last executing test programs: 2.94740575s ago: executing program 0 (id=1026): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.10639202s ago: executing program 3 (id=1046): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) 1.970483973s ago: executing program 3 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth1_vlan\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x50}}, 0x0) 1.864213516s ago: executing program 1 (id=1055): r0 = io_uring_setup(0x6d59, &(0x7f0000000300)={0x0, 0xeb21, 0x48, 0x8001002, 0x3d7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000380)={0x1d, r3}, 0x25) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.768556948s ago: executing program 1 (id=1057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.768363718s ago: executing program 3 (id=1058): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.317565749s ago: executing program 3 (id=1065): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x100}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) accept$inet(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) 806.461691ms ago: executing program 0 (id=1068): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 643.031514ms ago: executing program 4 (id=1069): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 608.784725ms ago: executing program 0 (id=1071): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000000c0)='7', 0x1) write(r0, &(0x7f0000000300)='b', 0x1) 562.123196ms ago: executing program 0 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 561.818026ms ago: executing program 2 (id=1073): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8000, 0x8, 0x7fffffff}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) 550.126917ms ago: executing program 1 (id=1074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) 509.983168ms ago: executing program 4 (id=1075): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) 434.67058ms ago: executing program 0 (id=1076): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500000002000000070000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000000000000000a4"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x41, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 434.265949ms ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 424.52046ms ago: executing program 2 (id=1078): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1b, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) 377.94407ms ago: executing program 4 (id=1079): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x400, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001840)=""/4110, 0x100e) 377.194121ms ago: executing program 0 (id=1080): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 376.433561ms ago: executing program 3 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20000810) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 354.415451ms ago: executing program 1 (id=1082): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 325.364202ms ago: executing program 2 (id=1083): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 261.063193ms ago: executing program 2 (id=1084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x68, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x2) 253.487533ms ago: executing program 1 (id=1085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 244.858194ms ago: executing program 4 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 219.025674ms ago: executing program 3 (id=1087): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=@ipv6_newaddrlabel={0x38, 0x49, 0x1, 0x70bd2d, 0x7, {0xa, 0x0, 0x80, 0x0, 0x0, 0x728a}, [@IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_ADDRESS={0x14, 0x1, @loopback={0xfffffff0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 165.155946ms ago: executing program 4 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x50}}, 0x4040004) 101.663067ms ago: executing program 2 (id=1089): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c0001"], 0x2c}], 0x1}, 0x0) 40.523449ms ago: executing program 2 (id=1090): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000780)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) 0s ago: executing program 4 (id=1091): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x65e85, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8101, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000001000)={'IDLETIMER\x00'}, &(0x7f0000001040)=0x1e) kernel console output (not intermixed with test programs): ss beyond end of device [ 59.401968][ T4453] loop0: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 59.402219][ T4453] syz.0.332: attempt to access beyond end of device [ 59.402219][ T4453] loop0: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 59.402342][ T4453] syz.0.332: attempt to access beyond end of device [ 59.402342][ T4453] loop0: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 59.530153][ T291] kworker/u8:5: attempt to access beyond end of device [ 59.530153][ T291] loop0: rw=2049, sector=2280, nr_sectors = 32 limit=256 [ 59.530262][ T291] kworker/u8:5: attempt to access beyond end of device [ 59.530262][ T291] loop0: rw=2049, sector=2344, nr_sectors = 32 limit=256 [ 59.530331][ T291] kworker/u8:5: attempt to access beyond end of device [ 59.530331][ T291] loop0: rw=2049, sector=2408, nr_sectors = 32 limit=256 [ 59.611606][ T4466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4466 comm=syz.4.337 [ 59.616758][ T4250] Filesystems sync: 0.386 seconds [ 59.647538][ T4431] Freezing user space processes [ 70.975518][ T4446] bio_check_eod: 3 callbacks suppressed [ 70.975540][ T4446] syz.0.332: attempt to access beyond end of device [ 70.975540][ T4446] loop0: rw=2049, sector=2632, nr_sectors = 32 limit=256 [ 70.975676][ T4446] syz.0.332: attempt to access beyond end of device [ 70.975676][ T4446] loop0: rw=2049, sector=2696, nr_sectors = 32 limit=256 [ 70.975726][ T4446] syz.0.332: attempt to access beyond end of device [ 70.975726][ T4446] loop0: rw=2049, sector=2760, nr_sectors = 32 limit=256 [ 70.975883][ T4446] syz.0.332: attempt to access beyond end of device [ 70.975883][ T4446] loop0: rw=2049, sector=2824, nr_sectors = 32 limit=256 [ 70.976031][ T4446] syz.0.332: attempt to access beyond end of device [ 70.976031][ T4446] loop0: rw=2049, sector=2888, nr_sectors = 32 limit=256 [ 70.976293][ T4446] syz.0.332: attempt to access beyond end of device [ 70.976293][ T4446] loop0: rw=2049, sector=2952, nr_sectors = 32 limit=256 [ 70.976526][ T4446] syz.0.332: attempt to access beyond end of device [ 70.976526][ T4446] loop0: rw=2049, sector=3016, nr_sectors = 32 limit=256 [ 70.976766][ T4446] syz.0.332: attempt to access beyond end of device [ 70.976766][ T4446] loop0: rw=2049, sector=3080, nr_sectors = 32 limit=256 [ 70.977040][ T4446] syz.0.332: attempt to access beyond end of device [ 70.977040][ T4446] loop0: rw=2049, sector=3144, nr_sectors = 32 limit=256 [ 70.977232][ T4446] syz.0.332: attempt to access beyond end of device [ 70.977232][ T4446] loop0: rw=2049, sector=3208, nr_sectors = 32 limit=256 [ 71.158217][ T4431] Freezing user space processes completed (elapsed 11.510 seconds) [ 71.158321][ T4431] OOM killer disabled. [ 71.158342][ T4431] Freezing remaining freezable tasks [ 71.166230][ T4431] Freezing remaining freezable tasks completed (elapsed 0.007 seconds) [ 71.166283][ T4431] printk: Suspending console(s) (use no_console_suspend to debug) [ 71.248232][ T4431] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 71.248300][ T4431] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 71.248347][ T4431] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 71.248436][ T4431] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 71.248477][ T4431] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 71.248542][ T4431] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 71.248584][ T4431] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 71.249015][ T4431] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 71.249136][ T4431] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 71.249402][ T4431] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 71.249465][ T4431] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 71.249508][ T4431] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 71.249586][ T4431] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 71.249616][ T4431] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 71.249697][ T4431] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 71.249743][ T4431] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 71.296210][ T4254] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 72.098667][ T4431] ACPI: PM: Preparing to enter system sleep state S3 [ 72.098978][ T4431] ACPI: PM: Saving platform NVS memory [ 72.099079][ T4431] Disabling non-boot CPUs ... [ 72.107784][ T4431] smpboot: CPU 1 is now offline [ 72.113604][ T4431] ACPI: PM: Low-level resume complete [ 72.113684][ T4431] ACPI: PM: Restoring platform NVS memory [ 72.142812][ T4431] Enabling non-boot CPUs ... [ 72.142994][ T4431] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 72.147399][ T4431] CPU1 is up [ 72.147681][ T4431] ACPI: PM: Waking up from system sleep state S3 [ 72.212932][ T4242] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 72.468463][ T4431] OOM killer enabled. [ 72.468478][ T4431] Restarting tasks: Starting [ 72.489808][ T4431] Restarting tasks: Done [ 72.489853][ T4431] random: crng reseeded on system resumption [ 72.489872][ T4431] hwrng_fill thread creation failed [ 72.489905][ T4431] PM: suspend exit [ 72.551923][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 72.551943][ T29] audit: type=1400 audit(1789084916.475:407): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.572328][ T29] audit: type=1400 audit(1789084916.495:408): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.577792][ T29] audit: type=1400 audit(1789084916.495:409): avc: denied { write } for pid=4545 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.588916][ T4548] loop2: detected capacity change from 0 to 512 [ 72.799067][ T29] audit: type=1400 audit(1789084916.725:410): avc: denied { write } for pid=4551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.881866][ T29] audit: type=1400 audit(1789084916.805:411): avc: denied { write } for pid=4574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.902558][ T4579] FAULT_INJECTION: forcing a failure. [ 72.902558][ T4579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.902601][ T4579] CPU: 1 UID: 0 PID: 4579 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.902640][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.902730][ T4579] Call Trace: [ 72.902740][ T4579] [ 72.902751][ T4579] __dump_stack+0x1d/0x30 [ 72.902787][ T4579] dump_stack_lvl+0x95/0xd0 [ 72.902823][ T4579] dump_stack+0x15/0x1b [ 72.902851][ T4579] should_fail_ex+0x262/0x280 [ 72.902953][ T4579] should_fail+0xb/0x20 [ 72.902984][ T4579] get_futex_key+0x12d/0xb10 [ 72.903020][ T4579] futex_wake+0x89/0x400 [ 72.903096][ T4579] do_futex+0x3f8/0x460 [ 72.903141][ T4579] ? __se_sys_futex+0x3c/0x370 [ 72.903182][ T4579] __se_sys_futex+0x2f6/0x370 [ 72.903227][ T4579] __x64_sys_futex+0x78/0x90 [ 72.903329][ T4579] x64_sys_call+0x22e2/0x2550 [ 72.903364][ T4579] do_syscall_64+0x112/0x360 [ 72.903498][ T4579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.903527][ T4579] RIP: 0033:0x7f28a9dfe159 [ 72.903544][ T4579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.903563][ T4579] RSP: 002b:00007f28a88570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.903615][ T4579] RAX: ffffffffffffffda RBX: 00007f28aa085fa8 RCX: 00007f28a9dfe159 [ 72.903656][ T4579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28aa085fac [ 72.903669][ T4579] RBP: 00007f28aa085fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 72.903683][ T4579] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.903697][ T4579] R13: 00007f28aa086038 R14: 00007ffe15028b90 R15: 00007ffe15028c78 [ 72.903724][ T4579] [ 73.015553][ T29] audit: type=1400 audit(1789084916.935:412): avc: denied { read } for pid=4584 comm="syz.3.348" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.015665][ T29] audit: type=1400 audit(1789084916.935:413): avc: denied { open } for pid=4584 comm="syz.3.348" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.061831][ T4589] batman_adv: batadv0: Adding interface: dummy0 [ 73.061847][ T4589] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.061912][ T4589] batman_adv: batadv0: Interface activated: dummy0 [ 73.075470][ T29] audit: type=1400 audit(1789084916.995:414): avc: denied { ioctl } for pid=4588 comm="syz.1.350" path="socket:[7585]" dev="sockfs" ino=7585 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.080945][ T4589] batadv0: mtu less than device minimum [ 73.090819][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.091584][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.092190][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.092646][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.093241][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.093913][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.094730][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.095271][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.095818][ T4589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.136194][ T29] audit: type=1400 audit(1789084917.055:415): avc: denied { read } for pid=4590 comm="syz.4.351" path="socket:[8213]" dev="sockfs" ino=8213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.143555][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 