last executing test programs: 34.876910392s ago: executing program 1 (id=624): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0x6) 34.734367355s ago: executing program 1 (id=627): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0xfcc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 34.581724819s ago: executing program 1 (id=632): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x2, 0x5b9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) shmctl$IPC_RMID(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10041) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x800fff, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 34.496272871s ago: executing program 1 (id=635): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") io_setup(0x200, 0x0) syz_clone(0x8120000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 34.406988114s ago: executing program 1 (id=638): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file1\x00', 0x21488b, &(0x7f00000002c0)=ANY=[], 0x1, 0x671, &(0x7f0000001600)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18, 0x1000) 34.001140764s ago: executing program 1 (id=648): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x42}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 33.917777846s ago: executing program 32 (id=648): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x42}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 30.691782045s ago: executing program 3 (id=726): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)='P', &(0x7f0000000640), 0x800000, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f00000006c0)=""/231, &(0x7f00000007c0), &(0x7f0000000800), 0x2, r0}, 0x38) 30.556074258s ago: executing program 3 (id=729): socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000900)=0x2, &(0x7f0000000940)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000980)={r1, &(0x7f00000009c0)}, 0x20) 30.555581569s ago: executing program 3 (id=730): socket(0x400000000010, 0x3, 0x0) semctl$GETPID(0x0, 0x3, 0x4, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0xd}, 0x14}}, 0x8000) 30.555139538s ago: executing program 3 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x96) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 30.47884195s ago: executing program 3 (id=733): r0 = io_uring_setup(0x66a5, &(0x7f0000000600)={0x0, 0xbfbb, 0x800, 0xb3, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000680)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000006c0)={0x3, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/118, 0x76}, {0x0}, {0x0}], &(0x7f00000007c0)=[0xfffffffffffffffc]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 30.361917663s ago: executing program 3 (id=737): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsmount(r0, 0x0, 0xa) getdents64(r1, 0xfffffffffffffffe, 0x0) 30.342162443s ago: executing program 33 (id=737): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsmount(r0, 0x0, 0xa) getdents64(r1, 0xfffffffffffffffe, 0x0) 16.474747205s ago: executing program 0 (id=1071): r0 = semget$private(0x0, 0x2, 0x20) semtimedop(r0, &(0x7f00000000c0)=[{0x2, 0x8, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x2, 0x40) semop(r1, &(0x7f0000000100)=[{0x2, 0x101, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000400)=[{0x3, 0x5, 0x1800}], 0x1, 0x0) 16.454861315s ago: executing program 0 (id=1072): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @private2, 0x4}, 0x1c) 16.438570296s ago: executing program 0 (id=1063): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 16.424754866s ago: executing program 0 (id=1064): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x9d}}]}, 0xff, 0x55b, &(0x7f0000000640)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 16.356654058s ago: executing program 0 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000240)='7', 0x1) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) 16.119549423s ago: executing program 0 (id=1076): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb214569c4c1781fd0c9bfbe5491e5675fadc4e6292bd9235dceba13387d09e48c218cb6a3", 0x42}], 0x3) 16.074026265s ago: executing program 34 (id=1076): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb214569c4c1781fd0c9bfbe5491e5675fadc4e6292bd9235dceba13387d09e48c218cb6a3", 0x42}], 0x3) 948.683587ms ago: executing program 7 (id=1495): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x553, &(0x7f00000000c0)="$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") rseq(0x0, 0x0, 0x0, 0x0) open(&(0x7f00000007c0)='.\x00', 0x430283, 0x70) fsopen(0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 789.65273ms ago: executing program 7 (id=1498): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xc1}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 689.612683ms ago: executing program 7 (id=1503): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 541.373637ms ago: executing program 6 (id=1507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="200000005a000d080000000000000000040000800c0003"], 0x20}], 0x1}, 0x0) 541.040877ms ago: executing program 2 (id=1508): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008804}, 0x20008840) 540.767917ms ago: executing program 4 (id=1509): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a432, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 522.434807ms ago: executing program 6 (id=1510): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 501.831118ms ago: executing program 4 (id=1511): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 433.211539ms ago: executing program 4 (id=1514): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x0, 0x0, &(0x7f0000000080)) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) 428.924459ms ago: executing program 2 (id=1515): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local, @loopback}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) 347.193881ms ago: executing program 7 (id=1516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000440)=0xc) 346.993811ms ago: executing program 2 (id=1517): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="15", 0x1}], 0x1}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r1, &(0x7f0000000540)}, 0x20) 346.838961ms ago: executing program 4 (id=1518): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x400, 0x7ffffffe, @mcast1, 0xa8a9}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 346.725791ms ago: executing program 7 (id=1519): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(0xfffffffffffffffe, 0x80000) io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x101002) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x54, 0x6508d016}]) 342.574421ms ago: executing program 2 (id=1520): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 312.542102ms ago: executing program 4 (id=1521): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000019}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 302.870202ms ago: executing program 5 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f0000001980)='./config/usb_gadget/g1/functions/uac1.usb0\x00') 255.465574ms ago: executing program 2 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="080003"], 0x4c}}, 0x0) 255.187874ms ago: executing program 5 (id=1524): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400000000214000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 255.072184ms ago: executing program 5 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x6f01, 0x19}, @val={0x1, 0x0, 0xb, 0xfffc, 0x27}, @mpls={[], @generic="6afe48e7ac0f211c61aa6d368c0175f8b0fabfdc19347508f7d54829d3e7a6d401f29eb6d98d1cead1"}}, 0x37) 251.196994ms ago: executing program 7 (id=1526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x4500, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 224.107214ms ago: executing program 4 (id=1527): mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) shutdown(r0, 0x1) 139.410056ms ago: executing program 2 (id=1528): r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000f80)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) sendfile(r1, r0, 0x0, 0x7ffff000) 138.907737ms ago: executing program 6 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0xd, 0xa, 0xa01, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 132.357207ms ago: executing program 5 (id=1530): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="ad203120302030", 0x7) 121.208817ms ago: executing program 6 (id=1531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10) write(r0, &(0x7f0000001880)="a6", 0x1) 63.452588ms ago: executing program 5 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000a00)="8d", 0x1) 63.218038ms ago: executing program 5 (id=1533): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 31.250249ms ago: executing program 6 (id=1534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xade, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) read(r0, 0x0, 0x0) 0s ago: executing program 6 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) kernel console output (not intermixed with test programs): - 0 [ 67.789592][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.789625][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.789714][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.846596][ T5282] loop2: detected capacity change from 0 to 512 [ 67.877514][ T5282] EXT4-fs mount: 46 callbacks suppressed [ 67.877532][ T5282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.877561][ T5288] loop5: detected capacity change from 0 to 512 [ 67.922379][ T5288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.940978][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.025264][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.061325][ T5309] loop5: detected capacity change from 0 to 256 [ 68.067247][ T5309] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.116949][ T5309] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 68.116978][ T5309] FAT-fs (loop5): Filesystem has been set read-only [ 68.217499][ T5322] FAULT_INJECTION: forcing a failure. [ 68.217499][ T5322] name failslab, interval 1, probability 0, space 0, times 0 [ 68.217538][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.5.686 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.217568][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.217601][ T5322] Call Trace: [ 68.217610][ T5322] [ 68.217651][ T5322] __dump_stack+0x1d/0x30 [ 68.217677][ T5322] dump_stack_lvl+0x95/0xd0 [ 68.217704][ T5322] dump_stack+0x15/0x1b [ 68.217811][ T5322] should_fail_ex+0x262/0x280 [ 68.217845][ T5322] ? newseg+0x18c/0x670 [ 68.217908][ T5322] should_failslab+0x8c/0xb0 [ 68.217939][ T5322] __kmalloc_cache_noprof+0x7a/0x400 [ 68.218051][ T5322] ? newseg+0x18c/0x670 [ 68.218161][ T5322] newseg+0x18c/0x670 [ 68.218195][ T5322] ipcget+0x33e/0x4f0 [ 68.218214][ T5322] ? __se_sys_futex+0x2f6/0x370 [ 68.218268][ T5322] ? xfd_validate_state+0x45/0xf0 [ 68.218302][ T5322] __x64_sys_shmget+0xb8/0xe0 [ 68.218410][ T5322] x64_sys_call+0x2001/0x2550 [ 68.218508][ T5322] do_syscall_64+0x112/0x360 [ 68.218541][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.218566][ T5322] RIP: 0033:0x7f9c9fefe2d9 [ 68.218584][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.218602][ T5322] RSP: 002b:00007f9c9e957028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 68.218741][ T5322] RAX: ffffffffffffffda RBX: 00007f9ca0185fa0 RCX: 00007f9c9fefe2d9 [ 68.218758][ T5322] RDX: 0000000000000008 RSI: 0000000000800000 RDI: 0000000000000000 [ 68.218774][ T5322] RBP: 00007f9c9ff95888 R08: 0000000000000000 R09: 0000000000000000 [ 68.218790][ T5322] R10: 0000200000173000 R11: 0000000000000246 R12: 0000000000000000 [ 68.218806][ T5322] R13: 00007f9ca0186038 R14: 00007f9ca0185fa0 R15: 00007fff1791f918 [ 68.218843][ T5322] [ 68.310837][ T5331] loop3: detected capacity change from 0 to 512 [ 68.330167][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.452817][ T5341] netlink: 32 bytes leftover after parsing attributes in process `syz.5.693'. [ 68.453186][ T5341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.693'. [ 68.506917][ T5347] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.525474][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.653455][ T5361] program syz.5.702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.687251][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 68.693866][ T5363] bond1: entered allmulticast mode [ 68.694070][ T5363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.835832][ T5381] loop2: detected capacity change from 0 to 128 [ 68.847078][ T5381] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.847220][ T5381] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.881203][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.926687][ T5388] loop2: detected capacity change from 0 to 512 [ 68.952413][ T5388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.952526][ T5388] ext4 filesystem being mounted at /125/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.025259][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.052538][ T5396] FAULT_INJECTION: forcing a failure. [ 69.052538][ T5396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.052574][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.2.714 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.052607][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.052621][ T5396] Call Trace: [ 69.052630][ T5396] [ 69.052639][ T5396] __dump_stack+0x1d/0x30 [ 69.052669][ T5396] dump_stack_lvl+0x95/0xd0 [ 69.052694][ T5396] dump_stack+0x15/0x1b [ 69.052718][ T5396] should_fail_ex+0x262/0x280 [ 69.052750][ T5396] should_fail_alloc_page+0xf2/0x100 [ 69.052790][ T5396] __alloc_frozen_pages_noprof+0x157/0x400 [ 69.052829][ T5396] alloc_pages_mpol+0xaf/0x1d0 [ 69.052859][ T5396] alloc_pages_noprof+0x94/0x140 [ 69.052887][ T5396] __pud_alloc+0x47/0x460 [ 69.052914][ T5396] ? __mod_memcg_lruvec_state+0x1b5/0x2a0 [ 69.052941][ T5396] copy_page_range+0x3140/0x33c0 [ 69.052978][ T5396] ? __account_obj_stock+0x52e/0x720 [ 69.053010][ T5396] ? __rcu_read_unlock+0x4e/0x70 [ 69.053053][ T5396] ? mas_prealloc_calc+0x253/0x2a0 [ 69.053083][ T5396] ? mas_store+0x42b/0x5b0 [ 69.053114][ T5396] dup_mmap+0x874/0x10c0 [ 69.053150][ T5396] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 69.053184][ T5396] ? __list_add_valid_or_report+0x38/0xe0 [ 69.053213][ T5396] copy_mm+0xf5/0x350 [ 69.053240][ T5396] copy_process+0x108a/0x2360 [ 69.053272][ T5396] kernel_clone+0x1c0/0x5f0 [ 69.053300][ T5396] ? do_futex+0x391/0x460 [ 69.053336][ T5396] __x64_sys_clone+0x143/0x180 [ 69.053371][ T5396] x64_sys_call+0x2479/0x2550 [ 69.053400][ T5396] do_syscall_64+0x112/0x360 [ 69.053430][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.053456][ T5396] RIP: 0033:0x7fcbafaae2d9 [ 69.053474][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.053496][ T5396] RSP: 002b:00007fcbae506fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 69.053520][ T5396] RAX: ffffffffffffffda RBX: 00007fcbafd35fa0 RCX: 00007fcbafaae2d9 [ 69.053537][ T5396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.053551][ T5396] RBP: 00007fcbafb45888 R08: 0000000000000000 R09: 0000000000000000 [ 69.053565][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.053580][ T5396] R13: 00007fcbafd36038 R14: 00007fcbafd35fa0 R15: 00007ffff22cf3c8 [ 69.053601][ T5396] [ 69.181211][ T5348] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 69.237222][ T5403] netlink: 'syz.5.716': attribute type 39 has an invalid length. [ 69.354901][ T5407] loop0: detected capacity change from 0 to 512 [ 69.405103][ T5411] sd 0:0:1:0: PR command failed: 1026 [ 69.405183][ T5411] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 69.405210][ T5411] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 69.429071][ T5414] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 69.434062][ T5413] IPVS: stopping backup sync thread 5414 ... [ 69.567679][ T5430] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 69.583534][ T5430] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.623147][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.806565][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.843232][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.891619][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.941784][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.995026][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.091218][ T71] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.092369][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.092408][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.092450][ T5452] bridge_slave_0: entered allmulticast mode [ 70.092771][ T5452] bridge_slave_0: entered promiscuous mode [ 70.102805][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.102842][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.102993][ T5452] bridge_slave_1: entered allmulticast mode [ 70.103502][ T5452] bridge_slave_1: entered promiscuous mode [ 70.120962][ T5452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.124449][ T5452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.150496][ T5452] team0: Port device team_slave_0 added [ 70.162081][ T5452] team0: Port device team_slave_1 added [ 70.191544][ T71] bridge_slave_1: left allmulticast mode [ 70.191569][ T71] bridge_slave_1: left promiscuous mode [ 70.191671][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.192389][ T71] bridge_slave_0: left allmulticast mode [ 70.192450][ T71] bridge_slave_0: left promiscuous mode [ 70.192563][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.262639][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 70.262660][ T30] audit: type=1400 audit(1791944055.922:1399): avc: denied { write } for pid=5469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.299199][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.302924][ T71] bond0 (unregistering): Released all slaves [ 70.305931][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.305948][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.305984][ T5452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.316595][ T30] audit: type=1400 audit(1791944055.972:1400): avc: denied { write } for pid=5480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.334112][ T30] audit: type=1400 audit(1791944055.992:1401): avc: denied { append } for pid=5481 comm="syz.4.740" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.357963][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.357979][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.358131][ T5452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.361506][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.395445][ T5452] hsr_slave_0: entered promiscuous mode [ 70.397242][ T5452] hsr_slave_1: entered promiscuous mode [ 70.397536][ T5452] debugfs: 'hsr0' already exists in 'hsr' [ 70.397552][ T5452] Cannot create hsr debugfs directory [ 70.414264][ T71] tipc: Left network mode [ 70.494755][ T71] hsr_slave_0: left promiscuous mode [ 70.496456][ T71] hsr_slave_1: left promiscuous mode [ 70.496786][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.496803][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.497205][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.497237][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.504814][ T71] veth1_macvtap: left promiscuous mode [ 70.504843][ T71] veth0_macvtap: left promiscuous mode [ 70.504921][ T71] veth1_vlan: left promiscuous mode [ 70.504941][ T71] veth0_vlan: left promiscuous mode [ 70.576539][ T5501] FAULT_INJECTION: forcing a failure. [ 70.576539][ T5501] name failslab, interval 1, probability 0, space 0, times 0 [ 70.576574][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.4.744 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.576645][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.576660][ T5501] Call Trace: [ 70.576669][ T5501] [ 70.576679][ T5501] __dump_stack+0x1d/0x30 [ 70.576710][ T5501] dump_stack_lvl+0x95/0xd0 [ 70.576827][ T5501] dump_stack+0x15/0x1b [ 70.576849][ T5501] should_fail_ex+0x262/0x280 [ 70.576876][ T5501] should_failslab+0x8c/0xb0 [ 70.576919][ T5501] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 70.577009][ T5501] ? proc_alloc_inode+0x34/0x90 [ 70.577121][ T5501] ? proc_alloc_inode+0x34/0x90 [ 70.577151][ T5501] ? __pfx_proc_alloc_inode+0x10/0x10 [ 70.577179][ T5501] proc_alloc_inode+0x34/0x90 [ 70.577283][ T5501] alloc_inode+0x40/0x170 [ 70.577317][ T5501] new_inode+0x1d/0xe0 [ 70.577340][ T5501] proc_pid_make_inode+0x24/0x200 [ 70.577398][ T5501] proc_pident_instantiate+0x44/0x180 [ 70.577459][ T5501] proc_pident_lookup+0x115/0x1a0 [ 70.577491][ T5501] proc_tgid_base_lookup+0x2b/0x40 [ 70.577583][ T5501] __lookup_slow+0x155/0x200 [ 70.577612][ T5501] lookup_slow+0x3c/0x60 [ 70.577641][ T5501] link_path_walk+0xb31/0xdd0 [ 70.577705][ T5501] __filename_parentat+0x1ad/0x460 [ 70.577881][ T5501] ? __pfx_proc_put_link+0x10/0x10 [ 70.577997][ T5501] ? __pfx_kfree_link+0x10/0x10 [ 70.578029][ T5501] filename_create+0x78/0x220 [ 70.578098][ T5501] filename_mknodat+0x13e/0x450 [ 70.578152][ T5501] __se_sys_mknodat+0x38/0xf0 [ 70.578191][ T5501] __x64_sys_mknodat+0x55/0x70 [ 70.578237][ T5501] x64_sys_call+0x2182/0x2550 [ 70.578270][ T5501] do_syscall_64+0x112/0x360 [ 70.578302][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.578337][ T5501] RIP: 0033:0x7f4ae8b4e2d9 [ 70.578359][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.578380][ T5501] RSP: 002b:00007f4ae75a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 70.578407][ T5501] RAX: ffffffffffffffda RBX: 00007f4ae8dd5fa0 RCX: 00007f4ae8b4e2d9 [ 70.578446][ T5501] RDX: 00000000000021c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 70.578461][ T5501] RBP: 00007f4ae8be5888 R08: 0000000000000000 R09: 0000000000000000 [ 70.578475][ T5501] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 70.578490][ T5501] R13: 00007f4ae8dd6038 R14: 00007f4ae8dd5fa0 R15: 00007ffd6ee1a908 [ 70.578512][ T5501] [ 70.668421][ T30] audit: type=1400 audit(1791944056.332:1402): avc: denied { write } for pid=5488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.716048][ T71] team0 (unregistering): Port device team_slave_1 removed [ 70.726110][ T71] team0 (unregistering): Port device team_slave_0 removed [ 70.732167][ T30] audit: type=1400 audit(1791944056.392:1403): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.797284][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 70.797305][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 70.797448][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 70.797464][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 70.806216][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 70.806935][ T5513] syzkaller1: entered promiscuous mode [ 70.806953][ T5513] syzkaller1: entered allmulticast mode [ 70.956772][ T30] audit: type=1400 audit(1791944056.612:1404): avc: denied { append } for pid=5522 comm="syz.0.748" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.045162][ T5452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.059620][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.062010][ T5452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.079045][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.080142][ T5452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.096539][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.097374][ T5452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.103345][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.164762][ T71] IPVS: stop unused estimator thread 0... [ 71.179027][ T30] audit: type=1400 audit(1791944056.842:1405): avc: denied { write } for pid=5528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.185036][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.220506][ T5452] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.224138][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.224174][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.229404][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.229440][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.266597][ T30] audit: type=1400 audit(1791944056.922:1406): avc: denied { write } for pid=5552 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.315228][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.334311][ T30] audit: type=1326 audit(1791944056.992:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.0.753" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383233e2d9 code=0x7ffc0000 [ 71.334463][ T30] audit: type=1326 audit(1791944056.992:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5559 comm="syz.0.753" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383233e2d9 code=0x7ffc0000 [ 71.508970][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.525038][ T5588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5588 comm=syz.0.756 [ 71.541641][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.744493][ T5452] veth0_vlan: entered promiscuous mode [ 71.753059][ T5452] veth1_vlan: entered promiscuous mode [ 71.780038][ T5452] veth0_macvtap: entered promiscuous mode [ 71.783094][ T5452] veth1_macvtap: entered promiscuous mode [ 71.785329][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.799157][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.804584][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.814916][ T3713] Bluetooth: hci0: command 0x1003 tx timeout [ 71.815058][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.818058][ T321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.818710][ T321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.822307][ T5450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.825538][ T321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.826513][ T321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016338][ T5648] ip_tables: iptables: counters copy to user failed while replacing table [ 72.093513][ T321] IPVS: starting estimator thread 0... [ 72.179091][ T5658] IPVS: using max 3552 ests per chain, 177600 per kthread [ 72.240610][ T5678] set_capacity_and_notify: 1 callbacks suppressed [ 72.240641][ T5678] loop2: detected capacity change from 0 to 512 [ 72.243321][ T5678] EXT4-fs: Ignoring removed nobh option [ 72.280101][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.280192][ T5678] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.281990][ T5678] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.781: corrupted inode contents [ 72.282248][ T5678] EXT4-fs (loop2): Remounting filesystem read-only [ 72.402730][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.571151][ T5716] loop4: detected capacity change from 0 to 512 [ 72.571692][ T5716] ext4: Bad value for 'journal_dev' [ 72.589100][ T5719] loop2: detected capacity change from 0 to 512 [ 72.600751][ T5719] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 72.600768][ T5719] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 72.607093][ T5719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.797: bg 0: block 4: invalid block bitmap [ 72.607131][ T5719] fserror_report: 2 callbacks suppressed [ 72.607143][ T5719] loop2: lost filesystem error report for type 5 error -117 [ 72.607858][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 72.607877][ C0] EXT4-fs (loop2): initial error at time 1791944058: ext4_validate_block_bitmap:436 [ 72.607903][ C0] EXT4-fs (loop2): last error at time 1791944058: ext4_validate_block_bitmap:436 [ 72.609065][ T5719] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 72.609149][ T5719] loop2: lost filesystem error report for type 5 error -117 [ 72.636310][ T5726] FAULT_INJECTION: forcing a failure. [ 72.636310][ T5726] name failslab, interval 1, probability 0, space 0, times 0 [ 72.636343][ T5726] CPU: 0 UID: 0 PID: 5726 Comm: syz.6.801 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.636370][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.636462][ T5726] Call Trace: [ 72.636470][ T5726] [ 72.636479][ T5726] __dump_stack+0x1d/0x30 [ 72.636508][ T5726] dump_stack_lvl+0x95/0xd0 [ 72.636532][ T5726] dump_stack+0x15/0x1b [ 72.636554][ T5726] should_fail_ex+0x262/0x280 [ 72.636597][ T5726] ? key_alloc+0x275/0x940 [ 72.636704][ T5726] should_failslab+0x8c/0xb0 [ 72.636739][ T5726] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 72.636796][ T5726] ? key_alloc+0x275/0x940 [ 72.636829][ T5726] key_alloc+0x275/0x940 [ 72.636864][ T5726] keyring_alloc+0x45/0xb0 [ 72.636893][ T5726] join_session_keyring+0xe7/0x2a0 [ 72.636926][ T5726] lookup_user_key+0x3a1/0xd60 [ 72.636963][ T5726] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 72.637070][ T5726] __se_sys_add_key+0x272/0x360 [ 72.637099][ T5726] __x64_sys_add_key+0x67/0x80 [ 72.637248][ T5726] x64_sys_call+0x1fa9/0x2550 [ 72.637276][ T5726] do_syscall_64+0x112/0x360 [ 72.637311][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.637336][ T5726] RIP: 0033:0x7fce18eae2d9 [ 72.637355][ T5726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.637402][ T5726] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 72.637427][ T5726] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 72.637443][ T5726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 72.637466][ T5726] RBP: 00007fce18f45888 R08: fffffffffffffffd R09: 0000000000000000 [ 72.637482][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.637496][ T5726] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 72.637516][ T5726] [ 72.643073][ T5719] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.797: invalid indirect mapped block 1 (level 1) [ 72.643106][ T5719] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.659119][ T5719] EXT4-fs (loop2): 1 truncate cleaned up [ 72.659642][ T5719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.758684][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.886848][ T5723] loop0: detected capacity change from 0 to 512 [ 72.914249][ T5723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.914396][ T5723] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.990201][ T5723] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.036914][ T5716] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.798'. [ 73.043734][ T5716] netlink: zone id is out of range [ 73.043759][ T5716] netlink: zone id is out of range [ 73.043767][ T5716] netlink: zone id is out of range [ 73.043774][ T5716] netlink: zone id is out of range [ 73.043781][ T5716] netlink: zone id is out of range [ 73.046451][ T5716] netlink: zone id is out of range [ 73.046601][ T5716] netlink: zone id is out of range [ 73.047118][ T5716] netlink: zone id is out of range [ 73.047505][ T5716] netlink: zone id is out of range [ 73.124700][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.592130][ T5781] FAULT_INJECTION: forcing a failure. [ 73.592130][ T5781] name failslab, interval 1, probability 0, space 0, times 0 [ 73.592285][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.5.822 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.592391][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.592406][ T5781] Call Trace: [ 73.592415][ T5781] [ 73.592425][ T5781] __dump_stack+0x1d/0x30 [ 73.592456][ T5781] dump_stack_lvl+0x95/0xd0 [ 73.592484][ T5781] dump_stack+0x15/0x1b [ 73.592542][ T5781] should_fail_ex+0x262/0x280 [ 73.592574][ T5781] ? do_getname+0x2e/0x1c0 [ 73.592601][ T5781] should_failslab+0x8c/0xb0 [ 73.592645][ T5781] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 73.592726][ T5781] ? do_getname+0x2e/0x1c0 [ 73.592755][ T5781] do_getname+0x2e/0x1c0 [ 73.592783][ T5781] __se_sys_mknodat+0x24/0xf0 [ 73.592821][ T5781] __x64_sys_mknodat+0x55/0x70 [ 73.592926][ T5781] x64_sys_call+0x2182/0x2550 [ 73.592955][ T5781] do_syscall_64+0x112/0x360 [ 73.593060][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.593096][ T5781] RIP: 0033:0x7f9c9fefe2d9 [ 73.593117][ T5781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.593139][ T5781] RSP: 002b:00007f9c9e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 73.593246][ T5781] RAX: ffffffffffffffda RBX: 00007f9ca0185fa0 RCX: 00007f9c9fefe2d9 [ 73.593261][ T5781] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 73.593278][ T5781] RBP: 00007f9c9ff95888 R08: 0000000000000000 R09: 0000000000000000 [ 73.593294][ T5781] R10: 000000000000070b R11: 0000000000000246 R12: 0000000000000000 [ 73.593310][ T5781] R13: 00007f9ca0186038 R14: 00007f9ca0185fa0 R15: 00007fff1791f918 [ 73.593333][ T5781] [ 74.032240][ T5798] xt_hashlimit: size too large, truncated to 1048576 [ 74.396590][ T5807] loop6: detected capacity change from 0 to 32768 [ 74.430295][ T5807] loop6: p1 p3 < > [ 74.635961][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 74.639586][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 74.890818][ T5832] loop6: detected capacity change from 0 to 1024 [ 74.940163][ T5832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.940252][ T5832] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.943111][ T5832] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.838: lblock 0 mapped to illegal pblock 0 (length 6) [ 75.001065][ T5832] EXT4-fs error (device loop6): ext4_ext_remove_space:2977: inode #15: comm syz.6.838: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 75.018598][ T5832] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 75.020442][ T5832] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.838: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.023215][ T5832] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.023248][ T5832] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.023248][ T5832] [ 75.091776][ T5452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.194354][ T5853] loop4: detected capacity change from 0 to 128 [ 75.226706][ T5853] bio_check_eod: 5 callbacks suppressed [ 75.226729][ T5853] syz.4.844: attempt to access beyond end of device [ 75.226729][ T5853] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 75.250357][ T5853] syz.4.844: attempt to access beyond end of device [ 75.250357][ T5853] loop4: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 75.250393][ T5853] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 75.271068][ T5857] loop6: detected capacity change from 0 to 512 [ 75.296566][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 75.296585][ T30] audit: type=1400 audit(1791944060.952:1446): avc: denied { write } for pid=5858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.300210][ T5857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.316508][ T30] audit: type=1400 audit(1791944060.972:1447): avc: denied { write } for pid=5856 comm="syz.6.845" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.558527][ T5452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.592539][ T30] audit: type=1400 audit(1791944061.252:1448): avc: denied { write } for pid=5862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.627374][ T5880] FAULT_INJECTION: forcing a failure. [ 75.627374][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 75.627427][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: syz.4.850 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.627459][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.627474][ T5880] Call Trace: [ 75.627482][ T5880] [ 75.627503][ T5880] __dump_stack+0x1d/0x30 [ 75.627531][ T5880] dump_stack_lvl+0x95/0xd0 [ 75.627661][ T5880] dump_stack+0x15/0x1b [ 75.627687][ T5880] should_fail_ex+0x262/0x280 [ 75.627724][ T5880] ? bpf_prog_create_from_user+0x16c/0x260 [ 75.627757][ T5880] should_failslab+0x8c/0xb0 [ 75.627870][ T5880] __kmalloc_cache_noprof+0x7a/0x400 [ 75.627973][ T5880] ? should_fail_ex+0xdb/0x280 [ 75.628002][ T5880] ? bpf_prog_create_from_user+0x16c/0x260 [ 75.628033][ T5880] bpf_prog_create_from_user+0x16c/0x260 [ 75.628094][ T5880] ? __pfx_seccomp_check_filter+0x10/0x10 [ 75.628193][ T5880] do_seccomp+0x5ef/0xa40 [ 75.628229][ T5880] ? restore_fpregs_from_fpstate+0x61/0x110 [ 75.628258][ T5880] __x64_sys_seccomp+0x40/0x50 [ 75.628293][ T5880] x64_sys_call+0x3f0/0x2550 [ 75.628402][ T5880] do_syscall_64+0x112/0x360 [ 75.628436][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.628524][ T5880] RIP: 0033:0x7f4ae8b4e2d9 [ 75.628571][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.628601][ T5880] RSP: 002b:00007f4ae75a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 75.628680][ T5880] RAX: ffffffffffffffda RBX: 00007f4ae8dd5fa0 RCX: 00007f4ae8b4e2d9 [ 75.628696][ T5880] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 75.628710][ T5880] RBP: 00007f4ae8be5888 R08: 0000000000000000 R09: 0000000000000000 [ 75.628727][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.628861][ T5880] R13: 00007f4ae8dd6038 R14: 00007f4ae8dd5fa0 R15: 00007ffd6ee1a908 [ 75.628884][ T5880] [ 75.792146][ T30] audit: type=1400 audit(1791944061.452:1449): avc: denied { write } for pid=5886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.857260][ T30] audit: type=1400 audit(1791944061.512:1450): avc: denied { listen } for pid=5883 comm="syz.6.852" path=0000244E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 75.900040][ T30] audit: type=1326 audit(1791944061.562:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.4.853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 75.900126][ T30] audit: type=1326 audit(1791944061.562:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.4.853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 75.936563][ T30] audit: type=1326 audit(1791944061.572:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.4.853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 75.936597][ T30] audit: type=1326 audit(1791944061.572:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.4.853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 75.936669][ T30] audit: type=1326 audit(1791944061.572:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.4.853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 75.992559][ T5894] FAULT_INJECTION: forcing a failure. [ 75.992559][ T5894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.992593][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.6.855 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.992623][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.992636][ T5894] Call Trace: [ 75.992644][ T5894] [ 75.992654][ T5894] __dump_stack+0x1d/0x30 [ 75.992683][ T5894] dump_stack_lvl+0x95/0xd0 [ 75.992766][ T5894] dump_stack+0x15/0x1b [ 75.992862][ T5894] should_fail_ex+0x262/0x280 [ 75.992892][ T5894] should_fail+0xb/0x20 [ 75.992945][ T5894] get_futex_key+0x12d/0xb10 [ 75.992995][ T5894] futex_wait_setup+0x49/0x3e0 [ 75.993020][ T5894] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 75.993105][ T5894] ? hrtimer_active+0xe4/0x110 [ 75.993131][ T5894] __futex_wait+0xa9/0x260 [ 75.993155][ T5894] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.993181][ T5894] futex_wait+0x98/0x1c0 [ 75.993313][ T5894] do_futex+0x391/0x460 [ 75.993345][ T5894] __se_sys_futex+0x2f6/0x370 [ 75.993479][ T5894] __x64_sys_futex+0x78/0x90 [ 75.993511][ T5894] x64_sys_call+0x22e2/0x2550 [ 75.993538][ T5894] do_syscall_64+0x112/0x360 [ 75.993605][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.993698][ T5894] RIP: 0033:0x7fce18eae2d9 [ 75.993723][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.993762][ T5894] RSP: 002b:00007fce179070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.993786][ T5894] RAX: ffffffffffffffda RBX: 00007fce19135fa8 RCX: 00007fce18eae2d9 [ 75.993802][ T5894] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce19135fa8 [ 75.993817][ T5894] RBP: 00007fce19135fa0 R08: 0000000000000000 R09: 0000000000000000 [ 75.993831][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.993845][ T5894] R13: 00007fce19136038 R14: 00007ffd2ea32fd0 R15: 00007ffd2ea330b8 [ 75.993946][ T5894] [ 75.995717][ T5793] loop5: detected capacity change from 0 to 2048 [ 76.145793][ T5897] loop4: detected capacity change from 0 to 512 [ 76.169890][ T5897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.169969][ T5897] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.247620][ T5904] FAULT_INJECTION: forcing a failure. [ 76.247620][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 76.247651][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.247816][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.247830][ T5904] Call Trace: [ 76.247838][ T5904] [ 76.247847][ T5904] __dump_stack+0x1d/0x30 [ 76.247875][ T5904] dump_stack_lvl+0x95/0xd0 [ 76.247899][ T5904] dump_stack+0x15/0x1b [ 76.247921][ T5904] should_fail_ex+0x262/0x280 [ 76.247957][ T5904] should_failslab+0x8c/0xb0 [ 76.247991][ T5904] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 76.248101][ T5904] ? proc_alloc_inode+0x34/0x90 [ 76.248128][ T5904] ? proc_alloc_inode+0x34/0x90 [ 76.248157][ T5904] ? __pfx_proc_alloc_inode+0x10/0x10 [ 76.248218][ T5904] proc_alloc_inode+0x34/0x90 [ 76.248245][ T5904] alloc_inode+0x40/0x170 [ 76.248269][ T5904] new_inode+0x1d/0xe0 [ 76.248362][ T5904] proc_pid_make_inode+0x24/0x200 [ 76.248396][ T5904] proc_pident_instantiate+0x44/0x180 [ 76.248482][ T5904] proc_pident_lookup+0x115/0x1a0 [ 76.248543][ T5904] proc_tgid_base_lookup+0x2b/0x40 [ 76.248577][ T5904] __lookup_slow+0x155/0x200 [ 76.248622][ T5904] lookup_slow+0x3c/0x60 [ 76.248650][ T5904] link_path_walk+0xb31/0xdd0 [ 76.248691][ T5904] __filename_parentat+0x1ad/0x460 [ 76.248730][ T5904] ? __pfx_proc_put_link+0x10/0x10 [ 76.248804][ T5904] ? __pfx_kfree_link+0x10/0x10 [ 76.248832][ T5904] filename_create+0x78/0x220 [ 76.248868][ T5904] filename_mknodat+0x13e/0x450 [ 76.248970][ T5904] __se_sys_mknodat+0x38/0xf0 [ 76.249003][ T5904] __x64_sys_mknodat+0x55/0x70 [ 76.249084][ T5904] x64_sys_call+0x2182/0x2550 [ 76.249112][ T5904] do_syscall_64+0x112/0x360 [ 76.249140][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.249164][ T5904] RIP: 0033:0x7f383233e2d9 [ 76.249182][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.249263][ T5904] RSP: 002b:00007f3830d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 76.249287][ T5904] RAX: ffffffffffffffda RBX: 00007f38325c5fa0 RCX: 00007f383233e2d9 [ 76.249303][ T5904] RDX: 00000000000021c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 76.249318][ T5904] RBP: 00007f38323d5888 R08: 0000000000000000 R09: 0000000000000000 [ 76.249333][ T5904] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 76.249347][ T5904] R13: 00007f38325c6038 R14: 00007f38325c5fa0 R15: 00007ffe88488b28 [ 76.249426][ T5904] [ 76.412015][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.554281][ T5905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 76.589490][ T5793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.660734][ T5924] veth1_to_bond: entered allmulticast mode [ 76.660877][ T5924] veth1_to_bond: entered promiscuous mode [ 76.661256][ T5923] veth1_to_bond: left promiscuous mode [ 76.661361][ T5923] veth1_to_bond: left allmulticast mode [ 76.706235][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.746470][ T5931] EXT4-fs: inline encryption not supported [ 76.746493][ T5931] EXT4-fs: inline encryption not supported [ 76.746562][ T5931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.781860][ T5931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.781997][ T5931] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.814110][ T5931] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.868: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.814474][ T5931] EXT4-fs (loop5): Remounting filesystem read-only [ 76.854125][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.907120][ T5945] netlink: 'syz.5.874': attribute type 1 has an invalid length. [ 77.031654][ T5962] netlink: 14 bytes leftover after parsing attributes in process `syz.5.882'. [ 77.222819][ T5983] EXT4-fs: Ignoring removed nobh option [ 77.237358][ T5983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.237427][ T5983] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.266546][ T5452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.380140][ T5992] set_capacity_and_notify: 2 callbacks suppressed [ 77.380167][ T5992] loop4: detected capacity change from 0 to 128 [ 77.433591][ T5990] program syz.6.