last executing test programs: 2m7.806884256s ago: executing program 32 (id=293): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r0, 0xb) socket(0x2b, 0x80801, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 2m0.663821358s ago: executing program 33 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 1m52.885059023s ago: executing program 34 (id=290): r0 = syz_open_dev$loop(0x0, 0x7, 0xa882) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) syz_open_dev$loop(0x0, 0x8f, 0x40240) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000df0000000000f4ff0000000000000000fcffffffffffffffffffffffffffffff1f00000000000000ff010000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 1m46.056189244s ago: executing program 35 (id=600): syz_read_part_table(0x604, &(0x7f0000000000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x100) writev(r1, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2000}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 1m35.88755404s ago: executing program 7 (id=795): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1273", 0x2}], 0x1}}], 0x1, 0x24008010) 1m35.833277639s ago: executing program 7 (id=798): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000580)={0xa0002008}) 1m35.76325735s ago: executing program 8 (id=800): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) clock_adjtime(0x17, &(0x7f0000000000)={0x0, 0x7, 0xb, 0xffffffffffffffff, 0x8001, 0x7ff, 0x5, 0x3, 0x100000000000006, 0x200, 0x3, 0x4, 0x9, 0x80000000000005, 0x11, 0xffffffffffffffff, 0xfffffffe, 0x5, 0xc, 0xfffffffd, 0x5, 0x1, 0x11cb, 0xffffffff, 0xd, 0x8000000c}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.71211026s ago: executing program 7 (id=802): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) get_robust_list(r1, 0x0, 0x0) 1m35.65605031s ago: executing program 7 (id=804): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2}) 1m35.475486551s ago: executing program 8 (id=807): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x5) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 1m35.451530721s ago: executing program 7 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m35.255550102s ago: executing program 7 (id=812): mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1000) 1m34.589977345s ago: executing program 8 (id=820): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x14, &(0x7f0000000cc0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xc, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001240)=""/102384, 0x18ff0, 0xffffffff8) 1m34.209229367s ago: executing program 8 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m34.096314497s ago: executing program 8 (id=828): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2007, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="70000000000000002900000004"], 0xc0}, 0x1400c8d4) 1m33.353123921s ago: executing program 8 (id=853): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x66000200) 1m33.327281611s ago: executing program 36 (id=853): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x66000200) 1m20.008688161s ago: executing program 37 (id=812): mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1000) 1m18.849856896s ago: executing program 6 (id=962): socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x3baf, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1m18.658795766s ago: executing program 6 (id=965): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x6b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1m18.382556348s ago: executing program 6 (id=970): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m17.370686232s ago: executing program 6 (id=985): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m17.033971654s ago: executing program 6 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m16.856442565s ago: executing program 6 (id=982): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r2, 0x0, 0xe3aa6ea) 1m1.486203594s ago: executing program 38 (id=982): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r2, 0x0, 0xe3aa6ea) 48.232342373s ago: executing program 0 (id=1259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x7fffffff, 0x0, 0x2, 0xfffff271, 0xfffb, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 48.051290994s ago: executing program 0 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x90}}, 0x0) 47.832995595s ago: executing program 0 (id=1279): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 47.636809476s ago: executing program 0 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0xa) 47.572060236s ago: executing program 0 (id=1271): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c6042, 0x10) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1f, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 47.024083588s ago: executing program 0 (id=1280): socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c1e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="340000001a0001000100000000", 0xd, 0x10, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x4) 46.997267869s ago: executing program 39 (id=1280): socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c1e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="340000001a0001000100000000", 0xd, 0x10, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x4) 9.888489926s ago: executing program 3 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x10000) 9.728301726s ago: executing program 3 (id=1867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.629224436s ago: executing program 3 (id=1868): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb7b}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 9.548829057s ago: executing program 3 (id=1869): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x4, 0x50a, &(0x7f0000001f40)="$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") setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x190) creat(&(0x7f0000000040)='./bus\x00', 0x20) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44600, 0xb) preadv2(r0, &(0x7f00000008c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0xb) 9.525220717s ago: executing program 3 (id=1870): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x73c, 0x10001008, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0xa0d1ae, 0x8, 0x6b, 0x3, 0x0, 0x11001, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x9, 0x4, 0xa, 0xd, 0x1, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x10000002, 0x0, 0x6, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x2008, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x1b0, 0x84, 0x100, 0x5, 0x252, 0x10000081, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x8, 0x0, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xd0]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 9.245637508s ago: executing program 3 (id=1874): add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x140) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 9.212073898s ago: executing program 40 (id=1874): add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x140) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 1.586025623s ago: executing program 4 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048849}, 0xc884) 1.357374913s ago: executing program 4 (id=1963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.200015554s ago: executing program 5 (id=1968): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2003}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, r2}, 0x94) 1.155535325s ago: executing program 4 (id=1969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x22008805) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000400)='r', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 1.109703305s ago: executing program 5 (id=1971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r1, 0x0, r0, 0x0, 0x20000005, 0xa) 1.067106195s ago: executing program 2 (id=1972): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 972.653295ms ago: executing program 5 (id=1974): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) 929.912415ms ago: executing program 2 (id=1975): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000000)={0x4, 0xf5, 0x80000}, 0x20) 799.601436ms ago: executing program 2 (id=1978): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "91"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008090) 711.459367ms ago: executing program 2 (id=1979): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x6000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 676.429827ms ago: executing program 1 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 608.013007ms ago: executing program 1 (id=1982): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r1], 0x14) 512.910588ms ago: executing program 9 (id=1983): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x2, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 508.409477ms ago: executing program 9 (id=1984): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x1c, 0x65, 0x0, 0xa6, 0x1, 0x0, @remote, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) 434.217718ms ago: executing program 1 (id=1985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7037650000250800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24880}, 0x800) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000bc0008801400078008000600540000000800050034bfd86e2c008780080006004800000008000600b900000008000600c2000000080005007f00000008000500e477c64744000780080005009c12fc0308000602fb000000080006007000000008000600d50000000800060061400000080005001154a90808000600c300000008000600030000000c0007800800050002555b20240007800800060003000000080005003c3c74360800050034912e6f08000600d20000000400078004000480080002000100000008000100"], 0xe4}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 389.633828ms ago: executing program 9 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 323.584798ms ago: executing program 9 (id=1987): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) 297.242468ms ago: executing program 5 (id=1988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x1) 237.018069ms ago: executing program 1 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x810018, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x202, 0x0) 236.028749ms ago: executing program 2 (id=1990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 228.491739ms ago: executing program 4 (id=1991): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 156.821819ms ago: executing program 5 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 156.535169ms ago: executing program 9 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) 125.656019ms ago: executing program 1 (id=1994): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 75.677139ms ago: executing program 4 (id=1995): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100033062cbd7000fbdbdf25ffffffff00000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000050000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000006b0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 16.93346ms ago: executing program 5 (id=1996): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002100, 0x0) 16.66006ms ago: executing program 2 (id=1997): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94", 0x1}], 0x1}, 0x20000001) 16.49537ms ago: executing program 1 (id=1998): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3.5585ms ago: executing program 4 (id=1999): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 0s ago: executing program 9 (id=2000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x9, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x8, 0xffffffff}, 0x70bd2a, 0x800000, 0xa, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2e, 0x0, 0x70bd27, 0x0, 0x0, [0x9]}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x164}}, 0x24004000) kernel console output (not intermixed with test programs): ibutes in process `syz.9.1360'. [ 134.206774][ T8384] FAULT_INJECTION: forcing a failure. [ 134.206774][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 134.206902][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.9.1351 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.206949][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.206964][ T8384] Call Trace: [ 134.206975][ T8384] [ 134.206985][ T8384] __dump_stack+0x1d/0x30 [ 134.207042][ T8384] dump_stack_lvl+0x95/0xd0 [ 134.207076][ T8384] dump_stack+0x15/0x1b [ 134.207100][ T8384] should_fail_ex+0x262/0x280 [ 134.207203][ T8384] ? alloc_uid+0xff/0x360 [ 134.207267][ T8384] should_failslab+0x8c/0xb0 [ 134.207369][ T8384] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.207470][ T8384] ? alloc_uid+0xff/0x360 [ 134.207513][ T8384] alloc_uid+0xff/0x360 [ 134.207541][ T8384] __sys_setreuid+0x400/0x530 [ 134.207609][ T8384] __x64_sys_setreuid+0x2d/0x40 [ 134.207646][ T8384] x64_sys_call+0x2161/0x2550 [ 134.207686][ T8384] do_syscall_64+0x112/0x360 [ 134.207715][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.207814][ T8384] RIP: 0033:0x7f2ebec7e159 [ 134.207834][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.207856][ T8384] RSP: 002b:00007f2ebd6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 134.207881][ T8384] RAX: ffffffffffffffda RBX: 00007f2ebef05fa0 RCX: 00007f2ebec7e159 [ 134.207969][ T8384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 134.207984][ T8384] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000000 [ 134.208000][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.208015][ T8384] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 134.208039][ T8384] [ 134.516341][ T8398] loop3: detected capacity change from 0 to 512 [ 134.563239][ T8398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.563359][ T8398] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.647995][ T8406] syzkaller1: entered promiscuous mode [ 134.648025][ T8406] syzkaller1: entered allmulticast mode [ 134.719601][ T7346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.844388][ T8415] loop2: detected capacity change from 0 to 512 [ 134.879315][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.879471][ T8415] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.896580][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'. [ 134.957722][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.998480][ T8424] loop4: detected capacity change from 0 to 2048 [ 135.129439][ T8435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.190877][ T8437] Set syz1 is full, maxelem 14 reached [ 135.359231][ T8444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1374'. [ 135.361247][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.361594][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.402053][ T8444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1374'. [ 135.448193][ T8453] loop2: detected capacity change from 0 to 512 [ 135.466500][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.466680][ T8453] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.549110][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.624557][ T8462] io-wq is not configured for unbound workers [ 135.752348][ T8479] FAULT_INJECTION: forcing a failure. [ 135.752348][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 135.752505][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.5.1390 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.752529][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.752542][ T8479] Call Trace: [ 135.752549][ T8479] [ 135.752555][ T8479] __dump_stack+0x1d/0x30 [ 135.752581][ T8479] dump_stack_lvl+0x95/0xd0 [ 135.752606][ T8479] dump_stack+0x15/0x1b [ 135.752625][ T8479] should_fail_ex+0x262/0x280 [ 135.752729][ T8479] should_failslab+0x8c/0xb0 [ 135.752764][ T8479] __kmalloc_node_noprof+0xdb/0x500 [ 135.752797][ T8479] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 135.752889][ T8479] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 135.752927][ T8479] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 135.752985][ T8479] ? __obj_cgroup_charge+0x194/0x250 [ 135.753023][ T8479] __vmalloc_node_noprof+0x89/0xc0 [ 135.753093][ T8479] ? copy_process+0x5a3/0x2360 [ 135.753143][ T8479] ? copy_process+0x5a3/0x2360 [ 135.753170][ T8479] dup_task_struct+0x22a/0x750 [ 135.753241][ T8479] copy_process+0x5a3/0x2360 [ 135.753262][ T8479] ? futex_unqueue+0xc5/0xf0 [ 135.753307][ T8479] ? __futex_wait+0x1fd/0x260 [ 135.753332][ T8479] ? copy_clone_args_from_user+0x431/0x4f0 [ 135.753444][ T8479] kernel_clone+0x1c0/0x5f0 [ 135.753477][ T8479] __se_sys_clone3+0x1f5/0x230 [ 135.753509][ T8479] ? switch_fpu_return+0xe7/0x1b0 [ 135.753534][ T8479] __x64_sys_clone3+0x31/0x40 [ 135.753679][ T8479] x64_sys_call+0x437/0x2550 [ 135.753705][ T8479] do_syscall_64+0x112/0x360 [ 135.753734][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.753757][ T8479] RIP: 0033:0x7efd9357e159 [ 135.753836][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.754089][ T8479] RSP: 002b:00007efd91fd6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 135.754117][ T8479] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007efd9357e159 [ 135.754131][ T8479] RDX: 00007efd91fd6f10 RSI: 0000000000000058 RDI: 00007efd91fd6f10 [ 135.754148][ T8479] RBP: 00007efd9361506b R08: 0000000000000000 R09: 0000000000000058 [ 135.754277][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.754293][ T8479] R13: 00007efd93806038 R14: 00007efd93805fa0 R15: 00007ffd0d143118 [ 135.754320][ T8479] [ 135.785377][ T8454] loop4: detected capacity change from 0 to 4096 [ 135.811192][ T8454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.023328][ T8479] syz.5.1390: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 136.023538][ T8479] CPU: 1 UID: 0 PID: 8479 Comm: syz.5.1390 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.023718][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.023733][ T8479] Call Trace: [ 136.023794][ T8479] [ 136.023804][ T8479] __dump_stack+0x1d/0x30 [ 136.023831][ T8479] dump_stack_lvl+0x95/0xd0 [ 136.023856][ T8479] dump_stack+0x15/0x1b [ 136.023878][ T8479] warn_alloc+0x146/0x1c0 [ 136.023972][ T8479] ? should_failslab+0x8c/0xb0 [ 136.024015][ T8479] ? __kmalloc_node_noprof+0xdb/0x500 [ 136.024052][ T8479] __vmalloc_node_range_noprof+0x70d/0x1000 [ 136.024163][ T8479] ? __obj_cgroup_charge+0x194/0x250 [ 136.024198][ T8479] __vmalloc_node_noprof+0x89/0xc0 [ 136.024400][ T8479] ? copy_process+0x5a3/0x2360 [ 136.024569][ T8479] ? copy_process+0x5a3/0x2360 [ 136.024594][ T8479] dup_task_struct+0x22a/0x750 [ 136.024621][ T8479] copy_process+0x5a3/0x2360 [ 136.024663][ T8479] ? futex_unqueue+0xc5/0xf0 [ 136.024693][ T8479] ? __futex_wait+0x1fd/0x260 [ 136.024719][ T8479] ? copy_clone_args_from_user+0x431/0x4f0 [ 136.024833][ T8479] kernel_clone+0x1c0/0x5f0 [ 136.024862][ T8479] __se_sys_clone3+0x1f5/0x230 [ 136.025107][ T8479] ? switch_fpu_return+0xe7/0x1b0 [ 136.025219][ T8479] __x64_sys_clone3+0x31/0x40 [ 136.025245][ T8479] x64_sys_call+0x437/0x2550 [ 136.025274][ T8479] do_syscall_64+0x112/0x360 [ 136.025480][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.025514][ T8479] RIP: 0033:0x7efd9357e159 [ 136.025640][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.025734][ T8479] RSP: 002b:00007efd91fd6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 136.025830][ T8479] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007efd9357e159 [ 136.025847][ T8479] RDX: 00007efd91fd6f10 RSI: 0000000000000058 RDI: 00007efd91fd6f10 [ 136.025862][ T8479] RBP: 00007efd9361506b R08: 0000000000000000 R09: 0000000000000058 [ 136.025879][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.025984][ T8479] R13: 00007efd93806038 R14: 00007efd93805fa0 R15: 00007ffd0d143118 [ 136.026006][ T8479] [ 136.059369][ T8479] Mem-Info: [ 136.059383][ T8479] active_anon:38392 inactive_anon:1 isolated_anon:0 [ 136.059383][ T8479] active_file:0 inactive_file:29763 isolated_file:0 [ 136.059383][ T8479] unevictable:0 dirty:280 writeback:0 [ 136.059383][ T8479] slab_reclaimable:3824 slab_unreclaimable:24914 [ 136.059383][ T8479] mapped:32020 shmem:22067 pagetables:1406 [ 136.059383][ T8479] sec_pagetables:0 bounce:0 [ 136.059383][ T8479] kernel_misc_reclaimable:0 [ 136.059383][ T8479] free:1829508 free_pcp:3901 free_cma:0 [ 136.059457][ T8479] Node 0 active_anon:153568kB inactive_anon:4kB active_file:0kB inactive_file:119052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128080kB dirty:1120kB writeback:0kB shmem:88268kB kernel_stack:4880kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.059549][ T8479] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.059760][ T8479] lowmem_reserve[]: 0 2878 7856 7856 [ 136.059789][ T8479] Node 0 DMA32 free:2943660kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947184kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 136.059900][ T8479] lowmem_reserve[]: 0 0 4978 4978 [ 136.060041][ T8479] Node 0 Normal free:4359012kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:153568kB inactive_anon:4kB active_file:0kB inactive_file:119052kB unevictable:0kB writepending:1120kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:12080kB local_pcp:9500kB free_cma:0kB [ 136.060113][ T8479] lowmem_reserve[]: 0 0 0 0 [ 136.060158][ T8479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.060358][ T8479] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943660kB [ 136.060660][ T8479] Node 0 Normal: 217*4kB (UE) 131*8kB (UM) 184*16kB (UME) 318*32kB (UME) 232*64kB (UME) 167*128kB (UME) 25*256kB (ME) 7*512kB (ME) 17*1024kB (ME) 12*2048kB (ME) 1039*4096kB (M) = 4358972kB [ 136.089517][ T8479] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 136.089536][ T8479] 50957 total pagecache pages [ 136.089544][ T8479] 1 pages in swap cache [ 136.089551][ T8479] Free swap = 124992kB [ 136.089627][ T8479] Total swap = 124996kB [ 136.089635][ T8479] 2097051 pages RAM [ 136.089643][ T8479] 0 pages HighMem/MovableOnly [ 136.089650][ T8479] 81858 pages reserved [ 136.157187][ T6727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.216645][ T8488] loop2: detected capacity change from 0 to 2048 [ 136.266268][ T8496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8496 comm=syz.9.1398 [ 136.270195][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1398'. [ 136.379851][ T8496] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 136.380878][ T8496] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 137.092127][ T8507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.115588][ T8509] loop9: detected capacity change from 0 to 512 [ 137.130027][ T8509] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.130148][ T8509] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.222520][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.256347][ T8501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 137.358117][ T8527] FAULT_INJECTION: forcing a failure. [ 137.358117][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 137.358151][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.9.1412 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.358224][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.358237][ T8527] Call Trace: [ 137.358245][ T8527] [ 137.358253][ T8527] __dump_stack+0x1d/0x30 [ 137.358284][ T8527] dump_stack_lvl+0x95/0xd0 [ 137.358312][ T8527] dump_stack+0x15/0x1b [ 137.358409][ T8527] should_fail_ex+0x262/0x280 [ 137.358445][ T8527] ? prepare_creds+0x38/0x550 [ 137.358472][ T8527] should_failslab+0x8c/0xb0 [ 137.358536][ T8527] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 137.358660][ T8527] ? prepare_creds+0x38/0x550 [ 137.358684][ T8527] ? get_random_u64+0x13f/0x1f0 [ 137.358714][ T8527] prepare_creds+0x38/0x550 [ 137.358739][ T8527] copy_creds+0x8f/0x340 [ 137.358846][ T8527] copy_process+0x88e/0x2360 [ 137.358873][ T8527] ? futex_unqueue+0xc5/0xf0 [ 137.358908][ T8527] ? __futex_wait+0x1fd/0x260 [ 137.358930][ T8527] ? copy_clone_args_from_user+0x431/0x4f0 [ 137.358961][ T8527] kernel_clone+0x1c0/0x5f0 [ 137.359051][ T8527] __se_sys_clone3+0x1f5/0x230 [ 137.359091][ T8527] ? switch_fpu_return+0xe7/0x1b0 [ 137.359120][ T8527] __x64_sys_clone3+0x31/0x40 [ 137.359253][ T8527] x64_sys_call+0x437/0x2550 [ 137.359285][ T8527] do_syscall_64+0x112/0x360 [ 137.359377][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.359402][ T8527] RIP: 0033:0x7f2ebec7e159 [ 137.359418][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.359437][ T8527] RSP: 002b:00007f2ebd6d6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 137.359510][ T8527] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2ebec7e159 [ 137.359524][ T8527] RDX: 00007f2ebd6d6f10 RSI: 0000000000000058 RDI: 00007f2ebd6d6f10 [ 137.359538][ T8527] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000058 [ 137.359551][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.359564][ T8527] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 137.359581][ T8527] [ 137.789217][ T8542] loop3: detected capacity change from 0 to 512 [ 137.825870][ T8542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.826050][ T8542] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.454090][ T7346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.520607][ T8569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8569 comm=syz.4.1426 [ 138.521484][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 138.533858][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 138.533882][ T29] audit: type=1400 audit(1790645486.472:1041): avc: denied { getopt } for pid=8562 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.615525][ T8569] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 138.616860][ T8569] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 138.669574][ T8584] loop2: detected capacity change from 0 to 512 [ 138.697491][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.697561][ T8584] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.738117][ T29] audit: type=1400 audit(1790645486.682:1042): avc: denied { read } for pid=8589 comm="syz.3.1433" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.738450][ T29] audit: type=1400 audit(1790645486.682:1043): avc: denied { open } for pid=8589 comm="syz.3.1433" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.738959][ T29] audit: type=1400 audit(1790645486.682:1044): avc: denied { write } for pid=8581 comm="syz.2.1430" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.793148][ T29] audit: type=1400 audit(1790645486.712:1045): avc: denied { write } for pid=8581 comm="syz.2.1430" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.793176][ T29] audit: type=1400 audit(1790645486.712:1046): avc: denied { write } for pid=8581 comm="syz.2.1430" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.918861][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.827410][ T8594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.911980][ T8618] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1447'. [ 139.916676][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.916987][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.960798][ T8618] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1447'. [ 140.415053][ T8628] netlink: 'syz.5.1451': attribute type 10 has an invalid length. [ 140.419951][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.424194][ T8628] team0: Port device netdevsim2 added [ 140.433425][ T8628] netlink: 'syz.5.1451': attribute type 10 has an invalid length. [ 140.476104][ T8628] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 140.476243][ T8628] team0: Port device netdevsim2 removed [ 140.484111][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.500031][ T8628] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 140.744711][ T8647] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1460'. [ 140.745542][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.745759][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.753072][ T8647] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1460'. [ 140.973422][ T8654] batadv_slave_1: entered promiscuous mode [ 140.981090][ T8654] veth1_to_bridge: entered promiscuous mode [ 140.982383][ T8653] veth1_to_bridge: left promiscuous mode [ 140.982701][ T8653] batadv_slave_1: left promiscuous mode [ 141.250858][ T314] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 141.339919][ T8674] batman_adv: batadv0: Adding interface: syzkaller0 [ 141.339936][ T8674] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.339970][ T8674] batman_adv: batadv0: Interface activated: syzkaller0 [ 141.383620][ T8673] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 141.401080][ T8673] batman_adv: batadv0: Removing interface: syzkaller0 [ 141.420945][ T8649] loop2: detected capacity change from 0 to 4096 [ 141.426906][ T8678] xt_policy: neither incoming nor outgoing policy selected [ 141.450924][ T8649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.478347][ T29] audit: type=1400 audit(1790645489.422:1047): avc: denied { write } for pid=8648 comm="syz.2.1461" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.578646][ T8686] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1473'. [ 141.581350][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.581673][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.594607][ T8686] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1473'. [ 141.880913][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.368590][ T8711] loop8: detected capacity change from 0 to 16384 [ 142.380748][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1485'. [ 142.381574][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1485'. [ 142.554175][ T8719] ip_tables: iptables: counters copy to user failed while replacing table [ 142.782611][ T8727] loop5: detected capacity change from 0 to 512 [ 142.817617][ T8727] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1492: corrupted in-inode xattr: invalid ea_ino [ 142.817654][ T8727] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.817765][ T8727] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1492: couldn't read orphan inode 15 (err -117) [ 142.817790][ T8727] loop5: lost filesystem error report for type 5 error -117 [ 142.818436][ T8727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.822618][ T29] audit: type=1400 audit(1790645490.762:1048): avc: denied { write } for pid=8726 comm="syz.5.1492" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.822679][ T29] audit: type=1400 audit(1790645490.762:1049): avc: denied { mounton } for pid=8726 comm="syz.5.1492" path="/250/file0/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.076251][ T8716] loop8: detected capacity change from 16384 to 16383 [ 143.100505][ T8727] loop5: detected capacity change from 512 to 0 [ 143.100811][ T8731] EXT4-fs error (device loop5): ext4_get_inode_loc:5054: inode #12: block 7: comm syz.5.1492: unable to read itable block [ 143.100855][ T8731] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 143.100871][ T8731] EXT4-fs (loop5): I/O error while writing superblock [ 143.160070][ T4296] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 143.160133][ T4296] EXT4-fs error (device loop5): ext4_check_bdev_write_error:235: comm syz-executor: Error while async write back metadata [ 143.160171][ T4296] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 143.160186][ T4296] EXT4-fs (loop5): I/O error while writing superblock [ 143.317503][ T8734] xt_policy: neither incoming nor outgoing policy selected [ 143.535031][ T8745] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 143.552486][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.552524][ T8743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.552919][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.552965][ T8743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.601839][ T8746] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 143.669969][ T8745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.704375][ T8745] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 143.704468][ T8745] team0: Failed to send options change via netlink (err -105) [ 143.704482][ T8745] team0: Port device netdevsim2 added [ 143.705410][ T4617] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 