73.143674][ T4586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.348'. [ 73.143884][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 73.150414][ T4586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.348'. [ 73.220495][ T4599] loop2: detected capacity change from 0 to 512 [ 73.225176][ T4599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.235717][ T29] audit: type=1400 audit(1789084917.155:416): avc: denied { write } for pid=4598 comm="syz.2.355" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.376668][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 73.412953][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.471375][ T4608] bridge0: port 3(macvlan2) entered blocking state [ 73.471419][ T4608] bridge0: port 3(macvlan2) entered disabled state [ 73.471659][ T4608] macvlan2: entered allmulticast mode [ 73.471710][ T4608] bridge0: entered allmulticast mode [ 73.471744][ T4608] bridge0: entered promiscuous mode [ 73.487256][ T4608] macvlan2: left allmulticast mode [ 73.487284][ T4608] bridge0: left allmulticast mode [ 73.545082][ T4615] erspan0: entered promiscuous mode [ 73.545188][ T4615] macvtap1: entered promiscuous mode [ 73.545271][ T4615] macvtap1: entered allmulticast mode [ 73.545374][ T4615] erspan0: entered allmulticast mode [ 73.547234][ T3383] bridge0: left promiscuous mode [ 73.554389][ T4620] erspan0: left allmulticast mode [ 73.554539][ T4620] erspan0: left promiscuous mode [ 73.554661][ T4620] macvtap1: left promiscuous mode [ 73.554675][ T4620] macvtap1: left allmulticast mode [ 73.693187][ T4608] syz.3.357 (4608) used greatest stack depth: 10048 bytes left [ 73.806923][ T4647] syzkaller1: entered promiscuous mode [ 73.806945][ T4647] syzkaller1: entered allmulticast mode [ 74.399187][ T4643] syz.0.371 (4643) used greatest stack depth: 8784 bytes left [ 74.436724][ T4673] netlink: 'syz.0.384': attribute type 8 has an invalid length. [ 74.436754][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 74.501732][ T4670] vlan0: entered promiscuous mode [ 74.538741][ T4673] veth1_to_team: entered promiscuous mode [ 74.539666][ T4673] gretap0: entered promiscuous mode [ 74.578603][ T4673] veth1_to_team: left promiscuous mode [ 74.583219][ T4673] gretap0: left promiscuous mode [ 74.682341][ T4678] batadv_slave_1: entered promiscuous mode [ 74.683795][ T4678] batadv_slave_1: left promiscuous mode [ 74.699256][ T4684] FAULT_INJECTION: forcing a failure. [ 74.699256][ T4684] name failslab, interval 1, probability 0, space 0, times 0 [ 74.699295][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.699325][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.699341][ T4684] Call Trace: [ 74.699348][ T4684] [ 74.699358][ T4684] __dump_stack+0x1d/0x30 [ 74.699476][ T4684] dump_stack_lvl+0x95/0xd0 [ 74.699507][ T4684] dump_stack+0x15/0x1b [ 74.699728][ T4684] should_fail_ex+0x262/0x280 [ 74.699768][ T4684] ? radix_tree_node_alloc+0xa0/0x200 [ 74.699806][ T4684] should_failslab+0x8c/0xb0 [ 74.699844][ T4684] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.699889][ T4684] ? radix_tree_node_alloc+0xa0/0x200 [ 74.699942][ T4684] radix_tree_node_alloc+0xa0/0x200 [ 74.699974][ T4684] idr_get_free+0x1fc/0x560 [ 74.700005][ T4684] idr_alloc_u32+0xe9/0x1a0 [ 74.700102][ T4684] tcf_idr_check_alloc+0x1fc/0x2e0 [ 74.700162][ T4684] tcf_police_init+0x1d5/0xdc0 [ 74.700208][ T4684] ? should_fail_ex+0xdb/0x280 [ 74.700259][ T4684] ? __pfx_tcf_police_init+0x10/0x10 [ 74.700307][ T4684] tcf_action_init_1+0x395/0x4d0 [ 74.700360][ T4684] tcf_action_init+0x29d/0x700 [ 74.700500][ T4684] tc_ctl_action+0x32a/0x860 [ 74.700638][ T4684] ? __pfx_tc_ctl_action+0x10/0x10 [ 74.700685][ T4684] rtnetlink_rcv_msg+0x6a7/0x720 [ 74.700727][ T4684] netlink_rcv_skb+0x11e/0x220 [ 74.700762][ T4684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.700862][ T4684] rtnetlink_rcv+0x1c/0x30 [ 74.700969][ T4684] netlink_unicast+0x5a9/0x680 [ 74.701008][ T4684] netlink_sendmsg+0x5be/0x6f0 [ 74.701055][ T4684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.701129][ T4684] ____sys_sendmsg+0x532/0x580 [ 74.701160][ T4684] ___sys_sendmsg+0x195/0x1e0 [ 74.701202][ T4684] __x64_sys_sendmsg+0xd4/0x160 [ 74.701301][ T4684] x64_sys_call+0x22ab/0x2550 [ 74.701334][ T4684] do_syscall_64+0x112/0x360 [ 74.701375][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.701470][ T4684] RIP: 0033:0x7f9dbdfbe159 [ 74.701494][ T4684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.701520][ T4684] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.701549][ T4684] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 74.701582][ T4684] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 74.701678][ T4684] RBP: 00007f9dbe05503b R08: 0000000000000000 R09: 0000000000000000 [ 74.701692][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.701705][ T4684] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 74.701726][ T4684] [ 74.875432][ T4688] loop0: detected capacity change from 0 to 8192 [ 75.114930][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0002/input/input5 [ 75.122119][ T9] hid-generic 0005:0009:0040.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 75.193791][ T4705] fido_id[4705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.199863][ T4711] loop2: detected capacity change from 0 to 1024 [ 75.201135][ T4711] EXT4-fs: Ignoring removed bh option [ 75.220289][ T4711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.249615][ T4711] EXT4-fs (loop2): shut down requested (2) [ 75.275863][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.780708][ T4748] syzkaller0: entered promiscuous mode [ 75.780732][ T4748] syzkaller0: entered allmulticast mode [ 75.982953][ T4760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.213980][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.214893][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.215329][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.215845][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.216344][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.216706][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.236143][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.236994][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.244705][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.245245][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.245606][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.246152][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.246519][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.246974][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.267397][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.267856][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.268222][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.268855][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.269215][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.270399][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.270833][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.302470][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.303072][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.303473][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.304066][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.305123][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.305995][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.306380][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.348571][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.349205][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.349639][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.350223][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.350644][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.351125][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.351883][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.352335][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.352841][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.353358][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.353814][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.354252][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.354636][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.355080][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.356366][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.356959][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.357604][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.358221][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.358686][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.359276][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.359736][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.360436][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.360898][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.363641][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.364311][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.365345][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.365709][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.366119][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.366740][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.383582][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.385633][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.403775][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.406090][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.442899][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.446909][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.463545][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.469017][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.481548][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.502316][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.522292][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.522788][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.524808][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.544504][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.545231][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.545685][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.556822][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.561684][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.564054][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.564743][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.566886][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.580598][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.581149][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.583349][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.584010][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.586107][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.586848][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.612491][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.620348][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.621135][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.622391][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.623595][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.624543][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.625612][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.631721][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.634367][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.636919][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.639250][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.641267][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.641959][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.642963][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.644962][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.646310][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.648621][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.649958][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.651217][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.652196][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.653565][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.654660][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.655753][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.656750][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.659880][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.662404][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.663472][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.664510][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.665669][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.666262][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.668223][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.669451][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.670432][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.671495][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.673397][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.675032][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.676137][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.679860][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.681687][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.682698][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.684704][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.685954][