last executing test programs: 1m20.723596407s ago: executing program 4 (id=394): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffff802, 0x4) 1m20.664660028s ago: executing program 4 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010163, 0x0) 1m20.644231449s ago: executing program 4 (id=399): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@loopback, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m20.57681484s ago: executing program 4 (id=404): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$eJzs3M9vFNcdAPDvrL3YhlJcSpFwaWugVa1KtcHQwqEXKlXqIZGikEM4WvaCHBaIsA8BWWGRInJGyj3KMcotkXJNjlFO+QPIIYdIERJKuACRIm00uzPr/eldO8aO7c9HWnhvdua9+e68t/tmnmcC2LMm03+SiN9ExMOIOFTPtq4wWf/v2ZOV+edPVuajUq1e+j6prfc0zWfy7Q5kmalCROGdpK3AuqXbd67NlculW1Gp5WeWr785s3T7zj8Xr89dLV0t3Zi9cOHc2TPn/z37r5ayI2K0b1Bd6kvjejrx9s3jx/5/+cHL88PthTXH0VO+1Q+VvqtG/tn28Lfm8naBg03ppDOuu1u6MwxsNGuGxbT/r5RPXt7uHQK2TLVarY70frtSbXevYwmwYyWx3XsAbI/8hz49/81f9SXFloFA4cUNQbbV44v1E6CnT1aqd2N4/lkj/uFGzMW289vUGmOmdZmMiNcrP76fvmKt6xDfbFKFAMCe9/nFbBiYRNv4rxBHm9b7bTaHMh4Rv4uIwxHx+4g4EhF/iGhZt0USUV2j/iPtCxr1f5LNIhQebTS2QaTjv/9kc1v5K6s3X2V8KMsdjMgHzKXT2WcyFcWRK4vl0pke5e/rU3/z+C99pfXnY8FsPx4Ntw02F+aW5zYWbafH9yImhtvjT4bTA5dP4yQRcSwiJtZR7nhTevEfHx5vZFpPKwaIv6baZUpvU+bPqh9E/L1+/CvRiH+sZRIxaZ6fLHTMT86MRrl0eiZtBae77uSXX91/pVf9feP/9Nv2Tf53/rNLvzzwTHr89ze1/8jnb1fjH08iksZ87VJEdWh9ddz/+t1auZOnOt/baPvfl7xWS+f966255eVbZyL2JS91Lp9d3TbP5+un8U+d6t7/D2fbpJ/EHyMibcR/iog/Rwzl+34iIk5GRJfQGr7471/f6PXegO3/hUnjX+j6/Zdk7aB2/Ffn6wdM5OWnS4aunXj4fKL7xH0W/6G1j/+5WmoqW9L9+y9p+YoYdE834SMEAACAX71C1P72vzDdSBcK09P1a0BHYn+hfHNp+S8RcWOhfo/AeBQLVxbLpfyC3HgUk/z653hTfrYtfza7bvze0FgtPz1/s7yw3cHDHneg1ueTjv6f+m6d13mBHWgX3YcGrFO//n/0wRbtCLDl/P7D3tXU/3s92aLiL2Vgd/L7D3tXt/5/Nz5a894F3xmw81X1ZdjT1u7//Z+3Cexcw/FqI1277bnr3bbAbtT799+ZAexi/W+SH1n3vf+riepI97dGo8sTA0Y3VEXfxFiXurYlkY6sNrHAYkQMtvLYRqrIh4C9n/BQWF+BI9H51lCstVXS/TkOEVHpuVX6qfTdn6tHB238pVvJ8/qDMvsEmD8TZbObzcer/bQ44OHukfhp0ObnfB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhVfg4AAP//E7XQPA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) write(r0, &(0x7f0000000400)='0', 0x18) 1m20.497119093s ago: executing program 4 (id=409): bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6430, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0x1}, 0x10280, 0x401, 0x1000, 0x5, 0x80000001, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m19.897878697s ago: executing program 4 (id=417): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) mlock(&(0x7f0000322000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x50) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 1m19.897796917s ago: executing program 32 (id=417): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) mlock(&(0x7f0000322000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x50) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 1m15.457346466s ago: executing program 2 (id=515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 1m15.365673188s ago: executing program 2 (id=519): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x14000405) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m15.342365099s ago: executing program 2 (id=520): setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) 1m14.831444081s ago: executing program 2 (id=532): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 1m14.645385826s ago: executing program 2 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24a70e", 0x2c}], 0x1}, 0x30008b08) 1m14.424094261s ago: executing program 2 (id=545): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000280)="8d304e", 0x3}], 0x1) 1m14.338807963s ago: executing program 33 (id=545): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000280)="8d304e", 0x3}], 0x1) 7.004769049s ago: executing program 6 (id=2064): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x14, 0x9, 0x70bd2c, 0x25dfdbff, {0xd}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x3000000000000, 0x0, 0xca1de99cf558760b}, 0x20044010) 6.97910855s ago: executing program 6 (id=2065): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@dioread_nolock}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4cf, &(0x7f0000001200)="$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") ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES64=0x0], 0xfe, 0x1a3, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 6.665374227s ago: executing program 6 (id=2074): socket(0x400000000010, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e23, 0x8}}}}}, 0x0) 6.465804642s ago: executing program 6 (id=2076): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRES64=0x0], 0x1, 0x2cb, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1bc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsync(r0) 6.247134608s ago: executing program 6 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030000000800000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 6.15061423s ago: executing program 6 (id=2085): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @empty, 0x20001}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x9, @mcast1, 0xefea}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 6.15042764s ago: executing program 34 (id=2085): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @empty, 0x20001}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x9, @mcast1, 0xefea}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.651610651s ago: executing program 0 (id=2144): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) close(0x4) close(r2) 3.545514914s ago: executing program 0 (id=2146): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x6, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 3.460461446s ago: executing program 0 (id=2148): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x24) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.454142136s ago: executing program 1 (id=2149): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) pread64(r0, 0x0, 0x0, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) 2.561713638s ago: executing program 0 (id=2158): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x8954, 0x6, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f00000002c0)='./bus\x00', 0x14927d, 0x8) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6f8, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c432004cbc329834c9b1b167263bdbcef549ba197fce47d0100173400fff7ffffff000000f3e7f29b00000200000000000600", "b73200000000000000000d00000000000000000000080100", [0x40000000004, 0x670]}) 2.523463039s ago: executing program 0 (id=2159): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.45953848s ago: executing program 0 (id=2160): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000cc0)=ANY=[], &(0x7f0000000d40)=""/35, 0x2c, 0x23, 0x1, 0x7}, 0x28) 2.445876171s ago: executing program 35 (id=2160): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000cc0)=ANY=[], &(0x7f0000000d40)=""/35, 0x2c, 0x23, 0x1, 0x7}, 0x28) 1.137790843s ago: executing program 7 (id=2174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4000) 1.137548683s ago: executing program 7 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r1}) 1.137307263s ago: executing program 7 (id=2176): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) 1.023961985s ago: executing program 3 (id=2178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900fffffffffffe000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 428.18067ms ago: executing program 1 (id=2183): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 427.73049ms ago: executing program 5 (id=2184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 386.019971ms ago: executing program 3 (id=2185): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@cgroup=r2, r1, 0x2f, 0x2008, 0x4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 356.300472ms ago: executing program 5 (id=2186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x52) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 301.752343ms ago: executing program 5 (id=2187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 301.345133ms ago: executing program 3 (id=2188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) capset(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff) 284.056043ms ago: executing program 3 (id=2189): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010328bd7000f8dbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x20044884) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, 0x0, 0x0) 271.282854ms ago: executing program 5 (id=2190): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 221.791675ms ago: executing program 1 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff5000/0x4000)=nil) 221.510205ms ago: executing program 7 (id=2192): r0 = socket$kcm(0x29, 0x2, 0x0) unshare(0x20000400) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 212.628855ms ago: executing program 5 (id=2193): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 204.546685ms ago: executing program 1 (id=2194): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3f7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) capset(&(0x7f00000000c0)={0x20071026}, 0x0) 137.852717ms ago: executing program 3 (id=2195): r0 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$selinux_access(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) uname(&(0x7f0000000140)=""/203) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101}, 0xc) 108.160168ms ago: executing program 1 (id=2196): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="857c492a3d0000007600000000000014270000009800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r0}, 0x10) sendmsg$can_bcm(r1, 0x0, 0x4004880) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 99.461548ms ago: executing program 3 (id=2197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xb, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x202, 0x2001, 0x0, 0xa, "243260d44b00"}) 45.768009ms ago: executing program 5 (id=2198): r0 = io_uring_setup(0x1d4c, &(0x7f00000002c0)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) io_uring_enter(r0, 0x3910, 0xaa76, 0x8, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.458989ms ago: executing program 7 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 37.63162ms ago: executing program 1 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x267) 0s ago: executing program 7 (id=2201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) kernel console output (not intermixed with test programs): FAULT_INJECTION: forcing a failure. [ 84.563659][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 84.563715][ T6915] CPU: 1 UID: 0 PID: 6915 Comm: syz.3.1238 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.563754][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.563770][ T6915] Call Trace: [ 84.563777][ T6915] [ 84.563785][ T6915] __dump_stack+0x1d/0x30 [ 84.563812][ T6915] dump_stack_lvl+0x95/0xd0 [ 84.563849][ T6915] dump_stack+0x15/0x1b [ 84.563873][ T6915] should_fail_ex+0x262/0x280 [ 84.563897][ T6915] should_failslab+0x8c/0xb0 [ 84.563977][ T6915] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 84.564011][ T6915] ? sock_alloc_inode+0x36/0xf0 [ 84.564035][ T6915] ? sock_alloc_inode+0x36/0xf0 [ 84.564060][ T6915] ? selinux_socket_create+0xfd/0x180 [ 84.564113][ T6915] ? __pfx_sock_alloc_inode+0x10/0x10 [ 84.564168][ T6915] sock_alloc_inode+0x36/0xf0 [ 84.564194][ T6915] alloc_inode+0x40/0x170 [ 84.564249][ T6915] __sock_create+0x121/0x580 [ 84.564277][ T6915] __sys_socketpair+0x1c4/0x430 [ 84.564365][ T6915] __x64_sys_socketpair+0x52/0x60 [ 84.564393][ T6915] x64_sys_call+0x1bf7/0x2550 [ 84.564488][ T6915] do_syscall_64+0x112/0x360 [ 84.564522][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.564544][ T6915] RIP: 0033:0x7f75a084e159 [ 84.564561][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.564584][ T6915] RSP: 002b:00007f759f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 84.564606][ T6915] RAX: ffffffffffffffda RBX: 00007f75a0ad5fa0 RCX: 00007f75a084e159 [ 84.564621][ T6915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 84.564647][ T6915] RBP: 00007f75a08e5024 R08: 0000000000000000 R09: 0000000000000000 [ 84.564664][ T6915] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 84.564677][ T6915] R13: 00007f75a0ad6038 R14: 00007f75a0ad5fa0 R15: 00007fff5db97bf8 [ 84.564735][ T6915] [ 84.564764][ T6915] socket: no more sockets [ 84.580774][ T29] audit: type=1400 audit(1788459222.529:818): avc: denied { append } for pid=6912 comm="syz.0.1239" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.580807][ T29] audit: type=1400 audit(1788459222.529:819): avc: denied { wake_alarm } for pid=6912 comm="syz.0.1239" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.749954][ T6924] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 84.904666][ T6942] tipc: Started in network mode [ 84.904702][ T6942] tipc: Node identity ac141441, cluster identity 4711 [ 84.904903][ T6942] tipc: Enabled bearer , priority 10 [ 84.938203][ T29] audit: type=1400 audit(1788459222.899:820): avc: denied { getattr } for pid=6945 comm="syz.5.1254" path="pid:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.036957][ T29] audit: type=1400 audit(1788459222.999:821): avc: denied { unmount } for pid=4470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.213476][ T29] audit: type=1400 audit(1788459223.179:822): avc: denied { write } for pid=6963 comm="syz.3.1261" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 85.429271][ T29] audit: type=1400 audit(1788459223.389:823): avc: denied { create } for pid=6986 comm="syz.6.