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.461988][ T5997] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 77.462019][ T5997] FAT-fs (loop4): Filesystem has been set read-only [ 77.728035][ T5986] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 77.786491][ T6015] loop4: detected capacity change from 0 to 1024 [ 77.786964][ T6015] EXT4-fs: Ignoring removed bh option [ 77.813980][ T6015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.814055][ T6015] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.829560][ T6015] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.901: lblock 0 mapped to illegal pblock 0 (length 6) [ 77.862442][ T6015] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.901: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.864052][ T6015] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.864085][ T6015] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.864085][ T6015] [ 77.915985][ T179] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 77.919112][ T179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 77.919142][ T179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.919142][ T179] [ 77.934279][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.006505][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006626][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006665][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006699][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006776][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006813][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006893][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006943][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.006973][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007076][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007192][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007313][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007350][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007433][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007522][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007561][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007667][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.007702][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.012186][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.012793][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.012864][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.012895][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.012937][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013016][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013047][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013140][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013170][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013201][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013298][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013402][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013445][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013497][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013529][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013559][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013617][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013665][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013696][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013726][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013813][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013843][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013873][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013965][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.013996][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.014027][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.014135][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.018993][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019139][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019189][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019259][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019366][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019397][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019428][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019510][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019598][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019693][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019723][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019754][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019898][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.019928][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.020008][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.020100][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.020132][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.020222][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.023773][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.023807][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.023882][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.023978][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024008][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024036][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024096][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024127][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024158][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024217][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024247][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024277][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024343][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024373][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024413][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024443][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024521][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024605][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024636][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024694][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024724][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024755][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024905][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024936][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.024977][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.025074][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.025105][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.025148][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030337][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030371][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030485][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030515][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030598][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030661][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030692][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.030794][ T6035] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.226050][ T6062] loop5: detected capacity change from 0 to 512 [ 78.259543][ T6062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.259649][ T6062] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.335651][ T179] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.433977][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.920836][ T6097] syzkaller1: entered promiscuous mode [ 78.920861][ T6097] syzkaller1: entered allmulticast mode [ 78.959962][ T6099] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.978860][ T6101] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 79.091871][ T6078] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 79.704357][ T6170] loop2: detected capacity change from 0 to 128 [ 80.000150][ T6188] FAULT_INJECTION: forcing a failure. [ 80.000150][ T6188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 80.000187][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.4.957 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.000220][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.000254][ T6188] Call Trace: [ 80.000264][ T6188] [ 80.000275][ T6188] __dump_stack+0x1d/0x30 [ 80.000305][ T6188] dump_stack_lvl+0x95/0xd0 [ 80.000332][ T6188] dump_stack+0x15/0x1b [ 80.000390][ T6188] should_fail_ex+0x262/0x280 [ 80.000423][ T6188] should_fail+0xb/0x20 [ 80.000499][ T6188] get_futex_key+0x12d/0xb10 [ 80.000578][ T6188] futex_wait_setup+0x49/0x3e0 [ 80.000606][ T6188] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 80.000720][ T6188] ? hrtimer_active+0xe4/0x110 [ 80.000745][ T6188] __futex_wait+0xa9/0x260 [ 80.000771][ T6188] ? __pfx_futex_wake_mark+0x10/0x10 [ 80.000875][ T6188] futex_wait+0x98/0x1c0 [ 80.000904][ T6188] do_futex+0x391/0x460 [ 80.000940][ T6188] __se_sys_futex+0x2f6/0x370 [ 80.000998][ T6188] __x64_sys_futex+0x78/0x90 [ 80.001033][ T6188] x64_sys_call+0x22e2/0x2550 [ 80.001072][ T6188] do_syscall_64+0x112/0x360 [ 80.001103][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.001184][ T6188] RIP: 0033:0x7f4ae8b4e2d9 [ 80.001203][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.001227][ T6188] RSP: 002b:00007f4ae75a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.001254][ T6188] RAX: ffffffffffffffda RBX: 00007f4ae8dd5fa8 RCX: 00007f4ae8b4e2d9 [ 80.001272][ T6188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ae8dd5fa8 [ 80.001354][ T6188] RBP: 00007f4ae8dd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.001404][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.001466][ T6188] R13: 00007f4ae8dd6038 R14: 00007ffd6ee1a820 R15: 00007ffd6ee1a908 [ 80.001489][ T6188] [ 80.025160][ T6170] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.025199][ T6170] FAT-fs (loop2): Filesystem has been set read-only [ 80.347078][ T6211] FAULT_INJECTION: forcing a failure. [ 80.347078][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 80.347156][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.6.960 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.347184][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.347197][ T6211] Call Trace: [ 80.347205][ T6211] [ 80.347214][ T6211] __dump_stack+0x1d/0x30 [ 80.347259][ T6211] dump_stack_lvl+0x95/0xd0 [ 80.347288][ T6211] dump_stack+0x15/0x1b [ 80.347318][ T6211] should_fail_ex+0x262/0x280 [ 80.347367][ T6211] ? bpf_prog_create_from_user+0x16c/0x260 [ 80.347401][ T6211] should_failslab+0x8c/0xb0 [ 80.347442][ T6211] __kmalloc_cache_noprof+0x7a/0x400 [ 80.347495][ T6211] ? should_fail_ex+0xdb/0x280 [ 80.347522][ T6211] ? bpf_prog_create_from_user+0x16c/0x260 [ 80.347554][ T6211] bpf_prog_create_from_user+0x16c/0x260 [ 80.347608][ T6211] ? __pfx_seccomp_check_filter+0x10/0x10 [ 80.347640][ T6211] do_seccomp+0x5ef/0xa40 [ 80.347676][ T6211] ? restore_fpregs_from_fpstate+0x61/0x110 [ 80.347707][ T6211] __x64_sys_seccomp+0x40/0x50 [ 80.347808][ T6211] x64_sys_call+0x3f0/0x2550 [ 80.347861][ T6211] do_syscall_64+0x112/0x360 [ 80.347919][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.347942][ T6211] RIP: 0033:0x7fce18eae2d9 [ 80.347991][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.348011][ T6211] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 80.348089][ T6211] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 80.348105][ T6211] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 80.348119][ T6211] RBP: 00007fce18f45888 R08: 0000000000000000 R09: 0000000000000000 [ 80.348132][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.348224][ T6211] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 80.348297][ T6211] [ 80.371908][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.411541][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 80.411558][ T30] audit: type=1400 audit(1791944066.072:1512): avc: denied { create } for pid=6213 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 80.426343][ T30] audit: type=1400 audit(1791944066.082:1513): avc: denied { create } for pid=6213 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 80.504710][ T6224] netlink: 32 