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.688297][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.689695][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.690685][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.692076][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.692977][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.694433][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.695627][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.696504][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.698690][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.699256][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.745074][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.750303][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.768877][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.773556][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.786340][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.790378][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.795251][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.818539][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.824883][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.838762][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.839369][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.839902][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.840234][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.840753][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.841195][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.841713][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.842263][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.842882][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.843421][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.884110][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.884606][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.885040][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.885439][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.885792][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.886235][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.886768][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.906641][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.910996][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.911573][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.912183][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.912726][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.913178][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.913548][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.914098][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.914593][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.915248][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.915711][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.916079][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 76.916791][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.000709][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.001499][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.004398][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.004830][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.005173][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.028250][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.041057][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.041699][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.046347][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.046834][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.056160][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.056796][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.057229][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.064690][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.065107][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.065535][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.065925][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.066451][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.066854][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.081191][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.081697][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.082226][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.082660][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.083107][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.084700][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.085350][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.086060][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.086457][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.086827][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.105137][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.105496][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.106048][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.106567][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.107066][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.121011][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.121418][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.121861][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.123694][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.124189][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.124684][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.130350][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.133776][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.136988][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.145896][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.150019][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.167010][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.171858][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.172357][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.192730][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.193308][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.193722][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.221234][ T4771] 9pnet_fd: p9_fd_create_tcp (4771): problem connecting socket to 127.0.0.1 [ 77.999454][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 77.999488][ T29] audit: type=1400 audit(1789084921.925:499): avc: denied { create } for pid=4805 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.414493][ T4824] loop3: detected capacity change from 0 to 512 [ 78.429461][ T4824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.429553][ T4824] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.052633][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.092398][ T29] audit: type=1400 audit(1789084923.015:500): avc: denied { create } for pid=4832 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.111724][ T29] audit: type=1400 audit(1789084923.035:501): avc: denied { listen } for pid=4832 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.122892][ T29] audit: type=1400 audit(1789084923.045:502): avc: denied { accept } for pid=4832 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.211710][ T4835] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 79.271998][ T4837] loop4: detected capacity change from 0 to 1764 [ 79.287205][ T29] audit: type=1400 audit(1789084923.205:503): avc: denied { mount } for pid=4836 comm="syz.4.445" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 79.354868][ T4838] bond1: (slave gretap1): making interface the new active one [ 79.355221][ T4838] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 79.387189][ T29] audit: type=1400 audit(1789084923.305:504): avc: denied { write } for pid=4840 comm="syz.0.446" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 79.414375][ T4841] device-mapper: ioctl: name not supplied when creating device [ 79.418818][ T29] audit: type=1400 audit(1789084923.345:505): avc: denied { create } for pid=4842 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.435343][ T29] audit: type=1400 audit(1789084923.355:506): avc: denied { bind } for pid=4842 comm="syz.3.447" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.435421][ T29] audit: type=1400 audit(1789084923.355:507): avc: denied { name_bind } for pid=4842 comm="syz.3.447" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.435446][ T29] audit: type=1400 audit(1789084923.355:508): avc: denied { node_bind } for pid=4842 comm="syz.3.447" saddr=ff02::1 src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 80.242972][ T4785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.413641][ T4858] FAULT_INJECTION: forcing a failure. [ 80.413641][ T4858] name failslab, interval 1, probability 0, space 0, times 0 [ 80.413676][ T4858] CPU: 1 UID: 0 PID: 4858 Comm: syz.0.453 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.413705][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.413720][ T4858] Call Trace: [ 80.413729][ T4858] [ 80.413738][ T4858] __dump_stack+0x1d/0x30 [ 80.413847][ T4858] dump_stack_lvl+0x95/0xd0 [ 80.413954][ T4858] dump_stack+0x15/0x1b [ 80.413980][ T4858] should_fail_ex+0x262/0x280 [ 80.414020][ T4858] ? __igmp_group_dropped+0x50d/0xa20 [ 80.414052][ T4858] should_failslab+0x8c/0xb0 [ 80.414126][ T4858] __kmalloc_cache_noprof+0x7a/0x400 [ 80.414182][ T4858] ? __igmp_group_dropped+0x50d/0xa20 [ 80.414295][ T4858] __igmp_group_dropped+0x50d/0xa20 [ 80.414334][ T4858] __ip_mc_dec_group+0x196/0x3d0 [ 80.414419][ T4858] ip_mc_drop_socket+0x16e/0x1e0 [ 80.414651][ T4858] inet_release+0x31/0xf0 [ 80.414743][ T4858] __sock_release+0x65/0x150 [ 80.414787][ T4858] ? __pfx_sock_close+0x10/0x10 [ 80.414827][ T4858] sock_close+0x19/0x30 [ 80.414868][ T4858] __fput+0x29e/0x630 [ 80.414901][ T4858] fput_close_sync+0xad/0x190 [ 80.414951][ T4858] __x64_sys_close+0x55/0xf0 [ 80.414979][ T4858] x64_sys_call+0x812/0x2550 [ 80.415039][ T4858] do_syscall_64+0x112/0x360 [ 80.415107][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.415134][ T4858] RIP: 0033:0x7fd82e85e159 [ 80.415153][ T4858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.415174][ T4858] RSP: 002b:00007fd82d2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.415473][ T4858] RAX: ffffffffffffffda RBX: 00007fd82eae5fa0 RCX: 00007fd82e85e159 [ 80.415503][ T4858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.415553][ T4858] RBP: 00007fd82e8f503b R08: 0000000000000000 R09: 0000000000000000 [ 80.415602][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.415624][ T4858] R13: 00007fd82eae6038 R14: 00007fd82eae5fa0 R15: 00007ffe64d66768 [ 80.415650][ T4858] [ 80.536375][ T4859] syzkaller0: entered promiscuous mode [ 80.536456][ T4859] syzkaller0: entered allmulticast mode [ 80.599357][ T4861] loop0: detected capacity change from 0 to 2048 [ 80.612479][ T4861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.690859][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.719643][ T4878] loop3: detected capacity change from 0 to 2048 [ 80.751817][ T4883] batadv_slave_1: entered promiscuous mode [ 80.753066][ T4883] batadv_slave_0: entered promiscuous mode [ 80.753408][ T4882] batadv_slave_0: left promiscuous mode [ 80.753532][ T4882] batadv_slave_1: left promiscuous mode [ 80.765313][ T4878] loop3: p1 < > p4 [ 80.767039][ T4878] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.857696][ T4891] xt_hashlimit: size too large, truncated to 1048576 [ 81.186934][ T37] Process accounting resumed [ 81.695176][ T4934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.482'. [ 81.720750][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 81.807296][ T4921] net_ratelimit: 10 callbacks suppressed [ 81.807319][ T4921] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.814636][ T4934] batman_adv: batadv0: Adding interface: macsec1 [ 81.814653][ T4934] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.814694][ T4934] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 81.875138][ T4940] netlink: 668 bytes leftover after parsing attributes in process `syz.0.484'. [ 81.875178][ T4940] netlink: 668 bytes leftover after parsing attributes in process `syz.0.484'. [ 82.059695][ T4955] FAULT_INJECTION: forcing a failure. [ 82.059695][ T4955] name failslab, interval 1, probability 0, space 0, times 0 [ 82.059732][ T4955] CPU: 1 UID: 0 PID: 4955 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.059835][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.059850][ T4955] Call Trace: [ 82.059897][ T4955] [ 82.059907][ T4955] __dump_stack+0x1d/0x30 [ 82.059937][ T4955] dump_stack_lvl+0x95/0xd0 [ 82.060002][ T4955] dump_stack+0x15/0x1b [ 82.060031][ T4955] should_fail_ex+0x262/0x280 [ 82.060064][ T4955] ? sk_prot_alloc+0x3f/0x180 [ 82.060126][ T4955] should_failslab+0x8c/0xb0 [ 82.060194][ T4955] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 82.060297][ T4955] ? sk_prot_alloc+0x3f/0x180 [ 82.060388][ T4955] sk_prot_alloc+0x3f/0x180 [ 82.060429][ T4955] sk_alloc+0x34/0x3e0 [ 82.060464][ T4955] kcm_ioctl+0x121/0xa60 [ 82.060500][ T4955] ? ioctl_has_perm+0x273/0x2c0 [ 82.060526][ T4955] sock_do_ioctl+0x73/0x230 [ 82.060555][ T4955] sock_ioctl+0x439/0x610 [ 82.060581][ T4955] ? __pfx_sock_ioctl+0x10/0x10 [ 82.060616][ T4955] __se_sys_ioctl+0xce/0x140 [ 82.060649][ T4955] __x64_sys_ioctl+0x43/0x50 [ 82.060744][ T4955] x64_sys_call+0x239d/0x2550 [ 82.060772][ T4955] do_syscall_64+0x112/0x360 [ 82.060809][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.060833][ T4955] RIP: 0033:0x7f28a9dfe159 [ 82.060907][ T4955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.060927][ T4955] RSP: 002b:00007f28a8857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.060950][ T4955] RAX: ffffffffffffffda RBX: 00007f28aa085fa0 RCX: 00007f28a9dfe159 [ 82.060966][ T4955] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 82.061016][ T4955] RBP: 00007f28a9e9503b R08: 0000000000000000 R09: 0000000000000000 [ 82.061031][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.061044][ T4955] R13: 00007f28aa086038 R14: 00007f28aa085fa0 R15: 00007ffe15028c78 [ 82.061085][ T4955] [ 82.144436][ T4961] FAULT_INJECTION: forcing a failure. [ 82.144436][ T4961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.144523][ T4961] CPU: 1 UID: 0 PID: 4961 Comm: syz.2.495 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.144548][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.144567][ T4961] Call Trace: [ 82.144575][ T4961] [ 82.144585][ T4961] __dump_stack+0x1d/0x30 [ 82.144618][ T4961] dump_stack_lvl+0x95/0xd0 [ 82.144721][ T4961] dump_stack+0x15/0x1b [ 82.144748][ T4961] should_fail_ex+0x262/0x280 [ 82.144826][ T4961] should_fail_alloc_page+0xf2/0x100 [ 82.144942][ T4961] __alloc_frozen_pages_noprof+0x157/0x400 [ 82.144995][ T4961] alloc_pages_mpol+0xaf/0x1d0 [ 82.145027][ T4961] alloc_pages_noprof+0x94/0x140 [ 82.145050][ T4961] __pud_alloc+0x47/0x460 [ 82.145158][ T4961] handle_mm_fault+0x2b12/0x3bb0 [ 82.145297][ T4961] ? vma_is_secretmem+0x16/0x30 [ 82.145329][ T4961] ? check_vma_flags+0x272/0x3a0 [ 82.145361][ T4961] __get_user_pages+0x12e9/0x1eb0 [ 82.145428][ T4961] get_user_pages_remote+0x1d5/0x6b0 [ 82.145470][ T4961] ? down_read+0x77/0xb0 [ 82.145511][ T4961] copy_string_kernel+0x1c6/0x460 [ 82.145547][ T4961] do_execveat_common+0x650/0x8a0 [ 82.145653][ T4961] __x64_sys_execveat+0x76/0xa0 [ 82.145709][ T4961] x64_sys_call+0x21ae/0x2550 [ 82.145746][ T4961] do_syscall_64+0x112/0x360 [ 82.145792][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.145902][ T4961] RIP: 0033:0x7fd73044e159 [ 82.145989][ T4961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.146016][ T4961] RSP: 002b:00007fd72eea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 82.146047][ T4961] RAX: ffffffffffffffda RBX: 00007fd7306d5fa0 RCX: 00007fd73044e159 [ 82.146067][ T4961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 82.146086][ T4961] RBP: 00007fd7304e503b R08: 0000000000001000 R09: 0000000000000000 [ 82.146191][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.146268][ T4961] R13: 00007fd7306d6038 R14: 00007fd7306d5fa0 R15: 00007ffe0e832e58 [ 82.146296][ T4961] [ 82.513224][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 82.626592][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 82.728036][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 82.755762][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 83.012037][ T5037] FAULT_INJECTION: forcing a failure. [ 83.012037][ T5037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.012104][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.012216][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.012245][ T5037] Call Trace: [ 83.012254][ T5037] [ 83.012282][ T5037] __dump_stack+0x1d/0x30 [ 83.012321][ T5037] dump_stack_lvl+0x95/0xd0 [ 83.012356][ T5037] dump_stack+0x15/0x1b [ 83.012387][ T5037] should_fail_ex+0x262/0x280 [ 83.012434][ T5037] should_fail+0xb/0x20 [ 83.012770][ T5037] should_fail_usercopy+0x1a/0x20 [ 83.012813][ T5037] _copy_to_user+0x20/0xa0 [ 83.012854][ T5037] kcm_ioctl+0x3ef/0xa60 [ 83.012886][ T5037] ? ioctl_has_perm+0x273/0x2c0 [ 83.012964][ T5037] sock_do_ioctl+0x73/0x230 [ 83.013007][ T5037] sock_ioctl+0x439/0x610 [ 83.013182][ T5037] ? __pfx_sock_ioctl+0x10/0x10 [ 83.013280][ T5037] __se_sys_ioctl+0xce/0x140 [ 83.013382][ T5037] __x64_sys_ioctl+0x43/0x50 [ 83.013469][ T5037] x64_sys_call+0x239d/0x2550 [ 83.013579][ T5037] do_syscall_64+0x112/0x360 [ 83.013657][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.013687][ T5037] RIP: 0033:0x7f9dbdfbe159 [ 83.013710][ T5037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.013735][ T5037] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.013790][ T5037] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 83.013811][ T5037] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 83.013829][ T5037] RBP: 00007f9dbe05503b R08: 0000000000000000 R09: 0000000000000000 [ 83.013845][ T5037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.013858][ T5037] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 83.013879][ T5037] [ 83.319351][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 83.319372][ T29] audit: type=1400 audit(1789084927.245:529): avc: denied { accept } for pid=5041 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.323057][ T29] audit: type=1400 audit(1789084927.245:530): avc: denied { read } for pid=5041 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.402895][ T29] audit: type=1400 audit(1789084927.325:531): avc: denied { mount } for pid=5045 comm="syz.3.527" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.419133][ T5048] FAULT_INJECTION: forcing a failure. [ 83.419133][ T5048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.419250][ T5048] CPU: 0 UID: 0 PID: 5048 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.419285][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.419301][ T5048] Call Trace: [ 83.419309][ T5048] [ 83.419320][ T5048] __dump_stack+0x1d/0x30 [ 83.419393][ T5048] dump_stack_lvl+0x95/0xd0 [ 83.419424][ T5048] dump_stack+0x15/0x1b [ 83.419452][ T5048] should_fail_ex+0x262/0x280 [ 83.419487][ T5048] should_fail_alloc_page+0xf2/0x100 [ 83.419593][ T5048] __alloc_frozen_pages_noprof+0x157/0x400 [ 83.419674][ T5048] alloc_pages_mpol+0xaf/0x1d0 [ 83.419705][ T5048] alloc_pages_noprof+0x94/0x140 [ 83.419788][ T5048] pte_alloc_one+0x1c/0xc0 [ 83.419815][ T5048] handle_mm_fault+0x20d5/0x3bb0 [ 83.419856][ T5048] ? vma_is_secretmem+0x16/0x30 [ 83.419882][ T5048] __get_user_pages+0x12e9/0x1eb0 [ 83.419980][ T5048] __mm_populate+0x242/0x390 [ 83.420093][ T5048] vm_mmap_pgoff+0x23b/0x2d0 [ 83.420130][ T5048] ksys_mmap_pgoff+0x250/0x310 [ 83.420165][ T5048] x64_sys_call+0x23b3/0x2550 [ 83.420199][ T5048] do_syscall_64+0x112/0x360 [ 83.420285][ T5048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.420344][ T5048] RIP: 0033:0x7f9dbdfbe159 [ 83.420368][ T5048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.420393][ T5048] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.420421][ T5048] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 83.420494][ T5048] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 00002000008c8000 [ 83.420509][ T5048] RBP: 00007f9dbe05503b R08: 0000000000000004 R09: 0000000000000000 [ 83.420528][ T5048] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 83.420615][ T5048] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 83.420639][ T5048] [ 83.690309][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 83.690337][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 83.762936][ T5064] ALSA: seq fatal error: cannot create timer (-22) [ 84.002082][ T29] audit: type=1400 audit(1789084927.925:532): avc: denied { write } for pid=5076 comm="syz.2.540" name="instances" dev="tracefs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.002186][ T29] audit: type=1400 audit(1789084927.925:533): avc: denied { add_name } for pid=5076 comm="syz.2.540" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.002375][ T29] audit: type=1400 audit(1789084927.925:534): avc: denied { create } for pid=5076 comm="syz.2.540" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 84.005974][ T5074] sch_tbf: burst 1369 is lower than device syzkaller0 mtu (1514) ! [ 84.043240][ T5078] FAULT_INJECTION: forcing a failure. [ 84.043240][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 84.043273][ T5078] CPU: 1 UID: 0 PID: 5078 Comm: syz.4.539 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.043338][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.043351][ T5078] Call Trace: [ 84.043357][ T5078] [ 84.043504][ T5078] __dump_stack+0x1d/0x30 [ 84.043536][ T5078] dump_stack_lvl+0x95/0xd0 [ 84.043565][ T5078] dump_stack+0x15/0x1b [ 84.043595][ T5078] should_fail_ex+0x262/0x280 [ 84.043667][ T5078] should_failslab+0x8c/0xb0 [ 84.043698][ T5078] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 84.043729][ T5078] ? __d_alloc+0x34/0x320 [ 84.043794][ T5078] ? __d_alloc+0x34/0x320 [ 84.043820][ T5078] __d_alloc+0x34/0x320 [ 84.043846][ T5078] ? d_alloc_pseudo+0x13/0x80 [ 84.043886][ T5078] d_alloc_pseudo+0x1e/0x80 [ 84.044118][ T5078] alloc_path_pseudo+0xa4/0x140 [ 84.044148][ T5078] alloc_file_pseudo+0x55/0x120 [ 84.044172][ T5078] sock_alloc_file+0x9c/0x1e0 [ 84.044280][ T5078] kcm_ioctl+0x18d/0xa60 [ 84.044308][ T5078] ? ioctl_has_perm+0x273/0x2c0 [ 84.044333][ T5078] sock_do_ioctl+0x73/0x230 [ 84.044389][ T5078] sock_ioctl+0x439/0x610 [ 84.044416][ T5078] ? __pfx_sock_ioctl+0x10/0x10 [ 84.044440][ T5078] __se_sys_ioctl+0xce/0x140 [ 84.044596][ T5078] __x64_sys_ioctl+0x43/0x50 [ 84.044629][ T5078] x64_sys_call+0x239d/0x2550 [ 84.044660][ T5078] do_syscall_64+0x112/0x360 [ 84.044698][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.044801][ T5078] RIP: 0033:0x7f0c5c89e159 [ 84.044822][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.044844][ T5078] RSP: 002b:00007f0c5b2f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.044868][ T5078] RAX: ffffffffffffffda RBX: 00007f0c5cb25fa0 RCX: 00007f0c5c89e159 [ 84.044952][ T5078] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 84.044966][ T5078] RBP: 00007f0c5c93503b R08: 0000000000000000 R09: 0000000000000000 [ 84.044982][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.045070][ T5078] R13: 00007f0c5cb26038 R14: 00007f0c5cb25fa0 R15: 00007ffc374e3228 [ 84.045173][ T5078] [ 84.253823][ T29] audit: type=1400 audit(1789084928.175:535): avc: denied { bind } for pid=5083 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.271060][ T29] audit: type=1400 audit(1789084928.195:536): avc: denied { setopt } for pid=5083 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.392671][ T29] audit: type=1400 audit(1789084928.315:537): avc: denied { write } for pid=5090 comm="syz.4.547" lport=43110 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.975656][ T5119] loop2: detected capacity change from 0 to 1024 [ 85.003444][ T5119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.005179][ T29] audit: type=1400 audit(1789084928.925:538): avc: denied { write } for pid=5118 comm="syz.2.558" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.619567][ T5129] loop3: detected capacity change from 0 to 8192 [ 86.041663][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.086387][ T5153] loop4: detected capacity change from 0 to 512 [ 86.119140][ T5153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.119249][ T5153] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.229740][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.468519][ T5171] FAULT_INJECTION: forcing a failure. [ 86.468519][ T5171] name failslab, interval 1, probability 0, space 0, times 0 [ 86.468552][ T5171] CPU: 1 UID: 0 PID: 5171 Comm: syz.1.576 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.468581][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.468598][ T5171] Call Trace: [ 86.468606][ T5171] [ 86.468615][ T5171] __dump_stack+0x1d/0x30 [ 86.468666][ T5171] dump_stack_lvl+0x95/0xd0 [ 86.468695][ T5171] dump_stack+0x15/0x1b [ 86.468723][ T5171] should_fail_ex+0x262/0x280 [ 86.468757][ T5171] should_failslab+0x8c/0xb0 [ 86.468875][ T5171] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 86.468906][ T5171] ? bpf_fs_alloc_inode+0x34/0x90 [ 86.468965][ T5171] ? bpf_fs_alloc_inode+0x34/0x90 [ 86.469011][ T5171] ? __pfx_bpf_fill_super+0x10/0x10 [ 86.469154][ T5171] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 86.469221][ T5171] bpf_fs_alloc_inode+0x34/0x90 [ 86.469316][ T5171] alloc_inode+0x40/0x170 [ 86.469342][ T5171] new_inode+0x1d/0xe0 [ 86.469369][ T5171] ? __pfx_bpf_fill_super+0x10/0x10 [ 86.469464][ T5171] bpf_fill_super+0x102/0x7f0 [ 86.469496][ T5171] ? __pfx_bpf_fill_super+0x10/0x10 [ 86.469525][ T5171] get_tree_nodev+0x83/0x100 [ 86.469632][ T5171] bpf_get_tree+0x1c/0x30 [ 86.469748][ T5171] vfs_get_tree+0x57/0x1d0 [ 86.469889][ T5171] vfs_cmd_create+0x8a/0x140 [ 86.469930][ T5171] vfs_fsconfig_locked+0x6f/0x210 [ 86.469978][ T5171] __se_sys_fsconfig+0x671/0x7e0 [ 86.470072][ T5171] __x64_sys_fsconfig+0x67/0x80 [ 86.470113][ T5171] x64_sys_call+0xaa0/0x2550 [ 86.470307][ T5171] do_syscall_64+0x112/0x360 [ 86.470356][ T5171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.470386][ T5171] RIP: 0033:0x7f9dbdfbe159 [ 86.470423][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.470462][ T5171] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 86.470504][ T5171] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 86.470523][ T5171] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 86.470603][ T5171] RBP: 00007f9dbe05503b R08: 0000000000000000 R09: 0000000000000000 [ 86.470620][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.470635][ T5171] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 86.470660][ T5171] [ 86.909185][ T5194] loop2: detected capacity change from 0 to 256 [ 87.067515][ T5202] bio_check_eod: 1048 callbacks suppressed [ 87.067672][ T5202] syz.2.586: attempt to access beyond end of device [ 87.067672][ T5202] loop2: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 87.103683][ T5202] syz.2.586: attempt to access