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.515171][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 85.731988][ T7022] set_capacity_and_notify: 2 callbacks suppressed [ 85.732014][ T7022] loop0: detected capacity change from 0 to 128 [ 85.735920][ T7022] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 85.758126][ T7022] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.760051][ T7022] ext2 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.827490][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.916153][ T3376] tipc: Node number set to 2886997057 [ 86.030719][ T7045] ªªªªªª: renamed from vlan0 (while UP) [ 86.041069][ T7047] loop0: detected capacity change from 0 to 512 [ 86.041907][ T7047] ext4: Unknown parameter 'nouser_xattr' [ 86.129329][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.371144][ T7071] FAULT_INJECTION: forcing a failure. [ 86.371144][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 86.371221][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.1.1301 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.371246][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.371322][ T7071] Call Trace: [ 86.371328][ T7071] [ 86.371335][ T7071] __dump_stack+0x1d/0x30 [ 86.371363][ T7071] dump_stack_lvl+0x95/0xd0 [ 86.371391][ T7071] dump_stack+0x15/0x1b [ 86.371415][ T7071] should_fail_ex+0x262/0x280 [ 86.371478][ T7071] should_failslab+0x8c/0xb0 [ 86.371512][ T7071] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 86.371621][ T7071] ? __d_alloc+0x34/0x320 [ 86.371642][ T7071] ? __d_alloc+0x34/0x320 [ 86.371664][ T7071] __d_alloc+0x34/0x320 [ 86.371685][ T7071] ? d_alloc_pseudo+0x13/0x80 [ 86.371778][ T7071] d_alloc_pseudo+0x1e/0x80 [ 86.371804][ T7071] alloc_path_pseudo+0xa4/0x140 [ 86.371825][ T7071] alloc_file_pseudo+0x55/0x120 [ 86.371845][ T7071] create_pipe_files+0x1bb/0x440 [ 86.371919][ T7071] __do_pipe_flags+0x44/0x140 [ 86.371953][ T7071] do_pipe2+0x61/0x140 [ 86.372037][ T7071] ? switch_fpu_return+0xe7/0x1b0 [ 86.372067][ T7071] __x64_sys_pipe2+0x30/0x40 [ 86.372102][ T7071] x64_sys_call+0x2085/0x2550 [ 86.372134][ T7071] do_syscall_64+0x112/0x360 [ 86.372242][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.372281][ T7071] RIP: 0033:0x7f6b94b3e159 [ 86.372296][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.372315][ T7071] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 86.372340][ T7071] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 86.372377][ T7071] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 86.372389][ T7071] RBP: 00007f6b94bd5024 R08: 0000000000000000 R09: 0000000000000000 [ 86.372402][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.372414][ T7071] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 86.372432][ T7071] [ 86.432926][ T7074] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 86.432926][ T7074] program syz.3.1303 not setting count and/or reply_len properly [ 86.772539][ T7093] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 86.792785][ T7103] ipvlan0: Caught tx_queue_len zero misconfig [ 86.882679][ T7119] xfrm0: Caught tx_queue_len zero misconfig [ 86.913346][ T7121] loop0: detected capacity change from 0 to 1024 [ 86.918934][ T7121] ext2: Unknown parameter 'noauto' [ 86.928664][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'. [ 87.143755][ T6708] IPVS: starting estimator thread 0... [ 87.241084][ T7147] IPVS: using max 2352 ests per chain, 117600 per kthread [ 87.269516][ T7161] loop3: detected capacity change from 0 to 512 [ 87.270052][ T7161] EXT4-fs: Ignoring removed nobh option [ 87.288946][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.289125][ T7161] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.340076][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.591526][ T7168] loop3: detected capacity change from 0 to 512 [ 87.685717][ T7168] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1341: bg 0: block 4: invalid block bitmap [ 87.686007][ T7168] loop3: lost filesystem error report for type 5 error -117 [ 87.690835][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 87.690870][ C0] EXT4-fs (loop3): initial error at time 1788459225: ext4_validate_block_bitmap:436 [ 87.690923][ C0] EXT4-fs (loop3): last error at time 1788459225: ext4_validate_block_bitmap:436 [ 87.692136][ T7168] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 87.692156][ T7168] loop3: lost filesystem error report for type 5 error -117 [ 87.698404][ T7168] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1341: invalid indirect mapped block 1 (level 1) [ 87.698805][ T7168] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.705906][ T7168] EXT4-fs (loop3): 1 truncate cleaned up [ 87.719525][ T7168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.815480][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.130666][ T7203] loop6: detected capacity change from 0 to 1024 [ 88.150014][ T7203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.150093][ T7203] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.153706][ T7203] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.1356: lblock 0 mapped to illegal pblock 0 (length 6) [ 88.153998][ T7203] EXT4-fs (loop6): Remounting filesystem read-only [ 88.196447][ T4878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.202740][ T7209] tipc: Started in network mode [ 88.202810][ T7209] tipc: Node identity ac14142f, cluster identity 4711 [ 88.202946][ T7209] tipc: New replicast peer: 127.0.0.1 [ 88.203103][ T7209] tipc: Enabled bearer , priority 10 [ 88.203804][ T7209] tipc: New replicast peer: 172.20.20.11 [ 88.329225][ T7219] macvlan0: entered promiscuous mode [ 88.358468][ T7223] FAULT_INJECTION: forcing a failure. [ 88.358468][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 88.358582][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.5.1366 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.358647][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.358660][ T7223] Call Trace: [ 88.358666][ T7223] [ 88.358674][ T7223] __dump_stack+0x1d/0x30 [ 88.358760][ T7223] dump_stack_lvl+0x95/0xd0 [ 88.358781][ T7223] dump_stack+0x15/0x1b [ 88.358800][ T7223] should_fail_ex+0x262/0x280 [ 88.358825][ T7223] ? preload_this_cpu_lock+0x5b/0xd0 [ 88.358928][ T7223] should_failslab+0x8c/0xb0 [ 88.358955][ T7223] kmem_cache_alloc_node_noprof+0x82/0x400 [ 88.358989][ T7223] ? alloc_vmap_area+0x1b6/0xe40 [ 88.359018][ T7223] ? preload_this_cpu_lock+0x5b/0xd0 [ 88.359092][ T7223] ? alloc_vmap_area+0x1b6/0xe40 [ 88.359124][ T7223] preload_this_cpu_lock+0x5b/0xd0 [ 88.359321][ T7223] alloc_vmap_area+0x2c0/0xe40 [ 88.359425][ T7223] ? should_fail_ex+0xdb/0x280 [ 88.359447][ T7223] ? should_failslab+0x8c/0xb0 [ 88.359486][ T7223] ? finish_task_switch+0x121/0x340 [ 88.359514][ T7223] ? __get_vm_area_node+0x125/0x1f0 [ 88.359545][ T7223] __get_vm_area_node+0x199/0x1f0 [ 88.359574][ T7223] __vmalloc_node_range_noprof+0x262/0x1000 [ 88.359679][ T7223] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 88.359703][ T7223] ? __futex_wait+0x1fd/0x260 [ 88.359727][ T7223] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.359825][ T7223] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 88.359848][ T7223] __vmalloc_noprof+0xa4/0xf0 [ 88.359881][ T7223] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 88.359906][ T7223] bpf_prog_alloc_no_stats+0x47/0x390 [ 88.359966][ T7223] ? bpf_prog_alloc+0x2a/0x150 [ 88.359989][ T7223] bpf_prog_alloc+0x3c/0x150 [ 88.360010][ T7223] bpf_prog_create_from_user+0x80/0x260 [ 88.360050][ T7223] ? __pfx_seccomp_check_filter+0x10/0x10 [ 88.360101][ T7223] do_seccomp+0x5ef/0xa40 [ 88.360132][ T7223] ? restore_fpregs_from_fpstate+0x61/0x110 [ 88.360198][ T7223] __x64_sys_seccomp+0x40/0x50 [ 88.360229][ T7223] x64_sys_call+0x3f0/0x2550 [ 88.360257][ T7223] do_syscall_64+0x112/0x360 [ 88.360399][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.360423][ T7223] RIP: 0033:0x7f8aa004e159 [ 88.360441][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.360462][ T7223] RSP: 002b:00007f8a9eaa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 88.360509][ T7223] RAX: ffffffffffffffda RBX: 00007f8aa02d5fa0 RCX: 00007f8aa004e159 [ 88.360525][ T7223] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 88.360540][ T7223] RBP: 00007f8aa00e5024 R08: 0000000000000000 R09: 0000000000000000 [ 88.360556][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.360570][ T7223] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 88.360645][ T7223] [ 88.467051][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.467204][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.521034][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.530409][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.581316][ T6711] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.581365][ T6711] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.581409][ T6711] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.581567][ T6711] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.658019][ T7247] loop0: detected capacity change from 0 to 512 [ 88.661007][ T7247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.692516][ T7247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.692686][ T7247] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.727205][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.764608][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 88.764648][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 88.764681][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 88.888751][ T7266] loop6: detected capacity change from 0 to 512 [ 88.894427][ T7266] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 88.894567][ T7266] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.894834][ T7266] __quota_error: 34 callbacks suppressed [ 88.894857][ T7266] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 88.894962][ T7266] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.895185][ T7266] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 88.895713][ T7266] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1379: bg 0: block 15: invalid block bitmap [ 88.895753][ T7266] loop6: lost filesystem error report for type 5 error -117 [ 88.896005][ T7266] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 88.896033][ T7266] loop6: lost filesystem error report for type 5 error -117 [ 88.896558][ T7266] EXT4-fs warning (device loop6): ext4_evict_inode:196: inode #16: comm syz.6.1379: data will be lost [ 88.896661][ T7266] EXT4-fs (loop6): 1 truncate cleaned up [ 88.897323][ T7266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.941780][ T4878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.997535][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 88.997628][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 88.997660][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 89.080494][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 89.080580][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 89.080602][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1371'. [ 89.153745][ T29] audit: type=1400 audit(1788459227.119:858): avc: denied { read write } for pid=7281 comm="syz.1.1383" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 89.153803][ T29] audit: type=1400 audit(1788459227.119:859): avc: denied { open } for pid=7281 comm="syz.1.1383" path="/301/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 89.182289][ T29] audit: type=1326 audit(1788459227.149:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.186079][ T29] audit: type=1326 audit(1788459227.149:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.186123][ T29] audit: type=1326 audit(1788459227.149:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.195210][ T29] audit: type=1326 audit(1788459227.159:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.195325][ T29] audit: type=1326 audit(1788459227.159:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.195361][ T29] audit: type=1326 audit(1788459227.159:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.206037][ T29] audit: type=1326 audit(1788459227.169:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 89.278288][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.278441][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.321158][ T7235] tipc: Node number set to 2886997039 [ 89.387135][ T7308] loop3: detected capacity change from 0 to 1024 [ 89.390008][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.390072][ T7308] EXT4-fs: inline encryption not supported [ 89.390106][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.412128][ T7310] loop5: detected capacity change from 0 to 1024 [ 89.416547][ T7308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.416744][ T7308] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.424784][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.1404: lblock 0 mapped to illegal pblock 0 (length 5) [ 89.426877][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 89.437472][ T7310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.442070][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.537265][ T4470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.866814][ T7318] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 90.175507][ T7329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.195884][ T4470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.004686][ T7356] set_capacity_and_notify: 1 callbacks suppressed [ 91.004767][ T7356] loop5: detected capacity change from 0 to 512 [ 91.012134][ T7356] EXT4-fs (loop5): 1 truncate cleaned up [ 91.012675][ T7356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.077645][ T7366] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1413: bg 0: block 465: padding at end of block bitmap is not set [ 91.082613][ T7366] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 3 with error 28 [ 91.082655][ T7366] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.082655][ T7366] [ 91.082694][ T7366] EXT4-fs (loop5): Total free blocks count 0 [ 91.082839][ T7366] EXT4-fs (loop5): Free/Dirty block details [ 91.082856][ T7366] EXT4-fs (loop5): free_blocks=0 [ 91.082881][ T7366] EXT4-fs (loop5): dirty_blocks=3 [ 91.082903][ T7366] EXT4-fs (loop5): Block reservation details [ 91.083002][ T7366] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 91.565706][ T7392] device-mapper: ioctl: name not supplied when creating device [ 91.856883][ T4470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.437016][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 92.672455][ T7468] loop0: detected capacity change from 0 to 512 [ 92.686848][ T7468] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.687053][ T7468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.688879][ T7468] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.690460][ T7468] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 92.692573][ T7468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1461: bg 0: block 15: invalid block bitmap [ 92.692620][ T7468] loop0: lost filesystem error report for type 5 error -117 [ 92.692951][ T7468] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 92.692984][ T7468] loop0: lost filesystem error report for type 5 error -117 [ 92.693415][ T7468] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.1461: data will be lost [ 92.693575][ T7468] EXT4-fs (loop0): 1 truncate cleaned up [ 92.694372][ T7468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.801106][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.887498][ T7476] devpts: Invalid gid '0x00000000ffffffff' [ 92.915602][ T7465] loop3: detected capacity change from 0 to 1024 [ 93.055072][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.340438][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.504084][ T1070] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.507063][ T1070] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.546086][ T7518] loop1: detected capacity change from 0 to 1024 [ 93.555865][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.555996][ T7518] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.562521][ T7518] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.1483: lblock 0 mapped to illegal pblock 0 (length 6) [ 93.564918][ T7518] EXT4-fs (loop1): Remounting filesystem read-only [ 93.584595][ T7511] loop3: detected capacity change from 0 to 1024 [ 93.614957][ T7511] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.629938][ T7519] fido_id[7519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.928651][ T7557] __nla_validate_parse: 1 callbacks suppressed [ 93.928692][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 94.451941][ T7566] veth1_to_team: Caught tx_queue_len zero misconfig [ 94.484189][ T7569] netlink: 'syz.3.1502': attribute type 10 has an invalid length. [ 94.484563][ T7569] batman_adv: batadv0: Adding interface: netdevsim2 [ 94.484579][ T7569] batman_adv: batadv0: The MTU of interface netdevsim2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.484612][ T7569] batman_adv: batadv0: Interface activated: netdevsim2 [ 94.511280][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 94.511303][ T29] audit: type=1400 audit(1788459232.479:998): avc: denied { connect } for pid=7571 comm="syz.3.