143.709567][ T8746] team0: Failed to send options change via netlink (err -105) [ 143.709666][ T8746] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 143.727688][ T8746] team0: Port device netdevsim2 removed [ 143.728930][ T8746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.754522][ T8746] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 143.775373][ T8709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.793344][ T8709] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 143.793367][ T8709] EXT4-fs (loop5): I/O error while writing superblock [ 144.671189][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.671229][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.671372][ T8754] bridge_slave_0: entered allmulticast mode [ 144.671956][ T8754] bridge_slave_0: entered promiscuous mode [ 144.718021][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.718064][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.718204][ T8754] bridge_slave_1: entered allmulticast mode [ 144.718931][ T8754] bridge_slave_1: entered promiscuous mode [ 144.767162][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.768153][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.777649][ T8754] team0: Port device team_slave_0 added [ 144.778589][ T8754] team0: Port device team_slave_1 added [ 144.789369][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.789387][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.789415][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.789947][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.789958][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.789988][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.809316][ T8754] hsr_slave_0: entered promiscuous mode [ 144.809742][ T8754] hsr_slave_1: entered promiscuous mode [ 144.810008][ T8754] debugfs: 'hsr0' already exists in 'hsr' [ 144.810021][ T8754] Cannot create hsr debugfs directory [ 145.892809][ T8754] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.906629][ T8790] loop3: detected capacity change from 0 to 512 [ 145.908807][ T8790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.912743][ T8790] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1510: invalid indirect mapped block 9 (level 0) [ 145.912784][ T8790] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.913096][ T8790] EXT4-fs (loop3): 1 truncate cleaned up [ 145.945071][ T8790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.955976][ T29] audit: type=1400 audit(1790645493.902:1050): avc: denied { write } for pid=8789 comm="syz.3.1510" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.956635][ T29] audit: type=1400 audit(1790645493.902:1051): avc: denied { write } for pid=8789 comm="syz.3.1510" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.024444][ T7346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.095630][ T29] audit: type=1326 audit(1790645494.042:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.102482][ T29] audit: type=1326 audit(1790645494.042:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.102845][ T29] audit: type=1326 audit(1790645494.042:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.103019][ T29] audit: type=1326 audit(1790645494.042:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.103047][ T29] audit: type=1326 audit(1790645494.042:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.103098][ T29] audit: type=1326 audit(1790645494.042:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.104610][ T29] audit: type=1326 audit(1790645494.042:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.122857][ T29] audit: type=1326 audit(1790645494.042:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9f44e159 code=0x7ffc0000 [ 146.400803][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.415494][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.534976][ T4617] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.537323][ T38] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.537431][ T38] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.537461][ T38] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.605761][ T8754] bond0: (slave netdevsim2): Releasing backup interface [ 146.627944][ T8754] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.657538][ T4617] IPVS: starting estimator thread 0... [ 146.704279][ T8754] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.753085][ T8754] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.753837][ T8817] IPVS: using max 2592 ests per chain, 129600 per kthread [ 146.876624][ T4613] bridge_slave_1: left allmulticast mode [ 146.876646][ T4613] bridge_slave_1: left promiscuous mode [ 146.877000][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.908894][ T4613] bridge_slave_0: left allmulticast mode [ 146.908917][ T4613] bridge_slave_0: left promiscuous mode [ 146.909114][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.126545][ T314] IPVS: starting estimator thread 0... [ 147.140828][ T4613] bond1 (unregistering): (slave geneve1): Releasing backup interface [ 147.167135][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.182894][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.184264][ T4613] bond0 (unregistering): Released all slaves [ 147.186451][ T4613] bond1 (unregistering): Released all slaves [ 147.237287][ T8846] IPVS: using max 2736 ests per chain, 136800 per kthread [ 148.158268][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.160404][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.205480][ T4613] tipc: Left network mode [ 148.227696][ T4613] hsr_slave_0: left promiscuous mode [ 148.228028][ T4613] hsr_slave_1: left promiscuous mode [ 148.228685][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.228698][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.229129][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.229160][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.231563][ T4613] veth1_macvtap: left promiscuous mode [ 148.231582][ T4613] veth0_macvtap: left promiscuous mode [ 148.231710][ T4613] veth1_vlan: left promiscuous mode [ 148.231732][ T4613] veth0_vlan: left promiscuous mode [ 148.353105][ T4613] team0 (unregistering): Port device team_slave_1 removed [ 148.364083][ T4613] team0 (unregistering): Port device team_slave_0 removed [ 148.405910][ T8754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.408331][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.497627][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.501752][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.553142][ T8754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.562837][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.564052][ T4619] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.565774][ T314] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.565846][ T314] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.565883][ T314] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.568204][ T8754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.581860][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.584565][ T8754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.626929][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.628919][ T4619] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629000][ T4619] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629035][ T4619] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629149][ T4619] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.764069][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.769171][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.773847][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.773970][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.775630][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.775730][ T4615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.929132][ T4613] IPVS: stop unused estimator thread 0... [ 149.009481][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.198865][ T8754] veth0_vlan: entered promiscuous mode [ 149.201200][ T8754] veth1_vlan: entered promiscuous mode [ 149.214390][ T8754] veth0_macvtap: entered promiscuous mode [ 149.215988][ T8754] veth1_macvtap: entered promiscuous mode [ 149.221627][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.229275][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.274062][ T314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.274143][ T314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.274176][ T314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.274263][ T314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.313529][ T8924] FAULT_INJECTION: forcing a failure. [ 149.313529][ T8924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.313646][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.9.1563 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.313734][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.313751][ T8924] Call Trace: [ 149.313759][ T8924] [ 149.313842][ T8924] __dump_stack+0x1d/0x30 [ 149.313872][ T8924] dump_stack_lvl+0x95/0xd0 [ 149.313896][ T8924] dump_stack+0x15/0x1b [ 149.313919][ T8924] should_fail_ex+0x262/0x280 [ 149.313988][ T8924] should_fail+0xb/0x20 [ 149.314013][ T8924] should_fail_usercopy+0x1a/0x20 [ 149.314043][ T8924] _copy_to_user+0x20/0xa0 [ 149.314131][ T8924] do_ipv6_getsockopt+0xbb1/0x15c0 [ 149.314243][ T8924] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 149.314298][ T8924] ? do_user_addr_fault+0xba4/0x1060 [ 149.314448][ T8924] ipv6_getsockopt+0x71/0x1e0 [ 149.314489][ T8924] rawv6_getsockopt+0x2b1/0x4e0 [ 149.314527][ T8924] sock_common_getsockopt+0x60/0x70 [ 149.314564][ T8924] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 149.314773][ T8924] do_sock_getsockopt+0x2f5/0x570 [ 149.314852][ T8924] __x64_sys_getsockopt+0x11d/0x1a0 [ 149.314881][ T8924] x64_sys_call+0x1032/0x2550 [ 149.314916][ T8924] do_syscall_64+0x112/0x360 [ 149.314944][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.315029][ T8924] RIP: 0033:0x7f2ebec7e159 [ 149.315048][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.315080][ T8924] RSP: 002b:00007f2ebd6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.315177][ T8924] RAX: ffffffffffffffda RBX: 00007f2ebef05fa0 RCX: 00007f2ebec7e159 [ 149.315192][ T8924] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 149.315207][ T8924] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000000 [ 149.315281][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.315301][ T8924] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 149.315325][ T8924] [ 149.591853][ T8936] loop9: detected capacity change from 0 to 512 [ 149.592621][ T8936] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 149.594456][ T8936] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1555: invalid indirect mapped block 9 (level 0) [ 149.594654][ T8936] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.595076][ T8936] EXT4-fs (loop9): 1 truncate cleaned up [ 149.595803][ T8936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.691927][ T8942] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1557'. [ 149.713161][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.891636][ T8960] FAULT_INJECTION: forcing a failure. [ 149.891636][ T8960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.891744][ T8960] CPU: 0 UID: 0 PID: 8960 Comm: syz.5.1568 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.891827][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.891846][ T8960] Call Trace: [ 149.891854][ T8960] [ 149.891862][ T8960] __dump_stack+0x1d/0x30 [ 149.891889][ T8960] dump_stack_lvl+0x95/0xd0 [ 149.891935][ T8960] dump_stack+0x15/0x1b [ 149.891965][ T8960] should_fail_ex+0x262/0x280 [ 149.891994][ T8960] should_fail+0xb/0x20 [ 149.892069][ T8960] should_fail_usercopy+0x1a/0x20 [ 149.892103][ T8960] _copy_to_user+0x20/0xa0 [ 149.892151][ T8960] do_ipv6_getsockopt+0xbb1/0x15c0 [ 149.892247][ T8960] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 149.892281][ T8960] ? do_user_addr_fault+0xba4/0x1060 [ 149.892327][ T8960] ipv6_getsockopt+0x71/0x1e0 [ 149.892366][ T8960] rawv6_getsockopt+0x2b1/0x4e0 [ 149.892476][ T8960] sock_common_getsockopt+0x60/0x70 [ 149.892511][ T8960] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 149.892544][ T8960] do_sock_getsockopt+0x2f5/0x570 [ 149.892648][ T8960] __x64_sys_getsockopt+0x11d/0x1a0 [ 149.892676][ T8960] x64_sys_call+0x1032/0x2550 [ 149.892703][ T8960] do_syscall_64+0x112/0x360 [ 149.892730][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.892824][ T8960] RIP: 0033:0x7faa6a00e159 [ 149.892841][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.892880][ T8960] RSP: 002b:00007faa68a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.892900][ T8960] RAX: ffffffffffffffda RBX: 00007faa6a295fa0 RCX: 00007faa6a00e159 [ 149.892915][ T8960] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 149.892930][ T8960] RBP: 00007faa6a0a506b R08: 0000000000000000 R09: 0000000000000000 [ 149.892951][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.892966][ T8960] R13: 00007faa6a296038 R14: 00007faa6a295fa0 R15: 00007ffe8dd1ce18 [ 149.892987][ T8960] [ 150.046088][ T8949] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 150.358714][ T8977] netlink: 'syz.9.1585': attribute type 4 has an invalid length. [ 150.359451][ T8977] netlink: 'syz.9.1585': attribute type 4 has an invalid length. [ 150.374214][ T8975] loop5: detected capacity change from 0 to 512 [ 150.388662][ T8975] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.390385][ T8975] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1575: invalid indirect mapped block 9 (level 0) [ 150.390425][ T8975] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.393480][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 150.393504][ C1] EXT4-fs (loop5): initial error at time 1790645498: ext4_free_branches:1023: inode 11 [ 150.393546][ C1] EXT4-fs (loop5): last error at time 1790645498: ext4_free_branches:1023: inode 11 [ 150.395623][ T8975] EXT4-fs (loop5): 1 truncate cleaned up [ 150.396043][ T8975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.552503][ T8754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.724073][ T9000] ptp ptp0: new virtual clock ptp1 [ 150.724095][ T9000] ptp ptp0: guarantee physical clock free running [ 150.745314][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.745523][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.870472][ T8998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.880976][ T8993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 150.914865][ T8998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.043676][ T4617] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.043835][ T4617] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.043871][ T4617] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.043929][ T4617] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.134088][ T9020] netlink: 'syz.2.1593': attribute type 4 has an invalid length. [ 151.147606][ T9020] netlink: 'syz.2.1593': attribute type 4 has an invalid length. [ 151.206975][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 151.207052][ T29] audit: type=1326 audit(1790645499.152:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.207083][ T29] audit: type=1326 audit(1790645499.152:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208354][ T29] audit: type=1326 audit(1790645499.152:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208433][ T29] audit: type=1326 audit(1790645499.152:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208536][ T29] audit: type=1326 audit(1790645499.152:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208636][ T29] audit: type=1326 audit(1790645499.152:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208729][ T29] audit: type=1326 audit(1790645499.152:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208771][ T29] audit: type=1326 audit(1790645499.152:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208874][ T29] audit: type=1326 