bytes leftover after parsing attributes in process `syz.6.966'. [ 80.622597][ T6229] bridge0: port 3(veth0) entered blocking state [ 80.622634][ T6229] bridge0: port 3(veth0) entered disabled state [ 80.622761][ T6229] veth0: entered allmulticast mode [ 80.623289][ T6229] veth0: entered promiscuous mode [ 80.623503][ T6229] bridge0: port 3(veth0) entered blocking state [ 80.623585][ T6229] bridge0: port 3(veth0) entered forwarding state [ 80.683892][ T6233] program syz.2.971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.714772][ T6238] loop2: detected capacity change from 0 to 512 [ 80.732851][ T6238] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 80.732907][ T6238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.758213][ T6238] EXT4-fs (loop2): 1 truncate cleaned up [ 80.758583][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.760466][ T30] audit: type=1400 audit(1791944066.422:1514): avc: denied { write } for pid=6237 comm="syz.2.973" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.834691][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.863419][ T30] audit: type=1400 audit(1791944066.522:1515): avc: denied { mounton } for pid=6243 comm="syz.2.975" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 80.910266][ T6250] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 81.008545][ T6262] loop2: detected capacity change from 0 to 1024 [ 81.017102][ T6262] EXT4-fs: Ignoring removed bh option [ 81.019413][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.032850][ T30] audit: type=1400 audit(1791944066.692:1516): avc: denied { write } for pid=6261 comm="syz.2.984" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.058156][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.095347][ T6268] loop2: detected capacity change from 0 to 2048 [ 81.112235][ T6268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.130575][ T30] audit: type=1400 audit(1791944066.802:1517): avc: denied { write } for pid=6266 comm="syz.2.985" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.194303][ T30] audit: type=1400 audit(1791944066.852:1518): avc: denied { ioctl } for pid=6275 comm="syz.5.988" path="/57/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2154 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 81.238689][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.438588][ T6296] loop2: detected capacity change from 0 to 512 [ 81.440674][ T6296] EXT4-fs: Ignoring removed nobh option [ 81.446081][ T6296] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 81.446485][ T6296] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.996: attempt to clear invalid blocks 1 len 1 [ 81.446574][ T6296] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.446931][ T6296] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 81.447001][ T6296] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.996: invalid indirect mapped block 1819239214 (level 0) [ 81.447086][ T6296] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.447214][ T6296] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.996: invalid indirect mapped block 1819239214 (level 1) [ 81.447306][ T6296] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.447749][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 81.447772][ C0] EXT4-fs (loop2): initial error at time 1791944067: ext4_clear_blocks:876: inode 13 [ 81.447811][ C0] EXT4-fs (loop2): last error at time 1791944067: ext4_free_branches:1023: inode 13 [ 81.482417][ T6296] EXT4-fs (loop2): 1 truncate cleaned up [ 81.482872][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.568783][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.611326][ T6302] loop2: detected capacity change from 0 to 256 [ 81.641433][ T6302] FAT-fs (loop2): codepage cp855 not found [ 81.653500][ T30] audit: type=1400 audit(1791944067.322:1519): avc: denied { ioctl } for pid=6301 comm="syz.2.997" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.090500][ T30] audit: type=1400 audit(1791944067.752:1520): avc: denied { read } for pid=6329 comm="syz.6.1011" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.090602][ T30] audit: type=1400 audit(1791944067.752:1521): avc: denied { open } for pid=6329 comm="syz.6.1011" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.184286][ T6332] loop5: detected capacity change from 0 to 512 [ 82.204423][ T6332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 82.204456][ T6332] System zones: 1-12 [ 82.204763][ T6332] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1012: missing EA_INODE flag [ 82.204791][ T6332] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 82.204937][ T6332] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1012: error while reading EA inode 12 err=-117 [ 82.205042][ T6332] loop5: lost filesystem error report for type 5 error -117 [ 82.205264][ T6332] EXT4-fs (loop5): 1 orphan inode deleted [ 82.205633][ T6332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.318800][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.447431][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1015'. [ 82.470510][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1015'. [ 82.972725][ T6402] loop5: detected capacity change from 0 to 128 [ 83.082474][ T6402] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.082823][ T6402] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.120308][ T5132] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.206552][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.422859][ T6442] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.422859][ T6442] The task syz.5.1044 (6442) triggered the difference, watch for misbehavior. [ 83.543132][ T6452] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„L½ô;ȧ0Gš¤“I¾q6•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 83.600481][ T6457] program syz.4.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.779333][ T6484] loop0: detected capacity change from 0 to 1024 [ 83.781382][ T6484] EXT4-fs: Ignoring removed bh option [ 83.816576][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 83.860274][ T4484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 84.007200][ T6517] loop4: detected capacity change from 0 to 512 [ 84.018992][ T6517] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.1074: iget: bad i_size value: 12154757448730 [ 84.019031][ T6517] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.019249][ T6517] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1074: couldn't read orphan inode 13 (err -117) [ 84.019284][ T6517] loop4: lost filesystem error report for type 5 error -117 [ 84.019983][ T6517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.094924][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 84.113021][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.134348][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.150539][ T71] batman_adv: batadv0: Interface deactivated: netdevsim2 [ 84.168611][ T71] batman_adv: batadv0: Removing interface: netdevsim2 [ 84.173268][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.227141][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.367209][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.418088][ T6563] loop4: detected capacity change from 0 to 2048 [ 84.464978][ T6563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.483739][ T71] veth0: left allmulticast mode [ 84.483765][ T71] veth0: left promiscuous mode [ 84.483915][ T71] bridge0: port 3(veth0) entered disabled state [ 84.485481][ T71] bridge_slave_1: left allmulticast mode [ 84.485503][ T71] bridge_slave_1: left promiscuous mode [ 84.485609][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.490203][ T71] bridge_slave_0: left allmulticast mode [ 84.490224][ T71] bridge_slave_0: left promiscuous mode [ 84.490370][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.523532][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.602426][ T71] bond0 (unregistering): left promiscuous mode [ 84.602506][ T71] bond_slave_0: left promiscuous mode [ 84.602554][ T71] bond_slave_1: left promiscuous mode [ 84.603284][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.605974][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.606756][ T71] bond0 (unregistering): Released all slaves [ 84.667515][ T71] batadv0: left promiscuous mode [ 84.680545][ T71] hsr_slave_0: left promiscuous mode [ 84.682443][ T71] hsr_slave_1: left promiscuous mode [ 84.682826][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.682907][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.684261][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.684278][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.687451][ T71] veth1_macvtap: left promiscuous mode [ 84.687477][ T71] veth0_macvtap: left promiscuous mode [ 84.687520][ T71] veth1_vlan: left promiscuous mode [ 84.687569][ T71] veth0_vlan: left promiscuous mode [ 84.772389][ T71] team0 (unregistering): Port device team_slave_1 removed [ 84.775339][ T71] team0 (unregistering): Port device team_slave_0 removed [ 84.844133][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.844166][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.844254][ T6541] bridge_slave_0: entered allmulticast mode [ 84.844737][ T6541] bridge_slave_0: entered promiscuous mode [ 84.875369][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.875471][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.875548][ T6541] bridge_slave_1: entered allmulticast mode [ 84.876166][ T6541] bridge_slave_1: entered promiscuous mode [ 84.917212][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.927812][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.943336][ T6541] team0: Port device team_slave_0 added [ 84.944372][ T6541] team0: Port device team_slave_1 added [ 84.955527][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.955544][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.955605][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.956130][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.956144][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.956184][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.005645][ T6541] hsr_slave_0: entered promiscuous mode [ 85.006141][ T6541] hsr_slave_1: entered promiscuous mode [ 85.006378][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 85.006394][ T6541] Cannot create hsr debugfs directory [ 85.023933][ T71] IPVS: stop unused estimator thread 0... [ 85.163904][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 85.243919][ T6541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 85.247803][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 85.248639][ T3713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.249103][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.251106][ T6541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 85.263239][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.263805][ T6541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 85.269434][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.275721][ T6541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.285078][ T6541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.401827][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.432723][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 85.432742][ T30] audit: type=1400 audit(1791944071.092:1569): avc: denied { write } for pid=6636 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.446108][ T30] audit: type=1400 audit(1791944071.102:1570): avc: denied { ioctl } for pid=6637 comm="syz.2.1092" path="/201/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 85.524243][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 85.529162][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.543389][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.543554][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.547912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.548009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.662434][ T6647] loop2: detected capacity change from 0 to 4096 [ 85.669473][ T6653] 9p: Unknown uid 00000000004294967295 [ 85.683165][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.713758][ T6661] loop5: detected capacity change from 0 to 256 [ 85.727340][ T6661] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.739810][ T6661] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.743666][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.861766][ T30] audit: type=1400 audit(1791944071.522:1571): avc: denied { write } for pid=6655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.899720][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.948967][ T30] audit: type=1400 audit(1791944071.612:1572): avc: denied { write } for pid=6687 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.997668][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 86.225126][ T6541] veth0_vlan: entered promiscuous mode [ 86.248698][ T6541] veth1_vlan: entered promiscuous mode [ 86.286474][ T6541] veth0_macvtap: entered promiscuous mode [ 86.288546][ T6541] veth1_macvtap: entered promiscuous mode [ 86.305260][ T30] audit: type=1400 audit(1791944071.962:1573): avc: denied { write } for pid=6702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.306535][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.333655][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.348087][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348133][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348174][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348248][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.398903][ T30] audit: type=1400 audit(1791944072.062:1574): avc: denied { write } for pid=6727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.469986][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 86.650391][ T6747] loop5: detected capacity change from 0 to 512 [ 86.702321][ T30] audit: type=1400 audit(1791944072.362:1575): avc: denied { write } for pid=6751 comm="syz.5.1115" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.929646][ T6774] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1124'. [ 