last executing test programs: 1m12.417654452s ago: executing program 4 (id=95): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 1m12.130716709s ago: executing program 4 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910b8000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) write(r3, &(0x7f0000000400)='!*:', 0x3) 1m11.117516411s ago: executing program 4 (id=102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x10) 1m10.925150276s ago: executing program 4 (id=106): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) 1m8.922254271s ago: executing program 4 (id=124): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000400)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) epoll_create1(0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f00000003c0)={r6, &(0x7f00000002c0)='^\x00', 0x400200, &(0x7f0000000300)={@_ha_fsid={[0xa9]}, {0x2, 0x2, 0x2, 0x7}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x386}) 1m7.61185536s ago: executing program 4 (id=127): setns(0xc9, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 51.845203425s ago: executing program 32 (id=127): setns(0xc9, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 8.816826122s ago: executing program 1 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000005580)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x6, 0x4, 0x6, 0x3, 0x3000, 0x851}}, @common=@srh1={{0x90}, {0x33, 0x7, 0x6, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x2000, 0x200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002700000095000000000000006018895b7aa9fe888c415ada03c6c78d4cd15391f17551e2f6c624228d682e25ce46b1bafedf4aa6fde55b38081c19cb"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x439b, 0x0, 0x78, 0x9}, &(0x7f0000000140)=0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 7.767835066s ago: executing program 1 (id=417): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.802805238s ago: executing program 1 (id=426): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) accept4(r0, &(0x7f0000000280)=@qipcrtr, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x54) 6.774374018s ago: executing program 5 (id=427): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000440)='Y', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0xfd, 0x40, 0x4, 0x0, 0x0, 0x20, 0x0, 0x8, 0xfd, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 6.372491707s ago: executing program 5 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 6.170328221s ago: executing program 5 (id=430): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 6.131537442s ago: executing program 1 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x4004662b, 0x0) 6.028068245s ago: executing program 5 (id=432): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x1082, 0x4) 5.948641247s ago: executing program 5 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r6, 0x838, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket(0x80000000000000a, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/195, 0xc3, 0x130) 3.401307144s ago: executing program 1 (id=437): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.427895376s ago: executing program 3 (id=442): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) accept4(r0, &(0x7f0000000280)=@qipcrtr, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x54) 2.427722676s ago: executing program 2 (id=443): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 2.414334646s ago: executing program 3 (id=444): socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.255724429s ago: executing program 2 (id=446): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r0) 2.21850827s ago: executing program 0 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x4004662b, 0x0) 2.169233642s ago: executing program 2 (id=448): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) 1.983952115s ago: executing program 2 (id=449): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 1.925673187s ago: executing program 1 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.75512592s ago: executing program 5 (id=451): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x6c6000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5, r6}}, './file0\x00'}) getgid() sendmsg$netlink(r3, 0x0, 0x24000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) syz_io_uring_setup(0x7ac5, &(0x7f00000000c0)={0x0, 0x2929, 0x4, 0x0, 0x25e}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) 1.358385909s ago: executing program 0 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001a0001002dbd7000010000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000c000000080002000b00000014000100fc000000000000000000000000000001140001"], 0x54}, 0x1, 0x0, 0x0, 0x4048055}, 0x0) 1.212041173s ago: executing program 0 (id=453): mount$fuse(0x0, 0x0, &(0x7f0000000480), 0x214600c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x67, 0x6000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xd, 0x0, @opaque="2e97935b69"}}}}}}, 0xfced) 1.183796363s ago: executing program 3 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f000000b400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffffff00000000}, 0x38) 1.080060346s ago: executing program 2 (id=455): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000}, 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 991.762718ms ago: executing program 0 (id=456): mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect$midi(0x5, 0x2b, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00 '], 0xc) 978.177898ms ago: executing program 3 (id=457): r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) 754.140123ms ago: executing program 3 (id=458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x6a4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x678, 0x2, [@TCA_BPF_ACT={0x674, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x114, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe9, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aa"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x3a4, 0x13, 0x0, 0x0, {{0x7}, {0x26c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc1, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd92"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb"}}, @TCA_IPT_TARG={0x95, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x111, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 572.018787ms ago: executing program 3 (id=459): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 277.984874ms ago: executing