audit(1790645499.152:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.208901][ T29] audit: type=1326 audit(1790645499.152:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 151.805498][ T9043] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 151.891538][ T9048] loop2: detected capacity change from 0 to 512 [ 151.894180][ T9048] EXT4-fs: inline encryption not supported [ 151.925076][ T9051] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1603'. [ 151.928539][ T9048] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 152.231043][ T4613] bridge_slave_1: left allmulticast mode [ 152.231078][ T4613] bridge_slave_1: left promiscuous mode [ 152.231217][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.231904][ T4613] bridge_slave_0: left allmulticast mode [ 152.231921][ T4613] bridge_slave_0: left promiscuous mode [ 152.232100][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.241989][ T9066] loop9: detected capacity change from 0 to 512 [ 152.275447][ T9066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 152.275498][ T9066] System zones: 1-12 [ 152.275888][ T9066] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.1608: missing EA_INODE flag [ 152.275913][ T9066] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 152.276010][ T9066] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.1608: error while reading EA inode 12 err=-117 [ 152.276035][ T9066] loop9: lost filesystem error report for type 5 error -117 [ 152.276162][ T9066] EXT4-fs (loop9): 1 orphan inode deleted [ 152.276744][ T9066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.301474][ T9070] ptp ptp0: guarantee physical clock free running [ 152.480131][ T4613]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.482108][ T4613]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.483017][ T4613]  (unregistering): Released all slaves [ 152.550369][ T4613] hsr_slave_0: left promiscuous mode [ 152.550688][ T4613] hsr_slave_1: left promiscuous mode [ 152.551160][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.551185][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.551638][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.551697][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.561874][ T4613] veth1_macvtap: left promiscuous mode [ 152.561921][ T4613] veth0_macvtap: left promiscuous mode [ 152.561992][ T4613] veth1_vlan: left promiscuous mode [ 152.562030][ T4613] veth0_vlan: left promiscuous mode [ 152.612744][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.713114][ T4613] team0 (unregistering): Port device team_slave_1 removed [ 152.722066][ T4613] team0 (unregistering): Port device team_slave_0 removed [ 153.076858][ T9087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 153.268853][ T4619] IPVS: starting estimator thread 0... [ 153.353561][ T9136] IPVS: using max 2736 ests per chain, 136800 per kthread [ 153.492825][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 153.898926][ T38] IPVS: starting estimator thread 0... [ 153.947628][ T9174] loop2: detected capacity change from 0 to 512 [ 153.952965][ T9174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 153.953096][ T9174] System zones: 1-12 [ 153.953290][ T9174] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1653: missing EA_INODE flag [ 153.953383][ T9174] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.953501][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 153.953521][ C1] EXT4-fs (loop2): initial error at time 1790645501: ext4_xattr_inode_iget:437: inode 12 [ 153.953555][ C1] EXT4-fs (loop2): last error at time 1790645501: ext4_xattr_inode_iget:437: inode 12 [ 153.962509][ T9174] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1653: error while reading EA inode 12 err=-117 [ 153.962543][ T9174] loop2: lost filesystem error report for type 5 error -117 [ 153.963025][ T9174] EXT4-fs (loop2): 1 orphan inode deleted [ 153.964645][ T9174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.987918][ T9168] IPVS: using max 2832 ests per chain, 141600 per kthread [ 154.164395][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.720788][ T9206] FAULT_INJECTION: forcing a failure. [ 154.720788][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 154.720819][ T9206] CPU: 1 UID: 0 PID: 9206 Comm: syz.2.1676 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.720886][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.720899][ T9206] Call Trace: [ 154.720907][ T9206] [ 154.720961][ T9206] __dump_stack+0x1d/0x30 [ 154.720991][ T9206] dump_stack_lvl+0x95/0xd0 [ 154.721014][ T9206] dump_stack+0x15/0x1b [ 154.721034][ T9206] should_fail_ex+0x262/0x280 [ 154.721068][ T9206] ? mempool_alloc_slab+0x1a/0x30 [ 154.721141][ T9206] should_failslab+0x8c/0xb0 [ 154.721247][ T9206] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 154.721277][ T9206] ? mempool_alloc_slab+0x1a/0x30 [ 154.721333][ T9206] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 154.721365][ T9206] mempool_alloc_slab+0x1a/0x30 [ 154.721436][ T9206] mempool_init_node+0x139/0x260 [ 154.721530][ T9206] ? __pfx_mempool_free_slab+0x10/0x10 [ 154.721636][ T9206] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 154.721673][ T9206] mempool_init_noprof+0x3a/0x50 [ 154.721778][ T9206] bioset_init+0x37b/0x480 [ 154.721806][ T9206] ? __pfx_no_op+0x10/0x10 [ 154.721832][ T9206] ? percpu_ref_init+0x1dd/0x250 [ 154.721857][ T9206] mddev_init+0xfc/0x420 [ 154.721913][ T9206] ? __pfx_md_probe+0x10/0x10 [ 154.721934][ T9206] md_alloc+0x99/0xa00 [ 154.721966][ T9206] ? __rcu_read_unlock+0x4e/0x70 [ 154.722022][ T9206] ? __pfx_md_probe+0x10/0x10 [ 154.722042][ T9206] md_alloc_and_put+0x18/0x170 [ 154.722068][ T9206] md_probe+0x68/0x80 [ 154.722088][ T9206] blk_request_module+0x1bd/0x1e0 [ 154.722184][ T9206] blkdev_get_no_open+0x4b/0x100 [ 154.722208][ T9206] bdev_file_open_by_dev+0xa4/0x230 [ 154.722232][ T9206] swsusp_check+0x3f/0x2a0 [ 154.722255][ T9206] software_resume+0x41/0x2f0 [ 154.722272][ T9206] resume_store+0x2d9/0x3d0 [ 154.722305][ T9206] ? __pfx_resume_store+0x10/0x10 [ 154.722326][ T9206] kobj_attr_store+0x4a/0x70 [ 154.722357][ T9206] ? __pfx_kobj_attr_store+0x10/0x10 [ 154.722433][ T9206] sysfs_kf_write+0xfe/0x120 [ 154.722465][ T9206] ? __pfx_sysfs_kf_write+0x10/0x10 [ 154.722531][ T9206] kernfs_fop_write_iter+0x1d2/0x2e0 [ 154.722572][ T9206] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 154.722598][ T9206] vfs_write+0x57f/0x9a0 [ 154.722713][ T9206] ksys_write+0xdc/0x1a0 [ 154.722747][ T9206] __x64_sys_write+0x40/0x50 [ 154.722782][ T9206] x64_sys_call+0x154e/0x2550 [ 154.722871][ T9206] do_syscall_64+0x112/0x360 [ 154.722904][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.722930][ T9206] RIP: 0033:0x7f35e2ede159 [ 154.722949][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.723020][ T9206] RSP: 002b:00007f35e1937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.723043][ T9206] RAX: ffffffffffffffda RBX: 00007f35e3165fa0 RCX: 00007f35e2ede159 [ 154.723082][ T9206] RDX: 0000000000000012 RSI: 0000200000000480 RDI: 0000000000000004 [ 154.723095][ T9206] RBP: 00007f35e2f7506b R08: 0000000000000000 R09: 0000000000000000 [ 154.723107][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.723119][ T9206] R13: 00007f35e3166038 R14: 00007f35e3165fa0 R15: 00007ffc4d51adf8 [ 154.723217][ T9206] [ 154.723283][ T9206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.011924][ T9215] loop4: detected capacity change from 0 to 1024 [ 155.037870][ T9215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.216962][ T9215] syz.4.1681 (9215) used greatest stack depth: 9800 bytes left [ 155.219530][ T6727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.293534][ T9238] loop5: detected capacity change from 0 to 4096 [ 155.299080][ T9243] FAULT_INJECTION: forcing a failure. [ 155.299080][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 155.299168][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.2.1679 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.299193][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.299206][ T9243] Call Trace: [ 155.299214][ T9243] [ 155.299224][ T9243] __dump_stack+0x1d/0x30 [ 155.299255][ T9243] dump_stack_lvl+0x95/0xd0 [ 155.299409][ T9243] dump_stack+0x15/0x1b [ 155.299433][ T9243] should_fail_ex+0x262/0x280 [ 155.299606][ T9243] ? call_usermodehelper_setup+0x72/0x190 [ 155.299645][ T9243] should_failslab+0x8c/0xb0 [ 155.299790][ T9243] __kmalloc_cache_noprof+0x7a/0x400 [ 155.299827][ T9243] ? call_usermodehelper_setup+0x72/0x190 [ 155.299860][ T9243] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 155.299901][ T9243] call_usermodehelper_setup+0x72/0x190 [ 155.299932][ T9243] ? __pfx_umh_keys_init+0x10/0x10 [ 155.299970][ T9243] call_sbin_request_key+0x578/0x740 [ 155.300076][ T9243] request_key_and_link+0x95b/0xe20 [ 155.300112][ T9243] ? __pfx_key_default_cmp+0x10/0x10 [ 155.300186][ T9243] ? __pfx_keyring_search_iterator+0x10/0x10 [ 155.300229][ T9243] __se_sys_request_key+0x1e9/0x2a0 [ 155.300334][ T9243] __x64_sys_request_key+0x55/0x70 [ 155.300360][ T9243] x64_sys_call+0x1741/0x2550 [ 155.300430][ T9243] do_syscall_64+0x112/0x360 [ 155.300503][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.300531][ T9243] RIP: 0033:0x7f35e2ede159 [ 155.300553][ T9243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.300574][ T9243] RSP: 002b:00007f35e1937028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 155.300603][ T9243] RAX: ffffffffffffffda RBX: 00007f35e3165fa0 RCX: 00007f35e2ede159 [ 155.300618][ T9243] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 155.300635][ T9243] RBP: 00007f35e2f7506b R08: 0000000000000000 R09: 0000000000000000 [ 155.300650][ T9243] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 155.300667][ T9243] R13: 00007f35e3166038 R14: 00007f35e3165fa0 R15: 00007ffc4d51adf8 [ 155.300719][ T9243] [ 155.371256][ T9245] FAULT_INJECTION: forcing a failure. [ 155.371256][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 155.371396][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.2.1683 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.371425][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.371439][ T9245] Call Trace: [ 155.371526][ T9245] [ 155.371535][ T9245] __dump_stack+0x1d/0x30 [ 155.371568][ T9245] dump_stack_lvl+0x95/0xd0 [ 155.371593][ T9245] dump_stack+0x15/0x1b [ 155.371616][ T9245] should_fail_ex+0x262/0x280 [ 155.371647][ T9245] ? br_vlan_init+0x34/0x120 [ 155.371698][ T9245] should_failslab+0x8c/0xb0 [ 155.371776][ T9245] __kmalloc_cache_noprof+0x7a/0x400 [ 155.371813][ T9245] ? br_vlan_init+0x34/0x120 [ 155.371845][ T9245] br_vlan_init+0x34/0x120 [ 155.371891][ T9245] br_dev_init+0x5d/0xf0 [ 155.371918][ T9245] register_netdevice+0x239/0x11a0 [ 155.371944][ T9245] br_add_bridge+0x72/0xc0 [ 155.372002][ T9245] br_ioctl_stub+0x3e3/0x8f0 [ 155.372025][ T9245] ? ioctl_has_perm+0x273/0x2c0 [ 155.372057][ T9245] ? __pfx_br_ioctl_stub+0x10/0x10 [ 155.372084][ T9245] sock_ioctl+0x39a/0x610 [ 155.372162][ T9245] ? __pfx_sock_ioctl+0x10/0x10 [ 155.372224][ T9245] __se_sys_ioctl+0xce/0x140 [ 155.372267][ T9245] __x64_sys_ioctl+0x43/0x50 [ 155.372300][ T9245] x64_sys_call+0x239d/0x2550 [ 155.372385][ T9245] do_syscall_64+0x112/0x360 [ 155.372442][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.372502][ T9245] RIP: 0033:0x7f35e2ede159 [ 155.372521][ T9245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.372542][ T9245] RSP: 002b:00007f35e1937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.372565][ T9245] RAX: ffffffffffffffda RBX: 00007f35e3165fa0 RCX: 00007f35e2ede159 [ 155.372582][ T9245] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000004 [ 155.372655][ T9245] RBP: 00007f35e2f7506b R08: 0000000000000000 R09: 0000000000000000 [ 155.372669][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.372683][ T9245] R13: 00007f35e3166038 R14: 00007f35e3165fa0 R15: 00007ffc4d51adf8 [ 155.372703][ T9245] [ 155.385716][ T9238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.403397][ T9249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 155.403444][ T9249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.403685][ T9249] vhci_hcd vhci_hcd.0: Device attached [ 155.428210][ T9238] FAULT_INJECTION: forcing a failure. [ 155.428210][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 155.428256][ T9238] CPU: 0 UID: 0 PID: 9238 Comm: syz.5.1677 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.428385][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.428399][ T9238] Call Trace: [ 155.428408][ T9238] [ 155.428418][ T9238] __dump_stack+0x1d/0x30 [ 155.428447][ T9238] dump_stack_lvl+0x95/0xd0 [ 155.428532][ T9238] dump_stack+0x15/0x1b [ 155.428558][ T9238] should_fail_ex+0x262/0x280 [ 155.428589][ T9238] ? ext4_htree_store_dirent+0x55/0x2c0 [ 155.428626][ T9238] should_failslab+0x8c/0xb0 [ 155.428711][ T9238] __kmalloc_noprof+0xd0/0x4d0 [ 155.428865][ T9238] ? ext4_htree_store_dirent+0x55/0x2c0 [ 155.428903][ T9238] ext4_htree_store_dirent+0x55/0x2c0 [ 155.429003][ T9238] htree_dirblock_to_tree+0x48c/0x5e0 [ 155.429080][ T9238] ext4_htree_fill_tree+0x46b/0xa70 [ 155.429193][ T9238] ? __rcu_read_unlock+0x4e/0x70 [ 155.429231][ T9238] ? inode_query_iversion+0xce/0x110 [ 155.429295][ T9238] ext4_readdir+0x19ff/0x2040 [ 155.429334][ T9238] ? avc_policy_seqno+0x15/0x30 [ 155.429362][ T9238] ? selinux_file_permission+0x1dc/0x310 [ 155.429458][ T9238] iterate_dir+0x109/0x2f0 [ 155.429556][ T9238] __se_sys_getdents+0xd2/0x220 [ 155.429597][ T9238] ? __pfx_filldir+0x10/0x10 [ 155.429618][ T9238] __x64_sys_getdents+0x43/0x50 [ 155.429655][ T9238] x64_sys_call+0x1e6a/0x2550 [ 155.429749][ T9238] do_syscall_64+0x112/0x360 [ 155.429833][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.429859][ T9238] RIP: 0033:0x7faa6a00e159 [ 155.429877][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.429943][ T9238] RSP: 002b:00007faa68a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 155.429970][ T9238] RAX: ffffffffffffffda RBX: 00007faa6a295fa0 RCX: 00007faa6a00e159 [ 155.429987][ T9238] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000004 [ 155.430002][ T9238] RBP: 00007faa6a0a506b R08: 0000000000000000 R09: 0000000000000000 [ 155.430022][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.430037][ T9238] R13: 00007faa6a296038 R14: 00007faa6a295fa0 R15: 00007ffe8dd1ce18 [ 155.430061][ T9238] [ 155.451163][ T9230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 155.535055][ T8754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.641084][ T9261] loop5: detected capacity change from 0 to 512 [ 155.643595][ T11] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 155.644321][ T9261] EXT4-fs: Ignoring removed orlov option [ 155.644424][ T9261] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.644466][ T9261] EXT4-fs: inline encryption not supported [ 155.654692][ T9261] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1687: corrupted in-inode xattr: e_value size too large [ 155.654773][ T9261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.656134][ T9261] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1687: couldn't read orphan inode 15 (err -117) [ 155.656199][ T9261] loop5: lost filesystem error report for type 5 error -117 [ 155.657488][ T9261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.677619][ T9263] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1688'. [ 155.696015][ T9263] ip6gre1: entered promiscuous mode [ 155.696102][ T9263] ip6gre1: entered allmulticast mode [ 155.891220][ T9261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.117248][ T9280] tipc: Failed to remove unknown binding: 66,1,1/0:1454449221/1454449223 [ 156.236430][ T9250] vhci_hcd: connection reset by peer [ 156.236859][ T38] vhci_hcd vhci_hcd.3: stop threads [ 156.236874][ T38] vhci_hcd vhci_hcd.3: release socket [ 156.236910][ T38] vhci_hcd vhci_hcd.3: disconnect device [ 156.447807][ T9293] FAULT_INJECTION: forcing a failure. [ 156.447807][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.447842][ T9293] CPU: 1 UID: 0 PID: 9293 Comm: syz.9.1700 