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.546173][ T29] audit: type=1400 audit(1788459232.509:999): avc: denied { read } for pid=7575 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.808130][ T7586] loop3: detected capacity change from 0 to 256 [ 94.812201][ T29] audit: type=1400 audit(1788459232.769:1000): avc: denied { remount } for pid=7585 comm="syz.3.1510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.839714][ T7589] loop1: detected capacity change from 0 to 1024 [ 94.864768][ T29] audit: type=1400 audit(1788459232.829:1001): avc: denied { write } for pid=7587 comm="syz.1.1512" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.983330][ T29] audit: type=1326 audit(1788459232.949:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7601 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75a084e159 code=0x0 [ 95.074998][ T29] audit: type=1400 audit(1788459233.039:1003): avc: denied { write } for pid=7610 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.082670][ T29] audit: type=1400 audit(1788459233.049:1004): avc: denied { getopt } for pid=7605 comm="syz.6.1518" lport=54032 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.165629][ T29] audit: type=1400 audit(1788459233.129:1005): avc: denied { create } for pid=7619 comm="syz.6.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.177377][ T29] audit: type=1400 audit(1788459233.139:1006): avc: denied { setopt } for pid=7619 comm="syz.6.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.211370][ T7622] loop6: detected capacity change from 0 to 1024 [ 95.225119][ T7622] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.227974][ T29] audit: type=1400 audit(1788459233.189:1007): avc: denied { write } for pid=7621 comm="syz.6.1525" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.228662][ T7622] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1525: bg 0: block 112: padding at end of block bitmap is not set [ 95.228914][ T7622] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 95.228941][ T7622] EXT4-fs (loop6): This should not happen!! Data will be lost [ 95.228941][ T7622] [ 95.228955][ T7622] EXT4-fs (loop6): Total free blocks count 0 [ 95.228969][ T7622] EXT4-fs (loop6): Free/Dirty block details [ 95.228982][ T7622] EXT4-fs (loop6): free_blocks=0 [ 95.229029][ T7622] EXT4-fs (loop6): dirty_blocks=16 [ 95.229049][ T7622] EXT4-fs (loop6): Block reservation details [ 95.229060][ T7622] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 95.275679][ T7624] loop1: detected capacity change from 0 to 1024 [ 95.303913][ T7624] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.348792][ T7639] loop1: detected capacity change from 0 to 128 [ 95.445974][ T3300] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 95.446013][ T3300] FAT-fs (loop0): Filesystem has been set read-only [ 95.789060][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.789161][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.850245][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.857166][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.873349][ T7681] FAULT_INJECTION: forcing a failure. [ 95.873349][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 95.873412][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.1549 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.873499][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.873515][ T7681] Call Trace: [ 95.873522][ T7681] [ 95.873530][ T7681] __dump_stack+0x1d/0x30 [ 95.873561][ T7681] dump_stack_lvl+0x95/0xd0 [ 95.873583][ T7681] dump_stack+0x15/0x1b [ 95.873602][ T7681] should_fail_ex+0x262/0x280 [ 95.873626][ T7681] should_failslab+0x8c/0xb0 [ 95.873692][ T7681] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 95.873736][ T7681] ? alloc_inode+0x9a/0x170 [ 95.873771][ T7681] ? alloc_inode+0x9a/0x170 [ 95.873821][ T7681] alloc_inode+0x9a/0x170 [ 95.873856][ T7681] create_pipe_files+0x3e/0x440 [ 95.873930][ T7681] __do_pipe_flags+0x44/0x140 [ 95.874022][ T7681] do_pipe2+0x61/0x140 [ 95.874058][ T7681] ? switch_fpu_return+0xe7/0x1b0 [ 95.874086][ T7681] __x64_sys_pipe2+0x30/0x40 [ 95.874167][ T7681] x64_sys_call+0x2085/0x2550 [ 95.874192][ T7681] do_syscall_64+0x112/0x360 [ 95.874221][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.874248][ T7681] RIP: 0033:0x7f75a084e159 [ 95.874288][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.874308][ T7681] RSP: 002b:00007f759f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 95.874352][ T7681] RAX: ffffffffffffffda RBX: 00007f75a0ad5fa0 RCX: 00007f75a084e159 [ 95.874371][ T7681] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 95.874387][ T7681] RBP: 00007f75a08e5024 R08: 0000000000000000 R09: 0000000000000000 [ 95.874403][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.874418][ T7681] R13: 00007f75a0ad6038 R14: 00007f75a0ad5fa0 R15: 00007fff5db97bf8 [ 95.874472][ T7681] [ 95.900938][ T6711] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.900986][ T6711] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.901031][ T6711] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.901131][ T6711] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.901216][ T7672] bond0: Caught tx_queue_len zero misconfig [ 95.973423][ T7685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 95.976074][ T7685] EXT4-fs (loop3): Remounting filesystem read-only [ 95.993236][ T7685] syz.3.1550 (7685) used greatest stack depth: 9984 bytes left [ 96.058914][ T7701] set_capacity_and_notify: 4 callbacks suppressed [ 96.058951][ T7701] loop5: detected capacity change from 0 to 256 [ 96.059770][ T7701] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.094712][ T7701] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.174519][ T7710] FAULT_INJECTION: forcing a failure. [ 96.174519][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 96.174568][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.5.1560 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.174600][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.174671][ T7710] Call Trace: [ 96.174678][ T7710] [ 96.174687][ T7710] __dump_stack+0x1d/0x30 [ 96.174736][ T7710] dump_stack_lvl+0x95/0xd0 [ 96.174761][ T7710] dump_stack+0x15/0x1b [ 96.174783][ T7710] should_fail_ex+0x262/0x280 [ 96.174803][ T7710] ? do_getname+0x2e/0x1c0 [ 96.174836][ T7710] should_failslab+0x8c/0xb0 [ 96.174908][ T7710] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 96.174939][ T7710] ? do_getname+0x2e/0x1c0 [ 96.175008][ T7710] do_getname+0x2e/0x1c0 [ 96.175063][ T7710] getname_flags+0x1d/0x30 [ 96.175164][ T7710] do_sys_openat2+0x6c/0x130 [ 96.175190][ T7710] __x64_sys_openat+0xf2/0x120 [ 96.175213][ T7710] x64_sys_call+0x1f72/0x2550 [ 96.175268][ T7710] do_syscall_64+0x112/0x360 [ 96.175324][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.175351][ T7710] RIP: 0033:0x7f8aa004e159 [ 96.175370][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.175392][ T7710] RSP: 002b:00007f8a9eaa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.175446][ T7710] RAX: ffffffffffffffda RBX: 00007f8aa02d5fa0 RCX: 00007f8aa004e159 [ 96.175460][ T7710] RDX: 0000000000020000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 96.175474][ T7710] RBP: 00007f8aa00e5024 R08: 0000000000000000 R09: 0000000000000000 [ 96.175491][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.175515][ T7710] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 96.175592][ T7710] [ 96.290134][ T7713] vhci_hcd vhci_hcd.3: default hub control req: 6000 v0001 i0006 l1 [ 96.390014][ T7721] FAULT_INJECTION: forcing a failure. [ 96.390014][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.390053][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.0.1565 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.390079][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.390092][ T7721] Call Trace: [ 96.390100][ T7721] [ 96.390109][ T7721] __dump_stack+0x1d/0x30 [ 96.390206][ T7721] dump_stack_lvl+0x95/0xd0 [ 96.390302][ T7721] dump_stack+0x15/0x1b [ 96.390321][ T7721] should_fail_ex+0x262/0x280 [ 96.390341][ T7721] should_fail+0xb/0x20 [ 96.390357][ T7721] should_fail_usercopy+0x1a/0x20 [ 96.390432][ T7721] strncpy_from_user+0x27/0x250 [ 96.390472][ T7721] path_setxattrat+0xeb/0x320 [ 96.390512][ T7721] __x64_sys_setxattr+0x6e/0x90 [ 96.390604][ T7721] x64_sys_call+0xf6c/0x2550 [ 96.390632][ T7721] do_syscall_64+0x112/0x360 [ 96.390664][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.390690][ T7721] RIP: 0033:0x7fdfa686e159 [ 96.390708][ T7721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.390797][ T7721] RSP: 002b:00007fdfa52c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 96.390819][ T7721] RAX: ffffffffffffffda RBX: 00007fdfa6af5fa0 RCX: 00007fdfa686e159 [ 96.390835][ T7721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.390849][ T7721] RBP: 00007fdfa6905024 R08: 0000000000000003 R09: 0000000000000000 [ 96.390864][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.390911][ T7721] R13: 00007fdfa6af6038 R14: 00007fdfa6af5fa0 R15: 00007ffed32d9448 [ 96.390938][ T7721] [ 96.579746][ T7733] loop5: detected capacity change from 0 to 1024 [ 96.603995][ T7733] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.895376][ T7744] loop3: detected capacity change from 0 to 1024 [ 96.936813][ T7751] loop1: detected capacity change from 0 to 512 [ 96.945904][ T7751] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1576: Unimplemented hash flags: 0x0001 [ 96.945939][ T7751] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended [ 96.951114][ T7751] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.951450][ T7751] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1576: corrupted in-inode xattr: invalid ea_ino [ 96.951574][ T7751] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.951881][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1576: couldn't read orphan inode 15 (err -117) [ 96.951996][ T7751] loop1: lost filesystem error report for type 5 error -117 [ 96.961268][ T7751] netlink: 'syz.1.1576': attribute type 12 has an invalid length. [ 96.961286][ T7751] netlink: 'syz.1.1576': attribute type 29 has an invalid length. [ 96.961309][ T7751] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1576'. [ 96.961371][ T7751] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1576'. [ 97.346539][ T7763] loop6: detected capacity change from 0 to 1024 [ 97.597807][ T7786] sctp: [Deprecated]: syz.1.1590 (pid 7786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.597807][ T7786] Use struct sctp_sack_info instead [ 97.637511][ T7775] loop6: detected capacity change from 0 to 512 [ 97.697362][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.697559][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.728446][ T7775] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.786373][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.789250][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.830997][ T6708] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.831331][ T6708] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.831531][ T6708] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.831657][ T6708] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.941543][ T7813] sock: sock_timestamping_bind_phc: sock not bind to device [ 97.964048][ T7815] C: renamed from veth1_to_team [ 97.975230][ T7815] netlink: 'syz.5.1602': attribute type 4 has an invalid length. [ 97.975252][ T7815] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1602'. [ 97.975268][ T7815] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 98.338234][ T7829] loop1: detected capacity change from 0 to 1024 [ 98.347512][ T7829] EXT4-fs mount: 25 callbacks suppressed [ 98.347548][ T7829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.372977][ T7829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 98.387777][ T7829] EXT4-fs (loop1): Remounting filesystem read-only [ 98.406868][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.407513][ T7831] loop0: detected capacity change from 0 to 1024 [ 98.425539][ T7831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.425867][ T7831] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.458513][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.591376][ T7851] loop5: detected capacity change from 0 to 128 [ 98.591831][ T7851] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.613730][ T7849] loop1: detected capacity change from 0 to 512 [ 98.620792][ T7851] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.646712][ T6711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.694769][ T7849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.695487][ T7849] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.720236][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.914705][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.978580][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.991186][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.082848][ T6708] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.082949][ T6708] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.083094][ T6708] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.083208][ T6708] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.459077][ T4470] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 99.459167][ T4470] FAT-fs (loop5): Filesystem has been set read-only [ 99.494000][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1640'. [ 99.572416][ T7915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.599158][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 99.599207][ T29] audit: type=1400 audit(1788459237.559:1060): avc: denied { write } for pid=7913 comm="syz.1.1641" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.633242][ T29] audit: type=1400 audit(1788459237.599:1061): avc: denied { read } for pid=7912 comm="syz.6.1642" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.747892][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.225441][ T7942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.248870][ T29] audit: type=1400 audit(1788459238.209:1062): avc: denied { write } for pid=7941 comm="syz.0.1652" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.277852][ T7942] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.277985][ T7942] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.278020][ T7942] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.278020][ T7942] [ 100.278096][ T7942] EXT4-fs (loop0): Total free blocks count 0 [ 100.278155][ T7942] EXT4-fs (loop0): Free/Dirty block details [ 100.278168][ T7942] EXT4-fs (loop0): free_blocks=68451041280 [ 100.278183][ T7942] EXT4-fs (loop0): dirty_blocks=80 [ 100.278196][ T7942] EXT4-fs (loop0): Block reservation details [ 100.278209][ T7942] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 100.280569][ T7942] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 100.373983][ T7946] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1653: iget: bad i_size value: 38620345925642 [ 100.374044][ T7946] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.387551][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 100.387597][ C0] EXT4-fs (loop1): initial error at time 1788459238: ext4_orphan_get:1403: inode 15 [ 100.387634][ C0] EXT4-fs (loop1): last error at time 1788459238: ext4_orphan_get:1403: inode 15 [ 100.388397][ T7946] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1653: couldn't read orphan inode 15 (err -117) [ 100.388427][ T7946] loop1: lost filesystem error report for type 5 error -117 [ 100.389173][ T7946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.405982][ T29] audit: type=1400 audit(1788459238.359:1063): avc: denied { write } for pid=7945 comm="syz.1.1653" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.406028][ T29] audit: type=1400 audit(1788459238.359:1064): avc: denied { write open } for pid=7945 comm="syz.1.1653" path="/366/file0/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.515782][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.562331][ T7955] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 100.813134][ T7961] EXT4-fs: Ignoring removed orlov option [ 100.819559][ T7961] EXT4-fs (loop6): inodes count not valid: 0 vs 32 [ 100.900637][ T29] audit: type=1400 audit(1788459238.859:1065): avc: denied { read append } for pid=7966 comm="syz.6.1661" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.900760][ T29] audit: type=1400 audit(1788459238.859:1066): avc: denied { open } for pid=7966 comm="syz.6.1661" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.926919][ T29] audit: type=1400 audit(1788459238.859:1067): avc: denied { ioctl } for pid=7966 comm="syz.6.1661" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.929095][ T7970] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.930848][ T7970] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.953231][ T29] audit: type=1400 audit(1788459238.889:1068): avc: denied { write } for pid=7968 comm="syz.5.1662" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.953290][ T29] audit: type=1400 audit(1788459238.889:1069): avc: denied { read } for pid=7968 comm="syz.5.1662" path="/238/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.101897][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.102073][ T7964] bridge0: port 1(1¾x9ÿ) entered disabled state [ 101.128018][ T7976] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1664'. [ 101.165805][ T7979] xt_IDLETIMER: timeout value is too big [ 101.189005][ T4470] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.202231][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 101.237181][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.254095][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.305615][ T7986] set_capacity_and_notify: 6 callbacks suppressed [ 101.305642][ T7986] loop6: detected capacity change from 0 to 512 [ 101.319444][ T7986] EXT4-fs (loop6): 1 truncate cleaned up [ 101.322863][ T7986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.343763][ T7964] veth1_macvtap: left allmulticast mode [ 101.361640][ T7964] batman_adv: batadv0: Interface deactivated: netdevsim2 [ 101.390918][ T6709] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.390976][ T6709] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391022][ T6709] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391081][ T6709] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.422814][ T7992] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1670: bg 0: block 465: padding at end of block bitmap is not set [ 101.423833][ T7992] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 3 with error 28 [ 101.423861][ T7992] EXT4-fs (loop6): This should not happen!! Data will be lost [ 101.423861][ T7992] [ 101.423876][ T7992] EXT4-fs (loop6): Total free blocks count 0 [ 101.423947][ T7992] EXT4-fs (loop6): Free/Dirty block details [ 101.423959][ T7992] EXT4-fs (loop6): free_blocks=0 [ 101.423971][ T7992] EXT4-fs (loop6): dirty_blocks=3 [ 101.423983][ T7992] EXT4-fs (loop6): Block reservation details [ 101.423995][ T7992] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 101.714682][ T7997] loop3: detected capacity change from 0 to 512 [ 101.762777][ T7997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.763415][ T7997] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.802819][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.897732][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.898191][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.948808][ T8012] loop1: detected capacity change from 0 to 256 [ 102.230369][ T4878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.263162][ T8025] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.296339][ T8028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1696'. [ 102.463955][ T8042] loop0: detected capacity change from 0 to 1024 [ 102.472020][ T8042] EXT4-fs: Ignoring removed oldalloc option [ 102.472079][ T8042] EXT4-fs: Ignoring removed oldalloc option [ 102.506047][ T8042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.554185][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.689907][ T8072] loop5: detected capacity change from 0 to 128 [ 102.699669][ T8072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 102.699739][ T8072] System zones: 1-3, 19-19, 35-36 [ 102.700297][ T8072] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.700581][ T8072] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.708846][ T8072] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 102.749157][ T8079] loop6: detected capacity change from 0 to 128 [ 102.779803][ T8079] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.781184][ T8079] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.834328][ T4470] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.887286][ T8088] loop1: detected capacity change from 0 to 1024 [ 102.927029][ T8088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.927176][ T8088] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.000297][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.057440][ T4878] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.109364][ T8104] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.109397][ T8104] SELinux: failed to load policy [ 103.156081][ T8109] Invalid argument reading file caps for ./file0 [ 103.428884][ T8139] sctp: [Deprecated]: syz.5.1734 (pid 8139) Use of int in maxseg socket option. [ 103.428884][ T8139] Use struct sctp_assoc_value instead [ 103.437807][ T6707] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.755341][ T8179] FAULT_INJECTION: forcing a failure. [ 103.755341][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 103.755391][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.0.1749 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.755421][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.755467][ T8179] Call Trace: [ 103.755474][ T8179] [ 103.755482][ T8179] __dump_stack+0x1d/0x30 [ 103.755506][ T8179] dump_stack_lvl+0x95/0xd0 [ 103.755530][ T8179] dump_stack+0x15/0x1b [ 103.755634][ T8179] should_fail_ex+0x262/0x280 [ 103.755655][ T8179] ? futex_lock_pi+0x740/0x7c0 [ 103.755686][ T8179] should_failslab+0x8c/0xb0 [ 103.755732][ T8179] __kmalloc_cache_noprof+0x7a/0x400 [ 103.755767][ T8179] ? futex_lock_pi+0x740/0x7c0 [ 103.755804][ T8179] futex_lock_pi+0x740/0x7c0 [ 103.755851][ T8179] ? futex_unqueue+0xc5/0xf0 [ 103.755878][ T8179] ? __pfx_futex_wake_mark+0x10/0x10 [ 103.755991][ T8179] do_futex+0x2ea/0x460 [ 103.756026][ T8179] __se_sys_futex+0x2f6/0x370 [ 103.756130][ T8179] ? xfd_validate_state+0x45/0xf0 [ 103.756187][ T8179] __x64_sys_futex+0x78/0x90 [ 103.756288][ T8179] x64_sys_call+0x22e2/0x2550 [ 103.756315][ T8179] do_syscall_64+0x112/0x360 [ 103.756350][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.756457][ T8179] RIP: 0033:0x7fdfa686e159 [ 103.756471][ T8179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.756489][ T8179] RSP: 002b:00007fdfa52c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.756512][ T8179] RAX: ffffffffffffffda RBX: 00007fdfa6af5fa0 RCX: 00007fdfa686e159 [ 103.756530][ T8179] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000000000000000 [ 103.756546][ T8179] RBP: 00007fdfa6905024 R08: 0000000000000000 R09: 0000000000000001 [ 103.756638][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.756651][ T8179] R13: 00007fdfa6af6038 R14: 00007fdfa6af5fa0 R15: 00007ffed32d9448 [ 103.756674][ T8179] [ 104.471977][ T8204] loop3: detected capacity change from 0 to 128 [ 104.481167][ T8204] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.481487][ T8204] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.639952][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.736673][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 104.736700][ T29] audit: type=1326 audit(1788459242.699:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.736730][ T29] audit: type=1326 audit(1788459242.699:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.736775][ T29] audit: type=1326 audit(1788459242.699:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.741484][ T29] audit: type=1326 audit(1788459242.699:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.741620][ T29] audit: type=1326 audit(1788459242.699:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.782407][ T29] audit: type=1326 audit(1788459242.739:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.792114][ T29] audit: type=1326 audit(1788459242.739:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a084e159 code=0x7ffc0000 [ 104.793147][ T29] audit: type=1326 audit(1788459242.739:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75a084dec2 code=0x7ffc0000 [ 104.793308][ T29] audit: type=1326 audit(1788459242.739:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f75a084df57 code=0x7ffc0000 [ 104.793494][ T29] audit: type=1326 audit(1788459242.739:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8215 comm="syz.3.1764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f75a080ae51 code=0x7ffc0000 [ 104.839619][ T8218] loop0: detected capacity change from 0 to 512 [ 104.926925][ T8218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.927728][ T8218] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.966410][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.112568][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'. [ 105.112759][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'. [ 105.235133][ T8242] loop0: detected capacity change from 0 to 512 [ 105.235768][ T8242] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.240809][ T8242] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 105.240867][ T8242] FAT-fs (loop0): Filesystem has been set read-only [ 105.241777][ T8242] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 105.241890][ T8242] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 105.470937][ T3785] Bluetooth: hci0: command 0x1003 tx timeout [ 105.470971][ T5613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.712252][ T8284] FAULT_INJECTION: forcing a failure. [ 105.712252][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 105.712284][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.5.1794 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.712406][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.712421][ T8284] Call Trace: [ 105.712429][ T8284] [ 105.712437][ T8284] __dump_stack+0x1d/0x30 [ 105.712467][ T8284] dump_stack_lvl+0x95/0xd0 [ 105.712563][ T8284] dump_stack+0x15/0x1b [ 105.712586][ T8284] should_fail_ex+0x262/0x280 [ 105.712611][ T8284] ? __send_signal_locked+0x14d/0x750 [ 105.712661][ T8284] should_failslab+0x8c/0xb0 [ 105.712709][ T8284] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 105.712816][ T8284] ? __send_signal_locked+0x14d/0x750 [ 105.712847][ T8284] __send_signal_locked+0x14d/0x750 [ 105.712948][ T8284] send_signal_locked+0x3b0/0x430 [ 105.712984][ T8284] force_sig_info_to_task+0x1de/0x270 [ 105.713032][ T8284] force_sig_fault+0x91/0xc0 [ 105.713064][ T8284] exc_page_fault+0x62/0xa0 [ 105.713091][ T8284] asm_exc_page_fault+0x26/0x30 [ 105.713116][ T8284] RIP: 0033:0x7f8a9ff02df8 [ 105.713148][ T8284] Code: 40 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 4c 89 44 24 d0 48 8b 74 24 e8 4c 8b 44 24 d0 48 8b 4c 24 d8 <81> 4e 08 00 0c 00 00 48 8b 54 24 e0 48 8b 7c 24 f0 e9 c2 fe ff ff [ 105.713165][ T8284] RSP: 002b:00007f8a9eaa7018 EFLAGS: 00010212 [ 105.713181][ T8284] RAX: 00007f8a9ff02dd0 RBX: 00007f8aa02d5fa0 RCX: 0000000000000000 [ 105.713197][ T8284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d [ 105.713213][ T8284] RBP: 00007f8aa00e5024 R08: 0000000000000000 R09: 0000000000000000 [ 105.713236][ T8284] R10: 000000000000001d R11: 0000000000000000 R12: 0000000000000000 [ 105.713274][ T8284] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 105.713296][ T8284] [ 105.853809][ T8288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.950897][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 105.996337][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 106.072676][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 106.072731][ T8305] macvlan0: left promiscuous mode [ 106.072951][ T8305] netlink: 'syz.3.1804': attribute type 1 has an invalid length. [ 106.072968][ T8305] netlink: 'syz.3.1804': attribute type 2 has an invalid length. [ 106.097206][ T8307] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 106.107099][ T8307] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.107308][ T8307] ext2 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.178448][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.459581][ T8332] set_capacity_and_notify: 1 callbacks suppressed [ 106.459626][ T8332] loop1: detected capacity change from 0 to 128 [ 106.476447][ T8332] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.489090][ T8332] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.597813][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1817'. [ 106.799982][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.846060][ T8351] bridge_slave_0: left allmulticast mode [ 106.846111][ T8351] bridge_slave_0: left promiscuous mode [ 106.846245][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.861382][ T8351] bridge_slave_1: left allmulticast mode [ 106.861441][ T8351] bridge_slave_1: left promiscuous mode [ 106.861545][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.888279][ T8351] bond0: (slave bond_slave_0): Releasing backup interface [ 106.889144][ T8349] loop1: detected capacity change from 0 to 4096 [ 106.906416][ T8351] bond0: (slave bond_slave_1): Releasing backup interface [ 106.915646][ T8349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.916930][ T8351] team0: Port device team_slave_0 removed [ 106.929313][ T8351] team0: Port device team_slave_1 removed [ 106.929517][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.934957][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.943213][ T8351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.943472][ T8352] bridge0: port 1(syz_tun) entered blocking state [ 106.943531][ T8352] bridge0: port 1(syz_tun) entered disabled state [ 106.943612][ T8352] syz_tun: entered allmulticast mode [ 106.944285][ T8352] syz_tun: entered promiscuous mode [ 107.094219][ T8316] Set syz1 is full, maxelem 65536 reached [ 107.131121][ T8360] loop3: detected capacity change from 0 to 512 [ 107.164970][ T8360] EXT4-fs: Ignoring removed oldalloc option [ 107.167722][ T8360] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1827: bad orphan inode 15 [ 107.167819][ T8360] loop3: lost filesystem error report for type 5 error -117 [ 107.167885][ T8360] ext4_test_bit(bit=14, block=5) = 0 [ 107.168188][ T8360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.179203][ T8360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1827: bg 0: block 13: invalid block bitmap [ 