last executing test programs: 1m40.738551581s ago: executing program 3 (id=776): socket$kcm(0x2d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000000)) 1m40.691843314s ago: executing program 3 (id=777): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x82) fchdir(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@data_ordered}, {@noblock_validity}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@grpid}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}, {@errors_remount}, {@noinit_itable}]}, 0x6, 0x61f, &(0x7f0000000340)="$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") 1m40.406473067s ago: executing program 3 (id=781): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2bf, 0x0, &(0x7f0000000940)="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", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1m39.92602533s ago: executing program 3 (id=787): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='.\x02\x00') 1m39.762555438s ago: executing program 3 (id=789): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/3, 0x1800}, {&(0x7f0000000400)=""/190}], 0x56, 0x0, 0xb}, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0xfdef) 1m39.454956142s ago: executing program 3 (id=791): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80d4, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m39.401381394s ago: executing program 32 (id=791): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80d4, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m38.713711297s ago: executing program 0 (id=802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1m38.661553129s ago: executing program 0 (id=803): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) socket$inet6(0xa, 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 1m38.64483554s ago: executing program 0 (id=804): unshare(0x2a020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd06, &(0x7f0000000000)) 1m38.622928871s ago: executing program 0 (id=805): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 1m38.591146892s ago: executing program 0 (id=806): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x182) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='r\xbd[\xc1\xfek\xf62v\'\xed\x1e\xbcr\x98\xe3!\xc0oG\xf1}\xb1T\xaas\xd2v\xd0\xa9\x8d\xdd\xa4\xc0m;\x86\xd4\xc0\xedjN\xf1\xcd\xb8\x84P<\xd5J\x00\x12e\xc2\b\x00\xbe-\r_Zf#\x8f\xa0M\xcd1\xf7D\xc8a\xbf@\xda\x01\xd9\xee\xf5A\xef*\xc8\xe8Y\xd0\x16\xceoi\xfc\xb8\x81H~\xf1F\xc4\vM\x00\x00\x00\x00', 0x68, 0x2) 1m38.401348171s ago: executing program 0 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 1m38.401204401s ago: executing program 33 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 45.782614971s ago: executing program 1 (id=1345): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 45.654238347s ago: executing program 1 (id=1353): sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xabaf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.611915109s ago: executing program 1 (id=1360): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ff) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8010, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x1, 0x593, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) 45.568176341s ago: executing program 1 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./dev\x00', &(0x7f00000001c0)='./file0/../file0\x00') 45.509155604s ago: executing program 1 (id=1365): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 45.283054984s ago: executing program 1 (id=1372): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 45.243418057s ago: executing program 34 (id=1372): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 35.898880605s ago: executing program 6 (id=1556): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, ' \x00\x00\x00\x00\x00\x00'}}, 0xd) nanosleep(0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x3, '!\x00\x00'}}, 0x9) 29.529898724s ago: executing program 6 (id=1708): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)='6', 0x1}], 0x1}}], 0x2, 0x5) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 29.458500267s ago: executing program 6 (id=1711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000feffffff850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000a00)=ANY=[], 0x0) 29.347046643s ago: executing program 6 (id=1715): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x28008dd, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 29.217426499s ago: executing program 6 (id=1719): add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)='0', 0x1, 0xffffffffffffffff) 28.885674284s ago: executing program 6 (id=1730): socket$inet(0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 28.885524344s ago: executing program 35 (id=1730): socket$inet(0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 2.626009797s ago: executing program 4 (id=2196): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) fchown(r1, 0x0, 0x0) 2.589134348s ago: executing program 4 (id=2199): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000001d}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2.512470722s ago: executing program 4 (id=2203): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8080) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_proc/asound/cards\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x400) 2.286251413s ago: executing program 4 (id=2214): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000002940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x44) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0x8, 0x80000001) pipe2(&(0x7f00000012c0), 0x0) 1.885585881s ago: executing program 4 (id=2215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) syz_open_pts(r2, 0x80) 1.436818053s ago: executing program 2 (id=2217): mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 1.436694943s ago: executing program 5 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="080200003a00290200800000fadbdf2502000000f3014f8005000b0000000000c00095808dcbbf22500c5b3160c9147f28f8aa5989aac1443687741a32460819177d81b8a793ba0f3b1cdb834aeaaf032c747a25e3b2190f9029791ee714af836a005a8af0cae07a454e851cf05e958b52d0a821e2a2bd7e640b9981b71821398aac64c3bce25fe0fac242120b707062aeed3d14fd6cbc387f4ee073dcc16834327af8e71d8172545403dba7600b71eaa83f685fd30ea3fb01af0713c46665e256998348bdacf7e36915b56528585dec3e9764d50400238004006300040081800800c60007000000b200f88001ffcc4577c3c8ac3f362a7d10d21606402b035635ba6a3641a5a54cb420004bef9531ef334d5e765c3047c7fcb8e29986818707df773e3bea961cea5d24d8773c825281bba594d5f9c9304abc964efa8a10a5deb109c33e4f9a5c9bd0002c097ba761fdbb151ba660c115170c0026000a0b00000000000060f1bc0fbc62c72d9ec9a2fc27df19f4f2d6d8424e97560931acf5244fadd39180b609c67d77e25ed7f50400f98004002e800400be80000024008e800400c70005004200000000001400a4000000000000000000000000000000000195716b367b60160443e9e75ee847e97bad0344e47ff9d92c359f43d96d37154d3158671c936db8eabdf173e68301cbbba4c80899b58dd0eace491a7842bc30d480b619ad62636100fceabdefac1c1119aaabfbb950090fbcaca72c318dd38f278af5666fa45122054c9e28fa5dfc5cb581e43e18fb02c48290f37f13f33dfef44b9fda16a0c2d672585617e78911d66284f44c60c90c2e129b58b7c8e582e539266229d7eb683bf6476a7077d56a335d281e3aeee92c32fa19f655c35383e4099315ffbeb23a8f79347fcfa92ca1ccef5cea5d34be40a05d2913275a7c8ca4394a08c0a0e1d5ad47b7e729a16b0dc6f6d6a8cc9e0e3107020ececa93bed138e9a2c607d16560c00df082ade58a22"], 0x208}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 1.436554493s ago: executing program 4 (id=2219): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x71, @a={0x5, 0x2, 0x3, 0x0, 0x5, 0x1, 0xd, {0xc, 0x2, "a94a", 0x8, 0xa}, 0x14, 0x80, 0x6, 0x3b, 0x60, "ee4e05f37e271ae2dea6e820adcce284d80a4f1382ebca071fed61a69368860fa9537bcd30508ecd9fdfea4eedfd3be59008a8ecc29e12ddcbd043b351139674afe5fad7d369c50eb468b2e4da829767d83aad59d95f3fc738727cca0e8f6f23"}}, 0x75) 1.434010353s ago: executing program 8 (id=2227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.402072514s ago: executing program 8 (id=2221): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) 1.401918664s ago: executing program 5 (id=2222): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000800)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.314456338s ago: executing program 8 (id=2223): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x4, 0x8}, 0xc) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.28994974s ago: executing program 2 (id=2225): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.218349703s ago: executing program 8 (id=2226): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.218125513s ago: executing program 5 (id=2228): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x1b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.203371504s ago: executing program 7 (id=2229): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000300)=0x100001, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 1.196048774s ago: executing program 5 (id=2230): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 1.148144116s ago: executing program 8 (id=2231): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x1, r2, 0x2c, r0}, 0x10) 1.148013587s ago: executing program 7 (id=2232): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x50}}, 0x0) 1.0585154s ago: executing program 8 (id=2233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.058361s ago: executing program 5 (id=2234): unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x80) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.027223292s ago: executing program 7 (id=2235): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2c8, &(0x7f0000002940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x44) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0x8, 0x80000001) pipe2(&(0x7f00000012c0), 0x0) 1.005935723s ago: executing program 2 (id=2236): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x25a, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) 944.517886ms ago: executing program 2 (id=2237): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 566.595104ms ago: executing program 7 (id=2238): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1f, 0x10000000000000, 0xffffffffffffff12, 0x784, 0x8000000000000000, 0x8020000000006, 0xfffffffffffffffe, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 566.443704ms ago: executing program 5 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000800003c"], 0x6a) 24.435929ms ago: executing program 7 (id=2240): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x2b, &(0x7f0000000080)={0x0, 0x10, 0x3}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) 24.283889ms ago: executing program 2 (id=2241): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) 133.38µs ago: executing program 7 (id=2242): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf2c, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffff805}, 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 0s ago: executing program 2 (id=2243): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oIPT5d67uqRIL1zMpGRQB73YFqQJQgsF/2DaydXF0dVFEPwgLn4DwVVws9DCkZNzTv60MSa1qWh/v6F98+Z53vd5T04bOuTphy8PD/fSODj74pdotZKodaMb50l0ohaV05jT/ToAgP+y8yyL37PCOnlJRLQ2VxYAsEHj9/+LNd7/f9x4SQDAhr3z7ntv7fR6u2+naSueDL866ed/2effi+d3DuLjGMR+PIx2XEZkE8X4SZZlo3qa68Rrw9FJP88cfvBTuf7ObxFRLx90xl/n85/2dh+lhZn8UV7Hc+X+3Xz/x9GOFxfs/7S3+3hBfvQb8fqrM/U/iHb8/FF8EoPYGxdR5Ect4stHafpm9s0fn7+fl5fnJ6OTfnMcN5Vt3eHLAgAAAAAAAAAAAAAAAAAAAADA/9yDsndOM8b9e/Kpsv/O1mX+YDvSSme+P0+Rn1QLXekPNMri26o/z8M0TbMisDZdvx4v1SedgQAAAAAAAAAAAAAAAAAAAOBeO/70s8Nng8H+0a0Mqm4A1cf6b7pOd2bmlVge3JzuVSuHS1aOrSomiVhaRn6IlWu+KNse3OzSvfBXNX//w8rrfPf3Zy8H2yvE/MNBdXcdPksWX8NmVDOtqE2CpzGNWHGvxvxMa/KaZmvdfo2FT7VXP3JyWhzi+fHMaElwJMsKe+PXYp1yJrl6isaVC5UPypntcmYmfX6L1ur3c/6Tck0y6daR3NJvHwAAAAAAAAAAAAAAAAAAYNbsp4ivOVuaWsuaGysLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7U9P//rzEYlckrBDfi6PhfPiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3wJ8BAAD//wRoWMo=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000280)="c7459f55e94f230d61b48b47c8ecac171be29fc9c80b3a6d09afcb1e33bd4c51e0cdab0b60b2aff4fda2fe0b5554", 0x2e) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 790158362.146:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f347ce159 code=0x7ffc0000 [ 121.378467][ T29] audit: type=1326 audit(1790158362.146:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f347ce159 code=0x7ffc0000 [ 121.378577][ T29] audit: type=1326 audit(1790158362.146:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f347ce159 code=0x7ffc0000 [ 121.378686][ T29] audit: type=1326 audit(1790158362.156:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f347cddeb code=0x7ffc0000 [ 121.378712][ T29] audit: type=1326 audit(1790158362.156:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3478e98e code=0x7ffc0000 [ 121.378884][ T29] audit: type=1326 audit(1790158362.156:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f347ce159 code=0x7ffc0000 [ 121.378912][ T29] audit: type=1326 audit(1790158362.156:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.4.