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.447868][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.447938][ T9293] Call Trace: [ 156.447946][ T9293] [ 156.447955][ T9293] __dump_stack+0x1d/0x30 [ 156.447985][ T9293] dump_stack_lvl+0x95/0xd0 [ 156.448009][ T9293] dump_stack+0x15/0x1b [ 156.448029][ T9293] should_fail_ex+0x262/0x280 [ 156.448125][ T9293] should_fail+0xb/0x20 [ 156.448219][ T9293] should_fail_usercopy+0x1a/0x20 [ 156.448252][ T9293] _copy_from_iter+0x20c/0xe70 [ 156.448278][ T9293] ? _copy_from_iter+0x455/0xe70 [ 156.448365][ T9293] copy_page_from_iter+0x15d/0x1f0 [ 156.448447][ T9293] skb_copy_datagram_from_iter+0x22d/0x480 [ 156.448482][ T9293] unix_stream_sendmsg+0x63a/0xbc0 [ 156.448774][ T9293] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 156.448807][ T9293] ____sys_sendmsg+0x532/0x580 [ 156.448890][ T9293] ___sys_sendmsg+0x195/0x1e0 [ 156.449083][ T9293] __x64_sys_sendmsg+0xd4/0x160 [ 156.449116][ T9293] x64_sys_call+0x22ab/0x2550 [ 156.449153][ T9293] do_syscall_64+0x112/0x360 [ 156.449253][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.449280][ T9293] RIP: 0033:0x7f2ebec7e159 [ 156.449297][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.449316][ T9293] RSP: 002b:00007f2ebd6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.449335][ T9293] RAX: ffffffffffffffda RBX: 00007f2ebef05fa0 RCX: 00007f2ebec7e159 [ 156.449907][ T9293] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 156.449976][ T9293] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000000 [ 156.449993][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.450008][ T9293] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 156.450028][ T9293] [ 156.698103][ T9306] bond2 (unregistering): Released all slaves [ 156.778373][ T9311] syzkaller1: entered promiscuous mode [ 156.778395][ T9311] syzkaller1: entered allmulticast mode [ 156.860417][ T9313] loop4: detected capacity change from 0 to 1024 [ 156.860826][ T9313] EXT4-fs: Ignoring removed bh option [ 156.884844][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.913862][ T9313] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 156.914393][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 156.914482][ T29] audit: type=1400 audit(1790645504.862:1256): avc: denied { write } for pid=9312 comm="syz.4.1707" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.916288][ T9313] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.4.1707: path /151/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 156.916587][ T9313] EXT4-fs (loop4): Remounting filesystem read-only [ 156.922421][ T9317] syzkaller0: entered promiscuous mode [ 156.922472][ T9317] syzkaller0: entered allmulticast mode [ 157.122629][ T6727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.135467][ T9326] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 157.184157][ T9326] bond2: (slave geneve2): making interface the new active one [ 157.184470][ T9326] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 157.213583][ T314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.213791][ T314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.213822][ T314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.213901][ T314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.324909][ T9337] bridge0: port 3(syzkaller0) entered blocking state [ 157.324947][ T9337] bridge0: port 3(syzkaller0) entered disabled state [ 157.325315][ T9337] syzkaller0: entered allmulticast mode [ 157.325969][ T9337] syzkaller0: entered promiscuous mode [ 157.329856][ T9341] loop9: detected capacity change from 0 to 512 [ 157.364207][ T9336] syzkaller0 (unregistering): left allmulticast mode [ 157.364233][ T9336] syzkaller0 (unregistering): left promiscuous mode [ 157.364266][ T9336] bridge0: port 3(syzkaller0) entered disabled state [ 157.380111][ T9341] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.380206][ T9341] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.501977][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.668026][ T9355] sctp: [Deprecated]: syz.3.1723 (pid 9355) Use of int in maxseg socket option. [ 157.668026][ T9355] Use struct sctp_assoc_value instead [ 157.708405][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.708603][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.724218][ T9364] loop3: detected capacity change from 0 to 512 [ 157.743789][ T9364] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1727: iget: bad i_size value: 38620345925642 [ 157.743825][ T9364] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.744044][ T9364] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1727: couldn't read orphan inode 15 (err -117) [ 157.744069][ T9364] loop3: lost filesystem error report for type 5 error -117 [ 157.744598][ T9364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.749353][ T29] audit: type=1400 audit(1790645505.692:1257): avc: denied { write } for pid=9363 comm="syz.3.1727" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.753375][ T9364] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1727: bg 0: block 5: invalid block bitmap [ 157.789149][ T9364] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 157.789183][ T9364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.789183][ T9364] [ 157.789197][ T9364] EXT4-fs (loop3): Total free blocks count 0 [ 157.789210][ T9364] EXT4-fs (loop3): Free/Dirty block details [ 157.789222][ T9364] EXT4-fs (loop3): free_blocks=0 [ 157.789262][ T9364] EXT4-fs (loop3): dirty_blocks=65 [ 157.789276][ T9364] EXT4-fs (loop3): Block reservation details [ 157.789288][ T9364] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 157.855648][ T314] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 157.994138][ T9371] syzkaller1: entered promiscuous mode [ 157.994241][ T9371] syzkaller1: entered allmulticast mode [ 158.060515][ T29] audit: type=1400 audit(1790645506.002:1258): avc: denied { write } for pid=9374 comm="syz.5.1731" name="snmp6" dev="proc" ino=4026534435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 158.173152][ T9382] loop4: detected capacity change from 0 to 512 [ 158.185863][ T9382] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1734: Unrecognised inode hash code 255 [ 158.185897][ T9382] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1734: Corrupt directory, running e2fsck is recommended [ 158.208324][ T9379] loop5: detected capacity change from 0 to 1024 [ 158.213930][ T9379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.255604][ T9382] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 158.255736][ T9382] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.1734: corrupted in-inode xattr: invalid ea_ino [ 158.255766][ T9382] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.259902][ T9382] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1734: couldn't read orphan inode 15 (err -117) [ 158.259939][ T9382] loop4: lost filesystem error report for type 5 error -117 [ 158.312617][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.313111][ T9379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.315285][ T29] audit: type=1400 audit(1790645506.262:1259): avc: denied { write } for pid=9378 comm="syz.5.1733" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.420243][ T9398] loop9: detected capacity change from 0 to 256 [ 158.469832][ T6727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.539342][ T9404] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 158.576641][ T9404] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 158.627513][ T8754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.651475][ T9414] xt_hashlimit: size too large, truncated to 1048576 [ 158.929566][ T9427] netlink: 160380 bytes leftover after parsing attributes in process `syz.9.1750'. [ 158.929611][ T9427] netlink: zone id is out of range [ 158.929624][ T9427] netlink: zone id is out of range [ 158.929631][ T9427] netlink: zone id is out of range [ 158.929638][ T9427] netlink: zone id is out of range [ 158.929644][ T9427] netlink: zone id is out of range [ 158.929651][ T9427] netlink: zone id is out of range [ 158.929657][ T9427] netlink: zone id is out of range [ 158.929662][ T9427] netlink: zone id is out of range [ 158.929720][ T9427] netlink: zone id is out of range [ 158.929726][ T9427] netlink: zone id is out of range [ 159.056295][ T9458] sctp: [Deprecated]: syz.4.1757 (pid 9458) Use of int in maxseg socket option. [ 159.056295][ T9458] Use struct sctp_assoc_value instead [ 159.196001][ T9473] loop3: detected capacity change from 0 to 1024 [ 159.196512][ T9473] EXT4-fs: Ignoring removed bh option [ 159.217109][ T9473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.222292][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1773'. [ 159.224613][ T29] audit: type=1400 audit(1790645507.172:1260): avc: denied { write } for pid=9472 comm="syz.3.1763" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.228058][ T9473] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.3.1763: path /128/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 159.228357][ T9473] EXT4-fs (loop3): Remounting filesystem read-only [ 159.273268][ T7346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.410514][ T314] IPVS: starting estimator thread 0... [ 159.467117][ T29] audit: type=1400 audit(1790645507.412:1261): avc: denied { append } for pid=9500 comm="syz.5.1769" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.493617][ T9497] IPVS: using max 2736 ests per chain, 136800 per kthread [ 159.750138][ T29] audit: type=1400 audit(1790645507.692:1262): avc: denied { remount } for pid=9556 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.917199][ T29] audit: type=1400 audit(1790645507.862:1263): avc: denied { read } for pid=9572 comm="syz.3.1784" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.917291][ T29] audit: type=1400 audit(1790645507.862:1264): avc: denied { open } for pid=9572 comm="syz.3.1784" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.977652][ T29] audit: type=1400 audit(1790645507.922:1265): avc: denied { ioctl } for pid=9572 comm="syz.3.1784" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.231203][ T9586] FAULT_INJECTION: forcing a failure. [ 160.231203][ T9586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.231241][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.3.1789 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.231347][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.231362][ T9586] Call Trace: [ 160.231371][ T9586] [ 160.231382][ T9586] __dump_stack+0x1d/0x30 [ 160.231414][ T9586] dump_stack_lvl+0x95/0xd0 [ 160.231441][ T9586] dump_stack+0x15/0x1b [ 160.231539][ T9586] should_fail_ex+0x262/0x280 [ 160.231571][ T9586] should_fail_alloc_page+0xf2/0x100 [ 160.231647][ T9586] __alloc_frozen_pages_noprof+0x157/0x400 [ 160.231670][ T9586] alloc_pages_mpol+0xaf/0x1d0 [ 160.231914][ T9586] alloc_frozen_pages_noprof+0x94/0x120 [ 160.231949][ T9586] ? iovec_from_user+0x84/0x200 [ 160.232044][ T9586] ___kmalloc_large_node+0x44/0xd0 [ 160.232087][ T9586] ? iovec_from_user+0x84/0x200 [ 160.232146][ T9586] __kmalloc_large_node_noprof+0x18/0xa0 [ 160.232184][ T9586] ? iovec_from_user+0x84/0x200 [ 160.232215][ T9586] __kmalloc_noprof+0x27e/0x4d0 [ 160.232410][ T9586] ? iovec_from_user+0x84/0x200 [ 160.232441][ T9586] ? hrtimer_start_range_ns+0x108/0x120 [ 160.232468][ T9586] iovec_from_user+0x84/0x200 [ 160.232516][ T9586] __import_iovec+0xf3/0x530 [ 160.232569][ T9586] import_iovec+0x60/0x80 [ 160.232603][ T9586] process_vm_rw+0xed/0x9c0 [ 160.232690][ T9586] ? __futex_wait+0x1fd/0x260 [ 160.232722][ T9586] ? __pfx_futex_wake_mark+0x10/0x10 [ 160.232750][ T9586] ? __se_sys_futex+0x2f6/0x370 [ 160.232825][ T9586] ? xfd_validate_state+0x45/0xf0 [ 160.232945][ T9586] ? restore_fpregs_from_fpstate+0x61/0x110 [ 160.233041][ T9586] __x64_sys_process_vm_writev+0x78/0x90 [ 160.233108][ T9586] x64_sys_call+0x128f/0x2550 [ 160.233140][ T9586] do_syscall_64+0x112/0x360 [ 160.233169][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.233194][ T9586] RIP: 0033:0x7f1f9f44e159 [ 160.233346][ T9586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.233368][ T9586] RSP: 002b:00007f1f9dea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 160.233391][ T9586] RAX: ffffffffffffffda RBX: 00007f1f9f6d5fa0 RCX: 00007f1f9f44e159 [ 160.233449][ T9586] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000000 [ 160.233463][ T9586] RBP: 00007f1f9f4e506b R08: 0000000000000001 R09: 0000000000000000 [ 160.233476][ T9586] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 160.233489][ T9586] R13: 00007f1f9f6d6038 R14: 00007f1f9f6d5fa0 R15: 00007ffeffc59368 [ 160.233532][ T9586] [ 160.629919][ T9591] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 160.689930][ T9591] bond1: (slave geneve2): making interface the new active one [ 160.691776][ T9591] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 160.710931][ T5316] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.711054][ T5316] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.711157][ T5316] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.711229][ T5316] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.783699][ T11] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 160.845445][ T9596] syzkaller0: entered promiscuous mode [ 160.845471][ T9596] syzkaller0: entered allmulticast mode [ 160.965993][ T9601] FAULT_INJECTION: forcing a failure. [ 160.965993][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 160.966084][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.4.1795 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.966107][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.966136][ T9601] Call Trace: [ 160.966149][ T9601] [ 160.966156][ T9601] __dump_stack+0x1d/0x30 [ 160.966184][ T9601] dump_stack_lvl+0x95/0xd0 [ 160.966207][ T9601] dump_stack+0x15/0x1b [ 160.966419][ T9601] should_fail_ex+0x262/0x280 [ 160.966492][ T9601] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 160.966567][ T9601] should_failslab+0x8c/0xb0 [ 160.966631][ T9601] __kmalloc_cache_noprof+0x7a/0x400 [ 160.966714][ T9601] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 160.966757][ T9601] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 160.966788][ T9601] sctp_association_new+0xdb2/0x1160 [ 160.966851][ T9601] sctp_connect_new_asoc+0x1a8/0x3a0 [ 160.966877][ T9601] sctp_sendmsg+0x105f/0x1d00 [ 160.966900][ T9601] ? __pfx_sctp_sendmsg+0x10/0x10 [ 160.966984][ T9601] ? __pfx_inet_sendmsg+0x10/0x10 [ 160.967017][ T9601] inet_sendmsg+0xc5/0xd0 [ 160.967047][ T9601] __sys_sendto+0x3be/0x470 [ 160.967074][ T9601] __x64_sys_sendto+0x76/0x90 [ 160.967162][ T9601] x64_sys_call+0x200c/0x2550 [ 160.967189][ T9601] do_syscall_64+0x112/0x360 [ 160.967278][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.967313][ T9601] RIP: 0033:0x7f527698e159 [ 160.967335][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.967356][ T9601] RSP: 002b:00007f52753e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 160.967378][ T9601] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527698e159 [ 160.967393][ T9601] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 160.967432][ T9601] RBP: 00007f5276a2506b R08: 0000200000000240 R09: 000000000000001c [ 160.967448][ T9601] R10: 000000000004c810 R11: 0000000000000246 R12: 0000000000000000 [ 160.967462][ T9601] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffc4982c368 [ 160.967483][ T9601] [ 161.003989][ T9603] syzkaller1: entered promiscuous mode [ 161.004017][ T9603] syzkaller1: entered allmulticast mode [ 161.247234][ T9610] netlink: 160380 bytes leftover after parsing attributes in process `syz.4.1797'. [ 161.303259][ T9612] xt_hashlimit: size too large, truncated to 1048576 [ 161.557078][ T9618] FAULT_INJECTION: forcing a failure. [ 161.557078][ T9618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.557230][ T9618] CPU: 0 UID: 0 PID: 9618 Comm: syz.4.1802 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.557359][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.557374][ T9618] Call Trace: [ 161.557382][ T9618] [ 161.557391][ T9618] __dump_stack+0x1d/0x30 [ 161.557424][ T9618] dump_stack_lvl+0x95/0xd0 [ 161.557465][ T9618] dump_stack+0x15/0x1b [ 161.557490][ T9618] should_fail_ex+0x262/0x280 [ 161.557522][ T9618] should_fail+0xb/0x20 [ 161.557586][ T9618] should_fail_usercopy+0x1a/0x20 [ 161.557618][ T9618] _copy_from_iter+0x20c/0xe70 [ 161.557697][ T9618] ? _copy_from_iter+0x455/0xe70 [ 161.557749][ T9618] copy_page_from_iter+0x15d/0x1f0 [ 161.557810][ T9618] skb_copy_datagram_from_iter+0x22d/0x480 [ 161.557845][ T9618] unix_stream_sendmsg+0x63a/0xbc0 [ 161.557885][ T9618] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 161.557932][ T9618] ____sys_sendmsg+0x532/0x580 [ 161.558032][ T9618] ___sys_sendmsg+0x195/0x1e0 [ 161.558068][ T9618] __x64_sys_sendmsg+0xd4/0x160 [ 161.558097][ T9618] x64_sys_call+0x22ab/0x2550 [ 161.558203][ T9618] do_syscall_64+0x112/0x360 [ 161.558231][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.558259][ T9618] RIP: 0033:0x7f527698e159 [ 161.558278][ T9618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.558299][ T9618] RSP: 002b:00007f52753e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.558385][ T9618] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527698e159 [ 161.558427][ T9618] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 161.558440][ T9618] RBP: 00007f5276a2506b R08: 0000000000000000 R09: 0000000000000000 [ 161.558453][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.558465][ T9618] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffc4982c368 [ 161.558599][ T9618] [ 161.854468][ T9627] bond1 (unregistering): Released all slaves [ 161.934517][ T9634] FAULT_INJECTION: forcing a failure. [ 161.934517][ T9634] name failslab, interval 1, probability 0, space 0, times 0 [ 161.934554][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.9.1807 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.934608][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.934622][ T9634] Call Trace: [ 161.934628][ T9634] [ 161.934636][ T9634] __dump_stack+0x1d/0x30 [ 161.934688][ T9634] dump_stack_lvl+0x95/0xd0 [ 161.934731][ T9634] dump_stack+0x15/0x1b [ 161.934753][ T9634] should_fail_ex+0x262/0x280 [ 161.934783][ T9634] ? call_usermodehelper_setup+0x72/0x190 [ 161.934867][ T9634] should_failslab+0x8c/0xb0 [ 161.934904][ T9634] __kmalloc_cache_noprof+0x7a/0x400 [ 161.934982][ T9634] ? call_usermodehelper_setup+0x72/0x190 [ 161.935028][ T9634] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 161.935068][ T9634] call_usermodehelper_setup+0x72/0x190 [ 161.935289][ T9634] ? __pfx_umh_keys_init+0x10/0x10 [ 161.935327][ T9634] call_sbin_request_key+0x578/0x740 [ 161.935399][ T9634] request_key_and_link+0x95b/0xe20 [ 161.935501][ T9634] ? __pfx_key_default_cmp+0x10/0x10 [ 161.935668][ T9634] ? __pfx_keyring_search_iterator+0x10/0x10 [ 161.935741][ T9634] __se_sys_request_key+0x1e9/0x2a0 [ 161.935828][ T9634] __x64_sys_request_key+0x55/0x70 [ 161.935930][ T9634] x64_sys_call+0x1741/0x2550 [ 161.935960][ T9634] do_syscall_64+0x112/0x360 [ 161.936058][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.936082][ T9634] RIP: 0033:0x7f2ebec7e159 [ 161.936365][ T9634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.936416][ T9634] RSP: 002b:00007f2ebd6d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 161.936437][ T9634] RAX: ffffffffffffffda RBX: 00007f2ebef05fa0 RCX: 00007f2ebec7e159 [ 161.936452][ T9634] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 161.936542][ T9634] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000000 [ 161.936556][ T9634] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 161.936569][ T9634] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 161.936588][ T9634] [ 162.225954][ T9640] loop3: detected capacity change from 0 to 1024 [ 162.252668][ T9640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.272146][ T29] audit: type=1400 audit(1790645510.212:1266): avc: denied { write } for pid=9635 comm="syz.3.1808" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.337920][ T9644] loop9: detected capacity change from 0 to 1024 [ 162.339616][ T9644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.360673][ T9644] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.364729][ T29] audit: type=1400 audit(1790645510.312:1267): avc: denied { write } for pid=9642 comm="syz.9.1811" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.479242][ T29] audit: type=1400 audit(1790645510.422:1268): avc: denied { setopt } for pid=9648 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.617854][ T29] audit: type=1400 audit(1790645510.562:1269): avc: denied { append } for pid=9660 comm="syz.2.1816" name="uprobe_events" dev="tracefs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 163.396352][ T9664] loop5: detected capacity change from 0 to 512 [ 163.405049][ T9664] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1820: iget: bad i_size value: 38620345925642 [ 163.405132][ T9664] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.407659][ T9664] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1820: couldn't read orphan inode 15 (err -117) [ 163.407695][ T9664] loop5: lost filesystem error report for type 5 error -117 [ 163.408272][ T9664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.417052][ T29] audit: type=1400 audit(1790645511.362:1270): avc: denied { write } for pid=9663 comm="syz.5.1820" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.419916][ T9664] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1820: bg 0: block 5: invalid block bitmap [ 163.425173][ T9664] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 163.425210][ T9664] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.425210][ T9664] [ 163.425225][ T9664] EXT4-fs (loop5): Total free blocks count 0 [ 163.425240][ T9664] EXT4-fs (loop5): Free/Dirty block details [ 163.425253][ T9664] EXT4-fs (loop5): free_blocks=0 [ 163.425268][ T9664] EXT4-fs (loop5): dirty_blocks=65 [ 163.425359][ T9664] EXT4-fs (loop5): Block reservation details [ 163.425372][ T9664] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 163.426114][ T38] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 163.629051][ T7346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.657456][ T9667] FAULT_INJECTION: forcing a failure. [ 163.657456][ T9667] name failslab, interval 1, probability 0, space 0, times 0 [ 163.657489][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.5.1821 Not tainted syzkaller #0 PREEMPT(lazy) [ 163.657543][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.657558][ T9667] Call Trace: [ 163.657568][ T9667] [ 163.657578][ T9667] __dump_stack+0x1d/0x30 [ 163.657607][ T9667] dump_stack_lvl+0x95/0xd0 [ 163.657725][ T9667] dump_stack+0x15/0x1b [ 163.657756][ T9667] should_fail_ex+0x262/0x280 [ 163.657784][ T9667] ? mempool_alloc_slab+0x1a/0x30 [ 163.657857][ T9667] should_failslab+0x8c/0xb0 [ 163.657912][ T9667] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 163.657942][ T9667] ? mempool_alloc_slab+0x1a/0x30 [ 163.657995][ T9667] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 163.658031][ T9667] mempool_alloc_slab+0x1a/0x30 [ 163.658105][ T9667] mempool_init_node+0x139/0x260 [ 163.658141][ T9667] ? __pfx_mempool_free_slab+0x10/0x10 [ 163.658175][ T9667] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 163.658336][ T9667] mempool_init_noprof+0x3a/0x50 [ 163.658663][ T9667] bioset_init+0x37b/0x480 [ 163.658701][ T9667] ? __pfx_no_op+0x10/0x10 [ 163.658731][ T9667] ? percpu_ref_init+0x1dd/0x250 [ 163.658884][ T9667] mddev_init+0xfc/0x420 [ 163.658916][ T9667] ? __pfx_md_probe+0x10/0x10 [ 163.658954][ T9667] md_alloc+0x99/0xa00 [ 163.659029][ T9667] ? __rcu_read_unlock+0x4e/0x70 [ 163.659080][ T9667] ? __pfx_md_probe+0x10/0x10 [ 163.659136][ T9667] md_alloc_and_put+0x18/0x170 [ 163.659162][ T9667] md_probe+0x68/0x80 [ 163.659207][ T9667] blk_request_module+0x1bd/0x1e0 [ 163.659290][ T9667] blkdev_get_no_open+0x4b/0x100 [ 163.659318][ T9667] bdev_file_open_by_dev+0xa4/0x230 [ 163.659351][ T9667] swsusp_check+0x3f/0x2a0 [ 163.659633][ T9667] software_resume+0x41/0x2f0 [ 163.659660][ T9667] resume_store+0x2d9/0x3d0 [ 163.659685][ T9667] ? __pfx_resume_store+0x10/0x10 [ 163.659764][ T9667] kobj_attr_store+0x4a/0x70 [ 163.659816][ T9667] ? __pfx_kobj_attr_store+0x10/0x10 [ 163.659847][ T9667] sysfs_kf_write+0xfe/0x120 [ 163.659909][ T9667] ? __pfx_sysfs_kf_write+0x10/0x10 [ 163.659939][ T9667] kernfs_fop_write_iter+0x1d2/0x2e0 [ 163.659965][ T9667] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 163.660159][ T9667] vfs_write+0x57f/0x9a0 [ 163.660197][ T9667] ksys_write+0xdc/0x1a0 [ 163.660280][ T9667] __x64_sys_write+0x40/0x50 [ 163.660410][ T9667] x64_sys_call+0x154e/0x2550 [ 163.660442][ T9667] do_syscall_64+0x112/0x360 [ 163.660478][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.660570][ T9667] RIP: 0033:0x7faa6a00e159 [ 163.660591][ T9667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.660707][ T9667] RSP: 002b:00007faa68a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.660749][ T9667] RAX: ffffffffffffffda RBX: 00007faa6a295fa0 RCX: 00007faa6a00e159 [ 163.660825][ T9667] RDX: 0000000000000012 RSI: 0000200000000480 RDI: 0000000000000004 [ 163.660841][ T9667] RBP: 00007faa6a0a506b R08: 0000000000000000 R09: 0000000000000000 [ 163.660879][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.660892][ T9667] R13: 00007faa6a296038 R14: 00007faa6a295fa0 R15: 00007ffe8dd1ce18 [ 163.660912][ T9667] [ 163.661001][ T9667] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.685145][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.115194][ T9685] netlink: 'syz.2.1826': attribute type 5 has an invalid length. [ 164.145455][ T9690] FAULT_INJECTION: forcing a failure. [ 164.145455][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 164.145489][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.9.1828 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.145567][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.145577][ T9690] Call Trace: [ 164.145584][ T9690] [ 164.145593][ T9690] __dump_stack+0x1d/0x30 [ 164.145626][ T9690] dump_stack_lvl+0x95/0xd0 [ 164.145652][ T9690] dump_stack+0x15/0x1b [ 164.145708][ T9690] should_fail_ex+0x262/0x280 [ 164.145742][ T9690] ? do_getname+0x2e/0x1c0 [ 164.145804][ T9690] should_failslab+0x8c/0xb0 [ 164.145843][ T9690] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 164.145936][ T9690] ? do_getname+0x2e/0x1c0 [ 164.145959][ T9690] ? do_futex+0x391/0x460 [ 164.146029][ T9690] do_getname+0x2e/0x1c0 [ 164.146053][ T9690] getname_flags+0x1d/0x30 [ 164.146074][ T9690] __se_sys_quotactl+0x157/0x640 [ 164.146195][ T9690] __x64_sys_quotactl+0x55/0x70 [ 164.146243][ T9690] x64_sys_call+0x13d5/0x2550 [ 164.146274][ T9690] do_syscall_64+0x112/0x360 [ 164.146304][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.146331][ T9690] RIP: 0033:0x7f2ebec7e159 [ 164.146389][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.146411][ T9690] RSP: 002b:00007f2ebd6d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 164.146516][ T9690] RAX: ffffffffffffffda RBX: 00007f2ebef05fa0 RCX: 00007f2ebec7e159 [ 164.146589][ T9690] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000400 [ 164.146617][ T9690] RBP: 00007f2ebed1506b R08: 0000000000000000 R09: 0000000000000000 [ 164.146633][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.146648][ T9690] R13: 00007f2ebef06038 R14: 00007f2ebef05fa0 R15: 00007ffc2e6f7078 [ 164.146670][ T9690] [ 164.869486][ T29] audit: type=1400 audit(1790645512.812:1271): avc: denied { bind } for pid=9699 comm="syz.9.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.899028][ T9703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1833'. [ 164.909483][ T9703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9703 comm=syz.4.1833 [ 164.909587][ T9703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1833'. [ 164.942672][ T9697] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.1832'. [ 165.078466][ T29] audit: type=1326 audit(1790645513.022:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 165.079682][ T29] audit: type=1326 audit(1790645513.022:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 165.085698][ T29] audit: type=1326 audit(1790645513.032:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 165.088065][ T29] audit: type=1326 audit(1790645513.032:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e2ede159 code=0x7ffc0000 [ 165.305308][ T9736] loop4: detected capacity change from 0 to 128 [ 165.364427][ T9741] FAULT_INJECTION: forcing a failure. [ 165.364427][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 165.364471][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.4.1850 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.364516][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.364541][ T9741] Call Trace: [ 165.364549][ T9741] [ 165.364558][ T9741] __dump_stack+0x1d/0x30 [ 165.364587][ T9741] dump_stack_lvl+0x95/0xd0 [ 165.364646][ T9741] dump_stack+0x15/0x1b [ 165.364671][ T9741] should_fail_ex+0x262/0x280 [ 165.364706][ T9741] should_failslab+0x8c/0xb0 [ 165.364744][ T9741] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 165.364842][ T9741] ? kstrdup_const+0x3e/0x50 [ 165.364871][ T9741] ? kstrdup_const+0x3e/0x50 [ 165.364899][ T9741] kstrdup+0x3e/0xd0 [ 165.364925][ T9741] kstrdup_const+0x3e/0x50 [ 165.365012][ T9741] __kernfs_new_node+0x42/0x440 [ 165.365035][ T9741] ? should_fail_ex+0xdb/0x280 [ 165.365064][ T9741] ? should_failslab+0x8c/0xb0 [ 165.365103][ T9741] kernfs_create_dir_ns+0xd0/0x170 [ 165.365130][ T9741] sysfs_create_dir_ns+0xd4/0x1d0 [ 165.365167][ T9741] kobject_add_internal+0x470/0x770 [ 165.365213][ T9741] kobject_init_and_add+0x13c/0x1e0 [ 165.365249][ T9741] ? should_failslab+0x8c/0xb0 [ 165.365288][ T9741] bus_add_driver+0x1a7/0x450 [ 165.365394][ T9741] driver_register+0x162/0x220 [ 165.365433][ T9741] usb_gadget_register_driver_owner+0x92/0x1a0 [ 165.365546][ T9741] raw_ioctl+0xc5b/0x1df0 [ 165.365619][ T9741] ? ioctl_has_perm+0x273/0x2c0 [ 165.365650][ T9741] ? do_vfs_ioctl+0x848/0xe50 [ 165.365688][ T9741] ? selinux_file_ioctl+0x33c/0x3c0 [ 165.365717][ T9741] ? __fget_files+0x184/0x1c0 [ 165.365791][ T9741] ? __pfx_raw_ioctl+0x10/0x10 [ 165.365823][ T9741] __se_sys_ioctl+0xce/0x140 [ 165.365879][ T9741] __x64_sys_ioctl+0x43/0x50 [ 165.366067][ T9741] x64_sys_call+0x239d/0x2550 [ 165.366102][ T9741] do_syscall_64+0x112/0x360 [ 165.366134][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.366164][ T9741] RIP: 0033:0x7f527698ddeb [ 165.366188][ T9741] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 165.366344][ T9741] RSP: 002b:00007f52753e4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.366370][ T9741] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f527698ddeb [ 165.366385][ T9741] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 165.366401][ T9741] RBP: 00007f52753e5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 165.366430][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.366498][ T9741] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 165.366518][ T9741] [ 165.366596][ T9741] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 165.366623][ T9741] UDC core: USB Raw Gadget: driver registration failed: -12 [ 165.366642][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 165.724743][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1859'. [ 165.724784][ T9762] bridge_slave_1: left allmulticast mode [ 165.724904][ T9762] bridge_slave_1: left promiscuous mode [ 165.725038][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.726241][ T9762] bridge_slave_0: left allmulticast mode [ 165.726275][ T9762] bridge_slave_0: left promiscuous mode [ 165.728073][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.815351][ T9766] loop3: detected capacity change from 0 to 256 [ 165.862244][ T9768] loop2: detected capacity change from 0 to 2048 [ 165.890873][ T9768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.966411][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.126774][ T9791] loop3: detected capacity change from 0 to 512 [ 