86.929757][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1124'. [ 87.002618][ T6777] loop4: detected capacity change from 0 to 4096 [ 87.004750][ T6777] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 87.054863][ T6784] FAULT_INJECTION: forcing a failure. [ 87.054863][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 87.054957][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.6.1127 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.055027][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.055042][ T6784] Call Trace: [ 87.055119][ T6784] [ 87.055129][ T6784] __dump_stack+0x1d/0x30 [ 87.055159][ T6784] dump_stack_lvl+0x95/0xd0 [ 87.055184][ T6784] dump_stack+0x15/0x1b [ 87.055233][ T6784] should_fail_ex+0x262/0x280 [ 87.055330][ T6784] ? __get_vm_area_node+0x125/0x1f0 [ 87.055367][ T6784] should_failslab+0x8c/0xb0 [ 87.055402][ T6784] __kmalloc_cache_node_noprof+0x81/0x420 [ 87.055525][ T6784] ? __get_vm_area_node+0x125/0x1f0 [ 87.055573][ T6784] __get_vm_area_node+0x125/0x1f0 [ 87.055626][ T6784] __vmalloc_node_range_noprof+0x262/0x1000 [ 87.055663][ T6784] ? security_read_policy+0x6c/0x130 [ 87.055705][ T6784] ? __css_rstat_updated+0xbb/0x280 [ 87.055750][ T6784] ? should_fail_ex+0xdb/0x280 [ 87.055816][ T6784] vmalloc_user_noprof+0x7d/0xb0 [ 87.055840][ T6784] ? security_read_policy+0x6c/0x130 [ 87.055913][ T6784] security_read_policy+0x6c/0x130 [ 87.055946][ T6784] sel_open_policy+0xf1/0x1d0 [ 87.055981][ T6784] do_dentry_open+0x49f/0xa60 [ 87.056010][ T6784] ? __pfx_sel_open_policy+0x10/0x10 [ 87.056136][ T6784] ? may_open+0xa1/0x350 [ 87.056171][ T6784] vfs_open+0x37/0x1e0 [ 87.056197][ T6784] path_openat+0xc01/0x10d0 [ 87.056250][ T6784] do_file_open+0x16c/0x290 [ 87.056314][ T6784] do_sys_openat2+0xa0/0x130 [ 87.056424][ T6784] __x64_sys_openat+0xf2/0x120 [ 87.056454][ T6784] x64_sys_call+0x1f72/0x2550 [ 87.056537][ T6784] do_syscall_64+0x112/0x360 [ 87.056620][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.056648][ T6784] RIP: 0033:0x7fce18eae2d9 [ 87.056685][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.056731][ T6784] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.056761][ T6784] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 87.056777][ T6784] RDX: 0000000000000000 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 87.056792][ T6784] RBP: 00007fce18f45888 R08: 0000000000000000 R09: 0000000000000000 [ 87.056806][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.056831][ T6784] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 87.056886][ T6784] [ 87.056971][ T6784] syz.6.1127: vmalloc error: size 280859, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 87.057088][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.6.1127 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.057118][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.057133][ T6784] Call Trace: [ 87.057140][ T6784] [ 87.057148][ T6784] __dump_stack+0x1d/0x30 [ 87.057196][ T6784] dump_stack_lvl+0x95/0xd0 [ 87.057246][ T6784] dump_stack+0x15/0x1b [ 87.057333][ T6784] warn_alloc+0x146/0x1c0 [ 87.057359][ T6784] __vmalloc_node_range_noprof+0x28a/0x1000 [ 87.057396][ T6784] ? __css_rstat_updated+0xbb/0x280 [ 87.057428][ T6784] ? should_fail_ex+0xdb/0x280 [ 87.057528][ T6784] vmalloc_user_noprof+0x7d/0xb0 [ 87.057552][ T6784] ? security_read_policy+0x6c/0x130 [ 87.057668][ T6784] security_read_policy+0x6c/0x130 [ 87.057702][ T6784] sel_open_policy+0xf1/0x1d0 [ 87.057744][ T6784] do_dentry_open+0x49f/0xa60 [ 87.057775][ T6784] ? __pfx_sel_open_policy+0x10/0x10 [ 87.057809][ T6784] ? may_open+0xa1/0x350 [ 87.057842][ T6784] vfs_open+0x37/0x1e0 [ 87.057868][ T6784] path_openat+0xc01/0x10d0 [ 87.057929][ T6784] do_file_open+0x16c/0x290 [ 87.057970][ T6784] do_sys_openat2+0xa0/0x130 [ 87.058107][ T6784] __x64_sys_openat+0xf2/0x120 [ 87.058184][ T6784] x64_sys_call+0x1f72/0x2550 [ 87.058214][ T6784] do_syscall_64+0x112/0x360 [ 87.058245][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.058271][ T6784] RIP: 0033:0x7fce18eae2d9 [ 87.058290][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.058335][ T6784] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.058361][ T6784] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 87.058379][ T6784] RDX: 0000000000000000 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 87.058423][ T6784] RBP: 00007fce18f45888 R08: 0000000000000000 R09: 0000000000000000 [ 87.058439][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.058455][ T6784] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 87.058477][ T6784] [ 87.082323][ T6782] loop4: detected capacity change from 0 to 512 [ 87.086832][ T6782] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.1128: corrupted in-inode xattr: invalid ea_ino [ 87.086866][ T6782] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.086996][ T6782] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1128: couldn't read orphan inode 15 (err -117) [ 87.087024][ T6782] loop4: lost filesystem error report for type 5 error -117 [ 87.087547][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.128681][ T30] audit: type=1400 audit(1791944072.752:1576): avc: denied { write } for pid=6781 comm="syz.4.1128" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.145154][ T6784] Mem-Info: [ 87.145166][ T6784] active_anon:30841 inactive_anon:4 isolated_anon:0 [ 87.145166][ T6784] active_file:0 inactive_file:21257 isolated_file:0 [ 87.145166][ T6784] unevictable:0 dirty:340 writeback:0 [ 87.145166][ T6784] slab_reclaimable:2378 slab_unreclaimable:16310 [ 87.145166][ T6784] mapped:35250 shmem:22963 pagetables:3433 [ 87.145166][ T6784] sec_pagetables:0 bounce:0 [ 87.145166][ T6784] kernel_misc_reclaimable:0 [ 87.145166][ T6784] free:1862165 free_pcp:6534 free_cma:0 [ 87.145290][ T6784] Node 0 active_anon:123364kB inactive_anon:16kB active_file:0kB inactive_file:85028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141000kB dirty:1360kB writeback:0kB shmem:91852kB kernel_stack:3776kB pagetables:13732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.145351][ T6784] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.145441][ T6784] lowmem_reserve[]: 0 2878 7856 7856 [ 87.145492][ T6784] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 87.145614][ T6784] lowmem_reserve[]: 0 0 4978 4978 [ 87.145648][ T6784] Node 0 Normal free:4489684kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:123364kB inactive_anon:16kB active_file:0kB inactive_file:85028kB unevictable:0kB writepending:1360kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:22612kB local_pcp:14164kB free_cma:0kB [ 87.145792][ T6784] lowmem_reserve[]: 0 0 0 0 [ 87.145825][ T6784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.146144][ T6784] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB [ 87.146414][ T6784] Node 0 Normal: 0*4kB 2*8kB (UM) 2*16kB (E) 2*32kB (ME) 4*64kB [ 87.148947][ T6749] IPVS: You probably need to specify IP address on multicast interface. [ 87.148970][ T6749] IPVS: Error connecting to the multicast addr [ 87.244958][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.274465][ T6784] (UME) 2*128kB (UE) 11*256kB (UE) 12*512kB (UM) 7*1024kB (UM) 8*2048kB (UME) 1088*4096kB (UM) = 4489584kB [ 87.274664][ T6784] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 87.274735][ T6784] 43386 total pagecache pages [ 87.274744][ T6784] 5 pages in swap cache [ 87.274751][ T6784] Free swap = 124976kB [ 87.274758][ T6784] Total swap = 124996kB [ 87.274766][ T6784] 2097051 pages RAM [ 87.274773][ T6784] 0 pages HighMem/MovableOnly [ 87.274780][ T6784] 81869 pages reserved [ 87.942133][ T6823] FAULT_INJECTION: forcing a failure. [ 87.942133][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 87.942164][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.2.1143 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.942192][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.942205][ T6823] Call Trace: [ 87.942212][ T6823] [ 87.942220][ T6823] __dump_stack+0x1d/0x30 [ 87.942246][ T6823] dump_stack_lvl+0x95/0xd0 [ 87.942340][ T6823] dump_stack+0x15/0x1b [ 87.942365][ T6823] should_fail_ex+0x262/0x280 [ 87.942392][ T6823] ? __get_vm_area_node+0x125/0x1f0 [ 87.942457][ T6823] should_failslab+0x8c/0xb0 [ 87.942496][ T6823] __kmalloc_cache_node_noprof+0x81/0x420 [ 87.942597][ T6823] ? __get_vm_area_node+0x125/0x1f0 [ 87.942630][ T6823] __get_vm_area_node+0x125/0x1f0 [ 87.942667][ T6823] __vmalloc_node_range_noprof+0x262/0x1000 [ 87.942810][ T6823] ? security_read_policy+0x6c/0x130 [ 87.942840][ T6823] ? __css_rstat_updated+0xbb/0x280 [ 87.942869][ T6823] ? should_fail_ex+0xdb/0x280 [ 87.942901][ T6823] vmalloc_user_noprof+0x7d/0xb0 [ 87.942944][ T6823] ? security_read_policy+0x6c/0x130 [ 87.942971][ T6823] security_read_policy+0x6c/0x130 [ 87.943015][ T6823] sel_open_policy+0xf1/0x1d0 [ 87.943112][ T6823] do_dentry_open+0x49f/0xa60 [ 87.943136][ T6823] ? __pfx_sel_open_policy+0x10/0x10 [ 87.943166][ T6823] ? may_open+0xa1/0x350 [ 87.943200][ T6823] vfs_open+0x37/0x1e0 [ 87.943295][ T6823] path_openat+0xc01/0x10d0 [ 87.943335][ T6823] do_file_open+0x16c/0x290 [ 87.943445][ T6823] do_sys_openat2+0xa0/0x130 [ 87.943481][ T6823] __x64_sys_openat+0xf2/0x120 [ 87.943552][ T6823] x64_sys_call+0x1f72/0x2550 [ 87.943577][ T6823] do_syscall_64+0x112/0x360 [ 87.943684][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.943706][ T6823] RIP: 0033:0x7fcbafaae2d9 [ 87.943723][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.943798][ T6823] RSP: 002b:00007fcbae507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.943820][ T6823] RAX: ffffffffffffffda RBX: 00007fcbafd35fa0 RCX: 00007fcbafaae2d9 [ 87.943863][ T6823] RDX: 0000000000000000 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 87.943880][ T6823] RBP: 00007fcbafb45888 R08: 0000000000000000 R09: 0000000000000000 [ 87.943896][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.943911][ T6823] R13: 00007fcbafd36038 R14: 00007fcbafd35fa0 R15: 00007ffff22cf3c8 [ 87.943980][ T6823] [ 88.388996][ T6834] FAULT_INJECTION: forcing a failure. [ 88.388996][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 88.389028][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.6.1148 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.389059][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.389075][ T6834] Call Trace: [ 88.389084][ T6834] [ 88.389094][ T6834] __dump_stack+0x1d/0x30 [ 88.389144][ T6834] dump_stack_lvl+0x95/0xd0 [ 88.389261][ T6834] dump_stack+0x15/0x1b [ 88.389298][ T6834] should_fail_ex+0x262/0x280 [ 88.389333][ T6834] ? do_getname+0x2e/0x1c0 [ 88.389361][ T6834] should_failslab+0x8c/0xb0 [ 88.389506][ T6834] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 88.389559][ T6834] ? do_getname+0x2e/0x1c0 [ 88.389582][ T6834] ? __se_sys_futex+0x2f6/0x370 [ 88.389616][ T6834] do_getname+0x2e/0x1c0 [ 88.389689][ T6834] __se_sys_mkdirat+0x21/0xf0 [ 88.389712][ T6834] __x64_sys_mkdirat+0x43/0x50 [ 88.389734][ T6834] x64_sys_call+0x368/0x2550 [ 88.389846][ T6834] do_syscall_64+0x112/0x360 [ 88.389874][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.389897][ T6834] RIP: 0033:0x7fce18eae2d9 [ 88.389995][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.390014][ T6834] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 88.390036][ T6834] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 88.390053][ T6834] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 88.390069][ T6834] RBP: 00007fce18f45888 R08: 0000000000000000 R09: 0000000000000000 [ 88.390084][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.390127][ T6834] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 88.390146][ T6834] [ 88.679893][ T6859] tipc: Started in network mode [ 88.679976][ T6859] tipc: Node identity ac14140f, cluster identity 4711 [ 88.680090][ T6859] tipc: New replicast peer: 255.255.255.255 [ 88.680282][ T6859] tipc: Enabled bearer , priority 10 [ 88.779571][ T30] audit: type=1400 audit(1791944074.442:1577): avc: denied { create } for pid=6872 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.781451][ T30] audit: type=1400 audit(1791944074.442:1578): avc: denied { bind } for pid=6872 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.961262][ T6886] loop6: detected capacity change from 0 to 128 [ 89.035303][ T6894] net_ratelimit: 85 callbacks suppressed [ 89.035322][ T6894] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.162514][ T6904] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1179'. [ 89.162949][ T6904] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1179'. [ 89.254469][ T6916] loop7: detected capacity change from 0 to 128 [ 89.268464][ T6916] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.269766][ T6916] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.353915][ T6541] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.462893][ T12] IPVS: starting estimator thread 0... [ 89.516347][ T6949] FAULT_INJECTION: forcing a failure. [ 89.516347][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 89.516395][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.7.1198 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.516424][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.516437][ T6949] Call Trace: [ 89.516444][ T6949] [ 89.516452][ T6949] __dump_stack+0x1d/0x30 [ 89.516479][ T6949] dump_stack_lvl+0x95/0xd0 [ 89.516553][ T6949] dump_stack+0x15/0x1b [ 89.516581][ T6949] should_fail_ex+0x262/0x280 [ 89.516617][ T6949] ? security_inode_alloc+0x37/0x100 [ 89.516659][ T6949] should_failslab+0x8c/0xb0 [ 89.516731][ T6949] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 89.516826][ T6949] ? security_inode_alloc+0x37/0x100 [ 89.516860][ T6949] security_inode_alloc+0x37/0x100 [ 89.516890][ T6949] inode_init_always_gfp+0x495/0x4e0 [ 89.516987][ T6949] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 89.517010][ T6949] alloc_inode+0x58/0x170 [ 89.517087][ T6949] new_inode+0x1d/0xe0 [ 89.517118][ T6949] shmem_get_inode+0x250/0x7b0 [ 89.517146][ T6949] shmem_mknod+0x44/0x170 [ 89.517185][ T6949] shmem_create+0x34/0x50 [ 89.517226][ T6949] vfs_create+0x1e5/0x2f0 [ 89.517266][ T6949] filename_mknodat+0x296/0x450 [ 89.517363][ T6949] __se_sys_mknodat+0x38/0xf0 [ 89.517397][ T6949] __x64_sys_mknodat+0x55/0x70 [ 89.517435][ T6949] x64_sys_call+0x2182/0x2550 [ 89.517534][ T6949] do_syscall_64+0x112/0x360 [ 89.517565][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.517594][ T6949] RIP: 0033:0x7f28438ae2d9 [ 89.517616][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.517716][ T6949] RSP: 002b:00007f2842307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 89.517811][ T6949] RAX: ffffffffffffffda RBX: 00007f2843b35fa0 RCX: 00007f28438ae2d9 [ 89.517832][ T6949] RDX: 0000000000008000 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 89.517849][ T6949] RBP: 00007f2843945888 R08: 0000000000000000 R09: 0000000000000000 [ 89.517866][ T6949] R10: 0000000000010103 R11: 0000000000000246 R12: 0000000000000000 [ 89.517884][ T6949] R13: 00007f2843b36038 R14: 00007f2843b35fa0 R15: 00007ffc716e4818 [ 89.517906][ T6949] [ 89.550996][ T6944] IPVS: using max 2592 ests per chain, 129600 per kthread [ 89.562577][ T6953] loop4: detected capacity change from 0 to 256 [ 89.581981][ T6953] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.582299][ T6953] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.708669][ T6962] Invalid argument reading file caps for ./file0 [ 89.799152][ T9] tipc: Node number set to 2886997007 [ 89.826840][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1204'. [ 89.830891][ T6967] loop2: detected capacity change from 0 to 1024 [ 89.858706][ T6967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.858876][ T6967] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.875458][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1204'. [ 89.901146][ T6938] loop5: detected capacity change from 0 to 256 [ 89.933022][ T6975] loop6: detected capacity change from 0 to 1024 [ 89.933380][ T6975] EXT4-fs: Ignoring removed orlov option [ 89.961669][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.964212][ T6975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.044561][ T5452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.225185][ T6999] loop6: detected capacity change from 0 to 512 [ 90.238934][ T6999] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 90.242509][ T6999] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 90.242683][ T6999] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.1217: corrupted inode contents [ 90.242713][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.243025][ T6999] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #11: comm syz.6.1217: mark_inode_dirty error [ 90.243057][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.243187][ T6999] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1217: invalid indirect mapped block 1 (level 1) [ 90.243230][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.243480][ T6999] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.1217: corrupted inode contents [ 90.243504][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.243633][ T6999] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 90.243652][ T6999] loop6: lost filesystem error report for type 5 error -117 [ 90.243762][ T6999] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.1217: corrupted inode contents [ 90.243791][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.243997][ T6999] EXT4-fs error (device loop6): ext4_truncate:4721: inode #11: comm syz.6.1217: mark_inode_dirty error [ 90.244085][ T6999] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.244323][ T6999] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 90.244341][ T6999] loop6: lost filesystem error report for type 5 error -117 [ 90.244482][ T6999] EXT4-fs (loop6): 1 truncate cleaned up [ 90.244892][ T6999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.260789][ T6999] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.1217: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 90.307089][ T5452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.439260][ T7010] loop5: detected capacity change from 0 to 1024 [ 90.449043][ T7010] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.464007][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1219'. [ 90.485910][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1219'. [ 90.674036][ T7021] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.674208][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 90.674225][ T30] audit: type=1400 audit(1791944076.332:1606): avc: denied { write } for pid=7018 comm="syz.5.1222" name="sched_switch" dev="tracefs" ino=12611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.674261][ T30] audit: type=1400 audit(1791944076.332:1607): avc: denied { add_name } for pid=7018 comm="syz.5.1222" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.675711][ T30] audit: type=1400 audit(1791944076.332:1608): avc: denied { create } for pid=7018 comm="syz.5.1222" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 90.731528][ T30] audit: type=1400 audit(1791944076.382:1609): avc: denied { connect } for pid=7025 comm="syz.2.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.784821][ T51] tipc: Subscription rejected, illegal request [ 90.840799][ T30] audit: type=1400 audit(1791944076.502:1610): avc: denied { write } for pid=7040 comm="syz.7.1234" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.872451][ T30] audit: type=1326 audit(1791944076.542:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 90.872516][ T30] audit: type=1326 audit(1791944076.542:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 90.872821][ T30] audit: type=1326 audit(1791944076.542:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 90.872886][ T30] audit: type=1326 audit(1791944076.542:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 90.873027][ T30] audit: type=1326 audit(1791944076.542:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 91.030198][ T7055] loop5: detected capacity change from 0 to 512 [ 91.071056][ T7055] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.1238: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 91.071105][ T7055] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 91.071255][ T7055] EXT4-fs error (device loop5): ext4_quota_enable:7264: comm syz.5.1238: Bad quota inode: 4, type: 1 [ 91.071286][ T7055] loop5: lost filesystem error report for type 5 error -117 [ 91.071430][ T7055] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.073204][ T7055] EXT4-fs (loop5): mount failed [ 91.088994][ T29] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 91.104615][ T7066] loop2: detected capacity change from 0 to 512 [ 91.126290][ T7066] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.137675][ T7066] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.1243: Failed to acquire dquot type 1 [ 91.207142][ T7067] fido_id[7067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.276586][ T7083] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.292403][ T7083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.292981][ T7083] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.548232][ T7102] 9pnet: p9_errstr2errno: server reported unknown error [ 91.583010][ T7106] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.852115][ T7126] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 92.000344][ T7137] syzkaller1: entered promiscuous mode [ 92.000409][ T7137] syzkaller1: entered allmulticast mode [ 92.589364][ T7177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.659635][ T7181] FAULT_INJECTION: forcing a failure. [ 92.659635][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 92.659696][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.4.1288 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.659726][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.659742][ T7181] Call Trace: [ 92.659751][ T7181] [ 92.659759][ T7181] __dump_stack+0x1d/0x30 [ 92.659854][ T7181] dump_stack_lvl+0x95/0xd0 [ 92.659884][ T7181] dump_stack+0x15/0x1b [ 92.659911][ T7181] should_fail_ex+0x262/0x280 [ 92.659947][ T7181] ? sk_prot_alloc+0xa8/0x180 [ 92.659974][ T7181] should_failslab+0x8c/0xb0 [ 92.660079][ T7181] __kmalloc_noprof+0xd0/0x4d0 [ 92.660149][ T7181] ? sk_prot_alloc+0xa8/0x180 [ 92.660193][ T7181] sk_prot_alloc+0xa8/0x180 [ 92.660222][ T7181] sk_alloc+0x34/0x3e0 [ 92.660291][ T7181] ? __pfx_tun_chr_open+0x10/0x10 [ 92.660326][ T7181] tun_chr_open+0x56/0x2e0 [ 92.660416][ T7181] ? __pfx_tun_chr_open+0x10/0x10 [ 92.660472][ T7181] misc_open+0x1df/0x220 [ 92.660507][ T7181] chrdev_open+0x2eb/0x3a0 [ 92.660534][ T7181] do_dentry_open+0x49f/0xa60 [ 92.660562][ T7181] ? __pfx_chrdev_open+0x10/0x10 [ 92.660610][ T7181] vfs_open+0x37/0x1e0 [ 92.660639][ T7181] path_openat+0xc01/0x10d0 [ 92.660678][ T7181] do_file_open+0x16c/0x290 [ 92.660757][ T7181] do_sys_openat2+0xa0/0x130 [ 92.660788][ T7181] __x64_sys_openat+0xf2/0x120 [ 92.660819][ T7181] x64_sys_call+0x1f72/0x2550 [ 92.660851][ T7181] do_syscall_64+0x112/0x360 [ 92.660901][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.660929][ T7181] RIP: 0033:0x7f4ae8b4e2d9 [ 92.660950][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.660973][ T7181] RSP: 002b:00007f4ae75a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.661080][ T7181] RAX: ffffffffffffffda RBX: 00007f4ae8dd5fa0 RCX: 00007f4ae8b4e2d9 [ 92.661099][ T7181] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 92.661117][ T7181] RBP: 00007f4ae8be5888 R08: 0000000000000000 R09: 0000000000000000 [ 92.661132][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.661207][ T7181] R13: 00007f4ae8dd6038 R14: 00007f4ae8dd5fa0 R15: 00007ffd6ee1a908 [ 92.661305][ T7181] [ 92.910944][ T7198] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 92.910963][ T7198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.925138][ T7198] EXT4-fs (loop4): 1 truncate cleaned up [ 93.134586][ T7220] ptp ptp0: new virtual clock ptp1 [ 93.143753][ T7220] ptp ptp0: new virtual clock ptp2 [ 93.146305][ T7220] ptp ptp0: new virtual clock ptp3 [ 93.158773][ T7220] ptp ptp0: new virtual clock ptp4 [ 93.160757][ T7220] ptp ptp0: new virtual clock ptp5 [ 93.160779][ T7220] ptp ptp0: guarantee physical clock free running [ 93.161527][ T7220] ptp ptp0: delete virtual clock ptp5 [ 93.164612][ T7220] ptp ptp0: delete virtual clock ptp4 [ 93.185383][ T7220] ptp ptp0: delete virtual clock ptp3 [ 93.191819][ T7220] ptp ptp0: delete virtual clock ptp2 [ 93.202186][ T7220] ptp ptp0: delete virtual clock ptp1 [ 93.208262][ T7220] ptp ptp0: only physical clock in use now [ 93.234015][ T7229] EXT4-fs: Ignoring removed oldalloc option [ 93.456793][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1315'. [ 93.504132][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1315'. [ 93.515738][ T7264] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.517669][ T7264] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.701914][ T7276] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1333'. [ 93.792663][ T7284] IPVS: fo: FWM 3 0x00000003 - no destination available [ 93.920218][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1332'. [ 94.000430][ T7299] set_capacity_and_notify: 12 callbacks suppressed [ 94.000453][ T7299] loop5: detected capacity change from 0 to 4096 [ 94.869629][ T7326] netlink: 'syz.7.1346': attribute type 3 has an invalid length. [ 94.869653][ T7326] netlink: 'syz.7.1346': attribute type 2 has an invalid length. [ 95.124482][ T7338] __nla_validate_parse: 1 callbacks suppressed [ 95.124504][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1349'. [ 95.156984][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1349'. [ 95.339351][ T7360] syz.5.1358 (7360) used greatest stack depth: 10056 bytes left [ 95.422228][ T29] Process accounting resumed [ 95.507514][ T7374] loop7: detected capacity change from 0 to 512 [ 95.533026][ T7374] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 95.533048][ T7374] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 95.536857][ T7374] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1364: bg 0: block 384: padding at end of block bitmap is not set [ 95.536895][ T7374] loop7: lost filesystem error report for type 5 error -117 [ 95.537063][ T7374] EXT4-fs (loop7): Remounting filesystem read-only [ 95.537121][ T7374] EXT4-fs (loop7): 1 truncate cleaned up [ 95.593636][ T7374] EXT4-fs (loop7): shut down requested (2) [ 95.645490][ T7379] Invalid argument reading file caps for ./file0 [ 95.660213][ T7381] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1367'. [ 95.660236][ T7381] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1367'. [ 95.770900][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1368'. [ 96.045395][ T7430] syzkaller1: entered promiscuous mode [ 96.045448][ T7430] syzkaller1: entered allmulticast mode [ 96.058545][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1385'. [ 96.101738][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1385'. [ 96.246514][ T7443] syzkaller1: entered promiscuous mode [ 96.246535][ T7443] syzkaller1: entered allmulticast mode [ 96.410431][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 96.413132][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 96.443689][ T7463] loop4: detected capacity change from 0 to 1024 [ 96.464000][ T7463] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.466670][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 96.466690][ T30] audit: type=1400 audit(1791944082.122:1642): avc: denied { write } for pid=7462 comm="syz.4.1402" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.467640][ T7463] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.1402: lblock 3 mapped to illegal pblock 3 (length 1) [ 96.485200][ T7463] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 96.485256][ T7463] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.485256][ T7463] [ 96.528448][ T7463] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.1402: Freeing blocks not in datazone - block = 3, count = 1 [ 96.549693][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1404'. [ 96.549727][ T7470] netlink: 