107.438185][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.438673][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.622303][ T8378] loop1: detected capacity change from 0 to 1024 [ 107.636738][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.698558][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.745420][ T8388] loop0: detected capacity change from 0 to 8192 [ 107.825004][ T8395] serio: Serial port ptm0 [ 107.837639][ T3300] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 107.837671][ T3300] FAT-fs (loop0): Filesystem has been set read-only [ 107.888119][ T8398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1841'. [ 107.923623][ T8400] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 107.968313][ T8404] syzkaller1: entered allmulticast mode [ 107.993878][ T8395] serio: Serial port ptm0 [ 108.031456][ T8409] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 108.176481][ T8427] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.197389][ T8428] macsec1: entered promiscuous mode [ 108.197415][ T8428] ip6gretap0: entered promiscuous mode [ 108.211564][ T8428] ip6gretap0: left promiscuous mode [ 108.227551][ T8430] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 108.482880][ T8453] loop6: detected capacity change from 0 to 4096 [ 108.505728][ T8453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.533819][ T4878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.586265][ T8463] capability: warning: `syz.6.1870' uses 32-bit capabilities (legacy support in use) [ 108.603942][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1872'. [ 108.605869][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1872'. [ 108.606273][ T8466] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1872'. [ 108.632868][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.632997][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.083254][ T8488] loop5: detected capacity change from 0 to 1024 [ 109.084033][ T8488] EXT4-fs: Ignoring removed bh option [ 109.084139][ T8488] EXT4-fs: Ignoring removed i_version option [ 109.085506][ T8488] EXT4-fs: Mount option(s) incompatible with ext3 [ 109.178744][ T8492] 8021q: VLANs not supported on lo [ 109.306837][ T8503] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 109.838588][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 109.838635][ T29] audit: type=1400 audit(1788459247.799:1185): avc: denied { read } for pid=8534 comm="syz.3.1913" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.838673][ T29] audit: type=1400 audit(1788459247.799:1186): avc: denied { open } for pid=8534 comm="syz.3.1913" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.896544][ T29] audit: type=1400 audit(1788459247.829:1187): avc: denied { write } for pid=8537 comm="syz.3.1914" path="socket:[20267]" dev="sockfs" ino=20267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.933720][ T8541] PM: suspend entry (deep) [ 109.933767][ T8543] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 110.073632][ T6712] Filesystems sync: 0.139 seconds [ 110.102768][ T8541] Freezing user space processes [ 110.108886][ T8541] Freezing user space processes completed (elapsed 0.006 seconds) [ 110.108983][ T8541] OOM killer disabled. [ 110.108990][ T8541] Freezing remaining freezable tasks [ 110.110138][ T8541] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 110.110179][ T8541] printk: Suspending console(s) (use no_console_suspend to debug) [ 110.193046][ T8541] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 110.193270][ T8541] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 110.194132][ T8541] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 110.194163][ T8541] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 110.194220][ T8541] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 110.194249][ T8541] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 110.194386][ T8541] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 110.194411][ T8541] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 110.194485][ T8541] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 110.194512][ T8541] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 110.194657][ T8541] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 110.194708][ T8541] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 110.194741][ T8541] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 110.194782][ T8541] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 110.194809][ T8541] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 110.194839][ T8541] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 110.231027][ T6705] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 110.888637][ T8541] ACPI: PM: Preparing to enter system sleep state S3 [ 110.888799][ T8541] ACPI: PM: Saving platform NVS memory [ 110.888867][ T8541] Disabling non-boot CPUs ... [ 110.893609][ T8541] smpboot: CPU 1 is now offline [ 110.898164][ T8541] ACPI: PM: Low-level resume complete [ 110.898210][ T8541] ACPI: PM: Restoring platform NVS memory [ 110.908361][ T8541] Enabling non-boot CPUs ... [ 110.908528][ T8541] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 110.913441][ T8541] CPU1 is up [ 110.913653][ T8541] ACPI: PM: Waking up from system sleep state S3 [ 110.944207][ T6707] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 111.092779][ T8541] OOM killer enabled. [ 111.092804][ T8541] Restarting tasks: Starting [ 111.100868][ T8556] sock: sock_set_timeout: `syz.5.1910' (pid 8556) tries to set negative timeout [ 111.118406][ T8541] Restarting tasks: Done [ 111.118589][ T8541] random: crng reseeded on system resumption [ 111.127810][ T8541] PM: suspend exit [ 111.233970][ T29] audit: type=1400 audit(1788459249.199:1188): avc: denied { connect } for pid=8570 comm="syz.1.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.243422][ T29] audit: type=1400 audit(1788459249.209:1189): avc: denied { read } for pid=8570 comm="syz.1.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.252216][ T29] audit: type=1400 audit(1788459249.209:1190): avc: denied { bind } for pid=8574 comm="syz.6.1920" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.252264][ T29] audit: type=1400 audit(1788459249.209:1191): avc: denied { node_bind } for pid=8574 comm="syz.6.1920" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 111.291214][ T29] audit: type=1400 audit(1788459249.249:1192): avc: denied { setopt } for pid=8576 comm="syz.3.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.293463][ T8582] loop6: detected capacity change from 0 to 512 [ 111.410850][ T8587] FAULT_INJECTION: forcing a failure. [ 111.410850][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 111.410888][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.5.1927 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.410916][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.410930][ T8587] Call Trace: [ 111.410938][ T8587] [ 111.410945][ T8587] __dump_stack+0x1d/0x30 [ 111.410970][ T8587] dump_stack_lvl+0x95/0xd0 [ 111.410991][ T8587] dump_stack+0x15/0x1b [ 111.411014][ T8587] should_fail_ex+0x262/0x280 [ 111.411037][ T8587] ? vm_area_dup+0x33/0x300 [ 111.411065][ T8587] should_failslab+0x8c/0xb0 [ 111.411096][ T8587] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 111.411126][ T8587] ? vm_area_dup+0x33/0x300 [ 111.411154][ T8587] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 111.411194][ T8587] vm_area_dup+0x33/0x300 [ 111.411222][ T8587] __split_vma+0xe4/0x720 [ 111.411255][ T8587] ? hrtimer_start_range_ns+0x108/0x120 [ 111.411291][ T8587] ? _raw_spin_unlock+0x9/0x30 [ 111.411324][ T8587] ? finish_task_switch+0x121/0x340 [ 111.411350][ T8587] ? can_vma_merge_left+0xd3/0x3d0 [ 111.411371][ T8587] vma_modify+0xc98/0xd50 [ 111.411400][ T8587] vma_modify_flags+0x1be/0x250 [ 111.411428][ T8587] mlock_fixup+0x166/0x460 [ 111.411459][ T8587] apply_vma_lock_flags+0x1c7/0x290 [ 111.411491][ T8587] do_mlock+0x3a0/0x510 [ 111.411519][ T8587] ? __se_sys_futex+0x2f6/0x370 [ 111.411546][ T8587] ? xfd_validate_state+0x45/0xf0 [ 111.411573][ T8587] ? restore_fpregs_from_fpstate+0x61/0x110 [ 111.411600][ T8587] __x64_sys_mlock+0x4d/0x70 [ 111.411626][ T8587] x64_sys_call+0x2232/0x2550 [ 111.411654][ T8587] do_syscall_64+0x112/0x360 [ 111.411685][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.411709][ T8587] RIP: 0033:0x7f8aa004e159 [ 111.411725][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.411743][ T8587] RSP: 002b:00007f8a9eaa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 111.411761][ T8587] RAX: ffffffffffffffda RBX: 00007f8aa02d5fa0 RCX: 00007f8aa004e159 [ 111.411773][ T8587] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 111.411785][ T8587] RBP: 00007f8aa00e5024 R08: 0000000000000000 R09: 0000000000000000 [ 111.411798][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.411812][ T8587] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 111.411835][ T8587] [ 111.493062][ T29] audit: type=1400 audit(1788459249.449:1193): avc: denied { write } for pid=8593 comm="syz.0.1928" name="set_event" dev="tracefs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.565604][ T8608] loop0: detected capacity change from 0 to 512 [ 111.593067][ T8608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.593260][ T8608] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.608197][ T29] audit: type=1400 audit(1788459249.569:1194): avc: denied { write } for pid=8607 comm="syz.0.1934" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.640998][ T8618] loop3: detected capacity change from 0 to 128 [ 112.070150][ T8639] loop3: detected capacity change from 0 to 512 [ 112.085538][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.085706][ T8639] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.097077][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.100554][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.100777][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.106087][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.106461][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.110418][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.113427][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.116609][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.116656][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.121424][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.125105][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.125236][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.129753][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.129876][ T8639] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1946: corrupted xattr block 33: invalid ea_ino [ 112.133950][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 112.134249][ T8639] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.604322][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.616166][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.765941][ T8660] syzkaller1: entered promiscuous mode [ 112.765987][ T8660] syzkaller1: entered allmulticast mode [ 112.900704][ T8672] netlink: 'syz.3.1958': attribute type 39 has an invalid length. [ 112.918776][ T8674] __nla_validate_parse: 1 callbacks suppressed [ 112.918801][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 112.931940][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1956'. [ 112.951254][ T8676] WARNING! power/level is deprecated; use power/control instead [ 113.275985][ T8700] Invalid ELF header magic: != ELF [ 113.335431][ T8708] loop5: detected capacity change from 0 to 512 [ 113.341731][ T8709] loop3: detected capacity change from 0 to 512 [ 113.376412][ T8708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.413246][ T4470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.728250][ T8737] FAULT_INJECTION: forcing a failure. [ 113.728250][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 113.728291][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.3.1988 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.728319][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.728370][ T8737] Call Trace: [ 113.728378][ T8737] [ 113.728387][ T8737] __dump_stack+0x1d/0x30 [ 113.728416][ T8737] dump_stack_lvl+0x95/0xd0 [ 113.728441][ T8737] dump_stack+0x15/0x1b [ 113.728460][ T8737] should_fail_ex+0x262/0x280 [ 113.728495][ T8737] ? security_prepare_creds+0x52/0x120 [ 113.728527][ T8737] should_failslab+0x8c/0xb0 [ 113.728555][ T8737] __kmalloc_noprof+0xd0/0x4d0 [ 113.728605][ T8737] ? security_prepare_creds+0x52/0x120 [ 113.728643][ T8737] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 113.728676][ T8737] security_prepare_creds+0x52/0x120 [ 113.728781][ T8737] prepare_creds+0x385/0x550 [ 113.728812][ T8737] lookup_user_key+0x204/0xd60 [ 113.728855][ T8737] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 113.728886][ T8737] __se_sys_add_key+0x272/0x360 [ 113.728960][ T8737] __x64_sys_add_key+0x67/0x80 [ 113.728998][ T8737] x64_sys_call+0x1fa9/0x2550 [ 113.729028][ T8737] do_syscall_64+0x112/0x360 [ 113.729081][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.729173][ T8737] RIP: 0033:0x7f75a084e159 [ 113.729215][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.729238][ T8737] RSP: 002b:00007f759f2a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 113.729259][ T8737] RAX: ffffffffffffffda RBX: 00007f75a0ad5fa0 RCX: 00007f75a084e159 [ 113.729274][ T8737] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 113.729288][ T8737] RBP: 00007f75a08e5024 R08: fffffffffffffffe R09: 0000000000000000 [ 113.729363][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.729375][ T8737] R13: 00007f75a0ad6038 R14: 00007f75a0ad5fa0 R15: 00007fff5db97bf8 [ 113.729394][ T8737] [ 113.833778][ T8746] syzkaller1: entered promiscuous mode [ 113.833809][ T8746] syzkaller1: entered allmulticast mode [ 113.883178][ T8752] loop3: detected capacity change from 0 to 512 [ 113.900149][ T8752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.900277][ T8752] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.946239][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.995752][ T8762] loop3: detected capacity change from 0 to 1024 [ 113.996256][ T8762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.006761][ T8762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.024460][ T8764] loop1: detected capacity change from 0 to 512 [ 114.032604][ T8764] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.1999: lblock 0 mapped to illegal pblock 8 (length 1) [ 114.032797][ T8764] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 114.035918][ T8764] EXT4-fs (loop1): Remounting filesystem read-only [ 114.036261][ T8764] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1999: error -EUCLEAN reading directory block [ 114.036638][ T8764] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 114.037068][ T8764] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1999: error -EUCLEAN reading directory block [ 114.048086][ T8764] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 114.059780][ T8764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.090594][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.093024][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.174181][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 114.174506][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2003'. [ 114.199211][ T8780] loop1: detected capacity change from 0 to 512 [ 114.212249][ T8780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.212447][ T8780] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.266281][ T37] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0004/input/input9 [ 114.271056][ T37] hid-generic 0005:057C:0306.