166.141110][ T9791] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1869: iget: bad i_size value: 38620345925642 [ 166.141177][ T9791] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.141755][ T9791] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1869: couldn't read orphan inode 15 (err -117) [ 166.141790][ T9791] loop3: lost filesystem error report for type 5 error -117 [ 166.143407][ T9791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.212664][ T9777] net_ratelimit: 2746 callbacks suppressed [ 166.212697][ T9777] ip_tables: iptables: counters copy to user failed while replacing table [ 166.299529][ T9795] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1871'. [ 166.448569][ T8741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.861340][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.861375][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.861432][ T9804] bridge_slave_0: entered allmulticast mode [ 166.861451][ T9831] loop9: detected capacity change from 0 to 1024 [ 166.861865][ T9804] bridge_slave_0: entered promiscuous mode [ 166.893207][ T9831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.913536][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.913570][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.915859][ T9804] bridge_slave_1: entered allmulticast mode [ 166.916516][ T9804] bridge_slave_1: entered promiscuous mode [ 166.963520][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.967778][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.998939][ T9804] team0: Port device team_slave_0 added [ 167.009781][ T9804] team0: Port device team_slave_1 added [ 167.053689][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.053714][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.053744][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.056227][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.056244][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.056275][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.138582][ T9838] netlink: 'syz.2.1883': attribute type 21 has an invalid length. [ 167.139566][ T9804] hsr_slave_0: entered promiscuous mode [ 167.139969][ T9804] hsr_slave_1: entered promiscuous mode [ 167.141951][ T9804] debugfs: 'hsr0' already exists in 'hsr' [ 167.141968][ T9804] Cannot create hsr debugfs directory [ 167.142176][ T9838] netlink: 'syz.2.1883': attribute type 3 has an invalid length. [ 167.142193][ T9838] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1883'. [ 167.284468][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.405203][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 167.405223][ T29] audit: type=1400 audit(1790645515.352:1356): avc: denied { write } for pid=9848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.479016][ T29] audit: type=1400 audit(1790645515.422:1357): avc: denied { write } for pid=9861 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.718591][ T29] audit: type=1400 audit(1790645515.662:1358): avc: denied { write } for pid=9863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.835718][ T29] audit: type=1400 audit(1790645515.782:1359): avc: denied { write } for pid=9882 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.859769][ T9804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.881845][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.885338][ T9804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.902554][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.911535][ T9804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.927353][ T29] audit: type=1400 audit(1790645515.872:1360): avc: denied { create } for pid=9887 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.927947][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.932474][ T9804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.946979][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.030334][ T29] audit: type=1400 audit(1790645515.972:1361): avc: denied { write } for pid=9887 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.061095][ T9889] loop4: detected capacity change from 0 to 256 [ 168.062045][ T9889] vfat: Unknown parameter 'ÿÿÿÿÿÿ±<7oÝf§Ö9À%2¿Î!÷Øog‘LÒLÈ]' [ 168.205153][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.205415][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.269502][ T9908] xt_hashlimit: size too large, truncated to 1048576 [ 168.271048][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.298218][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.309131][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.309171][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.319147][ T29] audit: type=1400 audit(1790645516.262:1362): avc: denied { write } for pid=9890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.328618][ T4624] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.328651][ T4624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.398550][ T9804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.445904][ T29] audit: type=1400 audit(1790645516.392:1363): avc: denied { write } for pid=9919 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.643172][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.716010][ T29] audit: type=1400 audit(1790645516.662:1364): avc: denied { write } for pid=9932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.770557][ T29] audit: type=1400 audit(1790645516.712:1365): avc: denied { read write } for pid=9957 comm="syz.5.1900" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.799406][ T9961] loop2: detected capacity change from 0 to 512 [ 168.816647][ T9961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.817218][ T9961] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.900169][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.938220][ T9804] veth0_vlan: entered promiscuous mode [ 168.957645][ T9804] veth1_vlan: entered promiscuous mode [ 168.995177][ T9975] loop9: detected capacity change from 0 to 256 [ 169.015441][ T9804] veth0_macvtap: entered promiscuous mode [ 169.035066][ T9804] veth1_macvtap: entered promiscuous mode [ 169.078683][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.098938][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.122965][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.123019][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.123637][ T4624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.123891][ T4624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.625510][T10036] FAULT_INJECTION: forcing a failure. [ 169.625510][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 169.625550][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.5.1911 Not tainted syzkaller #0 PREEMPT(lazy) [ 169.625590][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.625605][T10036] Call Trace: [ 169.625614][T10036] [ 169.625623][T10036] __dump_stack+0x1d/0x30 [ 169.625657][T10036] dump_stack_lvl+0x95/0xd0 [ 169.625708][T10036] dump_stack+0x15/0x1b [ 169.625732][T10036] should_fail_ex+0x262/0x280 [ 169.625764][T10036] should_failslab+0x8c/0xb0 [ 169.625835][T10036] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 169.625908][T10036] ? should_failslab+0x8c/0xb0 [ 169.625940][T10036] ? kstrdup_const+0x3e/0x50 [ 169.625965][T10036] ? kstrdup_const+0x3e/0x50 [ 169.626010][T10036] kstrdup+0x3e/0xd0 [ 169.626036][T10036] kstrdup_const+0x3e/0x50 [ 169.626110][T10036] __kernfs_new_node+0x42/0x440 [ 169.626136][T10036] ? should_fail_ex+0xdb/0x280 [ 169.626228][T10036] ? should_failslab+0x8c/0xb0 [ 169.626267][T10036] kernfs_create_dir_ns+0xd0/0x170 [ 169.626347][T10036] sysfs_create_dir_ns+0xd4/0x1d0 [ 169.626385][T10036] kobject_add_internal+0x470/0x770 [ 169.626422][T10036] kobject_init_and_add+0x13c/0x1e0 [ 169.626455][T10036] ? should_failslab+0x8c/0xb0 [ 169.626532][T10036] bus_add_driver+0x1a7/0x450 [ 169.626554][T10036] driver_register+0x162/0x220 [ 169.626593][T10036] usb_gadget_register_driver_owner+0x92/0x1a0 [ 169.626704][T10036] raw_ioctl+0xc5b/0x1df0 [ 169.626823][T10036] ? ioctl_has_perm+0x273/0x2c0 [ 169.626851][T10036] ? do_vfs_ioctl+0x848/0xe50 [ 169.626919][T10036] ? selinux_file_ioctl+0x33c/0x3c0 [ 169.626946][T10036] ? __fget_files+0x184/0x1c0 [ 169.626977][T10036] ? __pfx_raw_ioctl+0x10/0x10 [ 169.627008][T10036] __se_sys_ioctl+0xce/0x140 [ 169.627119][T10036] __x64_sys_ioctl+0x43/0x50 [ 169.627157][T10036] x64_sys_call+0x239d/0x2550 [ 169.627183][T10036] do_syscall_64+0x112/0x360 [ 169.627212][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.627280][T10036] RIP: 0033:0x7faa6a00ddeb [ 169.627301][T10036] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 169.627323][T10036] RSP: 002b:00007faa68a64f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.627347][T10036] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faa6a00ddeb [ 169.627363][T10036] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 169.627377][T10036] RBP: 00007faa68a65fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 169.627400][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.627415][T10036] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 169.627435][T10036] [ 169.627523][T10036] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 169.627545][T10036] UDC core: USB Raw Gadget: driver registration failed: -12 [ 169.627563][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 170.808509][T10124] loop4: detected capacity change from 0 to 1024 [ 170.811666][T10124] EXT4-fs: Ignoring removed bh option [ 170.821523][T10124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.411560][ T6727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.474952][T10139] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1917'. [ 172.482033][T10139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10139 comm=syz.5.1917 [ 172.482109][T10139] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1917'. [ 172.560391][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 172.800688][T10171] loop5: detected capacity change from 0 to 1024 [ 172.815055][T10171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.818365][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 172.818436][ T29] audit: type=1400 audit(1790645520.762:1392): avc: denied { write } for pid=10169 comm="syz.5.1933" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.818461][ T29] audit: type=1400 audit(1790645520.762:1393): avc: denied { write } for pid=10169 comm="syz.5.1933" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.818485][ T29] audit: type=1400 audit(1790645520.762:1394): avc: denied { write } for pid=10169 comm="syz.5.1933" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.818584][ T29] audit: type=1400 audit(1790645520.762:1395): avc: denied { rename } for pid=10169 comm="syz.5.1933" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.818607][ T29] audit: type=1400 audit(1790645520.762:1396): avc: denied { rename } for pid=10169 comm="syz.5.1933" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.818699][ T29] audit: type=1400 audit(1790645520.762:1397): avc: denied { reparent } for pid=10169 comm="syz.5.1933" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.056668][ T29] audit: type=1400 audit(1790645521.002:1398): avc: denied { write } for pid=10169 comm="syz.5.1933" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.094850][ T29] audit: type=1400 audit(1790645521.042:1399): avc: denied { write } for pid=10169 comm="syz.5.1933" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.096936][T10171] EXT4-fs warning (device loop5): ext4_rmdir:3194: inode #11: comm syz.5.1933: empty directory 'file0' has too many links (111) [ 173.129633][ T8754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.406831][ T29] audit: type=1400 audit(1790645521.352:1400): avc: denied { nlmsg_write } for pid=10209 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 173.407231][ T29] audit: type=1400 audit(1790645521.352:1401): avc: denied { audit_write } for pid=10209 comm="syz.4.1946" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.509560][T10223] loop9: detected capacity change from 0 to 512 [ 173.622198][T10237] FAULT_INJECTION: forcing a failure. [ 173.622198][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.622292][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.1.1953 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.622318][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.622333][T10237] Call Trace: [ 173.622341][T10237] [ 173.622351][T10237] __dump_stack+0x1d/0x30 [ 173.622437][T10237] dump_stack_lvl+0x95/0xd0 [ 173.622464][T10237] dump_stack+0x15/0x1b [ 173.622487][T10237] should_fail_ex+0x262/0x280 [ 173.622516][T10237] should_fail+0xb/0x20 [ 173.622544][T10237] should_fail_usercopy+0x1a/0x20 [ 173.622630][T10237] _copy_to_user+0x20/0xa0 [ 173.622660][T10237] bpf_verifier_vlog+0x36e/0x5a0 [ 173.622688][T10237] __btf_verifier_log+0x7f/0xb0 [ 173.622782][T10237] __btf_verifier_log_type+0x302/0x330 [ 173.622813][T10237] btf_datasec_check_meta+0x2a6/0x640 [ 173.622854][T10237] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 173.622877][T10237] ? sort+0x6c/0xa0 [ 173.622917][T10237] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 173.622945][T10237] btf_parse_type_sec+0x291/0x1520 [ 173.622974][T10237] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 173.622995][T10237] ? btf_parse_hdr+0x43a/0x440 [ 173.623060][T10237] ? btf_parse_str_sec+0x1ae/0x1b0 [ 173.623085][T10237] btf_new_fd+0x2ec/0x6a0 [ 173.623110][T10237] bpf_btf_load+0x116/0x130 [ 173.623142][T10237] __sys_bpf+0xbce/0xc30 [ 173.623243][T10237] ? do_futex+0x380/0x460 [ 173.623279][T10237] __x64_sys_bpf+0x69/0x80 [ 173.623306][T10237] x64_sys_call+0xf26/0x2550 [ 173.623334][T10237] do_syscall_64+0x112/0x360 [ 173.623413][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.623442][T10237] RIP: 0033:0x7fe113c9e159 [ 173.623476][T10237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.623496][T10237] RSP: 002b:00007fe1126f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.623541][T10237] RAX: ffffffffffffffda RBX: 00007fe113f25fa0 RCX: 00007fe113c9e159 [ 173.623572][T10237] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 173.623586][T10237] RBP: 00007fe113d3506b R08: 0000000000000000 R09: 0000000000000000 [ 173.623599][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.623617][T10237] R13: 00007fe113f26038 R14: 00007fe113f25fa0 R15: 00007ffc19d817d8 [ 173.623636][T10237] [ 174.386318][T10279] loop2: detected capacity change from 0 to 164 [ 174.517091][T10285] loop2: detected capacity change from 0 to 512 [ 174.545072][T10285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.545196][T10285] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.612911][T10291] device-mapper: ioctl: name not supplied when creating device [ 174.628872][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.735865][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 174.735901][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.735981][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.753273][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 174.753303][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.753338][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.795757][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 174.795792][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.795832][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.803813][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 174.803862][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.803896][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.819312][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 174.819361][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.819392][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.834330][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 174.834435][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.834520][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.854056][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(15) [ 174.854084][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.854118][T10300] vhci_hcd