760 [ 148.892668][ T7098] __nf_register_net_hook+0x2c9/0x910 [ 148.898038][ T7098] nf_register_net_hook+0xae/0x190 [ 148.903155][ T7098] nf_register_net_hooks+0x40/0x1a0 [ 148.908342][ T7098] ip_vs_register_hooks+0xca/0x140 [ 148.913440][ T7098] ip_vs_add_service+0x2c1/0x1210 [ 148.918463][ T7098] do_ip_vs_set_ctl+0x9b5/0xb40 [ 148.923298][ T7098] ? update_defense_level+0xe20/0xe20 [ 148.928654][ T7098] ? trace_contention_end+0x5f/0x170 [ 148.933926][ T7098] ? mutex_unlock+0x10/0x10 [ 148.938425][ T7098] ? aa_af_perm+0x340/0x340 [ 148.942942][ T7098] nf_setsockopt+0x25f/0x280 [ 148.947519][ T7098] ? sock_common_recvmsg+0x190/0x190 [ 148.952786][ T7098] __sys_setsockopt+0x2bf/0x3d0 [ 148.957621][ T7098] __x64_sys_setsockopt+0xb1/0xc0 [ 148.962635][ T7098] do_syscall_64+0x4c/0xa0 [ 148.967033][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 148.971689][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 148.976364][ T7098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.982238][ T7098] RIP: 0033:0x7f7a81b9e559 [ 148.986635][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.006226][ T7098] RSP: 002b:00007f7a7fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.014634][ T7098] RAX: ffffffffffffffda RBX: 00007f7a81e25fa0 RCX: 00007f7a81b9e559 [ 149.022587][ T7098] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 149.030535][ T7098] RBP: 00007f7a81c35ab8 R08: 000000000000002c R09: 0000000000000000 [ 149.038487][ T7098] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 149.046437][ T7098] R13: 00007f7a81e26038 R14: 00007f7a81e25fa0 R15: 00007ffca6ac6ec8 [ 149.054400][ T7098] [ 149.203706][ T7105] loop2: detected capacity change from 0 to 128 [ 149.248208][ T7105] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.327015][ T7105] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.524740][ T7115] loop4: detected capacity change from 0 to 1024 [ 149.615905][ T7115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.751708][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 149.834756][ T7125] ip_tables: iptables: counters copy to user failed while replacing table [ 149.868293][ T7126] loop0: detected capacity change from 0 to 764 [ 149.896298][ T7125] device syzkaller1 entered promiscuous mode [ 150.414305][ T7150] loop2: detected capacity change from 0 to 128 [ 150.786211][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 151.432344][ T7171] device syzkaller0 entered promiscuous mode [ 151.460065][ T7171] 0: reclassify loop, rule prio 0, protocol 800 [ 151.659286][ T7173] loop0: detected capacity change from 0 to 512 [ 151.690827][ T7094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.750618][ T7173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.895224][ T7173] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.172857][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 152.494312][ T7201] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.699944][ T7212] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.741030][ T7212] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.781199][ T7212] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.824738][ T7212] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.864313][ T7212] device geneve2 entered promiscuous mode [ 153.227957][ T7229] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1056'. [ 153.680333][ T7244] loop1: detected capacity change from 0 to 2048 [ 153.736119][ T7244] loop1: p2 p3 < > p4 < p5 > [ 153.744987][ T7244] loop1: partition table partially beyond EOD, truncated [ 153.774989][ T7244] loop1: p3 start 4225 is beyond EOD, truncated [ 153.836738][ T7248] loop0: detected capacity change from 0 to 512 [ 153.896131][ T7247] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.945637][ T7248] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1063: iget: bad