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f347ce159 code=0x7ffc0000 [ 121.610312][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.611736][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.612409][ T146] bond0 (unregistering): Released all slaves [ 121.710369][ T146] hsr_slave_0: left promiscuous mode [ 121.710891][ T146] hsr_slave_1: left promiscuous mode [ 121.711432][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.711448][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.711875][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.711891][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.730088][ T146] veth1_macvtap: left promiscuous mode [ 121.730115][ T146] veth0_macvtap: left promiscuous mode [ 121.730225][ T146] veth1_vlan: left promiscuous mode [ 121.730257][ T146] veth0_vlan: left promiscuous mode [ 121.734089][ T7397] random: crng reseeded on system resumption [ 121.735022][ T7397] FAULT_INJECTION: forcing a failure. [ 121.735022][ T7397] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.735066][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.5.1396 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.735092][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.735160][ T7397] Call Trace: [ 121.735196][ T7397] [ 121.735205][ T7397] __dump_stack+0x1d/0x30 [ 121.735297][ T7397] dump_stack_lvl+0x95/0xd0 [ 121.735321][ T7397] dump_stack+0x15/0x1b [ 121.735342][ T7397] should_fail_ex+0x262/0x280 [ 121.735367][ T7397] should_fail_alloc_page+0xf2/0x100 [ 121.735441][ T7397] __alloc_frozen_pages_noprof+0x157/0x400 [ 121.735477][ T7397] alloc_pages_mpol+0xaf/0x1d0 [ 121.735501][ T7397] alloc_pages_noprof+0x94/0x140 [ 121.735584][ T7397] get_zeroed_page_noprof+0x1a/0x40 [ 121.735617][ T7397] get_image_page+0x2b/0x420 [ 121.735641][ T7397] memory_bm_create+0x94f/0x1440 [ 121.735678][ T7397] create_basic_memory_bitmaps+0xa6/0x8e0 [ 121.735703][ T7397] snapshot_open+0x1b4/0x280 [ 121.735728][ T7397] ? __pfx_snapshot_open+0x10/0x10 [ 121.735752][ T7397] misc_open+0x1df/0x220 [ 121.735796][ T7397] chrdev_open+0x2eb/0x3a0 [ 121.735829][ T7397] do_dentry_open+0x49f/0xa60 [ 121.735850][ T7397] ? __pfx_chrdev_open+0x10/0x10 [ 121.735891][ T7397] vfs_open+0x37/0x1e0 [ 121.735912][ T7397] path_openat+0xc01/0x10d0 [ 121.736004][ T7397] do_file_open+0x16c/0x290 [ 121.736038][ T7397] do_sys_openat2+0xa0/0x130 [ 121.736062][ T7397] __x64_sys_openat+0xf2/0x120 [ 121.736087][ T7397] x64_sys_call+0x1f72/0x2550 [ 121.736222][ T7397] do_syscall_64+0x112/0x360 [ 121.736244][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.736268][ T7397] RIP: 0033:0x7f8d82eae159 [ 121.736284][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.736303][ T7397] RSP: 002b:00007f8d81907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.736325][ T7397] RAX: ffffffffffffffda RBX: 00007f8d83135fa0 RCX: 00007f8d82eae159 [ 121.736356][ T7397] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 121.736371][ T7397] RBP: 00007f8d82f4506b R08: 0000000000000000 R09: 0000000000000000 [ 121.736385][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.736398][ T7397] R13: 00007f8d83136038 R14: 00007f8d83135fa0 R15: 00007ffcba4861a8 [ 121.736493][ T7397] [ 122.074502][ T146] team0 (unregistering): Port device team_slave_1 removed [ 122.086316][ T146] team0 (unregistering): Port device team_slave_0 removed [ 122.136853][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 122.420461][ T146] IPVS: stop unused estimator thread 0... [ 122.508515][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.508563][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.508698][ T7323] bridge_slave_0: entered allmulticast mode [ 122.509175][ T7323] bridge_slave_0: entered promiscuous mode [ 122.579512][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 122.585636][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.585675][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.585795][ T7323] bridge_slave_1: entered allmulticast mode [ 122.586412][ T7323] bridge_slave_1: entered promiscuous mode [ 122.619789][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.621361][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.632596][ T7323] team0: Port device team_slave_0 added [ 122.633635][ T7323] team0: Port device team_slave_1 added [ 122.704698][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.704715][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.704810][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.705290][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.705300][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.705326][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.827045][ T7323] hsr_slave_0: entered promiscuous mode [ 122.827474][ T7323] hsr_slave_1: entered promiscuous mode [ 122.827745][ T7323] debugfs: 'hsr0' already exists in 'hsr' [ 122.827762][ T7323] Cannot create hsr debugfs directory [ 122.933115][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 122.953640][ T7323] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 122.955681][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.957811][ T7323] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 122.960287][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.962305][ T7323] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.967047][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.967798][ T7323] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.975436][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.063566][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.071739][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.074452][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.074486][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.077979][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.078011][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.266541][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 123.293765][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.469861][ T7323] veth0_vlan: entered promiscuous mode [ 123.472299][ T7323] veth1_vlan: entered promiscuous mode [ 123.484992][ T7323] veth0_macvtap: entered promiscuous mode [ 123.486540][ T7323] veth1_macvtap: entered promiscuous mode [ 123.492385][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.496136][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.521120][ T364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.523645][ T5497] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.523870][ T5497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.524231][ T5497] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.820604][ T5514] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18 [ 124.060029][ T7562] loop4: detected capacity change from 0 to 128 [ 124.067240][ T7562] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.067418][ T7562] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.291898][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.406913][ T7589] syzkaller1: entered allmulticast mode [ 124.540342][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 124.579434][ T7600] FAULT_INJECTION: forcing a failure. [ 124.579434][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 124.579463][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.4.1443 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.579502][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.579551][ T7600] Call Trace: [ 124.579558][ T7600] [ 124.579568][ T7600] __dump_stack+0x1d/0x30 [ 124.579597][ T7600] dump_stack_lvl+0x95/0xd0 [ 124.579622][ T7600] dump_stack+0x15/0x1b [ 124.579731][ T7600] should_fail_ex+0x262/0x280 [ 124.579900][ T7600] ? security_shm_alloc+0x45/0x100 [ 124.579929][ T7600] should_failslab+0x8c/0xb0 [ 124.579965][ T7600] __kmalloc_noprof+0xd0/0x4d0 [ 124.579998][ T7600] ? security_shm_alloc+0x45/0x100 [ 124.580042][ T7600] security_shm_alloc+0x45/0x100 [ 124.580064][ T7600] newseg+0x1ef/0x670 [ 124.580096][ T7600] ipcget+0x33e/0x4f0 [ 124.580198][ T7600] ? xfd_validate_state+0x45/0xf0 [ 124.580228][ T7600] __x64_sys_shmget+0xb8/0xe0 [ 124.580262][ T7600] x64_sys_call+0x2001/0x2550 [ 124.580303][ T7600] do_syscall_64+0x112/0x360 [ 124.580327][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.580353][ T7600] RIP: 0033:0x7f5f347ce159 [ 124.580374][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.580468][ T7600] RSP: 002b:00007f5f33227028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 124.580502][ T7600] RAX: ffffffffffffffda RBX: 00007f5f34a55fa0 RCX: 00007f5f347ce159 [ 124.580521][ T7600] RDX: 0000000000000244 RSI: 0000000000004000 RDI: 0000000000000000 [ 124.580537][ T7600] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 124.580553][ T7600] R10: 0000200000ff5000 R11: 0000000000000246 R12: 0000000000000000 [ 124.580566][ T7600] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 124.580584][ T7600] [ 124.974057][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1450'. [ 125.130881][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 125.130898][ T29] audit: type=1400 audit(1790158365.906:1054): avc: denied { bind } for pid=7633 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.492976][ T29] audit: type=1400 audit(1790158366.266:1055): avc: denied { create } for pid=7640 comm="syz.5.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.493367][ T7641] netlink: 'syz.5.1458': attribute type 1 has an invalid length. [ 125.493348][ T29] audit: type=1400 audit(1790158366.266:1056): avc: denied { write } for pid=7640 comm="syz.5.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.493394][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1458'. [ 125.536061][ T7643] FAULT_INJECTION: forcing a failure. [ 125.536061][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.536093][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.5.1459 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.536123][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.536137][ T7643] Call Trace: [ 125.536144][ T7643] [ 125.536152][ T7643] __dump_stack+0x1d/0x30 [ 125.536208][ T7643] dump_stack_lvl+0x95/0xd0 [ 125.536237][ T7643] dump_stack+0x15/0x1b [ 125.536278][ T7643] should_fail_ex+0x262/0x280 [ 125.536304][ T7643] should_fail+0xb/0x20 [ 125.536326][ T7643] should_fail_usercopy+0x1a/0x20 [ 125.536377][ T7643] _copy_from_user+0x1c/0xb0 [ 125.536452][ T7643] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 125.536477][ T7643] bpf_vlog_finalize+0x147/0x200 [ 125.536499][ T7643] bpf_log_attr_finalize+0x33/0x100 [ 125.536523][ T7643] btf_new_fd+0x34a/0x670 [ 125.536598][ T7643] bpf_btf_load+0x116/0x130 [ 125.536702][ T7643] __sys_bpf+0xbce/0xc30 [ 125.536729][ T7643] ? do_futex+0x300/0x460 [ 125.536787][ T7643] __x64_sys_bpf+0x69/0x80 [ 125.536810][ T7643] x64_sys_call+0xf26/0x2550 [ 125.536836][ T7643] do_syscall_64+0x112/0x360 [ 125.536858][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.536958][ T7643] RIP: 0033:0x7f8d82eae159 [ 125.536976][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.536995][ T7643] RSP: 002b:00007f8d81907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.537018][ T7643] RAX: ffffffffffffffda RBX: 00007f8d83135fa0 RCX: 00007f8d82eae159 [ 125.537034][ T7643] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 125.537048][ T7643] RBP: 00007f8d82f4506b R08: 0000000000000000 R09: 0000000000000000 [ 125.537097][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.537111][ T7643] R13: 00007f8d83136038 R14: 00007f8d83135fa0 R15: 00007ffcba4861a8 [ 125.537131][ T7643] [ 125.595358][ T7647] vcan0: tx address claim with broadcast sa [ 125.860698][ T29] audit: type=1400 audit(1790158366.636:1057): avc: denied { create } for pid=7672 comm="syz.7.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 125.865094][ T29] audit: type=1400 audit(1790158366.636:1058): avc: denied { sys_admin } for pid=7672 comm="syz.7.1471" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 125.971287][ T29] audit: type=1326 audit(1790158366.746:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.6.1474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb901ce159 code=0x50000 [ 125.971373][ T29] audit: type=1326 audit(1790158366.746:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.6.1474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb901ce159 code=0x50000 [ 125.971405][ T29] audit: type=1326 audit(1790158366.746:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.6.1474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb901ce159 code=0x50000 [ 125.971443][ T29] audit: type=1326 audit(1790158366.746:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.6.1474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb901ce159 code=0x50000 [ 125.971491][ T29] audit: type=1326 audit(1790158366.746:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7680 comm="syz.6.1474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb901ce159 code=0x50000 [ 126.116508][ T7689] loop7: detected capacity change from 0 to 512 [ 126.152814][ T7689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.152988][ T7689] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.219835][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.274169][ T7699] IPVS: Scheduler module ip_vs_ not found [ 126.392345][ T7708] FAULT_INJECTION: forcing a failure. [ 126.392345][ T7708] name failslab, interval 1, probability 0, space 0, times 0 [ 126.392381][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.4.1482 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.392513][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.392525][ T7708] Call Trace: [ 126.392596][ T7708] [ 126.392606][ T7708] __dump_stack+0x1d/0x30 [ 126.392638][ T7708] dump_stack_lvl+0x95/0xd0 [ 126.392665][ T7708] dump_stack+0x15/0x1b [ 126.392689][ T7708] should_fail_ex+0x262/0x280 [ 126.392715][ T7708] ? sget_fc+0x4ad/0xf70 [ 126.392818][ T7708] should_failslab+0x8c/0xb0 [ 126.392877][ T7708] __kmalloc_cache_noprof+0x7a/0x400 [ 126.392916][ T7708] ? sget_fc+0x4ad/0xf70 [ 126.392986][ T7708] sget_fc+0x4ad/0xf70 [ 126.393073][ T7708] ? __pfx_set_anon_super_fc+0x10/0x10 [ 126.393147][ T7708] ? __kmalloc_cache_noprof+0x19b/0x400 [ 126.393254][ T7708] ? mqueue_init_fs_context+0x38/0x2c0 [ 126.393286][ T7708] ? __pfx_mqueue_fill_super+0x10/0x10 [ 126.393317][ T7708] get_tree_nodev+0x2a/0x100 [ 126.393345][ T7708] mqueue_get_tree+0x5d/0x80 [ 126.393439][ T7708] vfs_get_tree+0x57/0x1d0 [ 126.393482][ T7708] fc_mount_longterm+0x18/0xb0 [ 126.393545][ T7708] mq_init_ns+0x2db/0x370 [ 126.393565][ T7708] copy_ipcs+0x26d/0x460 [ 126.393619][ T7708] create_new_namespaces+0x121/0x420 [ 126.393660][ T7708] unshare_nsproxy_namespaces+0x115/0x150 [ 126.393726][ T7708] ksys_unshare+0x42b/0x710 [ 126.393752][ T7708] __x64_sys_unshare+0x1f/0x30 [ 126.393776][ T7708] x64_sys_call+0x1e33/0x2550 [ 126.393849][ T7708] do_syscall_64+0x112/0x360 [ 126.393883][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.393910][ T7708] RIP: 0033:0x7f5f347ce159 [ 126.393927][ T7708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.393945][ T7708] RSP: 002b:00007f5f33227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.394007][ T7708] RAX: ffffffffffffffda RBX: 00007f5f34a55fa0 RCX: 00007f5f347ce159 [ 126.394025][ T7708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 126.394043][ T7708] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 126.394111][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.394127][ T7708] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 126.394150][ T7708] [ 126.435563][ T7707] loop2: detected capacity change from 0 to 2048 [ 126.467565][ T7711] bridge1: entered promiscuous mode [ 126.467586][ T7711] bridge1: entered allmulticast mode [ 126.470624][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.626590][ T364] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 126.626685][ T364] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 126.626731][ T364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.626731][ T364] [ 126.626744][ T364] EXT4-fs (loop2): Total free blocks count 0 [ 126.626757][ T364] EXT4-fs (loop2): Free/Dirty block details [ 126.626844][ T364] EXT4-fs (loop2): free_blocks=66060288 [ 126.626891][ T364] EXT4-fs (loop2): dirty_blocks=32 [ 126.626904][ T364] EXT4-fs (loop2): Block reservation details [ 126.626923][ T364] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 126.627759][ T364] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 126.627963][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 126.765283][ T7730] loop6: detected capacity change from 0 to 512 [ 126.771470][ T7730] EXT4-fs (loop6): invalid journal inode [ 126.771558][ T7730] EXT4-fs (loop6): can't get journal size [ 126.772871][ T7730] EXT4-fs (loop6): 1 truncate cleaned up [ 126.773366][ T7730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.879627][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.297846][ T7780] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.1511'. [ 127.338733][ T7788] device-mapper: table: 252:2: mirror: Insufficient mirror log arguments (-EINVAL) [ 127.338814][ T7788] device-mapper: ioctl: error adding target to table [ 127.754755][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 127.996505][ T7818] FAULT_INJECTION: forcing a failure. [ 127.996505][ T7818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.996528][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: syz.6.1524 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.996656][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.996671][ T7818] Call Trace: [ 127.996679][ T7818] [ 127.996687][ T7818] __dump_stack+0x1d/0x30 [ 127.996711][ T7818] dump_stack_lvl+0x95/0xd0 [ 127.996734][ T7818] dump_stack+0x15/0x1b [ 127.996753][ T7818] should_fail_ex+0x262/0x280 [ 127.996781][ T7818] should_fail+0xb/0x20 [ 127.996795][ T7818] should_fail_usercopy+0x1a/0x20 [ 127.996868][ T7818] _copy_to_user+0x20/0xa0 [ 127.996887][ T7818] btf_get_info_by_fd+0x34b/0x4a0 [ 127.996910][ T7818] bpf_obj_get_info_by_fd+0x6e3/0x2330 [ 127.996981][ T7818] ? __rcu_read_unlock+0x4e/0x70 [ 127.997052][ T7818] ? futex_unqueue+0xc5/0xf0 [ 127.997071][ T7818] ? __futex_wait+0x1fd/0x260 [ 127.997085][ T7818] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.997147][ T7818] ? selinux_bpf+0xc7/0xe0 [ 127.997168][ T7818] __sys_bpf+0x908/0xc30 [ 127.997185][ T7818] ? do_futex+0x300/0x460 [ 127.997206][ T7818] __x64_sys_bpf+0x69/0x80 [ 127.997235][ T7818] x64_sys_call+0xf26/0x2550 [ 127.997252][ T7818] do_syscall_64+0x112/0x360 [ 127.997310][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.997325][ T7818] RIP: 0033:0x7fcb901ce159 [ 127.997337][ T7818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.997395][ T7818] RSP: 002b:00007fcb8ec27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.997415][ T7818] RAX: ffffffffffffffda RBX: 00007fcb90455fa0 RCX: 00007fcb901ce159 [ 127.997424][ T7818] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000f [ 127.997434][ T7818] RBP: 00007fcb9026506b R08: 0000000000000000 R09: 0000000000000000 [ 127.997521][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.997530][ T7818] R13: 00007fcb90456038 R14: 00007fcb90455fa0 R15: 00007ffc768d54b8 [ 127.997544][ T7818] [ 128.518967][ T7832] loop6: detected capacity change from 0 to 8192 [ 128.519781][ T7832] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.627910][ T7848] loop6: detected capacity change from 0 to 256 [ 128.642036][ T7848] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.667335][ T7846] loop5: detected capacity change from 0 to 8192 [ 128.701318][ T7848] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 128.701349][ T7848] FAT-fs (loop6): Filesystem has been set read-only [ 128.701404][ T7848] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 128.701835][ T7847] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 128.701921][ T7847] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 128.703134][ T5436] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 128.703188][ T5436] FAT-fs (loop5): Filesystem has been set read-only [ 129.009907][ T7859] netlink: 'syz.6.1542': attribute type 12 has an invalid length. [ 129.204315][ T7866] loop5: detected capacity change from 0 to 128 [ 129.242128][ T7868] loop5: detected capacity change from 0 to 2048 [ 129.255335][ T7868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.271260][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.383112][ T7881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7881 comm=syz.5.1551 [ 129.457499][ T7887] loop5: detected capacity change from 0 to 512 [ 129.465465][ T7887] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.466113][ T7887] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.466979][ T7887] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.1553: Allocating blocks 41-42 which overlap fs metadata [ 129.467010][ T7887] loop5: lost filesystem error report for type 5 error -117 [ 129.467137][ T7887] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1553: Failed to acquire dquot type 0 [ 129.467164][ T7887] loop5: lost filesystem error report for type 5 error -117 [ 129.467339][ T7887] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 129.467410][ T7887] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.1553: corrupted inode contents [ 129.467437][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.467661][ T7887] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #12: comm syz.5.1553: mark_inode_dirty error [ 129.467756][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.467897][ T7887] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.1553: corrupted inode contents [ 129.467999][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.468117][ T7887] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.1553: mark_inode_dirty error [ 129.468147][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.468323][ T7887] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.1553: corrupted inode contents [ 129.468351][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.468472][ C0] EXT4-fs (loop5): error count since last fsck: 7 [ 129.468496][ C0] EXT4-fs (loop5): initial error at time 1790158370: ext4_mb_mark_diskspace_used:4223 [ 129.468527][ C0] EXT4-fs (loop5): last error at time 1790158370: __ext4_ext_dirty:207: inode 12 [ 129.473211][ T7887] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 129.473232][ T7887] loop5: lost filesystem error report for type 5 error -117 [ 129.473337][ T7887] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.1553: corrupted inode contents [ 129.473363][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.473447][ T7887] EXT4-fs error (device loop5): ext4_truncate:4721: inode #12: comm syz.5.1553: mark_inode_dirty error [ 129.473470][ T7887] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 129.473607][ T7887] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 129.473626][ T7887] loop5: lost filesystem error report for type 5 error -117 [ 129.473863][ T7887] EXT4-fs (loop5): 1 truncate cleaned up [ 129.477827][ T7887] EXT4-fs (loop5): pa ffff8881072cc0e0: logic 1, phys. 41, len 23 [ 129.477854][ T7887] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 129.478858][ T7887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.484215][ T7887] EXT4-fs error (device loop5): __ext4_remount:6872: comm syz.5.1553: Abort forced by user [ 129.484390][ T7887] EXT4-fs (loop5): Remounting filesystem read-only [ 129.484406][ T7887] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 129.592650][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.626498][ T7890] FAULT_INJECTION: forcing a failure. [ 129.626498][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.626562][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.5.1554 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.626630][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.626666][ T7890] Call Trace: [ 129.626674][ T7890] [ 129.626683][ T7890] __dump_stack+0x1d/0x30 [ 129.626710][ T7890] dump_stack_lvl+0x95/0xd0 [ 129.626734][ T7890] dump_stack+0x15/0x1b [ 129.626760][ T7890] should_fail_ex+0x262/0x280 [ 129.626786][ T7890] should_fail+0xb/0x20 [ 129.626808][ T7890] should_fail_usercopy+0x1a/0x20 [ 129.626836][ T7890] _copy_from_user+0x1c/0xb0 [ 129.626864][ T7890] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 129.626889][ T7890] bpf_vlog_finalize+0x147/0x200 [ 129.626976][ T7890] bpf_log_attr_finalize+0x33/0x100 [ 129.627062][ T7890] btf_new_fd+0x34a/0x670 [ 129.627085][ T7890] bpf_btf_load+0x116/0x130 [ 129.627113][ T7890] __sys_bpf+0xbce/0xc30 [ 129.627139][ T7890] ? do_futex+0x300/0x460 [ 129.627249][ T7890] __x64_sys_bpf+0x69/0x80 [ 129.627272][ T7890] x64_sys_call+0xf26/0x2550 [ 129.627298][ T7890] do_syscall_64+0x112/0x360 [ 129.627321][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.627371][ T7890] RIP: 0033:0x7f8d82eae159 [ 129.627388][ T7890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.627407][ T7890] RSP: 002b:00007f8d81907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.627503][ T7890] RAX: ffffffffffffffda RBX: 00007f8d83135fa0 RCX: 00007f8d82eae159 [ 129.627518][ T7890] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 129.627533][ T7890] RBP: 00007f8d82f4506b R08: 0000000000000000 R09: 0000000000000000 [ 129.627554][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.627568][ T7890] R13: 00007f8d83136038 R14: 00007f8d83135fa0 R15: 00007ffcba4861a8 [ 129.627587][ T7890] [ 129.887137][ T3395] wiimote 0005:057E:0330.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 129.887247][ T3395] wiimote 0005:057E:0330.0004: New device registered [ 129.895977][ T7900] udevd[7900]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 129.938913][ T3395] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 129.944168][ T3395] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input10 [ 129.949071][ T3395] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input11 [ 129.950453][ T3395] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input9 [ 129.990257][ T7898] wiimote 0005:057E:0330.0004: Device removed [ 130.257042][ T7775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.291841][ T7904] loop7: detected capacity change from 0 to 256 [ 130.706237][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 130.706257][ T29] audit: type=1400 audit(1790158371.476:1098): avc: denied { write } for pid=7926 comm="syz.5.1575" name="configs" dev="configfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.861494][ T29] audit: type=1400 audit(1790158371.636:1099): avc: denied { write } for pid=7941 comm="syz.7.1568" path="socket:[19809]" dev="sockfs" ino=19809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.963376][ T29] audit: type=1400 audit(1790158371.736:1100): avc: denied { mount } for pid=7948 comm="syz.7.1571" name="/" dev="autofs" ino=20692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.431822][ T7969] loop4: detected capacity change from 0 to 512 [ 131.449117][ T7969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.449261][ T7969] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.533277][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.595667][ T7975] loop4: detected capacity change from 0 to 256 [ 131.624986][ T7975] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.626810][ T7975] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 131.626912][ T7975] FAT-fs (loop4): Filesystem has been set read-only [ 131.627473][ T7975] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 131.827921][ T7985] veth0: entered promiscuous mode [ 131.835081][ T7985] veth0: left promiscuous mode [ 131.888028][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 131.900166][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 131.936798][ T29] audit: type=1400 audit(1790158372.706:1101): avc: denied { mounton } for pid=7997 comm="syz.4.1593" path="/339/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 131.968818][ T8000] ip_tables: iptables: counters copy to user failed while replacing table [ 132.082020][ T8010] loop2: detected capacity change from 0 to 1024 [ 132.084306][ T8010] EXT4-fs: Ignoring removed bh option [ 132.086498][ T8010] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 132.103891][ T8010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.107781][ T29] audit: type=1400 audit(1790158372.876:1102): avc: denied { write } for pid=8007 comm="syz.2.1597" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.147267][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.182594][ T8015] syzkaller0: entered promiscuous mode [ 132.182630][ T8015] syzkaller0: entered allmulticast mode [ 132.197030][ T8017] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 132.197056][ T8017] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 132.279852][ T8023] loop2: detected capacity change from 0 to 2048 [ 132.300574][ T8023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.302242][ T29] audit: type=1400 audit(1790158373.076:1103): avc: denied { write } for pid=8022 comm="syz.2.1602" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.415665][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.446836][ T8038] loop2: detected capacity change from 0 to 128 [ 132.451695][ T8038] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.451890][ T8038] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.453266][ T29] audit: type=1400 audit(1790158373.226:1104): avc: denied { write } for pid=8037 comm="syz.2.1608" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.459259][ T29] audit: type=1400 audit(1790158373.236:1105): avc: denied { write } for pid=8037 comm="syz.2.1608" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.463858][ T29] audit: type=1400 audit(1790158373.236:1106): avc: denied { write } for pid=8037 comm="syz.2.1608" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.465109][ T29] audit: type=1400 audit(1790158373.236:1107): avc: denied { write } for pid=8037 comm="syz.2.1608" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.570027][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.606998][ T8049] ip_tables: iptables: counters copy to user failed while replacing table [ 132.647424][ T8051] netlink: 'syz.7.1614': attribute type 15 has an invalid length. [ 132.647441][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1614'. [ 132.653429][ T8051] netlink: 'syz.7.1614': attribute type 15 has an invalid length. [ 132.653447][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1614'. [ 132.653544][ T5497] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.653642][ T5497] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.653681][ T5497] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.653714][ T5497] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 132.817865][ T8062] loop2: detected capacity change from 0 to 512 [ 132.840488][ T8062] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 132.898093][ T8062] loop2: detected capacity change from 0 to 4096 [ 132.921044][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.366999][ T8065] bridge0: entered promiscuous mode [ 133.529919][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.622426][ T8081] loop2: detected capacity change from 0 to 1024 [ 133.623057][ T8081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.643382][ T8081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.643476][ T8081] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.655049][ T8081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1626: bg 0: block 112: padding at end of block bitmap is not set [ 133.655331][ T8081] EXT4-fs (loop2): Remounting filesystem read-only [ 133.655567][ T146] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5172: inode #15: block 4: len 2: ext4_map_blocks returned -30 [ 133.713502][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.762221][ T8093] Config c/1 of g1 needs at least one function. [ 133.762254][ T8093] udc usbip-vudc.0: failed to start g1: -22 [ 133.762274][ T8093] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 133.762791][ T8093] UDC core: g1: couldn't find an available UDC or it's busy [ 133.798713][ T8095] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1631'. [ 133.819044][ T7934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.845863][ T8100] loop2: detected capacity change from 0 to 512 [ 133.861754][ T8100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.861904][ T8100] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.930557][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.955892][ T8112] loop4: detected capacity change from 0 to 128 [ 134.003625][ T9] kernel read not supported for file / (pid: 9 comm: kworker/0:0) [ 134.411365][ T8163] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1653: invalid indirect mapped block 256 (level 2) [ 134.411451][ T8163] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.415229][ T8163] EXT4-fs (loop7): 2 truncates cleaned up [ 134.415731][ T8163] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.423725][ T8166] ip_tables: iptables: counters copy to user failed while replacing table [ 134.598836][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 134.641054][ T8176] Attempt to read inode for relocated directory [ 134.655442][ T8176] netlink: 'syz.7.1658': attribute type 10 has an invalid length. [ 134.684951][ T8182] xt_hashlimit: size too large, truncated to 1048576 [ 135.164443][ T8211] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1672: iget: bad extended attribute block 134217728 [ 135.164481][ T8211] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.164640][ T8211] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1672: couldn't read orphan inode 15 (err -117) [ 135.164672][ T8211] loop7: lost filesystem error report for type 5 error -117 [ 135.165374][ T8211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.182447][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.373414][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 135.373437][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 135.447336][ T8256] sock: sock_set_timeout: `syz.4.1680' (pid 8256) tries to set negative timeout [ 135.605229][ T8270] smc: net device vlan1 applied user defined pnetid SYZ2 [ 135.609858][ T8270] smc: net device vlan1 erased user defined pnetid SYZ2 [ 135.696557][ T8280] sock: sock_set_timeout: `syz.5.1690' (pid 8280) tries to set negative timeout [ 135.807078][ T8290] EXT4-fs (loop5): invalid journal inode [ 135.807109][ T8290] EXT4-fs (loop5): can't get journal size [ 135.808099][ T8290] EXT4-fs (loop5): 1 truncate cleaned up [ 135.808499][ T8290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.810343][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 135.810359][ T29] audit: type=1400 audit(1790158376.576:1144): avc: denied { write } for pid=8289 comm="syz.5.1695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.810809][ T29] audit: type=1400 audit(1790158376.576:1145): avc: denied { write } for pid=8289 comm="syz.5.1695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.811390][ T29] audit: type=1400 audit(1790158376.576:1146): avc: denied { write } for pid=8289 comm="syz.5.1695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.812151][ T29] audit: type=1400 audit(1790158376.576:1147): avc: denied { write } for pid=8289 comm="syz.5.1695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.813205][ T29] audit: type=1400 audit(1790158376.576:1148): avc: denied { write } for pid=8289 comm="syz.5.1695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.831518][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.982705][ T29] audit: type=1400 audit(1790158376.756:1149): avc: denied { write } for pid=8292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.032232][ T29] audit: type=1400 audit(1790158376.806:1150): avc: denied { write } for pid=8311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.264150][ T3395] kernel read not supported for file /ppp (pid: 3395 comm: kworker/1:7) [ 136.308659][ T146] IPVS: starting estimator thread 0... [ 136.398975][ T8351] syzkaller1: entered promiscuous mode [ 136.398995][ T8351] syzkaller1: entered allmulticast mode [ 136.414314][ T8337] IPVS: using max 2544 ests per chain, 127200 per kthread [ 136.431097][ T8349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.439224][ T8349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.448051][ T29] audit: type=1400 audit(1790158377.216:1151): avc: denied { mounton } for pid=8348 comm="syz.6.1715" path="/163/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.522045][ T29] audit: type=1400 audit(1790158377.296:1152): avc: denied { unmount } for pid=5574 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 136.579626][ T8362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1721'. [ 136.580679][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.580922][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.615096][ T8362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1721'. [ 136.752884][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 136.829836][ T6602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.863686][ T3438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.882647][ T3438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.922206][ T3438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.014094][ T3438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.022143][ T29] audit: type=1400 audit(1790158377.786:1153): avc: denied { accept } for pid=8388 comm="syz.7.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.140768][ T3438] bridge_slave_1: left allmulticast mode [ 137.140794][ T3438] bridge_slave_1: left promiscuous mode [ 137.140976][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.142170][ T3438] bridge_slave_0: left allmulticast mode [ 137.142228][ T3438] bridge_slave_0: left promiscuous mode [ 137.142315][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.257893][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 137.473592][ T8414] set_capacity_and_notify: 5 callbacks suppressed [ 137.473632][ T8414] loop5: detected capacity change from 0 to 256 [ 137.594988][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.595135][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.598206][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.615265][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.620031][ T3438] bond0 (unregistering): Released all slaves [ 137.625733][ T3438] bond1 (unregistering): (slave lo): Releasing backup interface [ 137.633144][ T3438] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 137.634034][ T3438] bond1 (unregistering): Released all slaves [ 137.687223][ T3438] hsr_slave_0: left promiscuous mode [ 137.687607][ T3438] hsr_slave_1: left promiscuous mode [ 137.688139][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.688156][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.688627][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.688710][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.716515][ T3438] veth1_macvtap: left promiscuous mode [ 137.716544][ T3438] veth0_macvtap: left promiscuous mode [ 137.716593][ T3438] veth1_vlan: left promiscuous mode [ 137.716663][ T3438] veth0_vlan: left promiscuous mode [ 137.767091][ T8435] FAULT_INJECTION: forcing a failure. [ 137.767091][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.767151][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.4.1749 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.767230][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.767246][ T8435] Call Trace: [ 137.767253][ T8435] [ 137.767285][ T8435] __dump_stack+0x1d/0x30 [ 137.767314][ T8435] dump_stack_lvl+0x95/0xd0 [ 137.767340][ T8435] dump_stack+0x15/0x1b [ 137.767364][ T8435] should_fail_ex+0x262/0x280 [ 137.767438][ T8435] should_fail+0xb/0x20 [ 137.767462][ T8435] should_fail_usercopy+0x1a/0x20 [ 137.767527][ T8435] _copy_to_user+0x20/0xa0 [ 137.767559][ T8435] bpf_vlog_reverse_ubuf+0x265/0x360 [ 137.767659][ T8435] bpf_vlog_finalize+0xf2/0x200 [ 137.767683][ T8435] bpf_log_attr_finalize+0x33/0x100 [ 137.767709][ T8435] btf_new_fd+0x34a/0x670 [ 137.767734][ T8435] bpf_btf_load+0x116/0x130 [ 137.767813][ T8435] __sys_bpf+0xbce/0xc30 [ 137.767842][ T8435] ? do_futex+0x300/0x460 [ 137.767918][ T8435] __x64_sys_bpf+0x69/0x80 [ 137.767943][ T8435] x64_sys_call+0xf26/0x2550 [ 137.767972][ T8435] do_syscall_64+0x112/0x360 [ 137.767995][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.768096][ T8435] RIP: 0033:0x7f5f347ce159 [ 137.768115][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.768136][ T8435] RSP: 002b:00007f5f33227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.768160][ T8435] RAX: ffffffffffffffda RBX: 00007f5f34a55fa0 RCX: 00007f5f347ce159 [ 137.768218][ T8435] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 137.768234][ T8435] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 137.768249][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.768263][ T8435] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 137.768299][ T8435] [ 137.951699][ T8454] FAULT_INJECTION: forcing a failure. [ 137.951699][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 137.951730][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.4.1752 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.951757][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.951789][ T8454] Call Trace: [ 137.951796][ T8454] [ 137.951805][ T8454] __dump_stack+0x1d/0x30 [ 137.951832][ T8454] dump_stack_lvl+0x95/0xd0 [ 137.951856][ T8454] dump_stack+0x15/0x1b [ 137.951884][ T8454] should_fail_ex+0x262/0x280 [ 137.951969][ T8454] should_failslab+0x8c/0xb0 [ 137.951999][ T8454] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 137.952044][ T8454] ? __d_alloc+0x34/0x320 [ 137.952069][ T8454] ? proc_alloc_inode+0x34/0x90 [ 137.952091][ T8454] ? proc_alloc_inode+0x34/0x90 [ 137.952114][ T8454] ? __d_lookup_rcu+0x28b/0x2d0 [ 137.952180][ T8454] ? __pfx_proc_alloc_inode+0x10/0x10 [ 137.952203][ T8454] proc_alloc_inode+0x34/0x90 [ 137.952238][ T8454] alloc_inode+0x40/0x170 [ 137.952257][ T8454] new_inode+0x1d/0xe0 [ 137.952279][ T8454] proc_pid_make_inode+0x24/0x200 [ 137.952308][ T8454] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 137.952405][ T8454] proc_fdinfo_instantiate+0x34/0x140 [ 137.952436][ T8454] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 137.952467][ T8454] proc_lookupfd_common+0xd2/0x190 [ 137.952509][ T8454] proc_lookupfdinfo+0x24/0x30 [ 137.952537][ T8454] ? __pfx_proc_lookupfdinfo+0x10/0x10 [ 137.952566][ T8454] lookup_open+0x984/0x10d0 [ 137.952664][ T8454] path_openat+0x415/0x10d0 [ 137.952719][ T8454] do_file_open+0x16c/0x290 [ 137.952748][ T8454] ? __pfx_kfree_link+0x10/0x10 [ 137.952797][ T8454] do_sys_openat2+0xa0/0x130 [ 137.952838][ T8454] __x64_sys_openat+0xf2/0x120 [ 137.952863][ T8454] x64_sys_call+0x1f72/0x2550 [ 137.952897][ T8454] do_syscall_64+0x112/0x360 [ 137.952925][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.952960][ T8454] RIP: 0033:0x7f5f3478e98e [ 137.952978][ T8454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.952997][ T8454] RSP: 002b:00007f5f33226ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.953053][ T8454] RAX: ffffffffffffffda RBX: 00007f5f332276c0 RCX: 00007f5f3478e98e [ 137.953068][ T8454] RDX: 0000000000000002 RSI: 00007f5f33226f90 RDI: ffffffffffffff9c [ 137.953083][ T8454] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 137.953097][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.953110][ T8454] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 137.953130][ T8454] [ 137.994893][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 138.012851][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 138.263364][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 138.309713][ T8467] loop7: detected capacity change from 0 to 128 [ 138.330810][ T8429] loop5: detected capacity change from 0 to 32768 [ 138.331379][ T8467] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.331547][ T8467] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.376403][ T8429] loop5: p1 p3 < > [ 138.482953][ T8485] ip_tables: iptables: counters copy to user failed while replacing table [ 138.565998][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.566036][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.566093][ T8385] bridge_slave_0: entered allmulticast mode [ 138.566617][ T8385] bridge_slave_0: entered promiscuous mode [ 138.595130][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.595187][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.595268][ T8385] bridge_slave_1: entered allmulticast mode [ 138.596017][ T8385] bridge_slave_1: entered promiscuous mode [ 138.609336][ T7323] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.654463][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 138.656233][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.657788][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.716212][ T8385] team0: Port device team_slave_0 added [ 138.720409][ T8385] team0: Port device team_slave_1 added [ 138.726157][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 138.726476][ T6896] udevd[6896]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 138.767136][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.767151][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.767219][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.767735][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.767750][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.767778][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.827550][ T8385] hsr_slave_0: entered promiscuous mode [ 138.827983][ T8385] hsr_slave_1: entered promiscuous mode [ 138.828261][ T8385] debugfs: 'hsr0' already exists in 'hsr' [ 138.828277][ T8385] Cannot create hsr debugfs directory [ 139.069257][ T8385] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.073008][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.073603][ T8385] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.077828][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.078873][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 139.080304][ T8385] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.087939][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.088728][ T8385] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.094771][ T8385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.180234][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.221688][ T8385] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.231672][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.231707][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.240308][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.240349][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.364487][ T8555] loop7: detected capacity change from 0 to 512 [ 139.369669][ T8555] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.1769: corrupted in-inode xattr: invalid ea_ino [ 139.369699][ T8555] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.369825][ T8555] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1769: couldn't read orphan inode 15 (err -117) [ 139.369906][ T8555] loop7: lost filesystem error report for type 5 error -117 [ 139.422209][ T8555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.458329][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.506649][ T8553] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.587102][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 139.682020][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.773517][ T8594] syz_tun: entered promiscuous mode [ 139.773764][ T8594] bridge0: port 3(syz_tun) entered blocking state [ 139.773797][ T8594] bridge0: port 3(syz_tun) entered disabled state [ 139.773895][ T8594] syz_tun: entered allmulticast mode [ 139.774817][ T8594] bridge0: port 3(syz_tun) entered blocking state [ 139.774931][ T8594] bridge0: port 3(syz_tun) entered forwarding state [ 139.884230][ T146] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.989857][ T8385] veth0_vlan: entered promiscuous mode [ 139.994383][ T8385] veth1_vlan: entered promiscuous mode [ 140.030853][ T8385] veth0_macvtap: entered promiscuous mode [ 140.034367][ T8385] veth1_macvtap: entered promiscuous mode [ 140.055334][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.067390][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.094841][ T8635] FAULT_INJECTION: forcing a failure. [ 140.094841][ T8635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.094876][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.7.1791 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.094957][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.094994][ T8635] Call Trace: [ 140.095003][ T8635] [ 140.095013][ T8635] __dump_stack+0x1d/0x30 [ 140.095083][ T8635] dump_stack_lvl+0x95/0xd0 [ 140.095106][ T8635] dump_stack+0x15/0x1b [ 140.095179][ T8635] should_fail_ex+0x262/0x280 [ 140.095284][ T8635] should_fail_alloc_page+0xf2/0x100 [ 140.095316][ T8635] __alloc_frozen_pages_noprof+0x157/0x400 [ 140.095422][ T8635] alloc_pages_mpol+0xaf/0x1d0 [ 140.095449][ T8635] vma_alloc_folio_noprof+0x1b3/0x300 [ 140.095477][ T8635] handle_mm_fault+0x137d/0x3bb0 [ 140.095645][ T8635] __get_user_pages+0x12e9/0x1eb0 [ 140.095805][ T8635] __gup_longterm_locked+0x2e9/0xe30 [ 140.095836][ T8635] gup_fast_fallback+0x324/0x4b0 [ 140.095917][ T8635] pin_user_pages_fast+0x5f/0x90 [ 140.095945][ T8635] io_pin_pages+0xc7/0x170 [ 140.095970][ T8635] io_region_pin_pages+0x58/0xf0 [ 140.096028][ T8635] io_create_region+0x2c2/0x330 [ 140.096051][ T8635] io_allocate_scq_urings+0x114/0x3d0 [ 140.096086][ T8635] io_uring_create+0x2ec/0x4f0 [ 140.096132][ T8635] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 140.096193][ T8635] __x64_sys_io_uring_setup+0x31/0x40 [ 140.096219][ T8635] x64_sys_call+0x1fbf/0x2550 [ 140.096318][ T8635] do_syscall_64+0x112/0x360 [ 140.096364][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.096386][ T8635] RIP: 0033:0x7ffab5efe159 [ 140.096405][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.096426][ T8635] RSP: 002b:00007ffab4957028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 140.096447][ T8635] RAX: ffffffffffffffda RBX: 00007ffab6185fa0 RCX: 00007ffab5efe159 [ 140.096531][ T8635] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 140.096543][ T8635] RBP: 00007ffab5f9506b R08: 0000000000000000 R09: 0000000000000000 [ 140.096555][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.096567][ T8635] R13: 00007ffab6186038 R14: 00007ffab6185fa0 R15: 00007ffe7b3bf9a8 [ 140.096584][ T8635] [ 140.114991][ T8633] 9pnet: p9_errstr2errno: server reported unknown error [ 140.139515][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.141094][ T146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.141131][ T146] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.141164][ T146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.266085][ T8647] ip_tables: iptables: counters copy to user failed while replacing table [ 140.304059][ T8647] syzkaller1: entered promiscuous mode [ 140.304112][ T8647] syzkaller1: entered allmulticast mode [ 140.420226][ T8655] loop5: detected capacity change from 0 to 128 [ 140.435210][ T8655] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.435905][ T8655] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.486746][ T8663] loop2: detected capacity change from 0 to 128 [ 140.489044][ T5436] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.501646][ T8663] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.501922][ T8663] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.554957][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.587991][ T8673] loop2: detected capacity change from 0 to 164 [ 140.727582][ T8683] syzkaller1: entered promiscuous mode [ 140.727602][ T8683] syzkaller1: entered allmulticast mode [ 141.948456][ T4627] Bluetooth: hci0: command 0x1003 tx timeout [ 141.949913][ T3987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.764463][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 143.764534][ T29] audit: type=1400 audit(1790158384.536:1171): avc: denied { append } for pid=8699 comm="syz.5.1816" name="uprobe_events" dev="tracefs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 143.768707][ T8704] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1817'. [ 143.769391][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1817'. [ 143.860692][ T8704] loop8: detected capacity change from 0 to 8192 [ 143.880077][ T8704] FAT-fs (loop8): bogus logical sector size 65280 [ 143.880101][ T8704] FAT-fs (loop8): Can't find a valid FAT filesystem [ 143.917536][ T8710] loop5: detected capacity change from 0 to 512 [ 143.940569][ T8710] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1820: inode has both inline data and extents flags [ 143.940604][ T8710] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.940759][ T8710] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1820: couldn't read orphan inode 15 (err -117) [ 143.940787][ T8710] loop5: lost filesystem error report for type 5 error -117 [ 143.941332][ T8710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.011013][ T29] audit: type=1400 audit(1790158384.786:1172): avc: denied { associate } for pid=8709 comm="syz.5.1820" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.054180][ T8720] loop7: detected capacity change from 0 to 128 [ 144.067621][ T8720] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.067878][ T8720] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.080556][ T29] audit: type=1400 audit(1790158384.846:1173): avc: denied { write } for pid=8719 comm="syz.7.1824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.116011][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.116882][ T7323] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.141001][ T3395] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0005/input/input12 [ 144.141743][ T3395] hid-generic 0005:0009:0040.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 144.179674][ T8732] udevd[8732]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 144.357082][ T29] audit: type=1400 audit(1790158385.126:1174): avc: denied { listen } for pid=8737 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.379661][ T8746] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 144.379692][ T8746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.379789][ T8746] vhci_hcd vhci_hcd.0: Device attached [ 144.402600][ T8747] vhci_hcd: connection closed [ 144.402818][ T146] vhci_hcd vhci_hcd.8: stop threads [ 144.402855][ T146] vhci_hcd vhci_hcd.8: release socket [ 144.402871][ T146] vhci_hcd vhci_hcd.8: disconnect device [ 144.936137][ T8769] loop8: detected capacity change from 0 to 512 [ 144.950882][ T8769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.950998][ T8769] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.957138][ T29] audit: type=1400 audit(1790158385.726:1175): avc: denied { write } for pid=8768 comm="syz.8.1844" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.031508][ T8385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.187902][ T29] audit: type=1400 audit(1790158385.956:1176): avc: denied { bind } for pid=8777 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.188224][ T29] audit: type=1400 audit(1790158385.956:1177): avc: denied { setopt } for pid=8777 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.209251][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 145.212250][ T8778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1847'. [ 145.650291][ T29] audit: type=1400 audit(1790158386.396:1178): avc: denied { getopt } for pid=8786 comm="syz.2.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.773561][ T8801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.970527][ T8814] batman_adv: batadv0: Adding interface: dummy0 [ 145.970546][ T8814] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.970609][ T8814] batman_adv: batadv0: Interface activated: dummy0 [ 146.030311][ T8814] batadv0: mtu less than device minimum [ 146.031169][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.031772][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.032238][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.032753][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.033406][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.033890][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.034380][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.034841][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.035335][ T8814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.087024][ T29] audit: type=1400 audit(1790158386.856:1179): avc: denied { write } for pid=8807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.128501][ T29] audit: type=1400 audit(1790158386.896:1180): avc: denied { write } for pid=8823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.807492][ T8854] loop5: detected capacity change from 0 to 128 [ 146.880599][ T8854] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 146.880889][ T8854] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.948176][ T8861] FAULT_INJECTION: forcing a failure. [ 146.948176][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.948204][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.2.1869 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.948232][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.948248][ T8861] Call Trace: [ 146.948272][ T8861] [ 146.948283][ T8861] __dump_stack+0x1d/0x30 [ 146.948312][ T8861] dump_stack_lvl+0x95/0xd0 [ 146.948474][ T8861] dump_stack+0x15/0x1b [ 146.948497][ T8861] should_fail_ex+0x262/0x280 [ 146.948550][ T8861] should_fail+0xb/0x20 [ 146.948577][ T8861] should_fail_usercopy+0x1a/0x20 [ 146.948603][ T8861] _copy_to_user+0x20/0xa0 [ 146.948668][ T8861] bpf_verifier_vlog+0x3c5/0x5a0 [ 146.948697][ T8861] btf_verifier_log+0xb2/0xf0 [ 146.948730][ T8861] ? __btf_verifier_log+0x7f/0xb0 [ 146.948817][ T8861] btf_func_proto_log+0x2ef/0x4a0 [ 146.948940][ T8861] __btf_verifier_log_type+0x275/0x330 [ 146.948980][ T8861] btf_func_proto_check_meta+0xa0/0x100 [ 146.949009][ T8861] btf_parse_type_sec+0x291/0x1520 [ 146.949064][ T8861] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 146.949096][ T8861] ? btf_parse_hdr+0x43a/0x440 [ 146.949157][ T8861] ? btf_parse_str_sec+0x1ae/0x1b0 [ 146.949187][ T8861] btf_new_fd+0x2ec/0x670 [ 146.949207][ T8861] bpf_btf_load+0x116/0x130 [ 146.949233][ T8861] __sys_bpf+0xbce/0xc30 [ 146.949395][ T8861] ? do_futex+0x300/0x460 [ 146.949427][ T8861] __x64_sys_bpf+0x69/0x80 [ 146.949453][ T8861] x64_sys_call+0xf26/0x2550 [ 146.949480][ T8861] do_syscall_64+0x112/0x360 [ 146.949557][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.949581][ T8861] RIP: 0033:0x7fa1de80e159 [ 146.949598][ T8861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.949615][ T8861] RSP: 002b:00007fa1dd267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.949661][ T8861] RAX: ffffffffffffffda RBX: 00007fa1dea95fa0 RCX: 00007fa1de80e159 [ 146.949679][ T8861] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 146.949697][ T8861] RBP: 00007fa1de8a506b R08: 0000000000000000 R09: 0000000000000000 [ 146.949713][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.949793][ T8861] R13: 00007fa1dea96038 R14: 00007fa1dea95fa0 R15: 00007ffecdb03c08 [ 146.949817][ T8861] [ 147.145674][ T5436] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.202373][ T8868] tipc: Started in network mode [ 147.202405][ T8868] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 147.202803][ T8868] tipc: Enabled bearer , priority 10 [ 147.381372][ T8874] loop7: detected capacity change from 