vhci_hcd.0: Device attached [ 174.861533][T10304] vhci_hcd: connection closed [ 174.865453][T10313] vhci_hcd: connection closed [ 174.866987][T10302] vhci_hcd: connection closed [ 174.867071][T10315] vhci_hcd: connection closed [ 174.868156][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.868178][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.868250][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.868364][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.868408][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.868426][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.868462][T10308] vhci_hcd: connection closed [ 174.868784][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.868799][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.868817][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.868998][T10311] vhci_hcd: connection closed [ 174.870101][T10319] vhci_hcd: connection closed [ 174.870189][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.870204][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.870222][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.872927][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.872954][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.872977][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.874685][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.874703][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.874781][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.875070][ T4624] vhci_hcd vhci_hcd.5: stop threads [ 174.875245][ T4624] vhci_hcd vhci_hcd.5: release socket [ 174.875260][ T4624] vhci_hcd vhci_hcd.5: disconnect device [ 174.933816][ T6344] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 175.092880][T10331] loop2: detected capacity change from 0 to 1024 [ 175.118820][T10331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.293151][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 175.310087][T10349] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #108: comm syz.9.1986: No space for directory leaf checksum. Please run e2fsck -D. [ 175.310137][T10349] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #108: comm syz.9.1986: checksumming directory block 0 [ 175.419236][T10354] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 175.483109][ T8167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.537832][T10361] loop9: detected capacity change from 0 to 1024 [ 175.538455][T10361] EXT4-fs: Ignoring removed bh option [ 175.552066][T10361] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 175.573289][T10361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.695704][ T4624] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.699203][ T7343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.743991][ T3397] ================================================================== [ 175.744028][ T3397] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 175.744058][ T3397] [ 175.744063][ T3397] read-write to 0xffff888237c2b0a4 of 4 bytes by task 6344 on cpu 0: [ 175.744080][ T3397] wq_worker_running+0x9c/0x120 [ 175.744097][ T3397] schedule_timeout+0xca/0x180 [ 175.744118][ T3397] msleep+0x4f/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.744141][ T3397] hub_port_debounce+0x182/0x210 [ 175.744160][ T3397] hub_event+0x14bd/0x2aa0 [ 175.744178][ T3397] process_scheduled_works+0x56a/0xa50 [ 175.744207][ T3397] worker_thread+0x569/0x750 [ 175.744236][ T3397] kthread+0x223/0x270 [ 175.744255][ T3397] ret_from_fork+0x146/0x330 [ 175.744283][ T3397] ret_from_fork_asm+0x1a/0x30 [ 175.744311][ T3397] [ 175.744316][ T3397] read to 0xffff888237c2b0a4 of 4 bytes by task 3397 on cpu 1: [ 175.744331][ T3397] kick_pool_pick+0x5f/0x310 [ 175.744427][ T3397] __queue_work+0x90a/0xbc0 [ 175.744447][ T3397] queue_work_on+0xa9/0x140 [ 175.744463][ T3397] wg_packet_encrypt_worker+0xcff/0xe90 [ 175.744484][ T3397] process_scheduled_works+0x56a/0xa50 [ 175.744513][ T3397] worker_thread+0x569/0x750 [ 175.744542][ T3397] kthread+0x223/0x270 [ 175.744561][ T3397] ret_from_fork+0x146/0x330 [ 175.744587][ T3397] ret_from_fork_asm+0x1a/0x30 [ 175.744609][ T3397] [ 175.744613][ T3397] value changed: 0x00000000 -> 0x00000001 [ 175.744623][ T3397] [ 175.744627][ T3397] Reported by Kernel Concurrency Sanitizer on: [ 175.744640][ T3397] CPU: 1 UID: 0 PID: 3397 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.744665][ T3397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.744681][ T3397] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 175.744704][ T3397] ================================================================== [ 175.769615][T10383] pimreg: entered allmulticast mode [ 175.991731][T10381] FAULT_INJECTION: forcing a failure. [ 175.991731][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.991776][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.4.1999 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.991822][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.991836][T10381] Call Trace: [ 175.991845][T10381] [ 175.991853][T10381] __dump_stack+0x1d/0x30 [ 175.991882][T10381] dump_stack_lvl+0x95/0xd0 [ 175.991909][T10381] dump_stack+0x15/0x1b [ 175.991948][T10381] should_fail_ex+0x262/0x280 [ 175.991980][T10381] should_fail+0xb/0x20 [ 175.992007][T10381] should_fail_usercopy+0x1a/0x20 [ 175.992037][T10381] _copy_from_user+0x1c/0xb0 [ 175.992112][T10381] __ia32_sys_rt_sigreturn+0x127/0x350 [ 175.992157][T10381] x64_sys_call+0x1532/0x2550 [ 175.992259][T10381] do_syscall_64+0x112/0x360 [ 175.992287][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.992352][T10381] RIP: 0033:0x7f527692f4d9 [ 175.992368][T10381] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 175.992387][T10381] RSP: 002b:00007f52753e6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 175.992530][T10381] RAX: ffffffffffffffda RBX: 00007f5276c15fa0 RCX: 00007f527692f4d9 [ 175.992543][T10381] RDX: 00007f52753e6a80 RSI: 00007f52753e6bb0 RDI: 0000000000000011 [ 175.992638][T10381] RBP: 00007f5276a2506b R08: 0000000000000000 R09: 0000000000000000 [ 175.992653][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.992665][T10381] R13: 00007f5276c16038 R14: 00007f5276c15fa0 R15: 00007ffc4982c368 [ 175.992688][T10381] [ 176.563414][ T4617] pimreg: left allmulticast mode [ 176.602111][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.614309][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.617047][ T4617] bond0 (unregistering): Released all slaves [ 176.620404][ T4617] bond1 (unregistering): Released all slaves [ 176.650544][ T4617] hsr_slave_0: left promiscuous mode [ 176.650923][ T4617] hsr_slave_1: left promiscuous mode [ 176.651341][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.651632][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.709475][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 176.712401][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 176.752459][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 176.856289][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 176.957038][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 177.007423][ T4617] IPVS: stop unused estimator thread 0... [ 177.036485][ T4617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 177.076160][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 177.096202][ T4617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 177.135011][ T4617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 177.175226][ T4617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 177.247995][ T4617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.248047][ T4617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.285123][ T4617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.285165][ T4617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.338035][ T4617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.338167][ T4617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.387220][ T4617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.387299][ T4617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.416117][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 177.477678][ T4617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.528093][ T4617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.559424][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.579312][ T4617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.627338][ T4617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.663782][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 177.717511][ T4617] bridge_slave_1: left allmulticast mode [ 177.717539][ T4617] bridge_slave_1: left promiscuous mode [ 177.717781][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.719944][ T4617] bridge_slave_0: left allmulticast mode [ 177.719969][ T4617] bridge_slave_0: left promiscuous mode [ 177.720115][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.749014][ T3553] Bluetooth: hci0: command 0x1003 tx timeout [ 177.749052][ T4342] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.787712][ T4617] bridge_slave_1: left allmulticast mode [ 177.787811][ T4617] bridge_slave_1: left promiscuous mode [ 177.787917][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.789069][ T4617] bridge_slave_0: left allmulticast mode [ 177.789135][ T4617] bridge_slave_0: left promiscuous mode [ 177.789211][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.841715][ T4617] bridge_slave_1: left allmulticast mode [ 177.841751][ T4617] bridge_slave_1: left promiscuous mode [ 177.842005][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.842646][ T4617] bridge_slave_0: left allmulticast mode [ 177.842726][ T4617] bridge_slave_0: left promiscuous mode [ 177.842832][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.952194][ T4617] bond2 (unregistering): (slave geneve2): Releasing active interface [ 177.965181][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.966145][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.966834][ T4617] bond0 (unregistering): Released all slaves [ 177.968867][ T4617] bond1 (unregistering): Released all slaves [ 177.971450][ T4617] bond2 (unregistering): Released all slaves [ 178.022743][ T4617] bond1 (unregistering): (slave geneve2): Releasing active interface [ 178.041285][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.042883][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.043378][ T4617] bond0 (unregistering): Released all slaves [ 178.069595][ T4617] bond1 (unregistering): Released all slaves [ 178.090984][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.092725][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.094439][ T4617] bond0 (unregistering): Released all slaves [ 178.114162][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 178.176614][ T4617] hsr_slave_0: left promiscuous mode [ 178.177046][ T4617] hsr_slave_1: left promiscuous mode [ 178.177379][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.177744][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.179695][ T4617] hsr_slave_0: left promiscuous mode [ 178.181037][ T4617] hsr_slave_1: left promiscuous mode [ 178.181646][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.181663][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.182091][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.182112][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.259645][ T4617] hsr_slave_0: left promiscuous mode [ 178.259974][ T4617] hsr_slave_1: left promiscuous mode [ 178.260326][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.260415][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.260804][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.260819][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.314712][ T4617] veth1_macvtap: left promiscuous mode [ 178.314744][ T4617] veth0_macvtap: left promiscuous mode [ 178.314811][ T4617] veth1_vlan: left promiscuous mode [ 178.314842][ T4617] veth0_vlan: left promiscuous mode [ 178.315563][ T4617] veth1_macvtap: left promiscuous mode [ 178.315587][ T4617] veth0_macvtap: left promiscuous mode [ 178.315657][ T4617] veth1_vlan: left promiscuous mode [ 178.315745][ T4617] veth0_vlan: left promiscuous mode [ 178.338868][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 178.338887][ T29] audit: type=1400 audit(1790645526.282:1438): avc: denied { write } for pid=10507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.359477][ T29] audit: type=1400 audit(1790645526.302:1439): avc: denied { write } for pid=10518 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.460656][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 178.463013][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 178.512283][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 178.521746][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 178.575909][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 178.578151][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 178.606046][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 178.679676][ T29] audit: type=1400 audit(1790645526.622:1440): avc: denied { write } for pid=10522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.716739][ T29] audit: type=1400 audit(1790645526.662:1441): avc: denied { write } for pid=10533 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.747928][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 178.812939][ T29] audit: type=1400 audit(1790645526.752:1442): avc: denied { write } for pid=10536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.850909][ T29] audit: type=1400 audit(1790645526.792:1443): avc: denied { write } for pid=10547 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.879773][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 178.947797][ T29] audit: type=1400 audit(1790645526.892:1444): avc: denied { write } for pid=10550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.983798][ T29] audit: type=1400 audit(1790645526.922:1445): avc: denied { write } for pid=10561 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.020527][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 179.082830][ T29] audit: type=1400 audit(1790645527.022:1446): avc: denied { write } for pid=10564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.115635][ T29] audit: type=1400 audit(1790645527.032:1447): avc: denied { write } for pid=10575 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.122571][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 179.210543][ T4617] IPVS: stop unused estimator thread 0... [ 179.210766][ T4617] IPVS: stop unused estimator thread 0... [ 179.214565][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 179.331991][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 179.439072][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 179.493290][ T4617] bridge_slave_1: left allmulticast mode [ 179.493311][ T4617] bridge_slave_1: left promiscuous mode [ 179.493608][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.506368][ T4617] bridge_slave_0: left allmulticast mode [ 179.506429][ T4617] bridge_slave_0: left promiscuous mode [ 179.506554][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.548184][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.548776][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.549202][ T4617] bond0 (unregistering): Released all slaves [ 179.590609][ T4617] hsr_slave_0: left promiscuous mode [ 179.590952][ T4617] hsr_slave_1: left promiscuous mode [ 179.591557][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.591888][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.649997][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 179.652681][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 179.696711][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 179.795439][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 179.894043][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 179.910645][ T4617] IPVS: stop unused estimator thread 0... [ 180.011538][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24