i_size value: 38620345925642 [ 154.053113][ T7248] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1063: couldn't read orphan inode 15 (err -117) [ 154.121435][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.190245][ T7248] EXT4-fs (loop0): shut down requested (0) [ 154.389504][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 154.968337][ T7290] raw_sendmsg: syz.2.1091 forgot to set AF_INET. Fix it! [ 155.585498][ T7205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.081034][ T7319] loop6: detected capacity change from 0 to 7 [ 156.120402][ T4384] Dev loop6: unable to read RDB block 7 [ 156.146930][ T4384] loop6: unable to read partition table [ 156.185125][ T4384] loop6: partition table beyond EOD, truncated [ 156.224982][ T7319] Dev loop6: unable to read RDB block 7 [ 156.273424][ T7319] loop6: unable to read partition table [ 156.313959][ T7319] loop6: partition table beyond EOD, truncated [ 156.361133][ T7319] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 156.564257][ T7339] loop4: detected capacity change from 0 to 512 [ 156.654714][ T7339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1104: bg 0: block 5: invalid block bitmap [ 156.759454][ T7339] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 156.823622][ T7339] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1104: invalid indirect mapped block 3 (level 2) [ 156.889180][ T7339] EXT4-fs (loop4): 1 orphan inode deleted [ 156.915140][ T7339] EXT4-fs (loop4): 1 truncate cleaned up [ 156.953391][ T7339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.087702][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 157.316198][ T7369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1117'. [ 157.715529][ T7386] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 158.559545][ T7373] syz.3.1119 (7373): drop_caches: 2 [ 158.583926][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1138'. [ 158.602099][ T7377] syz.3.1119 (7377): drop_caches: 2 [ 158.757171][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1142'. [ 158.800316][ T7426] loop3: detected capacity change from 0 to 1024 [ 158.849111][ T7426] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.908057][ T7426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.943971][ T7426] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1141: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.021986][ T7426] EXT4-fs (loop3): 1 orphan inode deleted [ 159.047376][ T7426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.127939][ T7426] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.1141: iget: bad i_size value: 1970324836974602 [ 159.248280][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 159.897680][ T7473] FAULT_INJECTION: forcing a failure. [ 159.897680][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 159.910532][ T7473] CPU: 0 PID: 7473 Comm: syz.3.1160 Not tainted syzkaller #0 [ 159.917898][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.927930][ T7473] Call Trace: [ 159.931211][ T7473] [ 159.934124][ T7473] dump_stack_lvl+0x188/0x24e [ 159.938789][ T7473] ? show_regs_print_info+0x12/0x12 [ 159.944011][ T7473] ? load_image+0x410/0x410 [ 159.948496][ T7473] ? __kmalloc+0xb3/0x240 [ 159.952810][ T7473] ? offload_action_alloc+0x26/0x270 [ 159.958094][ T7473] ? tcf_action_init+0x2da/0x970 [ 159.963012][ T7473] ? tc_ctl_action+0x3f5/0xc60 [ 159.967761][ T7473] should_fail_ex+0x390/0x4c0 [ 159.972425][ T7473] should_failslab+0x5/0x20 [ 159.976905][ T7473] slab_pre_alloc_hook+0x59/0x300 [ 159.981912][ T7473] ? flow_action_cookie_create+0x22/0x90 [ 159.987528][ T7473] __kmem_cache_alloc_node+0x4f/0x270 [ 159.992881][ T7473] ? flow_action_cookie_create+0x22/0x90 [ 159.998498][ T7473] __kmalloc+0xa3/0x240 [ 160.002634][ T7473] flow_action_cookie_create+0x22/0x90 [ 160.008078][ T7473] ? tc_setup_action+0x10d/0x8a0 [ 160.013025][ T7473] tc_setup_action+0x27e/0x8a0 [ 160.017777][ T7473] ? tc_cleanup_offload_action+0x130/0x130 [ 160.023563][ T7473] ? __kmalloc+0xe4/0x240 [ 160.027879][ T7473] tcf_action_offload_add_ex+0x5c9/0x890 [ 160.033497][ T7473] ? net_generic+0x240/0x240 [ 160.038085][ T7473] ? tcf_action_fill_size+0x1c/0x2d0 [ 160.043354][ T7473] ? tcf_action_fill_size+0x1c/0x2d0 [ 160.048625][ T7473] tcf_action_init+0x2da/0x970 [ 160.053375][ T7473] ? tcf_action_init_1+0x6d0/0x6d0 [ 160.058512][ T7473] tc_ctl_action+0x3f5/0xc60 [ 160.063101][ T7473] ? tca_get_fill+0x550/0x550 [ 160.067765][ T7473] ? preempt_schedule+0xbc/0xd0 [ 160.072605][ T7473] ? trace_raw_output_contention_end+0xd0/0xd0 [ 160.078760][ T7473] ? tca_get_fill+0x550/0x550 [ 160.083417][ T7473] rtnetlink_rcv_msg+0x863/0xfb0 [ 160.088338][ T7473] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 160.093432][ T7473] ? rtnetlink_bind+0x80/0x80 [ 160.098112][ T7473] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.104074][ T7473] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.109080][ T7473] ? lock_chain_count+0x20/0x20 [ 160.113913][ T7473] ? preempt_schedule_thunk+0x16/0x18 [ 160.119287][ T7473] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 160.125249][ T7473] ? _raw_spin_unlock+0x40/0x40 [ 160.130090][ T7473] ? swake_up_one+0x6d/0x130 [ 160.134665][ T7473] ? rcu_preempt_deferred_qs_irqrestore+0x84f/0xbd0 [ 160.141244][ T7473] ? rcu_read_unlock_special+0x510/0x510 [ 160.146854][ T7473] ? memcpy+0x3c/0x60 [ 160.150824][ T7473] netlink_rcv_skb+0x1ef/0x440 [ 160.155588][ T7473] ? rtnetlink_bind+0x80/0x80 [ 160.160269][ T7473] ? netlink_ack+0x1160/0x1160 [ 160.165033][ T7473] ? __rcu_read_unlock+0x78/0xd0 [ 160.169953][ T7473] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.175139][ T7473] netlink_unicast+0x7ad/0x920 [ 160.179912][ T7473] netlink_sendmsg+0x8ad/0xbd0 [ 160.184667][ T7473] ? netlink_getsockopt+0x550/0x550 [ 160.189854][ T7473] ? apparmor_socket_sendmsg+0x8a/0x330 [ 160.195387][ T7473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 160.200651][ T7473] ? security_socket_sendmsg+0x7c/0xa0 [ 160.206091][ T7473] ? netlink_getsockopt+0x550/0x550 [ 160.211292][ T7473] ____sys_sendmsg+0x5ed/0x9a0 [ 160.216044][ T7473] ? __sys_sendmsg_sock+0x30/0x30 [ 160.221082][ T7473] ? __import_iovec+0x306/0x510 [ 160.225945][ T7473] ? import_iovec+0x6f/0xa0 [ 160.230440][ T7473] ___sys_sendmsg+0x2a2/0x360 [ 160.235126][ T7473] ? __sys_sendmsg+0x2a0/0x2a0 [ 160.239926][ T7473] __se_sys_sendmsg+0x1c3/0x2b0 [ 160.244761][ T7473] ? __x64_sys_sendmsg+0x80/0x80 [ 160.249710][ T7473] ? lockdep_hardirqs_on+0x94/0x140 [ 160.254896][ T7473] do_syscall_64+0x4c/0xa0 [ 160.259295][ T7473] ? clear_bhb_loop+0x60/0xb0 [ 160.263956][ T7473] ? clear_bhb_loop+0x60/0xb0 [ 160.268615][ T7473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.274493][ T7473] RIP: 0033:0x7fc285d9e559 [ 160.278889][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.298473][ T7473] RSP: 002b:00007fc286c14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.306865][ T7473] RAX: ffffffffffffffda RBX: 00007fc286025fa0 RCX: 00007fc285d9e559 [ 160.314837][ T7473] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 160.322796][ T7473] RBP: 00007fc285e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 160.330746][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.338713][ T7473] R13: 00007fc286026038 R14: 00007fc286025fa0 R15: 00007fff73850ff8 [ 160.346673][ T7473] [ 160.632552][ T7487] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 161.703274][ T7409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.944098][ T7497] device syzkaller0 entered promiscuous mode [ 161.973395][ T7497] [ 161.975731][ T7497] ============================================ [ 161.981855][ T7497] WARNING: possible recursive locking detected [ 