program 0 (id=460): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) 132.514107ms ago: executing program 2 (id=461): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 0 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./mnt/trace_pipe\x00', 0x2000, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): ][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.343215][ T4189] device veth0_macvtap entered promiscuous mode [ 57.352275][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.361314][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.368732][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.377000][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.385704][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.397921][ T4188] device veth1_vlan entered promiscuous mode [ 57.410475][ T4189] device veth1_macvtap entered promiscuous mode [ 57.424470][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.433105][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.447110][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.457414][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.471791][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.482271][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.490908][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.498316][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.507123][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.520884][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.529344][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.549096][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.559865][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.589946][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.599068][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.615685][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.624817][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.639229][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.655057][ T4188] device veth0_macvtap entered promiscuous mode [ 57.666886][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.676068][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.705724][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.721221][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.731809][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.745846][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.755438][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.764950][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.774754][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.787455][ T4188] device veth1_macvtap entered promiscuous mode [ 57.826764][ T4185] device veth0_vlan entered promiscuous mode [ 57.849033][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.864912][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.877566][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.889717][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.898354][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.907943][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.916188][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.928985][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.941667][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.953983][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.965287][ T4185] device veth1_vlan entered promiscuous mode [ 57.986170][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.994576][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.004458][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.043462][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.055947][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.068407][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.077624][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.086841][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.096240][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.103850][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.112193][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.120866][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.129595][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.138202][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.146327][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.159470][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.175523][ T4186] device veth0_vlan entered promiscuous mode [ 58.186484][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.195948][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.205514][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.215028][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.244062][ T4186] device veth1_vlan entered promiscuous mode [ 58.255502][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.264472][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.272969][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.293129][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.304425][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.312641][ T4185] device veth0_macvtap entered promiscuous mode [ 58.326804][ T4185] device veth1_macvtap entered promiscuous mode [ 58.357746][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.370868][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.382631][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.391568][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.435394][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.446654][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.456953][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.466943][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.479356][ T4186] device veth0_macvtap entered promiscuous mode [ 58.496999][ T4190] device veth0_vlan entered promiscuous mode [ 58.506512][ T684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.514953][ T684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.517095][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.533978][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.544611][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.555674][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.567037][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.578909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.588207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.596693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.605939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.615146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.624121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.633081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.643603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.652681][ T4186] device veth1_macvtap entered promiscuous mode [ 58.670753][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.682399][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.703353][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.715621][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.728787][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.739969][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.751754][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.761196][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.774528][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.785638][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.802684][ T4190] device veth1_vlan entered promiscuous mode [ 58.814937][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.826147][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.837092][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.848191][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.858065][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.868510][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.882274][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.891930][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.901624][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.910902][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.919960][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.943927][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.958229][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.966890][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.003848][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.027492][ T4266] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 59.036845][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.048502][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.074176][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.084943][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.094845][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.106489][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.124016][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.141730][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 59.150827][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 59.155741][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.169180][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.184622][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.194170][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.206541][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.216622][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.220171][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 59.241472][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 59.247598][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 59.255244][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.264006][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.279165][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.298138][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.327239][ T4190] device veth0_macvtap entered promiscuous mode [ 59.340422][ T4269] device syzkaller0 entered promiscuous mode [ 59.348512][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.358339][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.381551][ T4190] device veth1_macvtap entered promiscuous mode [ 59.444114][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.458957][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.470139][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.481033][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.495365][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.507249][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.520714][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.537105][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.548536][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.578135][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.585725][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.591195][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.601920][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.604010][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.621000][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.658006][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.673827][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.684618][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.696923][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.721282][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.743893][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.762125][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.778933][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.791975][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.820248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.834334][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.844625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.866925][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.876532][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.877274][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.885789][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.903039][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.947661][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.948913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.978057][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.007800][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.055223][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.081006][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.105802][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.125692][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.143332][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.201424][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.214228][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.237036][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.275685][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.363568][ T4287] loop0: detected capacity change from 0 to 128 [ 60.862450][ T4311] loop4: detected capacity change from 0 to 128 [ 60.896531][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 61.212352][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 61.255523][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 61.581179][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 61.801472][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 61.963244][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 62.128370][ T4339] program syz.4.