beyond end of device [ 87.103683][ T5202] loop2: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 87.106728][ T5202] syz.2.586: attempt to access beyond end of device [ 87.106728][ T5202] loop2: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 87.145617][ T5202] syz.2.586: attempt to access beyond end of device [ 87.145617][ T5202] loop2: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 87.170961][ T5202] syz.2.586: attempt to access beyond end of device [ 87.170961][ T5202] loop2: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 87.295469][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 87.565048][ T5228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'. [ 87.631466][ T5232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.605'. [ 87.677571][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.604'. [ 87.700681][ T5236] loop4: detected capacity change from 0 to 512 [ 87.703994][ T5236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.723616][ T5236] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 87.724964][ T5236] EXT4-fs (loop4): 1 truncate cleaned up [ 87.725394][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.765310][ T5236] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 4: comm syz.4.606: lblock 0 mapped to illegal pblock 4 (length 1) [ 87.825287][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.847004][ T5194] syz.2.586: attempt to access beyond end of device [ 87.847004][ T5194] loop2: rw=2049, sector=2152, nr_sectors = 64 limit=256 [ 87.847180][ T5194] syz.2.586: attempt to access beyond end of device [ 87.847180][ T5194] loop2: rw=2049, sector=2248, nr_sectors = 32 limit=256 [ 87.847271][ T5194] syz.2.586: attempt to access beyond end of device [ 87.847271][ T5194] loop2: rw=2049, sector=2312, nr_sectors = 32 limit=256 [ 87.847530][ T5194] syz.2.586: attempt to access beyond end of device [ 87.847530][ T5194] loop2: rw=2049, sector=2376, nr_sectors = 32 limit=256 [ 87.847779][ T5194] syz.2.586: attempt to access beyond end of device [ 87.847779][ T5194] loop2: rw=2049, sector=2440, nr_sectors = 32 limit=256 [ 88.010479][ T5252] FAULT_INJECTION: forcing a failure. [ 88.010479][ T5252] name failslab, interval 1, probability 0, space 0, times 0 [ 88.010553][ T5252] CPU: 1 UID: 0 PID: 5252 Comm: syz.4.612 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.010596][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.010643][ T5252] Call Trace: [ 88.010650][ T5252] [ 88.010659][ T5252] __dump_stack+0x1d/0x30 [ 88.010693][ T5252] dump_stack_lvl+0x95/0xd0 [ 88.010723][ T5252] dump_stack+0x15/0x1b [ 88.010786][ T5252] should_fail_ex+0x262/0x280 [ 88.010815][ T5252] ? security_inode_alloc+0x37/0x100 [ 88.010849][ T5252] should_failslab+0x8c/0xb0 [ 88.010883][ T5252] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 88.010929][ T5252] ? security_inode_alloc+0x37/0x100 [ 88.010965][ T5252] security_inode_alloc+0x37/0x100 [ 88.011000][ T5252] inode_init_always_gfp+0x495/0x4e0 [ 88.011029][ T5252] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 88.011123][ T5252] alloc_inode+0x58/0x170 [ 88.011147][ T5252] new_inode+0x1d/0xe0 [ 88.011207][ T5252] shmem_get_inode+0x250/0x7b0 [ 88.011246][ T5252] shmem_mknod+0x44/0x170 [ 88.011268][ T5252] vfs_mknod+0x337/0x460 [ 88.011362][ T5252] filename_mknodat+0x279/0x450 [ 88.011399][ T5252] __se_sys_mknodat+0x38/0xf0 [ 88.011499][ T5252] __x64_sys_mknodat+0x55/0x70 [ 88.011531][ T5252] x64_sys_call+0x2182/0x2550 [ 88.011558][ T5252] do_syscall_64+0x112/0x360 [ 88.011658][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.011683][ T5252] RIP: 0033:0x7f0c5c89e159 [ 88.011701][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.011722][ T5252] RSP: 002b:00007f0c5b2f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 88.011745][ T5252] RAX: ffffffffffffffda RBX: 00007f0c5cb25fa0 RCX: 00007f0c5c89e159 [ 88.011774][ T5252] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 88.011800][ T5252] RBP: 00007f0c5c93503b R08: 0000000000000000 R09: 0000000000000000 [ 88.011814][ T5252] R10: 00000000fffffff7 R11: 0000000000000246 R12: 0000000000000000 [ 88.011828][ T5252] R13: 00007f0c5cb26038 R14: 00007f0c5cb25fa0 R15: 00007ffc374e3228 [ 88.011849][ T5252] [ 88.236259][ T5257] FAULT_INJECTION: forcing a failure. [ 88.236259][ T5257] name failslab, interval 1, probability 0, space 0, times 0 [ 88.236392][ T5257] CPU: 1 UID: 0 PID: 5257 Comm: syz.3.614 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.236497][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.236535][ T5257] Call Trace: [ 88.236558][ T5257] [ 88.236576][ T5257] __dump_stack+0x1d/0x30 [ 88.236958][ T5257] dump_stack_lvl+0x95/0xd0 [ 88.237000][ T5257] dump_stack+0x15/0x1b [ 88.237083][ T5257] should_fail_ex+0x262/0x280 [ 88.237143][ T5257] ? __list_lru_init+0x72/0x2f0 [ 88.237258][ T5257] should_failslab+0x8c/0xb0 [ 88.237393][ T5257] __kmalloc_noprof+0xd0/0x4d0 [ 88.237641][ T5257] ? shrinker_alloc+0x61e/0x6d0 [ 88.237733][ T5257] ? __list_lru_init+0x72/0x2f0 [ 88.237862][ T5257] __list_lru_init+0x72/0x2f0 [ 88.237947][ T5257] sget_fc+0x8cf/0xf70 [ 88.238057][ T5257] ? __pfx_kernfs_test_super+0x10/0x10 [ 88.238165][ T5257] ? __pfx_kernfs_set_super+0x10/0x10 [ 88.238270][ T5257] ? __kmalloc_cache_noprof+0x19b/0x400 [ 88.238413][ T5257] ? kernfs_get_tree+0x56/0x4a0 [ 88.238577][ T5257] kernfs_get_tree+0xdf/0x4a0 [ 88.238712][ T5257] ? security_capable+0x7b/0x90 [ 88.238795][ T5257] vfs_get_tree+0x57/0x1d0 [ 88.238944][ T5257] do_new_mount+0x288/0x8d0 [ 88.239743][ T5257] ? security_capable+0x7b/0x90 [ 88.239832][ T5257] path_mount+0x4ad/0xb90 [ 88.239970][ T5257] __se_sys_mount+0x28c/0x2e0 [ 88.239996][ T5257] __x64_sys_mount+0x67/0x80 [ 88.240143][ T5257] x64_sys_call+0xc3b/0x2550 [ 88.240247][ T5257] do_syscall_64+0x112/0x360 [ 88.240350][ T5257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.240437][ T5257] RIP: 0033:0x7f28a9dfe159 [ 88.240576][ T5257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.240644][ T5257] RSP: 002b:00007f28a8857028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.240750][ T5257] RAX: ffffffffffffffda RBX: 00007f28aa085fa0 RCX: 00007f28a9dfe159 [ 88.240836][ T5257] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 88.240881][ T5257] RBP: 00007f28a9e9503b R08: 0000000000000000 R09: 0000000000000000 [ 88.240993][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.241008][ T5257] R13: 00007f28aa086038 R14: 00007f28aa085fa0 R15: 00007ffe15028c78 [ 88.241367][ T5257] [ 88.610520][ T5269] loop4: detected capacity change from 0 to 256 [ 88.731750][ T5281] FAULT_INJECTION: forcing a failure. [ 88.731750][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 88.731792][ T5281] CPU: 1 UID: 0 PID: 5281 Comm: syz.3.623 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.731898][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.731994][ T5281] Call Trace: [ 88.732003][ T5281] [ 88.732081][ T5281] __dump_stack+0x1d/0x30 [ 88.732115][ T5281] dump_stack_lvl+0x95/0xd0 [ 88.732145][ T5281] dump_stack+0x15/0x1b [ 88.732231][ T5281] should_fail_ex+0x262/0x280 [ 88.732264][ T5281] ? security_sk_alloc+0x52/0x120 [ 88.732303][ T5281] should_failslab+0x8c/0xb0 [ 88.732402][ T5281] __kmalloc_noprof+0xd0/0x4d0 [ 88.732504][ T5281] ? security_sk_alloc+0x52/0x120 [ 88.732536][ T5281] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 88.732935][ T5281] security_sk_alloc+0x52/0x120 [ 88.732971][ T5281] sk_prot_alloc+0xc2/0x180 [ 88.733064][ T5281] sk_alloc+0x34/0x3e0 [ 88.733450][ T5281] unix_create1+0xa1/0x400 [ 88.733541][ T5281] unix_create+0xf6/0x130 [ 88.733564][ T5281] __sock_create+0x2e5/0x580 [ 88.733698][ T5281] __sys_socketpair+0x1c4/0x430 [ 88.733769][ T5281] __x64_sys_socketpair+0x52/0x60 [ 88.733909][ T5281] x64_sys_call+0x1bf7/0x2550 [ 88.734313][ T5281] do_syscall_64+0x112/0x360 [ 88.734401][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.734519][ T5281] RIP: 0033:0x7f28a9dfe159 [ 88.734566][ T5281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.734592][ T5281] RSP: 002b:00007f28a8857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 88.734619][ T5281] RAX: ffffffffffffffda RBX: 00007f28aa085fa0 RCX: 00007f28a9dfe159 [ 88.734637][ T5281] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 88.734654][ T5281] RBP: 00007f28a9e9503b R08: 0000000000000000 R09: 0000000000000000 [ 88.734729][ T5281] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 88.734747][ T5281] R13: 00007f28aa086038 R14: 00007f28aa085fa0 R15: 00007ffe15028c78 [ 88.734777][ T5281] [ 89.087696][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 89.166271][ T5296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.181074][ T5296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.181943][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 89.181988][ T29] audit: type=1400 audit(1789084933.095:552): avc: denied { read write } for pid=5295 comm="syz.2.629" name="trace_pipe_raw" dev="tracefs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 89.347117][ T29] audit: type=1326 audit(1789084933.265:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347161][ T29] audit: type=1326 audit(1789084933.265:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347272][ T29] audit: type=1326 audit(1789084933.265:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347310][ T29] audit: type=1326 audit(1789084933.265:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347338][ T29] audit: type=1326 audit(1789084933.275:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347453][ T29] audit: type=1326 audit(1789084933.275:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347489][ T29] audit: type=1326 audit(1789084933.275:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347598][ T29] audit: type=1326 audit(1789084933.275:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.347637][ T29] audit: type=1326 audit(1789084933.275:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.2.631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73044e159 code=0x7ffc0000 [ 89.689853][ T5307] loop0: detected capacity change from 0 to 1024 [ 89.733055][ T5307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.897482][ T5320] FAULT_INJECTION: forcing a failure. [ 89.897482][ T5320] name failslab, interval 1, probability 0, space 0, times 0 [ 89.897520][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.2.640 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.897558][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.897589][ T5320] Call Trace: [ 89.897598][ T5320] [ 89.897607][ T5320] __dump_stack+0x1d/0x30 [ 89.897685][ T5320] dump_stack_lvl+0x95/0xd0 [ 89.897708][ T5320] dump_stack+0x15/0x1b [ 89.897729][ T5320] should_fail_ex+0x262/0x280 [ 89.897760][ T5320] ? init_rescuer+0x93/0x290 [ 89.897828][ T5320] should_failslab+0x8c/0xb0 [ 89.897924][ T5320] __kmalloc_cache_node_noprof+0x81/0x420 [ 89.898027][ T5320] ? init_rescuer+0x93/0x290 [ 89.898067][ T5320] init_rescuer+0x93/0x290 [ 89.898100][ T5320] ? schedule_on_each_cpu+0x10/0x340 [ 89.898171][ T5320] alloc_workqueue_va+0x145b/0x1630 [ 89.898234][ T5320] alloc_workqueue_noprof+0x84/0xb0 [ 89.898274][ T5320] nci_register_device+0x20c/0x510 [ 89.898309][ T5320] virtual_ncidev_open+0xca/0x130 [ 89.898419][ T5320] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 89.898464][ T5320] misc_open+0x1df/0x220 [ 89.898500][ T5320] chrdev_open+0x2eb/0x3a0 [ 89.898589][ T5320] do_dentry_open+0x49f/0xa60 [ 89.898618][ T5320] ? __pfx_chrdev_open+0x10/0x10 [ 89.898660][ T5320] vfs_open+0x37/0x1e0 [ 89.898681][ T5320] path_openat+0xc01/0x10d0 [ 89.898726][ T5320] do_file_open+0x16c/0x290 [ 89.898777][ T5320] do_sys_openat2+0xa0/0x130 [ 89.898811][ T5320] __x64_sys_openat+0xf2/0x120 [ 89.898854][ T5320] x64_sys_call+0x1f72/0x2550 [ 89.898941][ T5320] do_syscall_64+0x112/0x360 [ 89.898983][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.899006][ T5320] RIP: 0033:0x7fd73044e159 [ 89.899023][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.899057][ T5320] RSP: 002b:00007fd72eea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.899086][ T5320] RAX: ffffffffffffffda RBX: 00007fd7306d5fa0 RCX: 00007fd73044e159 [ 89.899107][ T5320] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 89.899126][ T5320] RBP: 00007fd7304e503b R08: 0000000000000000 R09: 0000000000000000 [ 89.899145][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.899213][ T5320] R13: 00007fd7306d6038 R14: 00007fd7306d5fa0 R15: 00007ffe0e832e58 [ 89.899235][ T5320] [ 89.899575][ T5320] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_rx_wq" [ 90.711376][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.066338][ T5341] bond2: entered allmulticast mode [ 91.137966][ T5341] wireguard0: entered promiscuous mode [ 91.137988][ T5341] wireguard0: entered allmulticast mode [ 91.138471][ T5341] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 91.141669][ T5341] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 91.329350][ T5352] FAULT_INJECTION: forcing a failure. [ 91.329350][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 91.329392][ T5352] CPU: 1 UID: 0 PID: 5352 Comm: syz.3.650 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.329427][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.329443][ T5352] Call Trace: [ 91.329451][ T5352] [ 91.329459][ T5352] __dump_stack+0x1d/0x30 [ 91.329493][ T5352] dump_stack_lvl+0x95/0xd0 [ 91.329524][ T5352] dump_stack+0x15/0x1b [ 91.329552][ T5352] should_fail_ex+0x262/0x280 [ 91.329585][ T5352] ? alloc_empty_file+0x70/0x1e0 [ 91.329614][ T5352] should_failslab+0x8c/0xb0 [ 91.329645][ T5352] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 91.329679][ T5352] ? alloc_empty_file+0x70/0x1e0 [ 91.329704][ T5352] alloc_empty_file+0x70/0x1e0 [ 91.329733][ T5352] alloc_file_pseudo+0x92/0x120 [ 91.329762][ T5352] __shmem_file_setup+0x226/0x260 [ 91.329800][ T5352] shmem_zero_setup+0x66/0xe0 [ 91.329838][ T5352] mmap_region+0x1a95/0x21a0 [ 91.329909][ T5352] do_mmap+0xa20/0xc70 [ 91.329945][ T5352] vm_mmap_pgoff+0x183/0x2d0 [ 91.329981][ T5352] ksys_mmap_pgoff+0xc1/0x310 [ 91.330023][ T5352] ? __x64_sys_mmap+0x49/0x70 [ 91.330067][ T5352] x64_sys_call+0x23b3/0x2550 [ 91.330101][ T5352] do_syscall_64+0x112/0x360 [ 91.330137][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.330169][ T5352] RIP: 0033:0x7f28a9dfe159 [ 91.330187][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.330212][ T5352] RSP: 002b:00007f28a8857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.330240][ T5352] RAX: ffffffffffffffda RBX: 00007f28aa085fa0 RCX: 00007f28a9dfe159 [ 91.330260][ T5352] RDX: 0000000002000002 RSI: 0000000000200000 RDI: 0000200000000000 [ 91.330279][ T5352] RBP: 00007f28a9e9503b R08: ffffffffffffffff R09: 0000000018a41000 [ 91.330298][ T5352] R10: 0000000000206031 R11: 0000000000000246 R12: 0000000000000000 [ 91.330316][ T5352] R13: 00007f28aa086038 R14: 00007f28aa085fa0 R15: 00007ffe15028c78 [ 91.330337][ T5352] [ 91.815067][ T5379] loop2: detected capacity change from 0 to 512 [ 91.842886][ T5379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.843045][ T5379] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.601053][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.885795][ T5405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 93.112311][ T5415] bond1: entered allmulticast mode [ 93.142250][ T5415] wireguard0: entered promiscuous mode [ 93.142274][ T5415] wireguard0: entered allmulticast mode [ 93.145461][ T5415] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 93.146388][ T5415] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 93.332875][ T5435] FAULT_INJECTION: forcing a failure. [ 93.332875][ T5435] name failslab, interval 1, probability 0, space 0, times 0 [ 93.332914][ T5435] CPU: 1 UID: 0 PID: 5435 Comm: syz.2.681 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.332996][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.333010][ T5435] Call Trace: [ 93.333016][ T5435] [ 93.333024][ T5435] __dump_stack+0x1d/0x30 [ 93.333052][ T5435] dump_stack_lvl+0x95/0xd0 [ 93.333074][ T5435] dump_stack+0x15/0x1b [ 93.333095][ T5435] should_fail_ex+0x262/0x280 [ 93.333187][ T5435] should_failslab+0x8c/0xb0 [ 93.333292][ T5435] __kvmalloc_node_noprof+0x168/0x5c0 [ 93.333336][ T5435] ? simple_xattr_alloc+0x58/0xe0 [ 93.333365][ T5435] ? simple_xattr_alloc+0x58/0xe0 [ 93.333404][ T5435] simple_xattr_alloc+0x58/0xe0 [ 93.333451][ T5435] shmem_initxattrs+0x19f/0x360 [ 93.333550][ T5435] security_inode_init_security+0x249/0x320 [ 93.333589][ T5435] ? __pfx_shmem_initxattrs+0x10/0x10 [ 93.333616][ T5435] shmem_mknod+0xaa/0x170 [ 93.333637][ T5435] vfs_mknod+0x337/0x460 [ 93.333683][ T5435] filename_mknodat+0x279/0x450 [ 93.333721][ T5435] __se_sys_mknodat+0x38/0xf0 [ 93.333779][ T5435] __x64_sys_mknodat+0x55/0x70 [ 93.333841][ T5435] x64_sys_call+0x2182/0x2550 [ 93.333877][ T5435] do_syscall_64+0x112/0x360 [ 93.333914][ T5435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.333936][ T5435] RIP: 0033:0x7fd73044e159 [ 93.334014][ T5435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.334033][ T5435] RSP: 002b:00007fd72eea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 93.334060][ T5435] RAX: ffffffffffffffda RBX: 00007fd7306d5fa0 RCX: 00007fd73044e159 [ 93.334079][ T5435] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 93.334093][ T5435] RBP: 00007fd7304e503b R08: 0000000000000000 R09: 0000000000000000 [ 93.334107][ T5435] R10: 00000000fffffff7 R11: 0000000000000246 R12: 0000000000000000 [ 93.334249][ T5435] R13: 00007fd7306d6038 R14: 00007fd7306d5fa0 R15: 00007ffe0e832e58 [ 93.334276][ T5435] [ 93.879730][ T5452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 94.493237][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 94.556122][ T5465] FAULT_INJECTION: forcing a failure. [ 94.556122][ T5465] name failslab, interval 1, probability 0, space 0, times 0 [ 94.556199][ T5465] CPU: 1 UID: 0 PID: 5465 Comm: syz.1.693 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.556257][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.556276][ T5465] Call Trace: [ 94.556285][ T5465] [ 94.556297][ T5465] __dump_stack+0x1d/0x30 [ 94.556333][ T5465] dump_stack_lvl+0x95/0xd0 [ 94.556361][ T5465] dump_stack+0x15/0x1b [ 94.556469][ T5465] should_fail_ex+0x262/0x280 [ 94.556504][ T5465] ? security_inode_init_security+0xb4/0x320 [ 94.556541][ T5465] should_failslab+0x8c/0xb0 [ 94.556615][ T5465] __kmalloc_noprof+0xd0/0x4d0 [ 94.556658][ T5465] ? security_inode_init_security+0xb4/0x320 [ 94.556819][ T5465] ? __pfx_shmem_initxattrs+0x10/0x10 [ 94.556922][ T5465] security_inode_init_security+0xb4/0x320 [ 94.556955][ T5465] ? simple_acl_create+0x328/0x370 [ 94.556995][ T5465] shmem_mknod+0xaa/0x170 [ 94.557025][ T5465] vfs_mknod+0x337/0x460 [ 94.557155][ T5465] filename_mknodat+0x279/0x450 [ 94.557198][ T5465] __se_sys_mknodat+0x38/0xf0 [ 94.557314][ T5465] __x64_sys_mknodat+0x55/0x70 [ 94.557355][ T5465] x64_sys_call+0x2182/0x2550 [ 94.557382][ T5465] do_syscall_64+0x112/0x360 [ 94.557419][ T5465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.557465][ T5465] RIP: 0033:0x7f9dbdfbe159 [ 94.557487][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.557518][ T5465] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 94.557548][ T5465] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 94.557569][ T5465] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 94.557663][ T5465] RBP: 00007f9dbe05503b R08: 0000000000000000 R09: 0000000000000000 [ 94.557676][ T5465] R10: 00000000fffffff7 R11: 0000000000000246 R12: 0000000000000000 [ 94.557690][ T5465] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 94.557711][ T5465] [ 94.807894][ T5467] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 94.825980][ T5467] bond2: entered promiscuous mode [ 94.826128][ T5467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.875714][ T5467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.876523][ T5467] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 94.876547][ T5467] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 94.903727][ T5467] bond2: (slave xfrm1): making interface the new active one [ 94.903764][ T5467] xfrm1: entered promiscuous mode [ 94.917947][ T5467] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 95.139561][ T5487] ip_tables: iptables: counters copy to user failed while replacing table [ 95.765136][ T5395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.862189][ T5510] netlink: 'syz.0.709': attribute type 3 has an invalid length. [ 95.862273][ T5510] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 95.862365][ T5510] netlink: 228 bytes leftover after parsing attributes in process `syz.0.709'. [ 96.792045][ T5527] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2433686207.4143120891.1593512197), cmd(4) [ 96.852200][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 96.852217][ T29] audit: type=1326 audit(1789084940.775:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.852719][ T29] audit: type=1326 audit(1789084940.775:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.852756][ T29] audit: type=1326 audit(1789084940.775:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.852932][ T29] audit: type=1326 audit(1789084940.775:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853068][ T29] audit: type=1326 audit(1789084940.775:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853378][ T29] audit: type=1326 audit(1789084940.775:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853413][ T29] audit: type=1326 audit(1789084940.775:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853564][ T29] audit: type=1326 audit(1789084940.775:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853719][ T29] audit: type=1326 audit(1789084940.775:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 96.853998][ T29] audit: type=1326 audit(1789084940.775:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c89e159 code=0x7ffc0000 [ 98.055552][ T5590] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 98.055583][ T5590] netlink: 17 bytes leftover after parsing attributes in process `syz.3.744'. [ 98.137221][ T5596] loop4: detected capacity change from 0 to 1024 [ 98.140557][ T5596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.183964][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.239691][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.577550][ T5623] loop4: detected capacity change from 0 to 2048 [ 98.604906][ T5626] loop0: detected capacity change from 0 to 1024 [ 98.609288][ T5626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.614585][ T5628] FAULT_INJECTION: forcing a failure. [ 98.614585][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 98.614680][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: syz.3.759 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.614809][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.614855][ T5628] Call Trace: [ 98.614885][ T5628] [ 98.614909][ T5628] __dump_stack+0x1d/0x30 [ 98.614998][ T5628] dump_stack_lvl+0x95/0xd0 [ 98.615098][ T5628] dump_stack+0x15/0x1b [ 98.615186][ T5628] should_fail_ex+0x262/0x280 [ 98.615265][ T5628] ? rxrpc_alloc_call+0x80/0x550 [ 98.615414][ T5628] should_failslab+0x8c/0xb0 [ 98.615517][ T5628] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 98.615614][ T5628] ? rxrpc_alloc_call+0x80/0x550 [ 98.615783][ T5628] rxrpc_alloc_call+0x80/0x550 [ 98.615853][ T5628] rxrpc_new_client_call+0xbf/0xe60 [ 98.615951][ T5628] ? rxrpc_lookup_peer+0x48c/0x550 [ 98.616044][ T5628] rxrpc_do_sendmsg+0xb52/0xe40 [ 98.616192][ T5628] rxrpc_sendmsg+0x46c/0x580 [ 98.616360][ T5628] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 98.616540][ T5628] ____sys_sendmsg+0x532/0x580 [ 98.616686][ T5628] ___sys_sendmsg+0x195/0x1e0 [ 98.616779][ T5628] __x64_sys_sendmsg+0xd4/0x160 [ 98.616829][ T5628] x64_sys_call+0x22ab/0x2550 [ 98.616997][ T5628] do_syscall_64+0x112/0x360 [ 98.617108][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.617188][ T5628] RIP: 0033:0x7f28a9dfe159 [ 98.617231][ T5628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.617299][ T5628] RSP: 002b:00007f28a8857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.617384][ T5628] RAX: ffffffffffffffda RBX: 00007f28aa085fa0 RCX: 00007f28a9dfe159 [ 98.617440][ T5628] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 98.617494][ T5628] RBP: 00007f28a9e9503b R08: 0000000000000000 R09: 0000000000000000 [ 98.617548][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.617602][ T5628] R13: 00007f28aa086038 R14: 00007f28aa085fa0 R15: 00007ffe15028c78 [ 98.617669][ T5628] [ 98.664678][ T5623] Alternate GPT is invalid, using primary GPT. [ 98.665133][ T5623] loop4: p2 p3 p7 [ 98.683102][ T5626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.985338][ T3974] udevd[3974]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 98.986526][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 98.993123][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 99.827875][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.940806][ T5663] netlink: 88 bytes leftover after parsing attributes in process `syz.0.771'. [ 99.971796][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 100.198279][ T5676] FAULT_INJECTION: forcing a failure. [ 100.198279][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 100.198342][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.1.776 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.198419][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.198438][ T5676] Call Trace: [ 100.198446][ T5676] [ 100.198457][ T5676] __dump_stack+0x1d/0x30 [ 100.198561][ T5676] dump_stack_lvl+0x95/0xd0 [ 100.198592][ T5676] dump_stack+0x15/0x1b [ 100.198690][ T5676] should_fail_ex+0x262/0x280 [ 100.198724][ T5676] should_failslab+0x8c/0xb0 [ 100.198829][ T5676] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 100.198895][ T5676] ? v9fs_init_fs_context+0x33/0x220 [ 100.199011][ T5676] ? v9fs_init_fs_context+0xc7/0x220 [ 100.199052][ T5676] ? v9fs_init_fs_context+0xc7/0x220 [ 100.199092][ T5676] kstrdup+0x3e/0xd0 [ 100.199121][ T5676] v9fs_init_fs_context+0xc7/0x220 [ 100.199223][ T5676] alloc_fs_context+0x490/0x570 [ 100.199255][ T5676] fs_context_for_mount+0x22/0x30 [ 100.199286][ T5676] do_new_mount+0xe7/0x8d0 [ 100.199337][ T5676] ? security_capable+0x7b/0x90 [ 100.199372][ T5676] path_mount+0x4ad/0xb90 [ 100.199497][ T5676] __se_sys_mount+0x28c/0x2e0 [ 100.199528][ T5676] __x64_sys_mount+0x67/0x80 [ 100.199555][ T5676] x64_sys_call+0xc3b/0x2550 [ 100.199591][ T5676] do_syscall_64+0x112/0x360 [ 100.199739][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.199770][ T5676] RIP: 0033:0x7f9dbdfbe159 [ 100.199825][ T5676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.199852][ T5676] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.199877][ T5676] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 100.199893][ T5676] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 100.199971][ T5676] RBP: 00007f9dbe05503b R08: 00002000000005c0 R09: 0000000000000000 [ 100.199989][ T5676] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 100.200006][ T5676] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 100.200081][ T5676] [ 100.244041][ T5653] loop2: detected capacity change from 0 to 1024 [ 100.271504][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.271917][ T5653] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.425148][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.609350][ T5695] FAULT_INJECTION: forcing a failure. [ 100.609350][ T5695] name failslab, interval 1, probability 0, space 0, times 0 [ 100.609395][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.609425][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.609443][ T5695] Call Trace: [ 100.609452][ T5695] [ 100.609462][ T5695] __dump_stack+0x1d/0x30 [ 100.609518][ T5695] dump_stack_lvl+0x95/0xd0 [ 100.609550][ T5695] dump_stack+0x15/0x1b [ 100.609576][ T5695] should_fail_ex+0x262/0x280 [ 100.609609][ T5695] ? proc_self_get_link+0x96/0x110 [ 100.609636][ T5695] should_failslab+0x8c/0xb0 [ 100.609698][ T5695] __kmalloc_cache_noprof+0x7a/0x400 [ 100.609769][ T5695] ? selinux_inode_follow_link+0x1ac/0x1f0 [ 100.609912][ T5695] ? proc_self_get_link+0x96/0x110 [ 100.609941][ T5695] ? __pfx_proc_self_get_link+0x10/0x10 [ 100.609969][ T5695] proc_self_get_link+0x96/0x110 [ 100.610042][ T5695] pick_link+0x514/0x8e0 [ 100.610078][ T5695] step_into_slowpath+0x36a/0x4c0 [ 100.610151][ T5695] ? inode_permission+0x1da/0x3b0 [ 100.610179][ T5695] link_path_walk+0x947/0xdd0 [ 100.610220][ T5695] path_openat+0xe7/0x10d0 [ 100.610262][ T5695] do_file_open+0x16c/0x290 [ 100.610374][ T5695] do_sys_openat2+0xa0/0x130 [ 100.610408][ T5695] __x64_sys_openat+0xf2/0x120 [ 100.610442][ T5695] x64_sys_call+0x1f72/0x2550 [ 100.610477][ T5695] do_syscall_64+0x112/0x360 [ 100.610529][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.610561][ T5695] RIP: 0033:0x7f9dbdf7e98e [ 100.610583][ T5695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.610609][ T5695] RSP: 002b:00007f9dbca16f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.610707][ T5695] RAX: ffffffffffffffda RBX: 00007f9dbca176c0 RCX: 00007f9dbdf7e98e [ 100.610795][ T5695] RDX: 0000000000000000 RSI: 00007f9dbe054776 RDI: ffffffffffffff9c [ 100.610834][ T5695] RBP: 00007f9dbe05503b R08: 0000000000000000 R09: 0000000000000000 [ 100.610854][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.610868][ T5695] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 100.610894][ T5695] [ 101.080535][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 101.336165][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 101.415642][ T5729] loop2: detected capacity change from 0 to 128 [ 101.427053][ T5729] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.430470][ T5729] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.547575][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.606669][ T5734] FAULT_INJECTION: forcing a failure. [ 101.606669][ T5734] name failslab, interval 1, probability 0, space 0, times 0 [ 101.606710][ T5734] CPU: 1 UID: 0 PID: 5734 Comm: syz.2.799 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.606842][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.606866][ T5734] Call Trace: [ 101.606875][ T5734] [ 101.606886][ T5734] __dump_stack+0x1d/0x30 [ 101.606921][ T5734] dump_stack_lvl+0x95/0xd0 [ 101.606953][ T5734] dump_stack+0x15/0x1b [ 101.606981][ T5734] should_fail_ex+0x262/0x280 [ 101.607014][ T5734] ? alloc_empty_file+0x70/0x1e0 [ 101.607038][ T5734] should_failslab+0x8c/0xb0 [ 101.607081][ T5734] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 101.607117][ T5734] ? alloc_empty_file+0x70/0x1e0 [ 101.607147][ T5734] alloc_empty_file+0x70/0x1e0 [ 101.607177][ T5734] alloc_file_pseudo+0x92/0x120 [ 101.607210][ T5734] __shmem_file_setup+0x226/0x260 [ 101.607248][ T5734] shmem_zero_setup+0x66/0xe0 [ 101.607287][ T5734] mmap_region+0x1a95/0x21a0 [ 101.607363][ T5734] do_mmap+0xa20/0xc70 [ 101.607412][ T5734] vm_mmap_pgoff+0x183/0x2d0 [ 101.607447][ T5734] ksys_mmap_pgoff+0xc1/0x310 [ 101.607491][ T5734] ? __x64_sys_mmap+0x49/0x70 [ 101.607536][ T5734] x64_sys_call+0x23b3/0x2550 [ 101.607570][ T5734] do_syscall_64+0x112/0x360 [ 101.607616][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.607647][ T5734] RIP: 0033:0x7fd73044e159 [ 101.607671][ T5734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.607693][ T5734] RSP: 002b:00007fd72eea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.607722][ T5734] RAX: ffffffffffffffda RBX: 00007fd7306d5fa0 RCX: 00007fd73044e159 [ 101.607741][ T5734] RDX: 0000000002000002 RSI: 0000000000200000 RDI: 0000200000000000 [ 101.607768][ T5734] RBP: 00007fd7304e503b R08: ffffffffffffffff R09: 0000000018a41000 [ 101.607789][ T5734] R10: 0000000000206031 R11: 0000000000000246 R12: 0000000000000000 [ 101.607808][ T5734] R13: 00007fd7306d6038 R14: 00007fd7306d5fa0 R15: 00007ffe0e832e58 [ 101.607837][ T5734] [ 102.158882][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 102.158901][ T29] audit: type=1400 audit(1789084946.085:624): avc: denied { read } for pid=3021 comm="dhcpcd" name="n43" dev="tmpfs" ino=3739 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.158937][ T29] audit: type=1400 audit(1789084946.085:625): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=3739 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.159028][ T29] audit: type=1400 audit(1789084946.085:626): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=3739 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.247510][ T29] audit: type=1400 audit(1789084946.175:627): avc: denied { setopt } for pid=5750 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.482487][ T29] audit: type=1400 audit(1789084946.405:628): avc: denied { write } for pid=5752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.482531][ T29] audit: type=1400 audit(1789084946.405:629): avc: denied { create } for pid=5752 comm="dhcpcd-run-hook" name="resolv.conf.xfrm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.482601][ T29] audit: type=1400 audit(1789084946.405:630): avc: denied { write } for pid=5752 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.xfrm0.link" dev="tmpfs" ino=3764 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.482714][ T29] audit: type=1400 audit(1789084946.405:631): avc: denied { append } for pid=5752 comm="dhcpcd-run-hook" name="resolv.conf.xfrm0.link" dev="tmpfs" ino=3764 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.485659][ T29] audit: type=1400 audit(1789084946.405:632): avc: denied { open } for pid=5769 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.485705][ T29] audit: type=1400 audit(1789084946.405:633): avc: denied { kernel } for pid=5769 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.615452][ T5768] request_module fs- succeeded, but still no fs? [ 102.802828][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 102.802913][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.802946][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.828060][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 102.828239][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.828359][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.831165][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 102.831241][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.831352][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.833599][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 102.833797][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.834128][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.847694][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 102.847792][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.847884][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.854982][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 102.855203][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.855418][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.871203][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 102.871252][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.871438][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.885145][ T5783] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 102.885243][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.885427][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 102.895582][ T5789] FAULT_INJECTION: forcing a failure. [ 102.895582][ T5789] name failslab, interval 1, probability 0, space 0, times 0 [ 102.895687][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.895764][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.895807][ T5789] Call Trace: [ 102.895838][ T5789] [ 102.895860][ T5789] __dump_stack+0x1d/0x30 [ 102.895946][ T5789] dump_stack_lvl+0x95/0xd0 [ 102.896020][ T5789] dump_stack+0x15/0x1b [ 102.896094][ T5789] should_fail_ex+0x262/0x280 [ 102.896177][ T5789] ? alloc_empty_file+0x70/0x1e0 [ 102.896252][ T5789] should_failslab+0x8c/0xb0 [ 102.896356][ T5789] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 102.896471][ T5789] ? alloc_empty_file+0x70/0x1e0 [ 102.896555][ T5789] alloc_empty_file+0x70/0x1e0 [ 102.896623][ T5789] alloc_file_pseudo+0x92/0x120 [ 102.896708][ T5789] __shmem_file_setup+0x226/0x260 [ 102.896815][ T5789] shmem_zero_setup+0x66/0xe0 [ 102.896912][ T5789] mmap_region+0x1a95/0x21a0 [ 102.897102][ T5789] do_mmap+0xa20/0xc70 [ 102.897208][ T5789] vm_mmap_pgoff+0x183/0x2d0 [ 102.897304][ T5789] ksys_mmap_pgoff+0xc1/0x310 [ 102.897409][ T5789] ? __x64_sys_mmap+0x49/0x70 [ 102.897525][ T5789] x64_sys_call+0x23b3/0x2550 [ 102.897610][ T5789] do_syscall_64+0x112/0x360 [ 102.897752][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.897845][ T5789] RIP: 0033:0x7f9dbdfbe159 [ 102.897900][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.897971][ T5789] RSP: 002b:00007f9dbca17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.898044][ T5789] RAX: ffffffffffffffda RBX: 00007f9dbe245fa0 RCX: 00007f9dbdfbe159 [ 102.898089][ T5789] RDX: 0000000002000002 RSI: 0000000000200000 RDI: 0000200000000000 [ 102.898143][ T5789] RBP: 00007f9dbe05503b R08: ffffffffffffffff R09: 0000000018a41000 [ 102.898190][ T5789] R10: 0000000000206031 R11: 0000000000000246 R12: 0000000000000000 [ 102.898239][ T5789] R13: 00007f9dbe246038 R14: 00007f9dbe245fa0 R15: 00007ffd1af31658 [ 102.898308][ T5789] [ 102.924331][ T5800] vhci_hcd: connection closed [ 102.924697][ T5797] vhci_hcd: connection closed [ 102.924965][ T5795] vhci_hcd: connection closed [ 102.925537][ T5793] vhci_hcd: connection closed [ 102.926130][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.926284][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.926430][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.927893][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.927972][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.928049][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.931913][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.932047][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.932123][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.932868][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.933005][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.933085][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.946973][ T5802] vhci_hcd: connection closed [ 102.951945][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.952091][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.952164][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.955053][ T5791] vhci_hcd: connection closed [ 102.955828][ T5787] vhci_hcd: connection closed [ 102.956110][ T5785] vhci_hcd: connection closed [ 102.956795][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.956849][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.957075][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.958807][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.958941][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.959074][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.961475][ T4500] vhci_hcd vhci_hcd.3: stop threads [ 102.961530][ T4500] vhci_hcd vhci_hcd.3: release socket [ 102.961599][ T4500] vhci_hcd vhci_hcd.3: disconnect device [ 102.987238][ T3383] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 103.667965][ T5824] netlink: 'syz.2.830': attribute type 3 has an invalid length. [ 103.668146][ T5824] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 103.668175][ T5824] netlink: 228 bytes leftover after parsing attributes in process `syz.2.830'. [ 103.809095][ T5831] loop0: detected capacity change from 0 to 1764 [ 103.811028][ T5831] iso9660: Unknown parameter 'íap*aà“\—' [ 104.629170][ T5903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5903 comm=syz.3.858 [ 105.515686][ T5942] netlink: 'syz.1.875': attribute type 7 has an invalid length. [ 105.681252][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 105.944803][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 106.226026][ T5984] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 106.260695][ T5984] bond2: entered promiscuous mode [ 106.260899][ T5984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.348186][ T5984] bond2: (slave bridge1): making interface the new active one [ 106.348216][ T5984] bridge1: entered promiscuous mode [ 106.352621][ T5984] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 106.553866][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 106.572672][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 106.572701][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 106.822263][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'. [ 