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 114.326524][ T8787] fido_id[8787]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.422479][ T8793] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2009'. [ 114.437739][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.497075][ T8799] FAULT_INJECTION: forcing a failure. [ 114.497075][ T8799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.497113][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.1.2010 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.497209][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.497225][ T8799] Call Trace: [ 114.497232][ T8799] [ 114.497241][ T8799] __dump_stack+0x1d/0x30 [ 114.497266][ T8799] dump_stack_lvl+0x95/0xd0 [ 114.497369][ T8799] dump_stack+0x15/0x1b [ 114.497394][ T8799] should_fail_ex+0x262/0x280 [ 114.497420][ T8799] should_fail_alloc_page+0xf2/0x100 [ 114.497481][ T8799] __alloc_frozen_pages_noprof+0x157/0x400 [ 114.497532][ T8799] alloc_pages_mpol+0xaf/0x1d0 [ 114.497553][ T8799] alloc_pages_noprof+0x94/0x140 [ 114.497579][ T8799] __pmd_alloc+0x47/0x430 [ 114.497624][ T8799] get_locked_pte+0x25c/0x330 [ 114.497653][ T8799] map_ldt_struct+0x22a/0x420 [ 114.497682][ T8799] write_ldt+0x403/0x470 [ 114.497709][ T8799] __se_sys_modify_ldt+0x6c/0x260 [ 114.497774][ T8799] x64_sys_call+0x26b/0x2550 [ 114.497805][ T8799] do_syscall_64+0x112/0x360 [ 114.497838][ T8799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.497861][ T8799] RIP: 0033:0x7f6b94b3e159 [ 114.497914][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.497933][ T8799] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 114.497955][ T8799] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 114.497987][ T8799] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 114.498004][ T8799] RBP: 00007f6b94bd5024 R08: 0000000000000000 R09: 0000000000000000 [ 114.498020][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.498036][ T8799] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 114.498059][ T8799] [ 114.508031][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 114.508067][ T8801] netlink: 'syz.0.2013': attribute type 30 has an invalid length. [ 114.508081][ T8801] netlink: 'syz.0.2013': attribute type 29 has an invalid length. [ 114.508094][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 114.604590][ T8809] loop6: detected capacity change from 0 to 128 [ 114.605285][ T8809] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.609622][ T8809] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.827832][ T8834] tipc: Started in network mode [ 114.827919][ T8834] tipc: Node identity 7f000001, cluster identity 4711 [ 114.828052][ T8834] tipc: New replicast peer: 127.0.0.2 [ 114.828223][ T8834] tipc: Enabled bearer , priority 10 [ 114.829037][ T8836] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2031'. [ 114.896934][ T8845] bridge_slave_0: Caught tx_queue_len zero misconfig [ 114.896969][ T8845] sch_tbf: peakrate 3 is lower than or equals to rate 134217911 ! [ 115.078720][ T8860] pimreg: entered allmulticast mode [ 115.089288][ T8860] pimreg: left allmulticast mode [ 115.170322][ T8868] gre1: entered allmulticast mode [ 115.250803][ T8876] FAULT_INJECTION: forcing a failure. [ 115.250803][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 115.250935][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.1.2050 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.250962][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.251009][ T8876] Call Trace: [ 115.251016][ T8876] [ 115.251025][ T8876] __dump_stack+0x1d/0x30 [ 115.251053][ T8876] dump_stack_lvl+0x95/0xd0 [ 115.251115][ T8876] dump_stack+0x15/0x1b [ 115.251136][ T8876] should_fail_ex+0x262/0x280 [ 115.251161][ T8876] ? alloc_vfsmnt+0x2d/0x2f0 [ 115.251189][ T8876] should_failslab+0x8c/0xb0 [ 115.251282][ T8876] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 115.251313][ T8876] ? alloc_vfsmnt+0x140/0x2f0 [ 115.251357][ T8876] ? alloc_vfsmnt+0x2d/0x2f0 [ 115.251458][ T8876] alloc_vfsmnt+0x2d/0x2f0 [ 115.251488][ T8876] clone_mnt+0x30/0x5d0 [ 115.251533][ T8876] copy_tree+0x2dc/0x890 [ 115.251568][ T8876] copy_mnt_ns+0x1d2/0x720 [ 115.251600][ T8876] create_new_namespaces+0x7f/0x420 [ 115.251635][ T8876] unshare_nsproxy_namespaces+0x115/0x150 [ 115.251671][ T8876] ksys_unshare+0x42b/0x710 [ 115.251703][ T8876] __x64_sys_unshare+0x1f/0x30 [ 115.251733][ T8876] x64_sys_call+0x1e33/0x2550 [ 115.251902][ T8876] do_syscall_64+0x112/0x360 [ 115.251934][ T8876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.251975][ T8876] RIP: 0033:0x7f6b94b3e159 [ 115.252019][ T8876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.252039][ T8876] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.252059][ T8876] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 115.252072][ T8876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 115.252085][ T8876] RBP: 00007f6b94bd5024 R08: 0000000000000000 R09: 0000000000000000 [ 115.252098][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.252113][ T8876] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 115.252179][ T8876] [ 115.265434][ T8873] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 115.291328][ T8874] EXT4-fs (loop3): 1 truncate cleaned up [ 115.291885][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.298778][ T8874] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2049: invalid indirect mapped block 234881024 (level 0) [ 115.299565][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 115.299578][ T29] audit: type=1400 audit(1788459253.259:1224): avc: denied { write } for pid=8871 comm="syz.3.2049" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.306121][ T8874] EXT4-fs (loop3): Remounting filesystem read-only [ 115.431427][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.534509][ T8889] team_slave_1: Caught tx_queue_len zero misconfig [ 115.536038][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 115.536060][ T8889] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2055'. [ 115.588878][ T6589] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.592613][ T8894] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.600971][ T8895] EXT4-fs: Ignoring removed orlov option [ 115.627855][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.631756][ T29] audit: type=1400 audit(1788459253.589:1225): avc: denied { setattr } for pid=8891 comm="syz.0.2056" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.662172][ T29] audit: type=1400 audit(1788459253.619:1226): avc: denied { write } for pid=8891 comm="syz.0.2056" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.662207][ T29] audit: type=1400 audit(1788459253.619:1227): avc: denied { write } for pid=8891 comm="syz.0.2056" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.682705][ T8899] syz.1.2059: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 115.682840][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.1.2059 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.682873][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.682889][ T8899] Call Trace: [ 115.682896][ T8899] [ 115.682949][ T8899] __dump_stack+0x1d/0x30 [ 115.682979][ T8899] dump_stack_lvl+0x95/0xd0 [ 115.683006][ T8899] dump_stack+0x15/0x1b [ 115.683030][ T8899] warn_alloc+0x146/0x1c0 [ 115.683123][ T8899] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 115.683162][ T8899] ? __rcu_read_unlock+0x4e/0x70 [ 115.683195][ T8899] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 115.683226][ T8899] __vmalloc_node_range_noprof+0xa3/0x1000 [ 115.683312][ T8899] ? selinux_socket_setsockopt+0x71/0x220 [ 115.683397][ T8899] ? __rcu_read_unlock+0x4e/0x70 [ 115.683532][ T8899] ? should_fail_ex+0x31/0x280 [ 115.683561][ T8899] ? xskq_create+0x38/0x160 [ 115.683660][ T8899] ? should_failslab+0x8c/0xb0 [ 115.683693][ T8899] ? __kmalloc_cache_noprof+0x19b/0x400 [ 115.683729][ T8899] xskq_create+0xea/0x160 [ 115.683828][ T8899] ? xsk_init_queue+0x70/0xb0 [ 115.683860][ T8899] xsk_init_queue+0x70/0xb0 [ 115.683908][ T8899] xsk_setsockopt+0x471/0x640 [ 115.684018][ T8899] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.684051][ T8899] __sys_setsockopt+0x184/0x200 [ 115.684085][ T8899] __x64_sys_setsockopt+0x64/0x80 [ 115.684116][ T8899] x64_sys_call+0x248f/0x2550 [ 115.684186][ T8899] do_syscall_64+0x112/0x360 [ 115.684214][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.684312][ T8899] RIP: 0033:0x7f6b94b3e159 [ 115.684332][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.684350][ T8899] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.684375][ T8899] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 115.684392][ T8899] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 115.684406][ T8899] RBP: 00007f6b94bd5024 R08: 0000000000000004 R09: 0000000000000000 [ 115.684441][ T8899] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 115.684454][ T8899] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 115.684513][ T8899] [ 115.702316][ T8899] Mem-Info: [ 115.702325][ T8899] active_anon:83972 inactive_anon:1 isolated_anon:0 [ 115.702325][ T8899] active_file:0 inactive_file:27778 isolated_file:0 [ 115.702325][ T8899] unevictable:0 dirty:301 writeback:0 [ 115.702325][ T8899] slab_reclaimable:3591 slab_unreclaimable:18700 [ 115.702325][ T8899] mapped:30754 shmem:74733 pagetables:3773 [ 115.702325][ T8899] sec_pagetables:0 bounce:0 [ 115.702325][ T8899] kernel_misc_reclaimable:0 [ 115.702325][ T8899] free:1799662 free_pcp:3953 free_cma:0 [ 115.702472][ T8899] Node 0 active_anon:335888kB inactive_anon:4kB active_file:0kB inactive_file:111112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123016kB dirty:1204kB writeback:0kB shmem:298932kB kernel_stack:6784kB pagetables:15092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 115.702536][ T8899] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.702686][ T8899] lowmem_reserve[]: 0 2877 7856 7856 [ 115.702718][ T8899] Node 0 DMA32 free:2946920kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.702854][ T8899] lowmem_reserve[]: 0 0 4978 4978 [ 115.702885][ T8899] Node 0 Normal free:4236368kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:335888kB inactive_anon:4kB active_file:0kB inactive_file:111112kB unevictable:0kB writepending:1204kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:15828kB local_pcp:4356kB free_cma:0kB [ 115.702967][ T8899] lowmem_reserve[]: 0 0 0 0 [ 115.703005][ T8899] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.703275][ T8899] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 4*512kB (M) 5*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946920kB [ 115.703936][ T8899] Node 0 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (ME) 7*32kB (UE) 5*64kB (UE) 48*128kB (UE) 78*256kB (UE) 58*512kB (U) 56*1024kB (UE) 37*2048kB (UM) 988*4096kB (UM) = 4236368kB [ 115.704175][ T8899] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 115.704220][ T8899] 102508 total pagecache pages [ 115.704227][ T8899] 1 pages in swap cache [ 115.704266][ T8899] Free swap = 124992kB [ 115.704273][ T8899] Total swap = 124996kB [ 115.704282][ T8899] 2097051 pages RAM [ 115.704289][ T8899] 0 pages HighMem/MovableOnly [ 115.704296][ T8899] 81924 pages reserved [ 115.708819][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.877936][ T8914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.887868][ T8914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.888513][ T8912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.888571][ T8912] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.917762][ T29] audit: type=1400 audit(1788459253.879:1228): avc: denied { write } for pid=8913 comm="syz.1.2066" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.926249][ T29] audit: type=1400 audit(1788459253.889:1229): avc: denied { write } for pid=8911 comm="syz.6.2065" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.942319][ T7234] tipc: Node number set to 2130706433 [ 115.989256][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.038059][ T29] audit: type=1400 audit(1788459253.999:1230): avc: denied { watch } for pid=8928 comm="syz.5.2070" path="/proc/711/task" dev="proc" ino=22561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.038097][ T29] audit: type=1400 audit(1788459253.999:1231): avc: denied { getopt } for pid=8921 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.111954][ T8931] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2072: iget: bad i_size value: 38620345925642 [ 116.111995][ T8931] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.113618][ T8931] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2072: couldn't read orphan inode 15 (err -117) [ 116.113648][ T8931] loop0: lost filesystem error report for type 5 error -117 [ 116.114518][ T8931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.370331][ T8940] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.434494][ T8945] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 116.434606][ T8945] FAT-fs (loop6): Filesystem has been set read-only [ 116.434631][ T8945] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 116.548494][ T8950] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.553918][ T8950] EXT4-fs (loop0): shut down requested (0) [ 116.560493][ T8950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 116.560558][ T8950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 116.560752][ T29] audit: type=1400 audit(1788459254.519:1232): avc: denied { setattr } for pid=8949 comm="syz.0.2080" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.561965][ T29] audit: type=1400 audit(1788459254.519:1233): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 116.578409][ T4878] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 116.578554][ T4878] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 116.784228][ T6589] bridge_slave_1: left promiscuous mode [ 116.784389][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.788745][ T6589] bridge_slave_0: left allmulticast mode [ 116.788844][ T6589] bridge_slave_0: left promiscuous mode [ 116.788930][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.825284][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.826121][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.829057][ T6589] bond0 (unregistering): Released all slaves [ 116.876712][ T6589] tipc: Disabling bearer [ 116.876759][ T6589] tipc: Left network mode [ 116.888041][ T6589] hsr_slave_0: left promiscuous mode [ 116.891314][ T6589] hsr_slave_1: left promiscuous mode [ 116.892033][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.897737][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.952467][ T8992] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 116.984818][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 116.988978][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 117.037380][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.065227][ T9000] bond1: (slave geneve2): making interface the new active one [ 117.072432][ T9000] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 117.073885][ T6654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.073944][ T6654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074006][ T6654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074063][ T6654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.087358][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 117.105004][ T9000] syz.1.2095 (9000) used greatest stack depth: 9272 bytes left [ 117.261265][ T6589] IPVS: stop unused estimator thread 0... [ 117.341509][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.341555][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.341672][ T8969] bridge_slave_0: entered allmulticast mode [ 117.342060][ T8969] bridge_slave_0: entered promiscuous mode [ 117.347125][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.347177][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.347243][ T8969] bridge_slave_1: entered allmulticast mode [ 117.347761][ T8969] bridge_slave_1: entered promiscuous mode [ 117.351344][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.351509][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.371745][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.374675][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.416499][ T8969] team0: Port device team_slave_0 added [ 117.420344][ T8969] team0: Port device team_slave_1 added [ 117.440425][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.440446][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.440483][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.447410][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.447428][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.447464][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.470856][ T8969] hsr_slave_0: entered promiscuous mode [ 117.471294][ T8969] hsr_slave_1: entered promiscuous mode [ 117.473441][ T8969] debugfs: 'hsr0' already exists in 'hsr' [ 117.473458][ T8969] Cannot create hsr debugfs directory [ 117.474121][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 117.579364][ T8969] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.585262][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.586420][ T8969] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.591353][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.602043][ T8969] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.608082][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.609708][ T8969] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.612704][ T8969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.631480][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 117.632513][ T3785] Bluetooth: hci0: command 0x1003 tx timeout [ 117.632546][ T5613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.671166][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.693972][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.713246][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.713283][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.726019][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.726067][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.889931][ T9112] netlink: 'syz.0.2115': attribute type 19 has an invalid length. [ 117.894484][ T9112] netlink: 'syz.0.2115': attribute type 19 has an invalid length. [ 117.904286][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.909248][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 117.932386][ T6654] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.933187][ T6654] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.933361][ T6654] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.933406][ T6654] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.081033][ T8969] veth0_vlan: entered promiscuous mode [ 118.084346][ T8969] veth1_vlan: entered promiscuous mode [ 118.097121][ T8969] veth0_macvtap: entered promiscuous mode [ 118.100825][ T8969] veth1_macvtap: entered promiscuous mode [ 118.110039][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.119029][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.143848][ T6588] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.143916][ T6588] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.144072][ T6588] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.144133][ T6588] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.292652][ T9149] __nla_validate_parse: 2 callbacks suppressed [ 118.292678][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2119'. [ 118.295325][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2119'. [ 118.323222][ T9152] FAULT_INJECTION: forcing a failure. [ 118.323222][ T9152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.323268][ T9152] CPU: 0 UID: 0 PID: 9152 Comm: syz.5.2120 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.323296][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.323309][ T9152] Call Trace: [ 118.323317][ T9152] [ 118.323326][ T9152] __dump_stack+0x1d/0x30 [ 118.323420][ T9152] dump_stack_lvl+0x95/0xd0 [ 118.323486][ T9152] dump_stack+0x15/0x1b [ 118.323509][ T9152] should_fail_ex+0x262/0x280 [ 118.323534][ T9152] should_fail+0xb/0x20 [ 118.323585][ T9152] should_fail_usercopy+0x1a/0x20 [ 118.323611][ T9152] _copy_from_user+0x1c/0xb0 [ 118.323638][ T9152] __se_sys_add_key+0x218/0x360 [ 118.323711][ T9152] __x64_sys_add_key+0x67/0x80 [ 118.323753][ T9152] x64_sys_call+0x1fa9/0x2550 [ 118.323783][ T9152] do_syscall_64+0x112/0x360 [ 118.323875][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.323900][ T9152] RIP: 0033:0x7f8aa004e159 [ 118.323918][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.323989][ T9152] RSP: 002b:00007f8a9eaa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 118.324051][ T9152] RAX: ffffffffffffffda RBX: 00007f8aa02d5fa0 RCX: 00007f8aa004e159 [ 118.324067][ T9152] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 118.324082][ T9152] RBP: 00007f8aa00e5024 R08: fffffffffffffffe R09: 0000000000000000 [ 118.324098][ T9152] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 118.324113][ T9152] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 118.324211][ T9152] [ 118.761921][ T3376] kernel read not supported for file /input/event0 (pid: 3376 comm: kworker/1:4) [ 118.909307][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'. [ 118.934904][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2133'. [ 119.237005][ T9212] set_capacity_and_notify: 7 callbacks suppressed [ 119.237108][ T9212] loop3: detected capacity change from 0 to 512 [ 119.286370][ T9216] FAULT_INJECTION: forcing a failure. [ 119.286370][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 119.286458][ T9216] CPU: 1 UID: 0 PID: 9216 Comm: syz.1.2147 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.286485][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.286498][ T9216] Call Trace: [ 119.286504][ T9216] [ 119.286512][ T9216] __dump_stack+0x1d/0x30 [ 119.286538][ T9216] dump_stack_lvl+0x95/0xd0 [ 119.286625][ T9216] dump_stack+0x15/0x1b [ 119.286648][ T9216] should_fail_ex+0x262/0x280 [ 119.286673][ T9216] ? security_inode_alloc+0x37/0x100 [ 119.286699][ T9216] should_failslab+0x8c/0xb0 [ 119.286791][ T9216] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 119.286864][ T9216] ? security_inode_alloc+0x37/0x100 [ 119.286917][ T9216] security_inode_alloc+0x37/0x100 [ 119.287016][ T9216] inode_init_always_gfp+0x495/0x4e0 [ 119.287053][ T9216] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 119.287080][ T9216] alloc_inode+0x58/0x170 [ 119.287116][ T9216] new_inode+0x1d/0xe0 [ 119.287208][ T9216] debugfs_create_symlink+0x7c/0x150 [ 119.287234][ T9216] ref_tracker_dir_symlink+0x1ae/0x2d0 [ 119.287387][ T9216] ? __xas_nomem+0x5c/0x290 [ 119.287430][ T9216] net_ns_net_init+0x8f/0xa0 [ 119.287472][ T9216] ops_init+0x22a/0x2e0 [ 119.287500][ T9216] setup_net+0x9f/0x230 [ 119.287524][ T9216] copy_net_ns+0x333/0x490 [ 119.287548][ T9216] create_new_namespaces+0x1f6/0x420 [ 119.287584][ T9216] unshare_nsproxy_namespaces+0x115/0x150 [ 119.287665][ T9216] ksys_unshare+0x42b/0x710 [ 119.287696][ T9216] __x64_sys_unshare+0x1f/0x30 [ 119.287733][ T9216] x64_sys_call+0x1e33/0x2550 [ 119.287832][ T9216] do_syscall_64+0x112/0x360 [ 119.287860][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.287886][ T9216] RIP: 0033:0x7f6b94b3e159 [ 119.287905][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.287978][ T9216] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.288001][ T9216] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 119.288017][ T9216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 119.288034][ T9216] RBP: 00007f6b94bd5024 R08: 0000000000000000 R09: 0000000000000000 [ 119.288050][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.288065][ T9216] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 119.288087][ T9216] [ 119.290993][ T9216] debugfs: out of free dentries, can not create symlink 'netns-17c-4026532677-notrefcnt' [ 119.393506][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.399976][ T3376] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.666515][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 119.667026][ T9234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2152'. [ 120.230598][ T9246] loop0: detected capacity change from 0 to 512 [ 120.244440][ T9246] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.272388][ T9246] loop0: detected capacity change from 512 to 3 [ 120.327339][ T7151] syz_tun (unregistering): left allmulticast mode [ 120.327378][ T7151] syz_tun (unregistering): left promiscuous mode [ 120.327414][ T7151] bridge0: port 1(syz_tun) entered disabled state [ 120.366989][ T6588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.413756][ T6588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.453421][ T6588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.484827][ T6588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.586053][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 120.586083][ T29] audit: type=1400 audit(1788459258.549:1288): avc: denied { mount } for pid=9263 comm="syz.3.2162" name="/" dev="autofs" ino=23290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 120.613930][ T6588] bond0 (unregistering): Released all slaves [ 120.647005][ T6588] tipc: Disabling bearer [ 120.647114][ T6588] tipc: Left network mode [ 120.647653][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.647772][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.647895][ T9251] bridge_slave_0: entered allmulticast mode [ 120.648482][ T9251] bridge_slave_0: entered promiscuous mode [ 120.650408][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.650485][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.650575][ T9251] bridge_slave_1: entered allmulticast mode [ 120.651333][ T9251] bridge_slave_1: entered promiscuous mode [ 120.656251][ T6588] IPVS: stopping backup sync thread 3523 ... [ 120.667383][ T6588] hsr_slave_0: left promiscuous mode [ 120.668528][ T6588] hsr_slave_1: left promiscuous mode [ 120.722254][ T29] audit: type=1400 audit(1788459258.679:1289): avc: denied { mount } for pid=9275 comm="syz.3.2166" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.745019][ T29] audit: type=1400 audit(1788459258.709:1290): avc: denied { map } for pid=9278 comm="syz.3.2167" path="socket:[23316]" dev="sockfs" ino=23316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.745052][ T29] audit: type=1400 audit(1788459258.709:1291): avc: denied { read } for pid=9278 comm="syz.3.2167" path="socket:[23316]" dev="sockfs" ino=23316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.765056][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.767606][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.781999][ T9251] team0: Port device team_slave_0 added [ 120.782886][ T9251] team0: Port device team_slave_1 added [ 120.791425][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.791446][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.791478][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.791865][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.791877][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.791938][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.811941][ T9251] hsr_slave_0: entered promiscuous mode [ 120.814130][ T9251] hsr_slave_1: entered promiscuous mode [ 120.814353][ T9251] debugfs: 'hsr0' already exists in 'hsr' [ 120.814368][ T9251] Cannot create hsr debugfs directory [ 120.930909][ T29] audit: type=1400 audit(1788459258.889:1292): avc: denied { name_bind } for pid=9289 comm="syz.5.2171" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 121.014971][ T6588] IPVS: stop unused estimator thread 0... [ 121.653634][ T29] audit: type=1400 audit(1788459259.619:1293): avc: denied { map } for pid=9297 comm="syz.7.2174" path="/6/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 121.699475][ T29] audit: type=1400 audit(1788459259.659:1294): avc: denied { bind } for pid=9301 comm="syz.7.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.807154][ T29] audit: type=1400 audit(1788459259.769:1295): avc: denied { read } for pid=9301 comm="syz.7.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.016920][ T29] audit: type=1400 audit(1788459259.979:1296): avc: denied { listen } for pid=9312 comm="syz.5.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.019787][ T29] audit: type=1400 audit(1788459259.979:1297): avc: denied { accept } for pid=9312 comm="syz.5.