0 to 512 [ 147.387336][ T8874] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 147.498533][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1880'. [ 147.498958][ T8884] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1880'. [ 147.811832][ T8896] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.024598][ T8905] batman_adv: batadv0: Adding interface: dummy0 [ 148.024616][ T8905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.024650][ T8905] batman_adv: batadv0: Interface activated: dummy0 [ 148.198966][ T1530] tipc: Node number set to 4269801488 [ 148.228992][ T8913] FAULT_INJECTION: forcing a failure. [ 148.228992][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.229078][ T8913] CPU: 0 UID: 0 PID: 8913 Comm: syz.8.1892 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.229158][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.229173][ T8913] Call Trace: [ 148.229180][ T8913] [ 148.229190][ T8913] __dump_stack+0x1d/0x30 [ 148.229219][ T8913] dump_stack_lvl+0x95/0xd0 [ 148.229327][ T8913] dump_stack+0x15/0x1b [ 148.229350][ T8913] should_fail_ex+0x262/0x280 [ 148.229378][ T8913] should_fail+0xb/0x20 [ 148.229466][ T8913] should_fail_usercopy+0x1a/0x20 [ 148.229495][ T8913] _copy_to_user+0x20/0xa0 [ 148.229523][ T8913] bpf_verifier_vlog+0x3c5/0x5a0 [ 148.229545][ T8913] btf_verifier_log+0xb2/0xf0 [ 148.229603][ T8913] ? __btf_verifier_log+0x7f/0xb0 [ 148.229643][ T8913] btf_func_proto_log+0x2ef/0x4a0 [ 148.229719][ T8913] __btf_verifier_log_type+0x275/0x330 [ 148.229830][ T8913] btf_func_proto_check_meta+0xa0/0x100 [ 148.229866][ T8913] btf_parse_type_sec+0x291/0x1520 [ 148.229900][ T8913] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 148.229966][ T8913] ? btf_parse_hdr+0x43a/0x440 [ 148.230035][ T8913] ? btf_parse_str_sec+0x1ae/0x1b0 [ 148.230115][ T8913] btf_new_fd+0x2ec/0x670 [ 148.230186][ T8913] bpf_btf_load+0x116/0x130 [ 148.230262][ T8913] __sys_bpf+0xbce/0xc30 [ 148.230292][ T8913] ? do_futex+0x300/0x460 [ 148.230331][ T8913] __x64_sys_bpf+0x69/0x80 [ 148.230431][ T8913] x64_sys_call+0xf26/0x2550 [ 148.230460][ T8913] do_syscall_64+0x112/0x360 [ 148.230485][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.230507][ T8913] RIP: 0033:0x7ff6494ce159 [ 148.230525][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.230555][ T8913] RSP: 002b:00007ff647f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.230581][ T8913] RAX: ffffffffffffffda RBX: 00007ff649755fa0 RCX: 00007ff6494ce159 [ 148.230597][ T8913] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 148.230613][ T8913] RBP: 00007ff64956506b R08: 0000000000000000 R09: 0000000000000000 [ 148.230668][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.230683][ T8913] R13: 00007ff649756038 R14: 00007ff649755fa0 R15: 00007ffd542c3c78 [ 148.230773][ T8913] [ 148.285733][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 148.286463][ T8915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1893'. [ 148.549977][ T8921] loop8: detected capacity change from 0 to 512 [ 148.550761][ T8921] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 148.676177][ T8934] tipc: Started in network mode [ 148.676214][ T8934] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 148.676234][ T8934] tipc: Enabling of bearer rejected, failed to enable media [ 148.711663][ T8937] FAULT_INJECTION: forcing a failure. [ 148.711663][ T8937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.711762][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.5.1906 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.711787][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.711799][ T8937] Call Trace: [ 148.711806][ T8937] [ 148.711835][ T8937] __dump_stack+0x1d/0x30 [ 148.711865][ T8937] dump_stack_lvl+0x95/0xd0 [ 148.711892][ T8937] dump_stack+0x15/0x1b [ 148.711916][ T8937] should_fail_ex+0x262/0x280 [ 148.711947][ T8937] should_fail+0xb/0x20 [ 148.712045][ T8937] should_fail_usercopy+0x1a/0x20 [ 148.712083][ T8937] _copy_to_user+0x20/0xa0 [ 148.712115][ T8937] bpf_verifier_vlog+0x3c5/0x5a0 [ 148.712142][ T8937] btf_verifier_log+0xb2/0xf0 [ 148.712253][ T8937] ? __btf_verifier_log+0x7f/0xb0 [ 148.712284][ T8937] btf_func_proto_log+0x2ef/0x4a0 [ 148.712339][ T8937] __btf_verifier_log_type+0x275/0x330 [ 148.712448][ T8937] btf_func_proto_check_meta+0xa0/0x100 [ 148.712515][ T8937] btf_parse_type_sec+0x291/0x1520 [ 148.712547][ T8937] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 148.712588][ T8937] ? btf_parse_hdr+0x43a/0x440 [ 148.712650][ T8937] ? btf_parse_str_sec+0x1ae/0x1b0 [ 148.712764][ T8937] btf_new_fd+0x2ec/0x670 [ 148.712789][ T8937] bpf_btf_load+0x116/0x130 [ 148.712824][ T8937] __sys_bpf+0xbce/0xc30 [ 148.712849][ T8937] ? do_futex+0x300/0x460 [ 148.712940][ T8937] __x64_sys_bpf+0x69/0x80 [ 148.712981][ T8937] x64_sys_call+0xf26/0x2550 [ 148.713011][ T8937] do_syscall_64+0x112/0x360 [ 148.713034][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.713056][ T8937] RIP: 0033:0x7f8d82eae159 [ 148.713073][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.713114][ T8937] RSP: 002b:00007f8d81907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.713263][ T8937] RAX: ffffffffffffffda RBX: 00007f8d83135fa0 RCX: 00007f8d82eae159 [ 148.713277][ T8937] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 148.713365][ T8937] RBP: 00007f8d82f4506b R08: 0000000000000000 R09: 0000000000000000 [ 148.713380][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.713394][ T8937] R13: 00007f8d83136038 R14: 00007f8d83135fa0 R15: 00007ffcba4861a8 [ 148.713476][ T8937] [ 148.778801][ T8940] syzkaller1: entered promiscuous mode [ 148.778821][ T8940] syzkaller1: entered allmulticast mode [ 148.886611][ T8945] loop2: detected capacity change from 0 to 512 [ 148.891687][ T8945] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 149.318357][ T8961] loop5: detected capacity change from 0 to 4096 [ 149.340540][ T8961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.364958][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 149.365039][ T29] audit: type=1400 audit(1790158390.136:1186): avc: denied { write } for pid=8959 comm="syz.5.1926" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.370686][ T8961] EXT4-fs (loop5): shut down requested (0) [ 149.473228][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.536228][ T8981] loop8: detected capacity change from 0 to 512 [ 149.554236][ T8981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.554412][ T8981] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.590466][ T29] audit: type=1400 audit(1790158390.366:1187): avc: denied { write } for pid=8979 comm="syz.8.1927" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.629532][ T8385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.748607][ T9001] random: crng reseeded on system resumption [ 149.749300][ T9001] FAULT_INJECTION: forcing a failure. [ 149.749300][ T9001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.749331][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.2.1942 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.749360][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.749376][ T9001] Call Trace: [ 149.749384][ T9001] [ 149.749394][ T9001] __dump_stack+0x1d/0x30 [ 149.749466][ T9001] dump_stack_lvl+0x95/0xd0 [ 149.749493][ T9001] dump_stack+0x15/0x1b [ 149.749632][ T9001] should_fail_ex+0x262/0x280 [ 149.749663][ T9001] should_fail_alloc_page+0xf2/0x100 [ 149.749712][ T9001] __alloc_frozen_pages_noprof+0x157/0x400 [ 149.750235][ T9001] alloc_pages_mpol+0xaf/0x1d0 [ 149.750341][ T9001] alloc_pages_noprof+0x94/0x140 [ 149.750364][ T9001] get_zeroed_page_noprof+0x1a/0x40 [ 149.750432][ T9001] get_image_page+0x2b/0x420 [ 149.750460][ T9001] memory_bm_create+0x94f/0x1440 [ 149.750491][ T9001] create_basic_memory_bitmaps+0xa6/0x8e0 [ 149.750517][ T9001] snapshot_open+0x1b4/0x280 [ 149.750554][ T9001] ? __pfx_snapshot_open+0x10/0x10 [ 149.750584][ T9001] misc_open+0x1df/0x220 [ 149.750613][ T9001] chrdev_open+0x2eb/0x3a0 [ 149.750644][ T9001] do_dentry_open+0x49f/0xa60 [ 149.750682][ T9001] ? __pfx_chrdev_open+0x10/0x10 [ 149.750716][ T9001] vfs_open+0x37/0x1e0 [ 149.750807][ T9001] path_openat+0xc01/0x10d0 [ 149.750884][ T9001] do_file_open+0x16c/0x290 [ 149.750922][ T9001] do_sys_openat2+0xa0/0x130 [ 149.750945][ T9001] __x64_sys_openat+0xf2/0x120 [ 149.750969][ T9001] x64_sys_call+0x1f72/0x2550 [ 149.751048][ T9001] do_syscall_64+0x112/0x360 [ 149.751074][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.751099][ T9001] RIP: 0033:0x7fa1de80e159 [ 149.751119][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.751181][ T9001] RSP: 002b:00007fa1dd267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.751208][ T9001] RAX: ffffffffffffffda RBX: 00007fa1dea95fa0 RCX: 00007fa1de80e159 [ 149.751225][ T9001] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 149.751241][ T9001] RBP: 00007fa1de8a506b R08: 0000000000000000 R09: 0000000000000000 [ 149.751287][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.751302][ T9001] R13: 00007fa1dea96038 R14: 00007fa1dea95fa0 R15: 00007ffecdb03c08 [ 149.751321][ T9001] [ 149.820585][ T29] audit: type=1400 audit(1790158390.596:1188): avc: denied { write } for pid=8992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.008167][ T29] audit: type=1400 audit(1790158390.776:1189): avc: denied { write } for pid=9012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.090719][ T9018] loop8: detected capacity change from 0 to 4096 [ 150.118088][ T9018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.133320][ T29] audit: type=1400 audit(1790158390.906:1190): avc: denied { write } for pid=9015 comm="syz.8.1936" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.163632][ T9018] EXT4-fs (loop8): shut down requested (0) [ 150.318695][ T29] audit: type=1326 audit(1790158391.096:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.5.1943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d82eae159 code=0x7ffc0000 [ 150.319202][ T29] audit: type=1326 audit(1790158391.096:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.5.1943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d82eae159 code=0x7ffc0000 [ 150.319305][ T29] audit: type=1326 audit(1790158391.096:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.5.1943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d82eae159 code=0x7ffc0000 [ 150.319488][ T29] audit: type=1326 audit(1790158391.096:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.5.1943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d82eaddeb code=0x7ffc0000 [ 150.319736][ T29] audit: type=1326 audit(1790158391.096:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.5.1943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d82e6e98e code=0x7ffc0000 [ 151.000849][ T9093] loop2: detected capacity change from 0 to 512 [ 151.022530][ T9093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.022593][ T9093] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.055253][ T8385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.127094][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.153567][ T9104] random: crng reseeded on system resumption [ 151.154223][ T9104] FAULT_INJECTION: forcing a failure. [ 151.154223][ T9104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.154257][ T9104] CPU: 1 UID: 0 PID: 9104 Comm: syz.4.1960 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.154287][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.154301][ T9104] Call Trace: [ 151.154309][ T9104] [ 151.154365][ T9104] __dump_stack+0x1d/0x30 [ 151.154390][ T9104] dump_stack_lvl+0x95/0xd0 [ 151.154412][ T9104] dump_stack+0x15/0x1b [ 151.154437][ T9104] should_fail_ex+0x262/0x280 [ 151.154476][ T9104] should_fail_alloc_page+0xf2/0x100 [ 151.154519][ T9104] __alloc_frozen_pages_noprof+0x157/0x400 [ 151.154605][ T9104] alloc_pages_mpol+0xaf/0x1d0 [ 151.154632][ T9104] alloc_pages_noprof+0x94/0x140 [ 151.154660][ T9104] get_zeroed_page_noprof+0x1a/0x40 [ 151.154751][ T9104] get_image_page+0x2b/0x420 [ 151.154777][ T9104] memory_bm_create+0x94f/0x1440 [ 151.154813][ T9104] create_basic_memory_bitmaps+0xa6/0x8e0 [ 151.154881][ T9104] snapshot_open+0x1b4/0x280 [ 151.154906][ T9104] ? __pfx_snapshot_open+0x10/0x10 [ 151.155009][ T9104] misc_open+0x1df/0x220 [ 151.155038][ T9104] chrdev_open+0x2eb/0x3a0 [ 151.155077][ T9104] do_dentry_open+0x49f/0xa60 [ 151.155141][ T9104] ? __pfx_chrdev_open+0x10/0x10 [ 151.155189][ T9104] vfs_open+0x37/0x1e0 [ 151.155215][ T9104] path_openat+0xc01/0x10d0 [ 151.155252][ T9104] do_file_open+0x16c/0x290 [ 151.155309][ T9104] do_sys_openat2+0xa0/0x130 [ 151.155336][ T9104] __x64_sys_openat+0xf2/0x120 [ 151.155435][ T9104] x64_sys_call+0x1f72/0x2550 [ 151.155459][ T9104] do_syscall_64+0x112/0x360 [ 151.155482][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.155645][ T9104] RIP: 0033:0x7f5f347ce159 [ 151.155667][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.155689][ T9104] RSP: 002b:00007f5f33227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.155730][ T9104] RAX: ffffffffffffffda RBX: 00007f5f34a55fa0 RCX: 00007f5f347ce159 [ 151.155748][ T9104] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 151.155765][ T9104] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 151.155850][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.155864][ T9104] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 151.155883][ T9104] [ 151.893292][ T364] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18 [ 152.192992][ T9164] batman_adv: batadv0: Adding interface: dummy0 [ 152.193076][ T9164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.193104][ T9164] batman_adv: batadv0: Interface activated: dummy0 [ 152.203542][ T9164] net_ratelimit: 30 callbacks suppressed [ 152.203559][ T9164] batadv0: mtu less than device minimum [ 152.204164][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.204622][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.205046][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.205591][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.206167][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.206794][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.207417][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.208065][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.208643][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.537583][ T9185] loop8: detected capacity change from 0 to 128 [ 152.555358][ T9185] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.555640][ T9185] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.603473][ T9191] loop2: detected capacity change from 0 to 512 [ 152.616972][ T9191] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 152.735899][ T3438] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18 [ 152.750740][ T8385] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.003218][ T9223] loop7: detected capacity change from 0 to 128 [ 153.014423][ T9223] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.027033][ T9223] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.273230][ T7323] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.313949][ T9244] loop7: detected capacity change from 0 to 128 [ 153.327049][ T9244] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.327319][ T9244] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.471295][ T7323] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.511221][ T9259] FAULT_INJECTION: forcing a failure. [ 153.511221][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 153.511268][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.7.2016 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.511297][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.511312][ T9259] Call Trace: [ 153.511318][ T9259] [ 153.511326][ T9259] __dump_stack+0x1d/0x30 [ 153.511352][ T9259] dump_stack_lvl+0x95/0xd0 [ 153.511412][ T9259] dump_stack+0x15/0x1b [ 153.511505][ T9259] should_fail_ex+0x262/0x280 [ 153.511528][ T9259] ? newseg+0x18c/0x670 [ 153.511552][ T9259] should_failslab+0x8c/0xb0 [ 153.511664][ T9259] __kmalloc_cache_noprof+0x7a/0x400 [ 153.511697][ T9259] ? newseg+0x18c/0x670 [ 153.511725][ T9259] ? _raw_spin_unlock+0x9/0x30 [ 153.511782][ T9259] newseg+0x18c/0x670 [ 153.511878][ T9259] ipcget+0x33e/0x4f0 [ 153.511958][ T9259] ? xfd_validate_state+0x45/0xf0 [ 153.511988][ T9259] __x64_sys_shmget+0xb8/0xe0 [ 153.512036][ T9259] x64_sys_call+0x2001/0x2550 [ 153.512069][ T9259] do_syscall_64+0x112/0x360 [ 153.512095][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.512118][ T9259] RIP: 0033:0x7ffab5efe159 [ 153.512134][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.512204][ T9259] RSP: 002b:00007ffab4957028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 153.512228][ T9259] RAX: ffffffffffffffda RBX: 00007ffab6185fa0 RCX: 00007ffab5efe159 [ 153.512242][ T9259] RDX: 0000000000000244 RSI: 0000000000004000 RDI: 0000000000000000 [ 153.512263][ T9259] RBP: 00007ffab5f9506b R08: 0000000000000000 R09: 0000000000000000 [ 153.512280][ T9259] R10: 0000200000ff5000 R11: 0000000000000246 R12: 0000000000000000 [ 153.512382][ T9259] R13: 00007ffab6186038 R14: 00007ffab6185fa0 R15: 00007ffe7b3bf9a8 [ 153.512434][ T9259] [ 153.905251][ T9274] syzkaller1: entered allmulticast mode [ 153.985679][ T9279] netlink: 'syz.7.2025': attribute type 1 has an invalid length. [ 153.985727][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2025'. [ 154.021918][ T9283] vcan0: tx address claim with broadcast sa [ 154.148538][ T9289] FAULT_INJECTION: forcing a failure. [ 154.148538][ T9289] name failslab, interval 1, probability 0, space 0, times 0 [ 154.148659][ T9289] CPU: 1 UID: 0 PID: 9289 Comm: syz.2.2030 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.148690][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.148705][ T9289] Call Trace: [ 154.148713][ T9289] [ 154.148722][ T9289] __dump_stack+0x1d/0x30 [ 154.148802][ T9289] dump_stack_lvl+0x95/0xd0 [ 154.148827][ T9289] dump_stack+0x15/0x1b [ 154.148933][ T9289] should_fail_ex+0x262/0x280 [ 154.148962][ T9289] ? newseg+0x18c/0x670 [ 154.149003][ T9289] should_failslab+0x8c/0xb0 [ 154.149031][ T9289] __kmalloc_cache_noprof+0x7a/0x400 [ 154.149064][ T9289] ? newseg+0x18c/0x670 [ 154.149137][ T9289] newseg+0x18c/0x670 [ 154.149169][ T9289] ipcget+0x33e/0x4f0 [ 154.149200][ T9289] ? __se_sys_futex+0x2f6/0x370 [ 154.149231][ T9289] ? xfd_validate_state+0x45/0xf0 [ 154.149270][ T9289] __x64_sys_shmget+0xb8/0xe0 [ 154.149328][ T9289] x64_sys_call+0x2001/0x2550 [ 154.149358][ T9289] do_syscall_64+0x112/0x360 [ 154.149451][ T9289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.149495][ T9289] RIP: 0033:0x7fa1de80e159 [ 154.149515][ T9289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.149535][ T9289] RSP: 002b:00007fa1dd267028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 154.149562][ T9289] RAX: ffffffffffffffda RBX: 00007fa1dea95fa0 RCX: 00007fa1de80e159 [ 154.149661][ T9289] RDX: 0000000000000244 RSI: 0000000000004000 RDI: 0000000000000000 [ 154.149675][ T9289] RBP: 00007fa1de8a506b R08: 0000000000000000 R09: 0000000000000000 [ 154.149719][ T9289] R10: 0000200000ff5000 R11: 0000000000000246 R12: 0000000000000000 [ 154.149734][ T9289] R13: 00007fa1dea96038 R14: 00007fa1dea95fa0 R15: 00007ffecdb03c08 [ 154.149758][ T9289] [ 154.186963][ T9297] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 154.186988][ T9297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.187020][ T9297] vhci_hcd vhci_hcd.0: Device attached [ 154.195289][ T9298] vhci_hcd: connection closed [ 154.195535][ T364] vhci_hcd vhci_hcd.5: stop threads [ 154.195554][ T364] vhci_hcd vhci_hcd.5: release socket [ 154.195593][ T364] vhci_hcd vhci_hcd.5: disconnect device [ 154.936770][ T9312] syzkaller1: entered promiscuous mode [ 154.936794][ T9312] syzkaller1: entered allmulticast mode [ 154.996775][ T9314] loop5: detected capacity change from 0 to 512 [ 155.023551][ T9314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.023614][ T9314] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.978789][ T9327] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 155.978831][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 157.378197][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.443264][ T9334] loop2: detected capacity change from 0 to 512 [ 157.452420][ T9334] EXT4-fs (loop2): invalid journal inode [ 157.452469][ T9334] EXT4-fs (loop2): can't get journal size [ 157.468667][ T9334] EXT4-fs (loop2): 1 truncate cleaned up [ 157.469114][ T9334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.474866][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 157.474884][ T29] audit: type=1400 audit(1790158398.246:2144): avc: denied { write } for pid=9333 comm="syz.2.2043" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.481061][ T29] audit: type=1400 audit(1790158398.246:2145): avc: denied { write } for pid=9333 comm="syz.2.2043" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.481095][ T29] audit: type=1400 audit(1790158398.246:2146): avc: denied { create } for pid=9333 comm="syz.2.2043" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.481137][ T29] audit: type=1400 audit(1790158398.256:2147): avc: denied { write } for pid=9333 comm="syz.2.2043" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.493434][ T29] audit: type=1400 audit(1790158398.256:2148): avc: denied { write } for pid=9333 comm="syz.2.2043" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.493504][ T29] audit: type=1400 audit(1790158398.256:2149): avc: denied { write } for pid=9333 comm="syz.2.2043" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.554608][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.835268][ T9359] bridge1: entered promiscuous mode [ 157.835294][ T9359] bridge1: entered allmulticast mode [ 157.965271][ T9372] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2060'. [ 157.966234][ T9372] netlink: 'syz.7.2060': attribute type 1 has an invalid length. [ 157.966253][ T9372] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2060'. [ 157.987872][ T9375] loop7: detected capacity change from 0 to 512 [ 157.989336][ T9375] EXT4-fs (loop7): invalid journal inode [ 157.989367][ T9375] EXT4-fs (loop7): can't get journal size [ 157.991395][ T9375] EXT4-fs (loop7): 1 truncate cleaned up [ 157.993070][ T9375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.047585][ T29] audit: type=1400 audit(1790158398.816:2150): avc: denied { write } for pid=9374 comm="syz.7.2061" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.071660][ T29] audit: type=1400 audit(1790158398.846:2151): avc: denied { write } for pid=9374 comm="syz.7.2061" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.073898][ T29] audit: type=1400 audit(1790158398.846:2152): avc: denied { write } for pid=9374 comm="syz.7.2061" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.075231][ T29] audit: type=1400 audit(1790158398.846:2153): avc: denied { write } for pid=9374 comm="syz.7.2061" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.145232][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.312939][ T9391] bridge1: entered promiscuous mode [ 158.312955][ T9391] bridge1: entered allmulticast mode [ 158.347510][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.347687][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.435821][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 158.435844][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 159.018167][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 159.018192][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 159.056676][ T9437] FAULT_INJECTION: forcing a failure. [ 159.056676][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 159.056713][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.7.2088 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.056803][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.056817][ T9437] Call Trace: [ 159.056824][ T9437] [ 159.056832][ T9437] __dump_stack+0x1d/0x30 [ 159.056857][ T9437] dump_stack_lvl+0x95/0xd0 [ 159.056878][ T9437] dump_stack+0x15/0x1b [ 159.056977][ T9437] should_fail_ex+0x262/0x280 [ 159.057000][ T9437] ? sget_fc+0x4ad/0xf70 [ 159.057023][ T9437] should_failslab+0x8c/0xb0 [ 159.057057][ T9437] __kmalloc_cache_noprof+0x7a/0x400 [ 159.057164][ T9437] ? sget_fc+0x4ad/0xf70 [ 159.057193][ T9437] sget_fc+0x4ad/0xf70 [ 159.057227][ T9437] ? __pfx_set_anon_super_fc+0x10/0x10 [ 159.057301][ T9437] ? __kmalloc_cache_noprof+0x19b/0x400 [ 159.057372][ T9437] ? mqueue_init_fs_context+0x38/0x2c0 [ 159.057401][ T9437] ? __pfx_mqueue_fill_super+0x10/0x10 [ 159.057498][ T9437] get_tree_nodev+0x2a/0x100 [ 159.057529][ T9437] mqueue_get_tree+0x5d/0x80 [ 159.057553][ T9437] vfs_get_tree+0x57/0x1d0 [ 159.057585][ T9437] fc_mount_longterm+0x18/0xb0 [ 159.057699][ T9437] mq_init_ns+0x2db/0x370 [ 159.057724][ T9437] copy_ipcs+0x26d/0x460 [ 159.057753][ T9437] create_new_namespaces+0x121/0x420 [ 159.057801][ T9437] unshare_nsproxy_namespaces+0x115/0x150 [ 159.057910][ T9437] ksys_unshare+0x42b/0x710 [ 159.057971][ T9437] __x64_sys_unshare+0x1f/0x30 [ 159.057999][ T9437] x64_sys_call+0x1e33/0x2550 [ 159.058024][ T9437] do_syscall_64+0x112/0x360 [ 159.058069][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.058092][ T9437] RIP: 0033:0x7ffab5efe159 [ 159.058110][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.058150][ T9437] RSP: 002b:00007ffab4957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.058174][ T9437] RAX: ffffffffffffffda RBX: 00007ffab6185fa0 RCX: 00007ffab5efe159 [ 159.058191][ T9437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 159.058206][ T9437] RBP: 00007ffab5f9506b R08: 0000000000000000 R09: 0000000000000000 [ 159.058229][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.058243][ T9437] R13: 00007ffab6186038 R14: 00007ffab6185fa0 R15: 00007ffe7b3bf9a8 [ 159.058269][ T9437] [ 159.374123][ T9452] FAULT_INJECTION: forcing a failure. [ 159.374123][ T9452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.374152][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.2.2095 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.374181][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.374223][ T9452] Call Trace: [ 159.374231][ T9452] [ 159.374241][ T9452] __dump_stack+0x1d/0x30 [ 159.374270][ T9452] dump_stack_lvl+0x95/0xd0 [ 159.374292][ T9452] dump_stack+0x15/0x1b [ 159.374311][ T9452] should_fail_ex+0x262/0x280 [ 159.374374][ T9452] should_fail+0xb/0x20 [ 159.374396][ T9452] should_fail_usercopy+0x1a/0x20 [ 159.374461][ T9452] _copy_from_user+0x1c/0xb0 [ 159.374591][ T9452] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 159.374619][ T9452] bpf_vlog_finalize+0x147/0x200 [ 159.374643][ T9452] bpf_log_attr_finalize+0x33/0x100 [ 159.374665][ T9452] btf_new_fd+0x34a/0x670 [ 159.374687][ T9452] bpf_btf_load+0x116/0x130 [ 159.374724][ T9452] __sys_bpf+0xbce/0xc30 [ 159.374754][ T9452] ? do_futex+0x300/0x460 [ 159.374851][ T9452] __x64_sys_bpf+0x69/0x80 [ 159.374989][ T9452] x64_sys_call+0xf26/0x2550 [ 159.375013][ T9452] do_syscall_64+0x112/0x360 [ 159.375033][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.375057][ T9452] RIP: 0033:0x7fa1de80e159 [ 159.375129][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.375149][ T9452] RSP: 002b:00007fa1dd267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.375172][ T9452] RAX: ffffffffffffffda RBX: 00007fa1dea95fa0 RCX: 00007fa1de80e159 [ 159.375189][ T9452] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 159.375204][ T9452] RBP: 00007fa1de8a506b R08: 0000000000000000 R09: 0000000000000000 [ 159.375226][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.375317][ T9452] R13: 00007fa1dea96038 R14: 00007fa1dea95fa0 R15: 00007ffecdb03c08 [ 159.375338][ T9452] [ 159.464025][ T9454] IPVS: Scheduler module ip_vs_ not found [ 159.735582][ T9474] FAULT_INJECTION: forcing a failure. [ 159.735582][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.735618][ T9474] CPU: 0 UID: 0 PID: 9474 Comm: syz.4.2105 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.735649][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.735703][ T9474] Call Trace: [ 159.735720][ T9474] [ 159.735729][ T9474] __dump_stack+0x1d/0x30 [ 159.735761][ T9474] dump_stack_lvl+0x95/0xd0 [ 159.735809][ T9474] dump_stack+0x15/0x1b [ 159.735834][ T9474] should_fail_ex+0x262/0x280 [ 159.735910][ T9474] should_fail+0xb/0x20 [ 159.735932][ T9474] should_fail_usercopy+0x1a/0x20 [ 159.735963][ T9474] _copy_to_user+0x20/0xa0 [ 159.736074][ T9474] btf_get_info_by_fd+0x34b/0x4a0 [ 159.736098][ T9474] bpf_obj_get_info_by_fd+0x6e3/0x2330 [ 159.736125][ T9474] ? __rcu_read_unlock+0x4e/0x70 [ 159.736208][ T9474] ? futex_unqueue+0xc5/0xf0 [ 159.736238][ T9474] ? __futex_wait+0x1fd/0x260 [ 159.736264][ T9474] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.736330][ T9474] ? selinux_bpf+0xc7/0xe0 [ 159.736359][ T9474] __sys_bpf+0x908/0xc30 [ 159.736389][ T9474] ? do_futex+0x300/0x460 [ 159.736485][ T9474] __x64_sys_bpf+0x69/0x80 [ 159.736510][ T9474] x64_sys_call+0xf26/0x2550 [ 159.736536][ T9474] do_syscall_64+0x112/0x360 [ 