'syz.6.1404': attribute type 7 has an invalid length. [ 96.549740][ T7470] netlink: 'syz.6.1404': attribute type 8 has an invalid length. [ 96.558214][ T7470] erspan0: entered promiscuous mode [ 96.559013][ T7470] gretap0: entered promiscuous mode [ 96.579346][ T7470] erspan0: left promiscuous mode [ 96.584337][ T7470] gretap0: left promiscuous mode [ 96.769981][ T7492] loop2: detected capacity change from 0 to 764 [ 96.772086][ T7492] rock: directory entry would overflow storage [ 96.772097][ T7492] rock: sig=0x5245, size=8, remaining=5 [ 96.815445][ T7495] FAULT_INJECTION: forcing a failure. [ 96.815445][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 96.815492][ T7495] CPU: 1 UID: 0 PID: 7495 Comm: syz.2.1415 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.815554][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.815569][ T7495] Call Trace: [ 96.815579][ T7495] [ 96.815672][ T7495] __dump_stack+0x1d/0x30 [ 96.815702][ T7495] dump_stack_lvl+0x95/0xd0 [ 96.815728][ T7495] dump_stack+0x15/0x1b [ 96.815758][ T7495] should_fail_ex+0x262/0x280 [ 96.815791][ T7495] ? copy_net_ns+0xd6/0x490 [ 96.815891][ T7495] should_failslab+0x8c/0xb0 [ 96.815985][ T7495] __kmalloc_noprof+0xd0/0x4d0 [ 96.816016][ T7495] ? copy_net_ns+0xd6/0x490 [ 96.816111][ T7495] copy_net_ns+0xd6/0x490 [ 96.816145][ T7495] create_new_namespaces+0x1f6/0x420 [ 96.816258][ T7495] unshare_nsproxy_namespaces+0x115/0x150 [ 96.816294][ T7495] ksys_unshare+0x3fd/0x6f0 [ 96.816362][ T7495] __x64_sys_unshare+0x1f/0x30 [ 96.816393][ T7495] x64_sys_call+0x1e33/0x2550 [ 96.816425][ T7495] do_syscall_64+0x112/0x360 [ 96.816483][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.816510][ T7495] RIP: 0033:0x7fcbafaae2d9 [ 96.816533][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.816589][ T7495] RSP: 002b:00007fcbae507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.816613][ T7495] RAX: ffffffffffffffda RBX: 00007fcbafd35fa0 RCX: 00007fcbafaae2d9 [ 96.816631][ T7495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 96.816683][ T7495] RBP: 00007fcbafb45888 R08: 0000000000000000 R09: 0000000000000000 [ 96.816700][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.816717][ T7495] R13: 00007fcbafd36038 R14: 00007fcbafd35fa0 R15: 00007ffff22cf3c8 [ 96.816741][ T7495] [ 96.925052][ T30] audit: type=1400 audit(1791944082.592:1643): avc: denied { bind } for pid=7502 comm="syz.7.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.032993][ T30] audit: type=1326 audit(1791944082.682:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.4.1422" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 97.033075][ T30] audit: type=1326 audit(1791944082.682:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7510 comm="syz.4.1422" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae8b4e2d9 code=0x7ffc0000 [ 97.033171][ T30] audit: type=1326 audit(1791944082.682:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28438ae2d9 code=0x7ffc0000 [ 97.033202][ T30] audit: type=1326 audit(1791944082.682:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28438ae2d9 code=0x7ffc0000 [ 97.033291][ T30] audit: type=1326 audit(1791944082.682:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28438ae2d9 code=0x7ffc0000 [ 97.033320][ T30] audit: type=1326 audit(1791944082.682:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f28438ae2d9 code=0x7ffc0000 [ 97.033345][ T30] audit: type=1326 audit(1791944082.682:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28438ae042 code=0x7ffc0000 [ 97.033491][ T30] audit: type=1326 audit(1791944082.682:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.7.1423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28438ae042 code=0x7ffc0000 [ 97.392725][ T7532] loop2: detected capacity change from 0 to 8192 [ 97.412735][ T7546] loop5: detected capacity change from 0 to 512 [ 97.420456][ T7546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.440627][ T7546] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.587600][ T7566] loop7: detected capacity change from 0 to 512 [ 97.590291][ T7566] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 97.590308][ T7566] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.592790][ T7566] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.1439: corrupted in-inode xattr: invalid ea_ino [ 97.592905][ T7566] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.593067][ T7566] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1439: couldn't read orphan inode 15 (err -117) [ 97.593175][ T7566] loop7: lost filesystem error report for type 5 error -117 [ 97.596576][ T7566] SELinux: Context system_u:object_r:init_exec_t:s0 is not valid (left unmapped). [ 97.600853][ T7568] loop2: detected capacity change from 0 to 512 [ 97.669025][ T7568] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.827268][ T7586] sctp: [Deprecated]: syz.6.1446 (pid 7586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.827268][ T7586] Use struct sctp_sack_info instead [ 97.828139][ T7584] SELinux: invalid class [ 97.831508][ T7584] SELinux: failed to load policy [ 97.888903][ T7590] loop5: detected capacity change from 0 to 128 [ 97.893149][ T7590] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.910722][ T7590] FAT-fs (loop5): error, parent dir link count too low (2) [ 97.910748][ T7590] FAT-fs (loop5): Filesystem has been set read-only [ 97.945279][ T5132] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.979562][ T7596] loop5: detected capacity change from 0 to 512 [ 97.979976][ T7596] EXT4-fs: Ignoring removed nobh option [ 97.989674][ T7596] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 97.989961][ T7596] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1451: attempt to clear invalid blocks 1 len 1 [ 97.989993][ T7596] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.993085][ T7596] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 97.993192][ T7596] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1451: invalid indirect mapped block 1819239214 (level 0) [ 97.993221][ T7596] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.993824][ T7596] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1451: invalid indirect mapped block 1819239214 (level 1) [ 97.993858][ T7596] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.994344][ T7596] EXT4-fs (loop5): 1 truncate cleaned up [ 97.994765][ T7596] EXT4-fs mount: 34 callbacks suppressed [ 97.994778][ T7596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.071118][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.185466][ T7619] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 98.279967][ T7637] 9p: Bad value for 'source' [ 98.418282][ T29] kernel write not supported for file bpf-map (pid: 29 comm: kworker/1:1) [ 98.618922][ T7675] smc: net device lo applied user defined pnetid SYZ2 [ 98.620068][ T7675] smc: net device lo erased user defined pnetid SYZ2 [ 98.736029][ T7680] syz.7.1475 (7680) used greatest stack depth: 10040 bytes left [ 98.774964][ T7683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.803759][ T7683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 98.803880][ T7683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 98.803910][ T7683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.803910][ T7683] [ 98.803926][ T7683] EXT4-fs (loop2): Total free blocks count 0 [ 98.803940][ T7683] EXT4-fs (loop2): Free/Dirty block details [ 98.803982][ T7683] EXT4-fs (loop2): free_blocks=4096 [ 98.803998][ T7683] EXT4-fs (loop2): dirty_blocks=32 [ 98.804014][ T7683] EXT4-fs (loop2): Block reservation details [ 98.804027][ T7683] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 98.899920][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.290016][ T7734] set_capacity_and_notify: 1 callbacks suppressed [ 99.290035][ T7734] loop7: detected capacity change from 0 to 512 [ 99.290803][ T7734] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.320868][ T7734] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.1495: bad orphan inode 13 [ 99.320977][ T7734] loop7: lost filesystem error report for type 5 error -117 [ 99.321219][ T7734] ext4_test_bit(bit=12, block=18) = 1 [ 99.321233][ T7734] is_bad_inode(inode)=0 [ 99.321241][ T7734] NEXT_ORPHAN(inode)=0 [ 99.321250][ T7734] max_ino=32 [ 99.321279][ T7734] i_nlink=1 [ 99.321762][ T7734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 99.384044][ T7734] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 99.384208][ T7734] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1495: bg 0: block 248: padding at end of block bitmap is not set [ 99.384571][ T7734] EXT4-fs error (device loop7): ext4_acquire_dquot:7070: comm syz.7.1495: Failed to acquire dquot type 1 [ 99.385178][ T7734] EXT4-fs error (device loop7): ext4_acquire_dquot:7070: comm syz.7.1495: Failed to acquire dquot type 1 [ 99.415623][ T7734] syz.7.1495 (7734) used greatest stack depth: 9888 bytes left [ 99.433324][ T6541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 99.470136][ T7746] FAULT_INJECTION: forcing a failure. [ 99.470136][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 99.470180][ T7746] CPU: 0 UID: 0 PID: 7746 Comm: syz.6.1500 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.470211][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.470228][ T7746] Call Trace: [ 99.470237][ T7746] [ 99.470245][ T7746] __dump_stack+0x1d/0x30 [ 99.470305][ T7746] dump_stack_lvl+0x95/0xd0 [ 99.470348][ T7746] dump_stack+0x15/0x1b [ 99.470372][ T7746] should_fail_ex+0x262/0x280 [ 99.470479][ T7746] ? copy_fs_struct+0x31/0x110 [ 99.470516][ T7746] should_failslab+0x8c/0xb0 [ 99.470617][ T7746] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 99.470660][ T7746] ? copy_fs_struct+0x31/0x110 [ 99.470757][ T7746] copy_fs_struct+0x31/0x110 [ 99.470793][ T7746] ksys_unshare+0x2f3/0x6f0 [ 99.470825][ T7746] __x64_sys_unshare+0x1f/0x30 [ 99.470932][ T7746] x64_sys_call+0x1e33/0x2550 [ 99.470958][ T7746] do_syscall_64+0x112/0x360 [ 99.470988][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.471017][ T7746] RIP: 0033:0x7fce18eae2d9 [ 99.471073][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.471096][ T7746] RSP: 002b:00007fce17907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.471123][ T7746] RAX: ffffffffffffffda RBX: 00007fce19135fa0 RCX: 00007fce18eae2d9 [ 99.471139][ T7746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 99.471182][ T7746] RBP: 00007fce18f45888 R08: 0000000000000000 R09: 0000000000000000 [ 99.471272][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.471289][ T7746] R13: 00007fce19136038 R14: 00007fce19135fa0 R15: 00007ffd2ea330b8 [ 99.471313][ T7746] [ 99.646454][ T7765] netlink: 'syz.6.1507': attribute type 3 has an invalid length. [ 99.773681][ T7776] bridge_slave_0: left allmulticast mode [ 99.773707][ T7776] bridge_slave_0: left promiscuous mode [ 99.773835][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.800517][ T7783] loop4: detected capacity change from 0 to 512 [ 99.861496][ T7776] bridge_slave_1: left allmulticast mode [ 99.861522][ T7776] bridge_slave_1: left promiscuous mode [ 99.861653][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.901653][ T7776] bond0: (slave bond_slave_0): Releasing backup interface [ 99.915523][ T7776] bond0: (slave bond_slave_1): Releasing backup interface [ 99.931504][ T7776] team0: Port device team_slave_0 removed [ 99.956622][ T7776] team0: Port device team_slave_1 removed [ 99.965564][ T7776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.965638][ T7776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.983640][ T7776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.983661][ T7776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.986360][ T7776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.013826][ T7803] syzkaller1: entered promiscuous mode [ 100.013850][ T7803] syzkaller1: entered allmulticast mode [ 100.044858][ T7805] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.109432][ T7805] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.153400][ T7805] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.236536][ T7805] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.262416][ T7810] ================================================================== [ 100.262458][ T7810] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 100.262493][ T7810] [ 100.262502][ T7810] write to 0xffff888125b46160 of 8 bytes by task 7815 on cpu 0: [ 100.262519][ T7810] shmem_file_splice_read+0x401/0x590 [ 100.262542][ T7810] splice_direct_to_actor+0x261/0x680 [ 100.262568][ T7810] do_splice_direct+0x119/0x1a0 [ 100.262593][ T7810] do_sendfile+0x37d/0x640 [ 100.262619][ T7810] __x64_sys_sendfile64+0x105/0x150 [ 100.262646][ T7810] x64_sys_call+0x1015/0x2550 [ 100.262679][ T7810] do_syscall_64+0x112/0x360 [ 100.262710][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.262734][ T7810] [ 100.262740][ T7810] write to 0xffff888125b46160 of 8 bytes by task 7810 on cpu 1: [ 100.262759][ T7810] shmem_file_splice_read+0x401/0x590 [ 100.262785][ T7810] splice_direct_to_actor+0x261/0x680 [ 100.262806][ T7810] do_splice_direct+0x119/0x1a0 [ 100.262827][ T7810] do_sendfile+0x37d/0x640 [ 100.262847][ T7810] __x64_sys_sendfile64+0x105/0x150 [ 100.262868][ T7810] x64_sys_call+0x1015/0x2550 [ 100.262907][ T7810] do_syscall_64+0x112/0x360 [ 100.262937][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.262964][ T7810] [ 100.262970][ T7810] value changed: 0x00000000000029fb -> 0x00000000000029fc [ 100.262986][ T7810] [ 100.262991][ T7810] Reported by Kernel Concurrency Sanitizer on: [ 100.263002][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.2.1528 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.263030][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.263046][ T7810] ================================================================== [ 100.440629][ T71] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.447806][ T71] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.447914][ T71] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.447952][ T71] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0