107.170230][ T29] kauditd_printk_skb: 9742 callbacks suppressed [ 107.170273][ T29] audit: type=1400 audit(1789084951.095:10376): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.170434][ T29] audit: type=1400 audit(1789084951.095:10377): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.172159][ T29] audit: type=1400 audit(1789084951.095:10378): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173634][ T29] audit: type=1400 audit(1789084951.095:10379): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173664][ T29] audit: type=1400 audit(1789084951.095:10380): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173738][ T29] audit: type=1400 audit(1789084951.095:10381): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173773][ T29] audit: type=1400 audit(1789084951.095:10382): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173806][ T29] audit: type=1400 audit(1789084951.095:10383): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173913][ T29] audit: type=1400 audit(1789084951.095:10384): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.173946][ T29] audit: type=1400 audit(1789084951.095:10385): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.740752][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 107.802415][ T6054] batman_adv: batadv0: Adding interface: veth0 [ 107.802431][ T6054] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.802472][ T6054] batman_adv: batadv0: Interface activated: veth0 [ 107.803312][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.803331][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.805298][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.805318][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.806446][ T6054] batman_adv: batadv0: Interface deactivated: veth0 [ 107.806460][ T6054] batman_adv: batadv0: Removing interface: veth0 [ 108.245566][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 109.197286][ T4499] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.197403][ T4499] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.217760][ T4499] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.217928][ T4499] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.259704][ T6125] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 109.281893][ T6125] bond1: entered promiscuous mode [ 109.282073][ T6125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.307958][ T6125] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.308057][ T6125] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 109.308080][ T6125] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 109.850926][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.969'. [ 109.877700][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.877883][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.006508][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.022270][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.050662][ T6165] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 110.111583][ T6162] ip6gre1: entered promiscuous mode [ 110.111607][ T6162] ip6gre1: entered allmulticast mode [ 110.153972][ T6168] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 110.153990][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.965'. [ 110.172293][ T6165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.187440][ T6166] batman_adv: batadv0: Interface deactivated: dummy0 [ 110.188169][ T6166] batman_adv: batadv0: Removing interface: dummy0 [ 110.243788][ T6166] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 110.257366][ T4470] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 110.281030][ T6168] dummy0: entered promiscuous mode [ 110.305880][ T6172] netlink: 9 bytes leftover after parsing attributes in process `syz.2.971'. [ 110.319136][ T6168] bond3: (slave dummy0): Removing an active aggregator [ 110.319516][ T6168] bond3: (slave dummy0): Releasing backup interface [ 110.395718][ T6172] gretap0: entered promiscuous mode [ 110.408263][ T6173] netlink: 5 bytes leftover after parsing attributes in process `syz.2.971'. [ 110.410106][ T6173] 0ªî{X¹¦: renamed from gretap0 [ 110.423975][ T6173] 0ªî{X¹¦: left promiscuous mode [ 110.424033][ T6173] 0ªî{X¹¦: entered allmulticast mode [ 110.445090][ T6173] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.458235][ T4499] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.458338][ T4499] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.458605][ T4499] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.458715][ T4499] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.458907][ T4499] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.464394][ T4499] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.464553][ T4499] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.464661][ T4499] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 110.915234][ T6201] netlink: 'syz.2.984': attribute type 2 has an invalid length. [ 111.053030][ T6211] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.988'. [ 111.067779][ T6211] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.988'. [ 111.311856][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'. [ 111.918213][ T6256] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 111.918979][ T6245] syzkaller0: entered promiscuous mode [ 111.918999][ T6245] syzkaller0: entered allmulticast mode [ 111.928072][ T6248] bond0: (slave bond_slave_0): Releasing backup interface [ 111.986978][ T6248] bond0: (slave bond_slave_1): Releasing backup interface [ 112.021599][ T6248] team0: Port device team_slave_0 removed [ 112.024563][ T6248] team0: Port device team_slave_1 removed [ 112.024701][ T6248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.160288][ T6256] bond2: entered promiscuous mode [ 112.160459][ T6256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.178325][ T29] kauditd_printk_skb: 13658 callbacks suppressed [ 112.178377][ T29] audit: type=1400 audit(1789084956.105:24044): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.182789][ T29] audit: type=1400 audit(1789084956.105:24045): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.183213][ T29] audit: type=1400 audit(1789084956.105:24046): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.183414][ T29] audit: type=1400 audit(1789084956.105:24047): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.183877][ T29] audit: type=1400 audit(1789084956.105:24048): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.185988][ T29] audit: type=1400 audit(1789084956.105:24049): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.188881][ T29] audit: type=1400 audit(1789084956.115:24050): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.193596][ T29] audit: type=1400 audit(1789084956.115:24051): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.193996][ T29] audit: type=1400 audit(1789084956.115:24052): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.194589][ T29] audit: type=1400 audit(1789084956.115:24053): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.408707][ T6263] bond2: (slave bridge2): making interface the new active one [ 112.408734][ T6263] bridge2: entered promiscuous mode [ 112.410188][ T6263] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 112.817515][ T6297] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 112.904162][ T4506] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.916818][ T6306] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 112.940077][ T6306] bond3: entered promiscuous mode [ 112.940175][ T6306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.969383][ T6306] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.969412][ T6306] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 112.969437][ T6306] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 113.295389][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 113.517491][ T6338] bridge0: port 3(syz_tun) entered blocking state [ 113.517535][ T6338] bridge0: port 3(syz_tun) entered disabled state [ 113.517662][ T6338] syz_tun: entered allmulticast mode [ 113.518256][ T6338] syz_tun: entered promiscuous mode [ 113.518512][ T6338] bridge0: port 3(syz_tun) entered blocking state [ 113.518550][ T6338] bridge0: port 3(syz_tun) entered forwarding state [ 113.665982][ T6344] netlink: 'syz.4.1045': attribute type 5 has an invalid length. [ 113.849875][ T6360] veth1_vlan: entered allmulticast mode [ 113.883099][ T6360] bridge0: port 3(syz_tun) entered blocking state [ 113.883141][ T6360] bridge0: port 3(syz_tun) entered disabled state [ 113.883293][ T6360] syz_tun: entered allmulticast mode [ 113.883956][ T6360] syz_tun: entered promiscuous mode [ 113.884199][ T6360] bridge0: port 3(syz_tun) entered blocking state [ 113.884306][ T6360] bridge0: port 3(syz_tun) entered forwarding state [ 113.950831][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 114.507862][ T4506] bridge0: port 3(syz_tun) entered disabled state [ 114.937139][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.937149][ T3823] Bluetooth: hci0: command 0x1003 tx timeout [ 115.248918][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 115.656721][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 115.763200][ T6430] ================================================================== [ 115.763240][ T6430] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 115.763274][ T6430] [ 115.763280][ T6430] write to 0xffff88810af22e20 of 8 bytes by task 6437 on cpu 0: [ 115.763297][ T6430] shmem_file_splice_read+0x401/0x590 [ 115.763316][ T6430] splice_direct_to_actor+0x261/0x680 [ 115.763339][ T6430] do_splice_direct+0x119/0x1a0 [ 115.763363][ T6430] do_sendfile+0x37d/0x640 [ 115.763389][ T6430] __x64_sys_sendfile64+0x105/0x150 [ 115.763426][ T6430] x64_sys_call+0x1015/0x2550 [ 115.763454][ T6430] do_syscall_64+0x112/0x360 [ 115.763498][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.763527][ T6430] [ 115.763535][ T6430] write to 0xffff88810af22e20 of 8 bytes by task 6430 on cpu 1: [ 115.763558][ T6430] shmem_file_splice_read+0x401/0x590 [ 115.763584][ T6430] splice_direct_to_actor+0x261/0x680 [ 115.763603][ T6430] do_splice_direct+0x119/0x1a0 [ 115.763620][ T6430] do_sendfile+0x37d/0x640 [ 115.763638][ T6430] __x64_sys_sendfile64+0x105/0x150 [ 115.763672][ T6430] x64_sys_call+0x1015/0x2550 [ 115.763697][ T6430] do_syscall_64+0x112/0x360 [ 115.763736][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.763765][ T6430] [ 115.763771][ T6430] value changed: 0x0000000000001250 -> 0x0000000000001252 [ 115.763786][ T6430] [ 115.763792][ T6430] Reported by Kernel Concurrency Sanitizer on: [ 115.763806][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.763836][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.763854][ T6430] ================================================================== [ 115.765882][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1090'. [ 115.766210][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.766524][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.817322][ T6445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=6445 comm=syz.2.1090 [ 115.820006][ T6445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1090'. [ 117.187199][ T29] kauditd_printk_skb: 17646 callbacks suppressed [ 117.187219][ T29] audit: type=1400 audit(1789084961.105:41571): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187371][ T29] audit: type=1400 audit(1789084961.115:41572): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187467][ T29] audit: type=1400 audit(1789084961.115:41573): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187492][ T29] audit: type=1400 audit(1789084961.115:41574): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187526][ T29] audit: type=1400 audit(1789084961.115:41575): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187645][ T29] audit: type=1400 audit(1789084961.115:41576): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.187675][ T29] audit: type=1400 audit(1789084961.115:41577): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.188046][ T29] audit: type=1400 audit(1789084961.115:41578): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.188147][ T29] audit: type=1400 audit(1789084961.115:41579): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.188181][ T29] audit: type=1400 audit(1789084961.115:41580): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197124][ T29] kauditd_printk_skb: 40990 callbacks suppressed [ 122.197145][ T29] audit: type=1400 audit(1789084966.115:82571): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197340][ T29] audit: type=1400 audit(1789084966.125:82572): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197458][ T29] audit: type=1400 audit(1789084966.125:82573): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197494][ T29] audit: type=1400 audit(1789084966.125:82574): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197578][ T29] audit: type=1400 audit(1789084966.125:82575): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197705][ T29] audit: type=1400 audit(1789084966.125:82576): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197732][ T29] audit: type=1400 audit(1789084966.125:82577): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.197889][ T29] audit: type=1400 audit(1789084966.125:82578): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.198006][ T29] audit: type=1400 audit(1789084966.125:82579): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.198135][ T29] audit: type=1400 audit(1789084966.125:82580): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0