159.736603][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.736626][ T9474] RIP: 0033:0x7f5f347ce159 [ 159.736643][ T9474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.736660][ T9474] RSP: 002b:00007f5f33227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.736684][ T9474] RAX: ffffffffffffffda RBX: 00007f5f34a55fa0 RCX: 00007f5f347ce159 [ 159.736725][ T9474] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000f [ 159.736743][ T9474] RBP: 00007f5f3486506b R08: 0000000000000000 R09: 0000000000000000 [ 159.736759][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.736775][ T9474] R13: 00007f5f34a56038 R14: 00007f5f34a55fa0 R15: 00007ffd277b53f8 [ 159.736798][ T9474] [ 159.987139][ T9486] loop7: detected capacity change from 0 to 8192 [ 159.995344][ T9486] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.162439][ T9495] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2115'. [ 160.430972][ T9512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9512 comm=syz.4.2122 [ 160.828190][ T9549] loop2: detected capacity change from 0 to 512 [ 160.863538][ T9549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.863603][ T9549] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.875895][ T9550] loop4: detected capacity change from 0 to 2048 [ 160.925519][ T9550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.982602][ T9558] loop8: detected capacity change from 0 to 512 [ 160.984945][ T9558] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.985582][ T9558] EXT4-fs (loop8): orphan cleanup on readonly fs [ 160.987718][ T9558] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4223: comm syz.8.2136: Allocating blocks 41-42 which overlap fs metadata [ 160.987750][ T9558] loop8: lost filesystem error report for type 5 error -117 [ 160.987934][ T9558] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.2136: Failed to acquire dquot type 0 [ 160.987959][ T9558] loop8: lost filesystem error report for type 5 error -117 [ 160.988152][ T9558] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 160.988211][ T9558] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.2136: corrupted inode contents [ 160.988237][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.988478][ C0] EXT4-fs (loop8): error count since last fsck: 4 [ 160.988496][ C0] EXT4-fs (loop8): initial error at time 1790158401: ext4_mb_mark_diskspace_used:4223 [ 160.988518][ C0] EXT4-fs (loop8): last error at time 1790158401: ext4_do_update_inode:5801: inode 12 [ 160.988869][ T9558] EXT4-fs error (device loop8): ext4_dirty_inode:6736: inode #12: comm syz.8.2136: mark_inode_dirty error [ 160.988897][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.995577][ T9558] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.2136: corrupted inode contents [ 160.995606][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.998796][ T9558] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #12: comm syz.8.2136: mark_inode_dirty error [ 160.998825][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.999091][ T9558] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.2136: corrupted inode contents [ 160.999117][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.999627][ T9558] EXT4-fs error (device loop8) in ext4_orphan_del:304: Corrupt filesystem [ 160.999646][ T9558] loop8: lost filesystem error report for type 5 error -117 [ 160.999912][ T9558] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #12: comm syz.8.2136: corrupted inode contents [ 160.999938][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 161.002915][ T9558] EXT4-fs error (device loop8): ext4_truncate:4721: inode #12: comm syz.8.2136: mark_inode_dirty error [ 161.002941][ T9558] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 161.003024][ T9558] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem [ 161.003049][ T9558] loop8: lost filesystem error report for type 5 error -117 [ 161.003258][ T9558] EXT4-fs (loop8): 1 truncate cleaned up [ 161.014461][ T9558] EXT4-fs (loop8): pa ffff8881072cc070: logic 1, phys. 41, len 23 [ 161.014490][ T9558] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 161.015152][ T9558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.061243][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.065767][ T9558] EXT4-fs error (device loop8): __ext4_remount:6872: comm syz.8.2136: Abort forced by user [ 161.065881][ T9558] EXT4-fs (loop8): Remounting filesystem read-only [ 161.065896][ T9558] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.079340][ T5514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 161.079401][ T5514] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 161.079442][ T5514] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.079442][ T5514] [ 161.079455][ T5514] EXT4-fs (loop4): Total free blocks count 0 [ 161.079468][ T5514] EXT4-fs (loop4): Free/Dirty block details [ 161.079480][ T5514] EXT4-fs (loop4): free_blocks=66060288 [ 161.079494][ T5514] EXT4-fs (loop4): dirty_blocks=32 [ 161.079506][ T5514] EXT4-fs (loop4): Block reservation details [ 161.079518][ T5514] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 161.080100][ T5514] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 161.080361][ T3305] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 161.196897][ T8385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.241792][ T9571] loop4: detected capacity change from 0 to 256 [ 161.455272][ T5514] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.975100][ T9608] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2158'. [ 162.194681][ T9628] veth0: entered promiscuous mode [ 162.195262][ T9628] veth0: left promiscuous mode [ 162.298073][ T9632] device-mapper: table: 252:2: mirror: Insufficient mirror log arguments (-EINVAL) [ 162.298095][ T9632] device-mapper: ioctl: error adding target to table [ 162.452408][ T9648] net_ratelimit: 10 callbacks suppressed [ 162.452426][ T9648] ip_tables: iptables: counters copy to user failed while replacing table [ 162.614413][ T9657] loop7: detected capacity change from 0 to 1024 [ 162.614824][ T9657] EXT4-fs: Ignoring removed bh option [ 162.624447][ T9657] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.656945][ T9657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.680989][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 162.681006][ T29] audit: type=1400 audit(1790158403.456:2229): avc: denied { write } for pid=9653 comm="syz.7.2187" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.749976][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.769770][ T9662] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.769798][ T9662] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 162.813414][ T9670] netlink: 'syz.8.2182': attribute type 15 has an invalid length. [ 162.813435][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2182'. [ 162.824912][ T9670] netlink: 'syz.8.2182': attribute type 15 has an invalid length. [ 162.824930][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2182'. [ 162.825061][ T5514] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 162.825102][ T5514] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 162.825158][ T5514] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 162.848618][ T3438] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 162.873638][ T9674] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: [ 162.906238][ T9680] netlink: 'syz.2.2185': attribute type 12 has an invalid length. [ 162.916403][ T9682] loop8: detected capacity change from 0 to 256 [ 162.925203][ T9682] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.936858][ T9682] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 8200) [ 162.936884][ T9682] FAT-fs (loop8): Filesystem has been set read-only [ 162.937633][ T9682] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 8200) [ 163.157521][ T9702] ip_tables: iptables: counters copy to user failed while replacing table [ 163.199126][ T9707] loop8: detected capacity change from 0 to 128 [ 163.200805][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2200'. [ 163.206585][ T9707] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.206867][ T9707] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.212352][ T29] audit: type=1400 audit(1790158403.986:2230): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.213504][ T29] audit: type=1400 audit(1790158403.986:2231): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.214034][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2200'. [ 163.214761][ T29] audit: type=1400 audit(1790158403.986:2232): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.216347][ T29] audit: type=1400 audit(1790158403.986:2233): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.217626][ T29] audit: type=1400 audit(1790158403.986:2234): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.217654][ T29] audit: type=1400 audit(1790158403.986:2235): avc: denied { write } for pid=9706 comm="syz.8.2198" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.256599][ T8385] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.306962][ T9711] loop7: detected capacity change from 0 to 2048 [ 163.375646][ T9711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.384016][ T29] audit: type=1400 audit(1790158404.156:2236): avc: denied { write } for pid=9710 comm="syz.7.2202" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.468462][ T3987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.483155][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.501960][ T9719] loop4: detected capacity change from 0 to 256 [ 163.503992][ T9719] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.566375][ T9723] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 163.566405][ T9723] FAT-fs (loop4): Filesystem has been set read-only [ 163.566452][ T9723] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 163.597677][ T9721] syzkaller0: entered promiscuous mode [ 163.597709][ T9721] syzkaller0: entered allmulticast mode [ 163.604590][ T29] audit: type=1326 audit(1790158404.376:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.8.2205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6494ce159 code=0x7ffc0000 [ 163.606246][ T29] audit: type=1326 audit(1790158404.376:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.8.2205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6494ce159 code=0x7ffc0000 [ 163.654237][ T9718] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 163.654272][ T9718] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 163.905499][ T9740] loop2: detected capacity change from 0 to 8192 [ 163.906159][ T9740] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.298819][ T9747] bridge1: entered promiscuous mode [ 164.343550][ T9754] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2218'. [ 164.435307][ T9759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.476059][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.477682][ T9773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.477790][ T9773] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.553556][ T8385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.723493][ T3438] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.787961][ T9801] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.877782][ T9806] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 164.877809][ T9806] FAT-fs (loop7): Filesystem has been set read-only [ 164.877826][ T9806] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 164.972631][ T9799] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 164.972690][ T9799] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 165.779226][ T9818] netlink: 'syz.7.2242': attribute type 12 has an invalid length. [ 165.931765][ T9820] ================================================================== [ 165.931790][ T9820] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 165.931805][ T9820] [ 165.931810][ T9820] write to 0xffff888107294dc4 of 4 bytes by task 9816 on cpu 1: [ 165.931821][ T9820] xas_set_mark+0x12b/0x140 [ 165.931836][ T9820] __folio_start_writeback+0x16b/0x370 [ 165.931857][ T9820] __block_write_full_folio+0x526/0x8d0 [ 165.931876][ T9820] block_write_full_folio+0x2c1/0x2e0 [ 165.931895][ T9820] __mpage_writepages+0x722/0x1370 [ 165.931915][ T9820] fat_writepages+0x26/0x30 [ 165.931927][ T9820] do_writepages+0x1b9/0x300 [ 165.931945][ T9820] file_write_and_wait_range+0x178/0x2f0 [ 165.931958][ T9820] simple_fsync_noflush+0x42/0x120 [ 165.931972][ T9820] fat_file_fsync+0x7e/0x100 [ 165.931991][ T9820] vfs_fsync_range+0xc5/0xe0 [ 165.932005][ T9820] generic_file_write_iter+0x1a3/0x1f0 [ 165.932022][ T9820] iter_file_splice_write+0x6a0/0xa60 [ 165.932034][ T9820] direct_splice_actor+0x158/0x280 [ 165.932046][ T9820] splice_direct_to_actor+0x2f9/0x680 [ 165.932058][ T9820] do_splice_direct+0x119/0x1a0 [ 165.932070][ T9820] do_sendfile+0x37d/0x640 [ 165.932082][ T9820] __x64_sys_sendfile64+0x105/0x150 [ 165.932103][ T9820] x64_sys_call+0x1015/0x2550 [ 165.932119][ T9820] do_syscall_64+0x112/0x360 [ 165.932131][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.932145][ T9820] [ 165.932149][ T9820] read to 0xffff888107294dc4 of 4 bytes by task 9820 on cpu 0: [ 165.932160][ T9820] file_write_and_wait_range+0x130/0x2f0 [ 165.932172][ T9820] simple_fsync_noflush+0x42/0x120 [ 165.932185][ T9820] fat_file_fsync+0x7e/0x100 [ 165.932203][ T9820] vfs_fsync_range+0xc5/0xe0 [ 165.932217][ T9820] generic_file_write_iter+0x1a3/0x1f0 [ 165.932233][ T9820] iter_file_splice_write+0x6a0/0xa60 [ 165.932246][ T9820] direct_splice_actor+0x158/0x280 [ 165.932258][ T9820] splice_direct_to_actor+0x2f9/0x680 [ 165.932270][ T9820] do_splice_direct+0x119/0x1a0 [ 165.932282][ T9820] do_sendfile+0x37d/0x640 [ 165.932293][ T9820] __x64_sys_sendfile64+0x105/0x150 [ 165.932314][ T9820] x64_sys_call+0x1015/0x2550 [ 165.932337][ T9820] do_syscall_64+0x112/0x360 [ 165.932348][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.932362][ T9820] [ 165.932364][ T9820] value changed: 0x05000021 -> 0x02000021 [ 165.932372][ T9820] [ 165.932375][ T9820] Reported by Kernel Concurrency Sanitizer on: [ 165.932382][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.2.2243 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.932399][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.932407][ T9820] ================================================================== [ 166.748544][ T3987] Bluetooth: hci0: command 0x1003 tx timeout [ 166.748656][ T4627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.333800][ T9756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512