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.149569][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.267957][ T4345] FAULT_INJECTION: forcing a failure. [ 62.267957][ T4345] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.281660][ T4345] CPU: 1 PID: 4345 Comm: syz.4.33 Not tainted syzkaller #0 [ 62.288878][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.298959][ T4345] Call Trace: [ 62.302248][ T4345] [ 62.305185][ T4345] dump_stack_lvl+0x188/0x250 [ 62.310000][ T4345] ? show_regs_print_info+0x20/0x20 [ 62.315208][ T4345] ? load_image+0x410/0x410 [ 62.319722][ T4345] ? mark_lock+0x94/0x320 [ 62.324057][ T4345] should_fail+0x383/0x4b0 [ 62.328481][ T4345] prepare_alloc_pages+0x1e3/0x5b0 [ 62.333608][ T4345] __alloc_pages+0x11b/0x480 [ 62.338217][ T4345] ? zone_statistics+0x170/0x170 [ 62.343171][ T4345] ? rcu_lock_acquire+0x30/0x30 [ 62.348033][ T4345] ? alloc_pages+0x452/0x560 [ 62.352627][ T4345] __get_free_pages+0x8/0x30 [ 62.357225][ T4345] __tlb_remove_page_size+0x1f2/0x3f0 [ 62.362691][ T4345] unmap_page_range+0xfcf/0x2410 [ 62.367660][ T4345] unmap_vmas+0x131/0x250 [ 62.371996][ T4345] ? unmap_page_range+0x2410/0x2410 [ 62.377193][ T4345] ? __mutex_lock_common+0x435/0x2400 [ 62.382571][ T4345] ? exit_mm_release+0x16/0x30 [ 62.387347][ T4345] exit_mmap+0x3b9/0x640 [ 62.391598][ T4345] ? vm_brk+0x20/0x20 [ 62.395602][ T4345] ? uprobe_clear_state+0x2f6/0x460 [ 62.400814][ T4345] __mmput+0x115/0x390 [ 62.404936][ T4345] exit_mm+0x632/0x7b0 [ 62.409009][ T4345] ? perf_pmu_migrate_context+0xb70/0xb70 [ 62.414747][ T4345] ? do_exit+0x2110/0x2110 [ 62.419175][ T4345] ? __ia32_sys_timer_delete+0x40/0x40 [ 62.424649][ T4345] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 62.430130][ T4345] ? tty_audit_exit+0x149/0x1f0 [ 62.434996][ T4345] do_exit+0x5b8/0x2110 [ 62.439170][ T4345] ? put_task_struct+0x80/0x80 [ 62.443939][ T4345] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 62.449934][ T4345] ? _raw_spin_lock_irq+0xb7/0xf0 [ 62.454971][ T4345] do_group_exit+0x12c/0x2f0 [ 62.459572][ T4345] ? lockdep_hardirqs_on+0x94/0x140 [ 62.464784][ T4345] get_signal+0x7eb/0x12e0 [ 62.469221][ T4345] arch_do_signal_or_restart+0xe6/0x12a0 [ 62.474864][ T4345] ? btf_new_fd+0x58e/0x910 [ 62.479372][ T4345] ? kfree+0xef/0x2a0 [ 62.483364][ T4345] ? futex_exit_release+0x1c0/0x1c0 [ 62.488570][ T4345] ? get_sigframe_size+0x10/0x10 [ 62.493515][ T4345] ? __context_tracking_exit+0x4c/0x80 [ 62.499007][ T4345] ? exit_to_user_mode_loop+0x3b/0x130 [ 62.504490][ T4345] exit_to_user_mode_loop+0x9e/0x130 [ 62.509786][ T4345] exit_to_user_mode_prepare+0xee/0x180 [ 62.515337][ T4345] syscall_exit_to_user_mode+0x16/0x40 [ 62.520810][ T4345] do_syscall_64+0x58/0xa0 [ 62.525235][ T4345] ? clear_bhb_loop+0x30/0x80 [ 62.529933][ T4345] ? clear_bhb_loop+0x30/0x80 [ 62.534621][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.540532][ T4345] RIP: 0033:0x7f4cbfc97159 [ 62.544957][ T4345] Code: Unable to access opcode bytes at RIP 0x7f4cbfc9712f. [ 62.552328][ T4345] RSP: 002b:00007f4cbdeef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 62.560748][ T4345] RAX: 0000000000000001 RBX: 00007f4cbff1efa8 RCX: 00007f4cbfc97159 [ 62.568727][ T4345] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cbff1efac [ 62.576702][ T4345] RBP: 00007f4cbff1efa0 R08: 000d292b64d0b406 R09: 0000000000000000 [ 62.584766][ T4345] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 62.592745][ T4345] R13: 00007f4cbff1f038 R14: 00007ffccb444c30 R15: 00007ffccb444d18 [ 62.600738][ T4345] [ 63.305293][ T4232] usb 1-1: device descriptor read/64, error -71 [ 63.561205][ T4361] FAULT_INJECTION: forcing a failure. [ 63.561205][ T4361] name failslab, interval 1, probability 0, space 0, times 1 [ 63.588240][ T4367] loop3: detected capacity change from 0 to 128 [ 63.638908][ T4369] loop2: detected capacity change from 0 to 4096 [ 63.659529][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.667157][ T4361] CPU: 1 PID: 4361 Comm: syz.2.36 Not tainted syzkaller #0 [ 63.674368][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.684439][ T4361] Call Trace: [ 63.687727][ T4361] [ 63.690660][ T4361] dump_stack_lvl+0x188/0x250 [ 63.695449][ T4361] ? show_regs_print_info+0x20/0x20 [ 63.700664][ T4361] ? load_image+0x410/0x410 [ 63.705184][ T4361] ? prep_compound_page+0x3d5/0x500 [ 63.710402][ T4361] should_fail+0x383/0x4b0 [ 63.714837][ T4361] should_failslab+0x5/0x20 [ 63.719349][ T4361] slab_pre_alloc_hook+0x51/0xc0 [ 63.724299][ T4361] __kmalloc+0x6b/0x340 [ 63.728460][ T4361] ? blk_rq_map_user_iov+0xceb/0x1b70 [ 63.733847][ T4361] blk_rq_map_user_iov+0xceb/0x1b70 [ 63.739063][ T4361] ? sg_write+0xac0/0xe90 [ 63.743415][ T4361] ? blk_rq_append_bio+0x550/0x550 [ 63.748555][ T4361] ? memset+0x1e/0x40 [ 63.752546][ T4361] ? import_single_range+0x1aa/0x2a0 [ 63.757845][ T4361] blk_rq_map_user+0x14c/0x1e0 [ 63.762628][ T4361] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 63.767751][ T4361] ? mutex_unlock+0x10/0x10 [ 63.772286][ T4361] sg_common_write+0x109f/0x1c10 [ 63.777250][ T4361] ? sg_add_request+0x690/0x690 [ 63.782128][ T4361] ? __lock_acquire+0x7b50/0x7b50 [ 63.787162][ T4361] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 63.793152][ T4361] ? mutex_unlock+0x10/0x10 [ 63.797665][ T4361] ? __lock_acquire+0x7b50/0x7b50 [ 63.802702][ T4361] ? __might_fault+0xb3/0x110 [ 63.807389][ T4361] ? _copy_from_user+0x111/0x170 [ 63.812339][ T4361] sg_write+0xac0/0xe90 [ 63.816506][ T4361] ? __lock_acquire+0x7b50/0x7b50 [ 63.821547][ T4361] ? sg_read+0x1420/0x1420 [ 63.825974][ T4361] ? aa_file_perm+0x38b/0xe80 [ 63.830682][ T4361] ? end_current_label_crit_section+0x14b/0x170 [ 63.836940][ T4361] ? common_file_perm+0x171/0x1c0 [ 63.841980][ T4361] ? fsnotify_perm+0x5d/0x560 [ 63.846658][ T4361] ? security_file_permission+0x75/0xa0 [ 63.852214][ T4361] do_iter_write+0x3c3/0x7a0 [ 63.856828][ T4361] do_writev+0x281/0x480 [ 63.861083][ T4361] ? do_readv+0x460/0x460 [ 63.865437][ T4361] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 63.871425][ T4361] ? lock_chain_count+0x20/0x20 [ 63.876296][ T4361] ? lockdep_hardirqs_on+0x94/0x140 [ 63.881506][ T4361] do_syscall_64+0x4c/0xa0 [ 63.885936][ T4361] ? clear_bhb_loop+0x30/0x80 [ 63.890623][ T4361] ? clear_bhb_loop+0x30/0x80 [ 63.895313][ T4361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.901217][ T4361] RIP: 0033:0x7f7f1fe29159 [ 63.905636][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.925267][ T4361] RSP: 002b:00007f7f1e081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 63.933702][ T4361] RAX: ffffffffffffffda RBX: 00007f7f200b0fa0 RCX: 00007f7f1fe29159 [ 63.941686][ T4361] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 63.949672][ T4361] RBP: 00007f7f1fec0024 R08: 0000000000000000 R09: 0000000000000000 [ 63.957657][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.965637][ T4361] R13: 00007f7f200b1038 R14: 00007f7f200b0fa0 R15: 00007fff09a17e48 [ 63.973632][ T4361] [ 64.189309][ T4369] EXT4-fs (loop2): Unrecognized mount option "fsuuid=0d1da630-d760-fbb" or missing value [ 65.469446][ T4403] loop3: detected capacity change from 0 to 512 [ 65.516266][ T4407] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.661525][ T4403] EXT4-fs (loop3): 1 truncate cleaned up [ 65.667233][ T4403] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 65.854542][ T4403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.53: bg 0: block 465: padding at end of block bitmap is not set [ 65.912121][ T4403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 66.653422][ T4403] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.653422][ T4403] [ 66.731158][ T4403] EXT4-fs (loop3): Total free blocks count 0 [ 66.742099][ T4426] FAULT_INJECTION: forcing a failure. [ 66.742099][ T4426] name failslab, interval 1, probability 0, space 0, times 0 [ 66.781650][ T4403] EXT4-fs (loop3): Free/Dirty block details [ 66.791295][ T4426] CPU: 1 PID: 4426 Comm: syz.1.60 Not tainted syzkaller #0 [ 66.798520][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.808760][ T4426] Call Trace: [ 66.812046][ T4426] [ 66.814979][ T4426] dump_stack_lvl+0x188/0x250 [ 66.819665][ T4426] ? blk_rq_map_user+0x14c/0x1e0 [ 66.821604][ T4403] EXT4-fs (loop3): free_blocks=0 [ 66.824603][ T4426] ? sg_write+0xac0/0xe90 [ 66.824628][ T4426] ? show_regs_print_info+0x20/0x20 [ 66.824650][ T4426] ? load_image+0x410/0x410 [ 66.843597][ T4426] should_fail+0x383/0x4b0 [ 66.848035][ T4426] should_failslab+0x5/0x20 [ 66.852540][ T4426] slab_pre_alloc_hook+0x51/0xc0 [ 66.857478][ T4426] __kmalloc+0x6b/0x340 [ 66.861627][ T4426] ? bio_kmalloc+0x47/0x1e0 [ 66.866131][ T4426] bio_kmalloc+0x47/0x1e0 [ 66.870463][ T4426] blk_rq_map_user_iov+0xe02/0x1b70 [ 66.875660][ T4426] ? blk_rq_append_bio+0x550/0x550 [ 66.880852][ T4426] ? memset+0x1e/0x40 [ 66.884815][ T4426] ? import_single_range+0x1aa/0x2a0 [ 66.890086][ T4426] blk_rq_map_user+0x14c/0x1e0 [ 66.894851][ T4426] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 66.899965][ T4426] ? mutex_unlock+0x10/0x10 [ 66.904483][ T4426] sg_common_write+0x109f/0x1c10 [ 66.909438][ T4426] ? sg_add_request+0x690/0x690 [ 66.914290][ T4426] ? __lock_acquire+0x7b50/0x7b50 [ 66.919305][ T4426] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 66.925283][ T4426] ? mutex_unlock+0x10/0x10 [ 66.929789][ T4426] ? __lock_acquire+0x7b50/0x7b50 [ 66.935274][ T4426] ? __might_fault+0xb3/0x110 [ 66.939969][ T4426] ? _copy_from_user+0x111/0x170 [ 66.944908][ T4426] sg_write+0xac0/0xe90 [ 66.949060][ T4426] ? __lock_acquire+0x7b50/0x7b50 [ 66.954088][ T4426] ? sg_read+0x1420/0x1420 [ 66.958504][ T4426] ? aa_file_perm+0x38b/0xe80 [ 66.963317][ T4426] ? end_current_label_crit_section+0x14b/0x170 [ 66.969571][ T4426] ? common_file_perm+0x171/0x1c0 [ 66.974585][ T4426] ? fsnotify_perm+0x5d/0x560 [ 66.979247][ T4426] ? security_file_permission+0x75/0xa0 [ 66.984780][ T4426] do_iter_write+0x3c3/0x7a0 [ 66.989370][ T4426] do_writev+0x281/0x480 [ 66.993608][ T4426] ? do_readv+0x460/0x460 [ 66.997930][ T4426] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 67.003902][ T4426] ? lock_chain_count+0x20/0x20 [ 67.008744][ T4426] ? lockdep_hardirqs_on+0x94/0x140 [ 67.013936][ T4426] do_syscall_64+0x4c/0xa0 [ 67.018461][ T4426] ? clear_bhb_loop+0x30/0x80 [ 67.023123][ T4426] ? clear_bhb_loop+0x30/0x80 [ 67.027785][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.033661][ T4426] RIP: 0033:0x7f4183eb3159 [ 67.038060][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.057654][ T4426] RSP: 002b:00007f418210b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 67.066052][ T4426] RAX: ffffffffffffffda RBX: 00007f418413afa0 RCX: 00007f4183eb3159 [ 67.074008][ T4426] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 67.081962][ T4426] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 67.089917][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.097871][ T4426] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 67.105839][ T4426] [ 67.148277][ T4403] EXT4-fs (loop3): dirty_blocks=2 [ 67.160775][ T4429] tipc: Started in network mode [ 67.165101][ T4403] EXT4-fs (loop3): Block reservation details [ 67.165853][ T4429] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 67.186853][ T4403] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 67.239782][ T4429] tipc: Enabled bearer , priority 0 [ 67.256787][ T144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.279802][ T4431] tipc: Resetting bearer [ 67.285628][ T144] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.285628][ T144] [ 67.369757][ T4431] tipc: Disabling bearer [ 67.593969][ T4441] loop3: detected capacity change from 0 to 128 [ 67.692384][ T4430] loop1: detected capacity change from 0 to 4096 [ 67.898236][ T4430] EXT4-fs (loop1): Unrecognized mount option "fsuuid=0d1da630-d760-fbb" or missing value [ 68.777824][ T4457] loop1: detected capacity change from 0 to 512 [ 68.831914][ T4455] device syzkaller0 entered promiscuous mode [ 68.931442][ T4457] EXT4-fs (loop1): 1 truncate cleaned up [ 68.967567][ T4457] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 69.754427][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'. [ 69.785196][ T4491] loop4: detected capacity change from 0 to 512 [ 69.916943][ T4493] loop2: detected capacity change from 0 to 2048 [ 70.040574][ T4493] loop2: p1 < > p4 [ 70.044784][ T4491] EXT4-fs (loop4): 1 