161.988006][ T7497] syzkaller #0 Not tainted [ 161.992396][ T7497] -------------------------------------------- [ 161.998518][ T7497] syz.4.1169/7497 is trying to acquire lock: [ 162.004467][ T7497] ffff8880790c8108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 162.014447][ T7497] [ 162.014447][ T7497] but task is already holding lock: [ 162.021785][ T7497] ffff8880790c8108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 162.031768][ T7497] [ 162.031768][ T7497] other info that might help us debug this: [ 162.039802][ T7497] Possible unsafe locking scenario: [ 162.039802][ T7497] [ 162.047226][ T7497] CPU0 [ 162.050484][ T7497] ---- [ 162.053737][ T7497] lock(&sch->root_lock_key#91); [ 162.058740][ T7497] lock(&sch->root_lock_key#91); [ 162.063752][ T7497] [ 162.063752][ T7497] *** DEADLOCK *** [ 162.063752][ T7497] [ 162.071868][ T7497] May be due to missing lock nesting notation [ 162.071868][ T7497] [ 162.080163][ T7497] 3 locks held by syz.4.1169/7497: [ 162.085245][ T7497] #0: ffffffff8d92d900 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x281/0x3810 [ 162.095135][ T7497] #1: ffff8880790c8108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 162.105552][ T7497] #2: ffffffff8d92d900 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x281/0x3810 [ 162.115440][ T7497] [ 162.115440][ T7497] stack backtrace: [ 162.121304][ T7497] CPU: 0 PID: 7497 Comm: syz.4.1169 Not tainted syzkaller #0 [ 162.128650][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.138691][ T7497] Call Trace: [ 162.141969][ T7497] [ 162.144891][ T7497] dump_stack_lvl+0x188/0x24e [ 162.149552][ T7497] ? show_regs_print_info+0x12/0x12 [ 162.154734][ T7497] ? print_deadlock_bug+0x435/0x5d0 [ 162.159914][ T7497] __lock_acquire+0x690e/0x7ea0 [ 162.164748][ T7497] ? add_lock_to_list+0x191/0x280 [ 162.169751][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.174939][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.180123][ T7497] ? __lock_acquire+0x36d9/0x7ea0 [ 162.185130][ T7497] ? is_bpf_text_address+0x28b/0x2a0 [ 162.190401][ T7497] lock_acquire+0x1bc/0x4a0 [ 162.194913][ T7497] ? __dev_queue_xmit+0xe46/0x3810 [ 162.200014][ T7497] ? read_lock_is_recursive+0x10/0x10 [ 162.205388][ T7497] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 162.211522][ T7497] ? rcu_read_lock_bh_held+0x76/0xf0 [ 162.216802][ T7497] ? rcu_read_lock_held+0x40/0x40 [ 162.221808][ T7497] _raw_spin_lock+0x2a/0x40 [ 162.226290][ T7497] ? __dev_queue_xmit+0xe46/0x3810 [ 162.231391][ T7497] __dev_queue_xmit+0xe46/0x3810 [ 162.236312][ T7497] ? __dev_queue_xmit+0x281/0x3810 [ 162.241401][ T7497] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.247359][ T7497] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.252365][ T7497] ? netdev_core_pick_tx+0x360/0x360 [ 162.257660][ T7497] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 162.263541][ T7497] ? lockdep_hardirqs_on+0x94/0x140 [ 162.268725][ T7497] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.274596][ T7497] ? _raw_spin_unlock+0x40/0x40 [ 162.279427][ T7497] ? stack_trace_save+0xa6/0xf0 [ 162.284257][ T7497] ? stack_trace_snprint+0xe0/0xe0 [ 162.289344][ T7497] ? tcf_mirred_offload_act_setup+0xb00/0xb00 [ 162.295392][ T7497] sch_frag_xmit_hook+0x2a4/0x11c0 [ 162.300478][ T7497] ? kasan_set_track+0x60/0x70 [ 162.305221][ T7497] ? kasan_set_track+0x4b/0x70 [ 162.309963][ T7497] ? slab_post_alloc_hook+0x4b/0x490 [ 162.315230][ T7497] ? kmem_cache_alloc+0x18b/0x2f0 [ 162.320229][ T7497] ? skb_clone+0x1e7/0x370 [ 162.324623][ T7497] ? tcf_mirred_act+0x563/0x1640 [ 162.329539][ T7497] ? tcf_action_exec+0x174/0x590 [ 162.334454][ T7497] ? basic_classify+0x1ae/0x2c0 [ 162.339299][ T7497] ? tcf_classify+0x33e/0xbf0 [ 162.343973][ T7497] ? cake_enqueue+0x230/0x8260 [ 162.348712][ T7497] ? dev_qdisc_enqueue+0x4c/0x2b0 [ 162.353715][ T7497] ? __dev_queue_xmit+0x1031/0x3810 [ 162.358906][ T7497] ? packet_sendmsg+0x3a9e/0x4c30 [ 162.363911][ T7497] ? ____sys_sendmsg+0x5ed/0x9a0 [ 162.368831][ T7497] ? mq_dump_class_stats+0x490/0x490 [ 162.374117][ T7497] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.380169][ T7497] ? __copy_skb_header+0x3ba/0x4f0 [ 162.385256][ T7497] ? memcpy+0x3c/0x60 [ 162.389214][ T7497] ? __copy_skb_header+0x3ba/0x4f0 [ 162.394304][ T7497] ? __skb_clone+0x446/0x6c0 [ 162.398872][ T7497] ? skb_clone+0x21b/0x370 [ 162.403267][ T7497] ? tcf_mirred_act+0x552/0x1640 [ 162.408206][ T7497] tcf_mirred_act+0xb1c/0x1640 [ 162.412954][ T7497] tcf_action_exec+0x174/0x590 [ 162.417699][ T7497] basic_classify+0x1ae/0x2c0 [ 162.422355][ T7497] tcf_classify+0x33e/0xbf0 [ 162.426838][ T7497] cake_enqueue+0x230/0x8260 [ 162.431404][ T7497] ? __skb_flow_dissect+0x407/0x6d50 [ 162.436667][ T7497] ? __skb_flow_dissect+0x6579/0x6d50 [ 162.442025][ T7497] ? lockdep_lock+0xf1/0x1f0 [ 162.446594][ T7497] ? lockdep_unlock+0x142/0x2e0 [ 162.451448][ T7497] ? lockdep_lock+0x1f0/0x1f0 [ 162.456104][ T7497] ? __lock_acquire+0x36d9/0x7ea0 [ 162.461107][ T7497] ? INET_ECN_set_ce+0x960/0x960 [ 162.466028][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.471215][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.476392][ T7497] ? __lock_acquire+0x1359/0x7ea0 [ 162.481394][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.486577][ T7497] ? do_raw_spin_lock+0x128/0x2f0 [ 162.491579][ T7497] ? __rwlock_init+0x140/0x140 [ 162.496350][ T7497] dev_qdisc_enqueue+0x4c/0x2b0 [ 162.501180][ T7497] __dev_queue_xmit+0x1031/0x3810 [ 162.506186][ T7497] ? __dev_queue_xmit+0x281/0x3810 [ 162.511276][ T7497] ? _copy_from_iter+0x5df/0x1130 [ 162.516286][ T7497] ? netdev_core_pick_tx+0x360/0x360 [ 162.521552][ T7497] ? virtio_net_hdr_to_skb+0x938/0x12b0 [ 162.527080][ T7497] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 162.533213][ T7497] ? dev_get_by_index+0x1e/0x2d0 [ 162.538135][ T7497] ? skb_put+0x10e/0x200 [ 162.542357][ T7497] packet_sendmsg+0x3a9e/0x4c30 [ 162.547194][ T7497] ? verify_lock_unused+0x140/0x140 [ 162.552373][ T7497] ? aa_sk_perm+0x81f/0x950 [ 162.556858][ T7497] ? aa_af_perm+0x340/0x340 [ 162.561339][ T7497] ? packet_getsockopt+0x980/0x980 [ 162.566429][ T7497] ? apparmor_socket_sendmsg+0x8a/0x330 [ 162.571958][ T7497] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 162.577220][ T7497] ? security_socket_sendmsg+0x7c/0xa0 [ 162.582659][ T7497] ? packet_getsockopt+0x980/0x980 [ 162.587749][ T7497] ____sys_sendmsg+0x5ed/0x9a0 [ 162.592492][ T7497] ? __sys_sendmsg_sock+0x30/0x30 [ 162.597499][ T7497] ? __import_iovec+0x306/0x510 [ 162.602334][ T7497] ? import_iovec+0x6f/0xa0 [ 162.606819][ T7497] ___sys_sendmsg+0x2a2/0x360 [ 162.611482][ T7497] ? __sys_sendmsg+0x2a0/0x2a0 [ 162.616247][ T7497] __se_sys_sendmsg+0x1c3/0x2b0 [ 162.621072][ T7497] ? __x64_sys_sendmsg+0x80/0x80 [ 162.625994][ T7497] ? lockdep_hardirqs_on+0x94/0x140 [ 162.631172][ T7497] do_syscall_64+0x4c/0xa0 [ 162.635567][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 162.640225][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 162.644880][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.650751][ T7497] RIP: 0033:0x7fd6eff9e559 [ 162.655177][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.674757][ T7497] RSP: 002b:00007fd6f0e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.683147][ T7497] RAX: ffffffffffffffda RBX: 00007fd6f0225fa0 RCX: 00007fd6eff9e559 [ 162.691094][ T7497] RDX: 0000000000004005 RSI: 0000200000000b80 RDI: 0000000000000008 [ 162.699040][ T7497] RBP: 00007fd6f0035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 162.707014][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.714961][ T7497] R13: 00007fd6f0226038 R14: 00007fd6f0225fa0 R15: 00007ffcda37f138 [ 162.722917][ T7497]