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.212027][ T9316] FAULT_INJECTION: forcing a failure. [ 122.212027][ T9316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.212080][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.5.2181 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.212157][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.212173][ T9316] Call Trace: [ 122.212182][ T9316] [ 122.212253][ T9316] __dump_stack+0x1d/0x30 [ 122.212280][ T9316] dump_stack_lvl+0x95/0xd0 [ 122.212304][ T9316] dump_stack+0x15/0x1b [ 122.212327][ T9316] should_fail_ex+0x262/0x280 [ 122.212352][ T9316] should_fail_alloc_page+0xf2/0x100 [ 122.212414][ T9316] __alloc_frozen_pages_noprof+0x157/0x400 [ 122.212454][ T9316] alloc_pages_mpol+0xaf/0x1d0 [ 122.212519][ T9316] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 122.212622][ T9316] migrate_pages_batch+0x371/0x1c20 [ 122.212658][ T9316] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 122.212690][ T9316] ? __walk_page_range+0x323/0x340 [ 122.212743][ T9316] ? migrate_pages+0x178/0x1890 [ 122.212813][ T9316] migrate_pages+0x1073/0x1890 [ 122.212867][ T9316] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 122.212897][ T9316] ? mas_next_slot+0x833/0x880 [ 122.212996][ T9316] ? mbind_range+0x169/0x430 [ 122.213022][ T9316] __se_sys_mbind+0xc9c/0xdd0 [ 122.213195][ T9316] __x64_sys_mbind+0x78/0x90 [ 122.213230][ T9316] x64_sys_call+0x1d78/0x2550 [ 122.213326][ T9316] do_syscall_64+0x112/0x360 [ 122.213359][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.213384][ T9316] RIP: 0033:0x7f8aa004e159 [ 122.213407][ T9316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.213466][ T9316] RSP: 002b:00007f8a9eaa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 122.213490][ T9316] RAX: ffffffffffffffda RBX: 00007f8aa02d5fa0 RCX: 00007f8aa004e159 [ 122.213507][ T9316] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 122.213542][ T9316] RBP: 00007f8aa00e5024 R08: 0000000000000000 R09: 0000000000000002 [ 122.213555][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.213569][ T9316] R13: 00007f8aa02d6038 R14: 00007f8aa02d5fa0 R15: 00007ffd1d90bd88 [ 122.213592][ T9316] [ 122.376210][ T9229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.377346][ T9251] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 122.384881][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.385584][ T9251] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.393724][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.396054][ T9251] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.405965][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.406695][ T9251] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.413354][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.538392][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 122.565152][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2189'. [ 122.586884][ T9361] FAULT_INJECTION: forcing a failure. [ 122.586884][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 122.586919][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.1.2191 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.586967][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.586979][ T9361] Call Trace: [ 122.587031][ T9361] [ 122.587038][ T9361] __dump_stack+0x1d/0x30 [ 122.587062][ T9361] dump_stack_lvl+0x95/0xd0 [ 122.587085][ T9361] dump_stack+0x15/0x1b [ 122.587109][ T9361] should_fail_ex+0x262/0x280 [ 122.587191][ T9361] ? security_shm_alloc+0x45/0x100 [ 122.587281][ T9361] should_failslab+0x8c/0xb0 [ 122.587337][ T9361] __kmalloc_noprof+0xd0/0x4d0 [ 122.587398][ T9361] ? security_shm_alloc+0x45/0x100 [ 122.587423][ T9361] security_shm_alloc+0x45/0x100 [ 122.587445][ T9361] newseg+0x1ef/0x670 [ 122.587481][ T9361] ipcget+0x3b3/0x4f0 [ 122.587565][ T9361] __x64_sys_shmget+0xb8/0xe0 [ 122.587595][ T9361] x64_sys_call+0x2001/0x2550 [ 122.587624][ T9361] do_syscall_64+0x112/0x360 [ 122.587680][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.587706][ T9361] RIP: 0033:0x7f6b94b3e159 [ 122.587788][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.587845][ T9361] RSP: 002b:00007f6b93597028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 122.587867][ T9361] RAX: ffffffffffffffda RBX: 00007f6b94dc5fa0 RCX: 00007f6b94b3e159 [ 122.587884][ T9361] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 00000000798dd818 [ 122.587899][ T9361] RBP: 00007f6b94bd5024 R08: 0000000000000000 R09: 0000000000000000 [ 122.587914][ T9361] R10: 0000200000ff5000 R11: 0000000000000246 R12: 0000000000000000 [ 122.588005][ T9361] R13: 00007f6b94dc6038 R14: 00007f6b94dc5fa0 R15: 00007ffd5b664148 [ 122.588091][ T9361] [ 122.647633][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.657690][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.663521][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.663561][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.667867][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.667904][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.805044][ T6626] ================================================================== [ 122.805081][ T6626] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 122.805124][ T6626] [ 122.805131][ T6626] write to 0xffff88811a9b00e0 of 44 bytes by task 9391 on cpu 0: [ 122.805151][ T6626] tty_set_termios+0xc0/0x900 [ 122.805174][ T6626] set_termios+0x4a7/0x4f0 [ 122.805197][ T6626] tty_mode_ioctl+0x37f/0x5b0 [ 122.805217][ T6626] n_tty_ioctl_helper+0x87/0x370 [ 122.805238][ T6626] n_tty_ioctl+0x101/0x200 [ 122.805269][ T6626] tty_ioctl+0x83e/0xb80 [ 122.805291][ T6626] __se_sys_ioctl+0xce/0x140 [ 122.805316][ T6626] __x64_sys_ioctl+0x43/0x50 [ 122.805344][ T6626] x64_sys_call+0x239d/0x2550 [ 122.805374][ T6626] do_syscall_64+0x112/0x360 [ 122.805403][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.805429][ T6626] [ 122.805435][ T6626] read to 0xffff88811a9b00f9 of 1 bytes by task 6626 on cpu 1: [ 122.805456][ T6626] n_tty_lookahead_flow_ctrl+0x12b/0x2d0 [ 122.805493][ T6626] tty_port_default_lookahead_buf+0x91/0xc0 [ 122.805527][ T6626] flush_to_ldisc+0x279/0x330 [ 122.805556][ T6626] process_scheduled_works+0x56a/0xa50 [ 122.805590][ T6626] worker_thread+0x569/0x750 [ 122.805619][ T6626] kthread+0x223/0x270 [ 122.805640][ T6626] ret_from_fork+0x146/0x330 [ 122.805672][ T6626] ret_from_fork_asm+0x1a/0x30 [ 122.805701][ T6626] [ 122.805705][ T6626] value changed: 0x11 -> 0x00 [ 122.805717][ T6626] [ 122.805722][ T6626] Reported by Kernel Concurrency Sanitizer on: [ 122.805732][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: kworker/u8:63 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.805757][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.805775][ T6626] Workqueue: events_unbound flush_to_ldisc [ 122.805807][ T6626] ================================================================== [ 122.849407][ T9397] loop7: detected capacity change from 0 to 1024 [ 122.851162][ T9397] EXT4-fs: Ignoring removed bh option SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.933263][ T9397] loop7: detected capacity change from 1024 to 64 [ 122.939178][ T9409] syz.7.2201: attempt to access beyond end of device [ 122.939178][ T9409] loop7: rw=8390659, sector=256, nr_sectors = 32 limit=64 [ 122.939209][ T9409] EXT4-fs (loop7): discard request in group:0 block:8 count:16 failed with -5 [ 122.939242][ T9409] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: IO failure [ 122.987470][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.050048][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 123.064814][ T6643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.156392][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 123.188047][ T6643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.254777][ T6643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.298731][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 123.316129][ T6643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.407979][ T6643] bridge_slave_1: left allmulticast mode [ 123.408181][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.410138][ T6643] bridge_slave_0: left allmulticast mode [ 123.410160][ T6643] bridge_slave_0: left promiscuous mode [ 123.410289][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.438377][ T6643] bond1 (unregistering): (slave geneve2): Releasing active interface [ 123.445966][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.447796][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.449461][ T6643] bond0 (unregistering): Released all slaves [ 123.451336][ T6643] bond1 (unregistering): Released all slaves [ 123.506188][ T6643] hsr_slave_0: left promiscuous mode [ 123.507814][ T6643] hsr_slave_1: left promiscuous mode [ 123.508323][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.511363][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.544328][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 123.546892][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 123.567849][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 123.651741][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 123.738280][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 123.797868][ T6643] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.835662][ T6643] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.839245][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 123.884903][ T6643] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.934337][ T6643] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.034235][ T6643] batman_adv: batadv0: Removing interface: netdevsim2 [ 124.075817][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 124.158389][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 124.265577][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 124.373764][ T6643] bridge_slave_1: left allmulticast mode [ 124.373862][ T6643] bridge_slave_1: left promiscuous mode [ 124.373951][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.377588][ T6643] bridge_slave_0: left allmulticast mode [ 124.377614][ T6643] bridge_slave_0: left promiscuous mode [ 124.377739][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.382941][ T6643] vlan2: left promiscuous mode [ 124.383017][ T6643] macsec0: left promiscuous mode [ 124.383180][ T6643] bridge0: port 3(vlan2) entered disabled state [ 124.386177][ T6643] bridge_slave_1: left allmulticast mode [ 124.386201][ T6643] bridge_slave_1: left promiscuous mode [ 124.386283][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.388178][ T6643] ¾x9ÿ: left allmulticast mode [ 124.388195][ T6643] ¾x9ÿ: left promiscuous mode [ 124.388349][ T6643] bridge0: port 1(1¾x9ÿ) entered disabled state [ 124.391424][ T6643] bridge_slave_1: left allmulticast mode [ 124.391442][ T6643] bridge_slave_1: left promiscuous mode [ 124.391578][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.392978][ T6643] bridge_slave_0: left allmulticast mode [ 124.392995][ T6643] bridge_slave_0: left promiscuous mode [ 124.393097][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.429814][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.433060][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.435113][ T6643] bond0 (unregistering): Released all slaves [ 124.449352][ T6643] bond1 (unregistering): Released all slaves [ 124.463966][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.465701][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.467191][ T6643] bond0 (unregistering): Released all slaves [ 124.468925][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 124.493396][ T6643] tipc: Disabling bearer [ 124.493421][ T6643] tipc: Left network mode [ 124.494903][ T6643] tipc: Disabling bearer [ 124.494926][ T6643] tipc: Left network mode [ 124.502225][ T6643] hsr_slave_0: left promiscuous mode [ 124.503031][ T6643] hsr_slave_1: left promiscuous mode [ 124.503431][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.503457][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.505699][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.505714][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.511032][ T6643] hsr_slave_0: left promiscuous mode [ 124.513182][ T6643] hsr_slave_1: left promiscuous mode [ 124.513640][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.515763][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.518351][ T6643] hsr_slave_0: left promiscuous mode [ 124.519375][ T6643] hsr_slave_1: left promiscuous mode [ 124.519812][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.521820][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.525572][ T6643] veth1_macvtap: left promiscuous mode [ 124.525603][ T6643] veth0_macvtap: left promiscuous mode [ 124.525681][ T6643] veth1_vlan: left promiscuous mode [ 124.525752][ T6643] veth0_vlan: left promiscuous mode [ 124.590793][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 124.595833][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 124.639805][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 124.642039][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 124.682108][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 124.685327][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 124.706470][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 124.801903][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 124.886467][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 124.970594][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28 [ 125.055173][ T3021] 8021q: adding VLAN 0 to HW filter on device eth29 [ 125.137099][ T3021] 8021q: adding VLAN 0 to HW filter on device eth30 [ 125.220854][ T3021] 8021q: adding VLAN 0 to HW filter on device eth31 [ 125.229521][ T6643] IPVS: stop unused estimator thread 0... [ 125.312264][ T9247] kmmpd-loop0: attempt to access beyond end of device [ 125.312264][ T9247] loop0: rw=8402945, sector=48, nr_sectors = 4 limit=3 [ 125.312299][ T9247] buffer_io_error: 2 callbacks suppressed [ 125.312322][ T9247] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 125.312342][ T9247] EXT4-fs error (device loop0): kmmpd:181: comm kmmpd-loop0: Error writing to MMP block [ 125.335532][ T3021] 8021q: adding VLAN 0 to HW filter on device eth32 [ 125.521389][ T6643] bridge_slave_1: left allmulticast mode [ 125.521412][ T6643] bridge_slave_1: left promiscuous mode [ 125.521548][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.532994][ T6643] bridge_slave_0: left allmulticast mode [ 125.533012][ T6643] bridge_slave_0: left promiscuous mode [ 125.533140][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.583996][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.593823][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.603133][ T6643] bond0 (unregistering): Released all slaves [ 125.645967][ T6643] hsr_slave_0: left promiscuous mode [ 125.646213][ T6643] hsr_slave_1: left promiscuous mode [ 125.646784][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.652517][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.699411][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 125.699438][ T29] audit: type=1400 audit(1788459263.659:1346): avc: denied { write } for pid=9701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.730320][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 125.740416][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 125.746913][ T29] audit: type=1400 audit(1788459263.709:1347): avc: denied { write } for pid=9712 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.794836][ T3021] 8021q: adding VLAN 0 to HW filter on device eth33 [ 125.865595][ T29] audit: type=1400 audit(1788459263.829:1348): avc: denied { write } for pid=9716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.888714][ T29] audit: type=1400 audit(1788459263.849:1349): avc: denied { write } for pid=9727 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.899388][ T3021] 8021q: adding VLAN 0 to HW filter on device eth34 [ 125.965237][ T29] audit: type=1400 audit(1788459263.929:1350): avc: denied { write } for pid=9730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.988340][ T29] audit: type=1400 audit(1788459263.949:1351): avc: denied { write } for pid=9741 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.010869][ T3021] 8021q: adding VLAN 0 to HW filter on device eth35 [ 126.081912][ T29] audit: type=1400 audit(1788459264.039:1352): avc: denied { write } for pid=9746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.106011][ T29] audit: type=1400 audit(1788459264.059:1353): avc: denied { write } for pid=9757 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.114415][ T3021] 8021q: adding VLAN 0 to HW filter on device eth36 [ 127.839513][ T29] audit: type=1400 audit(1788459265.799:1354): avc: denied { write } for pid=9772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.863828][ T29] audit: type=1400 audit(1788459265.799:1355): avc: denied { write } for pid=9783 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.885774][ T9400] kmmpd-loop7: attempt to access beyond end of device [ 127.885774][ T9400] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 127.885804][ T9400] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 127.885822][ T9400] EXT4-fs error (device loop7): kmmpd:181: comm kmmpd-loop7: Error writing to MMP block [ 130.352176][ T9247] kmmpd-loop0: attempt to access beyond end of device [ 130.352176][ T9247] loop0: rw=8402945, sector=48, nr_sectors = 4 limit=3 [ 130.352218][ T9247] Buffer I/O error on dev loop0, logical block 12, lost sync page write