truncate cleaned up [ 70.180743][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 70.755653][ T4493] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.989007][ T3557] loop2: p1 < > p4 [ 71.004121][ T3557] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.198297][ T4516] device syzkaller0 entered promiscuous mode [ 71.213469][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222464][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.288405][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.368331][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 72.398687][ T4544] loop1: detected capacity change from 0 to 512 [ 72.467788][ T4544] EXT4-fs (loop1): 1 truncate cleaned up [ 72.509309][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 72.533543][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.607028][ T4550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 72.628971][ T4544] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 72.654590][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.685830][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.694192][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.708284][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.875520][ T4550] syz.3.107 (4550) used greatest stack depth: 21008 bytes left [ 73.006370][ T4565] loop1: detected capacity change from 0 to 512 [ 73.023533][ T4559] fido_id[4559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.121229][ T4565] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.112: casefold flag without casefold feature [ 73.287311][ T4565] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.112: couldn't read orphan inode 15 (err -117) [ 73.316731][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 74.176607][ T4588] loop0: detected capacity change from 0 to 512 [ 74.207579][ T4590] loop2: detected capacity change from 0 to 128 [ 74.295759][ T4590] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 74.326250][ T4588] EXT4-fs (loop0): 1 truncate cleaned up [ 74.334603][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 74.362688][ T4593] loop4: detected capacity change from 0 to 128 [ 74.394063][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop2 [ 74.423336][ T4593] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 74.503086][ T4175] udevd[4175]: incorrect ext4 checksum on /dev/loop4 [ 75.126224][ T4595] Zero length message leads to an empty skb [ 75.523132][ T4604] loop0: detected capacity change from 0 to 1024 [ 75.541399][ T4604] ======================================================= [ 75.541399][ T4604] WARNING: The mand mount option has been deprecated and [ 75.541399][ T4604] and is ignored by this kernel. Remove the mand [ 75.541399][ T4604] option from the mount to silence this warning. [ 75.541399][ T4604] ======================================================= [ 75.794795][ T4604] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.126: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.829669][ T4606] device wireguard0 entered promiscuous mode [ 75.847432][ T4604] Quota error (device loop0): write_blk: dquota write failed [ 75.873107][ T4604] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.949642][ T4604] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.126: Failed to acquire dquot type 0 [ 76.058457][ T4604] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.126: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.085864][ T4604] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.126: Invalid inode bitmap blk 0 in block_group 0 [ 76.100315][ T4353] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.106254][ T4604] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 76.427812][ T4604] EXT4-fs (loop0): 1 orphan inode deleted [ 76.531424][ T4353] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 76.576682][ T4604] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 76.749311][ T4353] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:11: Failed to release dquot type 0 [ 77.929397][ C0] sched: RT throttling activated [ 78.151296][ T4625] loop1: detected capacity change from 0 to 512 [ 78.901448][ T4631] loop3: detected capacity change from 0 to 256 [ 78.921147][ T4625] EXT4-fs (loop1): 1 truncate cleaned up [ 78.926933][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 79.677655][ T4644] loop3: detected capacity change from 0 to 512 [ 79.741173][ T4644] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.141: casefold flag without casefold feature [ 79.909848][ T4644] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 79.925510][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 80.659678][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 80.974605][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.030275][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.090442][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.121439][ T4663] device bridge_slave_0 left promiscuous mode [ 81.165957][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.181865][ T4668] loop2: detected capacity change from 0 to 128 [ 81.228964][ T4663] device bridge_slave_1 left promiscuous mode [ 81.305905][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.344482][ T4670] loop3: detected capacity change from 0 to 512 [ 81.475109][ T23] cfg80211: failed to load regulatory.db [ 81.766902][ T4670] EXT4-fs (loop3): 1 truncate cleaned up [ 81.863494][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 82.017904][ T4673] ODEBUG: Out of memory. ODEBUG disabled [ 82.142816][ T4663] bond0: (slave bond_slave_0): Releasing backup interface [ 82.520058][ T4663] bond0: (slave bond_slave_1): Releasing backup interface [ 82.640730][ T4675] FAULT_INJECTION: forcing a failure. [ 82.640730][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 82.739465][ T4675] CPU: 0 PID: 4675 Comm: syz.1.152 Not tainted syzkaller #0 [ 82.746784][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.756846][ T4675] Call Trace: [ 82.758258][ T4663] team0: Port device team_slave_0 removed [ 82.760128][ T4675] [ 82.760137][ T4675] dump_stack_lvl+0x188/0x250 [ 82.760165][ T4675] ? show_regs_print_info+0x20/0x20 [ 82.760186][ T4675] ? load_image+0x410/0x410 [ 82.783160][ T4675] ? __might_sleep+0xf0/0xf0 [ 82.787761][ T4675] ? __lock_acquire+0x7b50/0x7b50 [ 82.792795][ T4675] should_fail+0x383/0x4b0 [ 82.797220][ T4675] should_failslab+0x5/0x20 [ 82.801727][ T4675] slab_pre_alloc_hook+0x51/0xc0 [ 82.806669][ T4675] kmem_cache_alloc_trace+0x47/0x290 [ 82.811964][ T4675] ? sg_read+0x5fe/0x1420 [ 82.816315][ T4675] sg_read+0x5fe/0x1420 [ 82.820488][ T4675] ? sg_remove_device+0x410/0x410 [ 82.825526][ T4675] ? common_file_perm+0x171/0x1c0 [ 82.830560][ T4675] ? fsnotify_perm+0x3a7/0x560 [ 82.835327][ T4675] ? sg_remove_device+0x410/0x410 [ 82.840359][ T4675] vfs_read+0x2ff/0xd50 [ 82.844522][ T4675] ? __lock_acquire+0x7b50/0x7b50 [ 82.849558][ T4675] ? kernel_read+0x1e0/0x1e0 [ 82.854158][ T4675] ? __fget_files+0x402/0x470 [ 82.858839][ T4675] ? __fdget_pos+0x1e2/0x370 [ 82.863420][ T4675] ? ksys_read+0x70/0x260 [ 82.867739][ T4675] ksys_read+0x153/0x260 [ 82.871990][ T4675] ? vfs_write+0xd70/0xd70 [ 82.876396][ T4675] ? lockdep_hardirqs_on+0x94/0x140 [ 82.881586][ T4675] do_syscall_64+0x4c/0xa0 [ 82.885988][ T4675] ? clear_bhb_loop+0x30/0x80 [ 82.890646][ T4675] ? clear_bhb_loop+0x30/0x80 [ 82.895307][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.901183][ T4675] RIP: 0033:0x7f4183eb3159 [ 82.905584][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.925175][ T4675] RSP: 002b:00007f418210b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.933583][ T4675] RAX: ffffffffffffffda RBX: 00007f418413afa0 RCX: 00007f4183eb3159 [ 82.941556][ T4675] RDX: 00000000fffffeea RSI: 0000200000001400 RDI: 0000000000000005 [ 82.949511][ T4675] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 82.957587][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.965555][ T4675] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 82.973536][ T4675] [ 83.036679][ T4663] team0: Port device team_slave_1 removed [ 83.065499][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.079758][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.120578][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.173771][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.207499][ T4666] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 83.296593][ T4666] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.657611][ T4676] loop1: detected capacity change from 0 to 4096 [ 83.744671][ T4676] EXT4-fs (loop1): Unrecognized mount option "fsuuid=0d1da630-d760-fbb" or missing value [ 84.129637][ T4666] syz.0.147 (4666) used greatest stack depth: 20752 bytes left [ 84.217075][ T4698] loop1: detected capacity change from 0 to 512 [ 84.271922][ T4698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.309178][ T4700] device syzkaller0 entered promiscuous mode [ 84.332459][ T4702] loop0: detected capacity change from 0 to 512 [ 84.358159][ T4700] tipc: Started in network mode [ 84.362232][ T4698] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.383001][ T4700] tipc: Node identity 52fac95b230f, cluster identity 4711 [ 84.413395][ T4702] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.160: casefold flag without casefold feature [ 84.438041][ T4702] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.160: couldn't read orphan inode 15 (err -117) [ 84.442194][ T4700] tipc: Enabled bearer , priority 0 [ 84.457430][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 84.472579][ T4698] EXT4-fs (loop1): 1 truncate cleaned up [ 84.478235][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 84.576976][ T4699] tipc: Resetting bearer [ 84.617251][ T4698] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.158: iget: bad extended attribute block 4 [ 84.738440][ T4699] tipc: Disabling bearer [ 84.805886][ T4698] EXT4-fs (loop1): Remounting filesystem read-only [ 85.285520][ T4713] loop3: detected capacity change from 0 to 128 [ 85.286591][ T4712] loop1: detected capacity change from 0 to 512 [ 85.482278][ T4712] EXT4-fs (loop1): 1 truncate cleaned up [ 85.487987][ T4712] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 86.291678][ T4720] loop0: detected capacity change from 0 to 128 [ 86.418360][ T4720] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 86.458956][ T4175] udevd[4175]: incorrect ext4 checksum on /dev/loop0 [ 87.533726][ T4731] device syzkaller0 entered promiscuous mode [ 87.921118][ T4747] loop0: detected capacity change from 0 to 128 [ 87.980803][ T4751] loop2: detected capacity change from 0 to 128 [ 88.041595][ T4751] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.058642][ T4755] loop1: detected capacity change from 0 to 512 [ 88.106965][ T4753] loop3: detected capacity change from 0 to 128 [ 88.197242][ T4751] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.301628][ T4753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.319840][ T4755] EXT4-fs (loop1): 1 truncate cleaned up [ 88.415838][ T4755] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 88.522137][ T4753] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.947367][ T4353] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.078314][ T4763] loop0: detected capacity change from 0 to 128 [ 90.408955][ T4789] netlink: 'syz.3.186': attribute type 39 has an invalid length. [ 90.695641][ T4804] loop0: detected capacity change from 0 to 512 [ 91.476008][ T4804] EXT4-fs (loop0): 1 truncate cleaned up [ 91.482573][ T4804] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 91.581941][ T4815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'. [ 91.665250][ T4819] loop3: detected capacity change from 0 to 128 [ 91.880513][ T4822] FAULT_INJECTION: forcing a failure. [ 91.880513][ T4822] name failslab, interval 1, probability 0, space 0, times 0 [ 91.895591][ T4822] CPU: 0 PID: 4822 Comm: syz.0.194 Not tainted syzkaller #0 [ 91.902906][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.912972][ T4822] Call Trace: [ 91.916260][ T4822] [ 91.919204][ T4822] dump_stack_lvl+0x188/0x250 [ 91.923899][ T4822] ? show_regs_print_info+0x20/0x20 [ 91.929116][ T4822] ? load_image+0x410/0x410 [ 91.933644][ T4822] ? __might_sleep+0xf0/0xf0 [ 91.938246][ T4822] ? __lock_acquire+0x7b50/0x7b50 [ 91.943298][ T4822] should_fail+0x383/0x4b0 [ 91.947741][ T4822] should_failslab+0x5/0x20 [ 91.952260][ T4822] slab_pre_alloc_hook+0x51/0xc0 [ 91.957217][ T4822] ? ptlock_alloc+0x1c/0x60 [ 91.961735][ T4822] kmem_cache_alloc+0x3d/0x280 [ 91.966516][ T4822] ptlock_alloc+0x1c/0x60 [ 91.970858][ T4822] pte_alloc_one+0xc0/0x310 [ 91.975366][ T4822] ? rcu_lock_release+0x20/0x20 [ 91.980230][ T4822] ? mark_lock+0x94/0x320 [ 91.984578][ T4822] handle_mm_fault+0x2553/0x4440 [ 91.989538][ T4822] ? get_page+0xe0/0xe0 [ 91.993709][ T4822] ? follow_page_mask+0x5cb/0x12b0 [ 91.998830][ T4822] ? check_vma_flags+0x3e3/0x470 [ 92.003793][ T4822] __get_user_pages+0x952/0x11e0 [ 92.008759][ T4822] ? populate_vma_page_range+0x290/0x290 [ 92.014438][ T4822] ? read_lock_is_recursive+0x10/0x10 [ 92.019834][ T4822] populate_vma_page_range+0x213/0x290 [ 92.025480][ T4822] __mm_populate+0x275/0x3b0 [ 92.030082][ T4822] ? check_vma_flags+0x470/0x470 [ 92.035031][ T4822] ? up_write+0x1b6/0x410 [ 92.039387][ T4822] vm_mmap_pgoff+0x212/0x2d0 [ 92.043987][ T4822] ? account_locked_vm+0xe0/0xe0 [ 92.048924][ T4822] ? __context_tracking_exit+0x4c/0x80 [ 92.054389][ T4822] ? __lock_acquire+0x7b50/0x7b50 [ 92.059424][ T4822] ksys_mmap_pgoff+0x140/0x790 [ 92.064204][ T4822] ? mmap_region+0x1730/0x1730 [ 92.068973][ T4822] ? lockdep_hardirqs_on+0x94/0x140 [ 92.074178][ T4822] do_syscall_64+0x4c/0xa0 [ 92.078596][ T4822] ? clear_bhb_loop+0x30/0x80 [ 92.083278][ T4822] ? clear_bhb_loop+0x30/0x80 [ 92.087977][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.093875][ T4822] RIP: 0033:0x7f9127c6a159 [ 92.098301][ T4822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.117914][ T4822] RSP: 002b:00007f9125ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 92.126339][ T4822] RAX: ffffffffffffffda RBX: 00007f9127ef1fa0 RCX: 00007f9127c6a159 [ 92.134319][ T4822] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 92.142305][ T4822] RBP: 00007f9127d01024 R08: ffffffffffffffff R09: 000000006f6a0000 [ 92.150285][ T4822] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 92.158276][ T4822] R13: 00007f9127ef2038 R14: 00007f9127ef1fa0 R15: 00007ffc84742d88 [ 92.166280][ T4822] [ 92.254699][ T4834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.285083][ T4834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.415943][ T4835] chnl_net:caif_netlink_parms(): no params data found [ 92.436867][ T4842] loop0: detected capacity change from 0 to 512 [ 92.518863][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.552050][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.586535][ T4842] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 92.605435][ T4842] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.202: corrupted inode contents [ 92.628133][ T4835] device bridge_slave_0 entered promiscuous mode [ 92.628460][ T4842] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #11: comm syz.0.202: mark_inode_dirty error [ 92.670997][ T4851] loop1: detected capacity change from 0 to 128 [ 92.690882][ T4849] FAULT_INJECTION: forcing a failure. [ 92.690882][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 92.699771][ T4842] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.202: invalid indirect mapped block 1 (level 1) [ 92.704301][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.721043][ T4851] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 92.767141][ T4842] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.202: corrupted inode contents [ 92.790852][ T4849] CPU: 1 PID: 4849 Comm: syz.3.204 Not tainted syzkaller #0 [ 92.798176][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.808348][ T4849] Call Trace: [ 92.811635][ T4849] [ 92.814567][ T4849] dump_stack_lvl+0x188/0x250 [ 92.819249][ T4849] ? blk_rq_map_user+0x14c/0x1e0 [ 92.824174][ T4849] ? sg_write+0xac0/0xe90 [ 92.828496][ T4849] ? show_regs_print_info+0x20/0x20 [ 92.833687][ T4849] ? load_image+0x410/0x410 [ 92.838207][ T4849] should_fail+0x383/0x4b0 [ 92.842618][ T4849] should_failslab+0x5/0x20 [ 92.847114][ T4849] slab_pre_alloc_hook+0x51/0xc0 [ 92.852045][ T4849] __kmalloc+0x6b/0x340 [ 92.856192][ T4849] ? bio_kmalloc+0x47/0x1e0 [ 92.860691][ T4849] bio_kmalloc+0x47/0x1e0 [ 92.865009][ T4849] blk_rq_map_user_iov+0xe02/0x1b70 [ 92.870207][ T4849] ? blk_rq_append_bio+0x550/0x550 [ 92.875312][ T4849] ? memset+0x1e/0x40 [ 92.879285][ T4849] ? import_single_range+0x1aa/0x2a0 [ 92.884558][ T4849] blk_rq_map_user+0x14c/0x1e0 [ 92.889312][ T4849] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 92.894404][ T4849] ? mutex_unlock+0x10/0x10 [ 92.898902][ T4849] sg_common_write+0x109f/0x1c10 [ 92.903843][ T4849] ? sg_add_request+0x690/0x690 [ 92.908684][ T4849] ? __lock_acquire+0x7b50/0x7b50 [ 92.913696][ T4849] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 92.919663][ T4849] ? mutex_unlock+0x10/0x10 [ 92.924155][ T4849] ? __lock_acquire+0x7b50/0x7b50 [ 92.929173][ T4849] ? __might_fault+0xb3/0x110 [ 92.933835][ T4849] ? _copy_from_user+0x111/0x170 [ 92.938758][ T4849] sg_write+0xac0/0xe90 [ 92.942913][ T4849] ? __lock_acquire+0x7b50/0x7b50 [ 92.947979][ T4849] ? sg_read+0x1420/0x1420 [ 92.952394][ T4849] ? aa_file_perm+0x38b/0xe80 [ 92.957075][ T4849] ? end_current_label_crit_section+0x14b/0x170 [ 92.963315][ T4849] ? common_file_perm+0x171/0x1c0 [ 92.968327][ T4849] ? fsnotify_perm+0x5d/0x560 [ 92.972991][ T4849] ? security_file_permission+0x75/0xa0 [ 92.978528][ T4849] do_iter_write+0x3c3/0x7a0 [ 92.983119][ T4849] do_writev+0x281/0x480 [ 92.987354][ T4849] ? do_readv+0x460/0x460 [ 92.991680][ T4849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.997653][ T4849] ? lock_chain_count+0x20/0x20 [ 93.002497][ T4849] ? lockdep_hardirqs_on+0x94/0x140 [ 93.007725][ T4849] do_syscall_64+0x4c/0xa0 [ 93.012158][ T4849] ? clear_bhb_loop+0x30/0x80 [ 93.016825][ T4849] ? clear_bhb_loop+0x30/0x80 [ 93.021493][ T4849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.027382][ T4849] RIP: 0033:0x7f3d77306159 [ 93.031815][ T4849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.051414][ T4849] RSP: 002b:00007f3d7555e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 93.059836][ T4849] RAX: ffffffffffffffda RBX: 00007f3d7758dfa0 RCX: 00007f3d77306159 [ 93.067986][ T4849] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 93.075947][ T4849] RBP: 00007f3d7739d024 R08: 0000000000000000 R09: 0000000000000000 [ 93.083907][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.091861][ T4849] R13: 00007f3d7758e038 R14: 00007f3d7758dfa0 R15: 00007ffe98e3ebc8 [ 93.099830][ T4849] [ 93.113857][ T4842] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 93.128379][ T4842] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.202: corrupted inode contents [ 93.147803][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.156226][ T4835] device bridge_slave_1 entered promiscuous mode [ 93.161624][ T4852] loop3: detected capacity change from 0 to 4096 [ 93.183885][ T4842] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.202: mark_inode_dirty error [ 93.251277][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.298567][ T4842] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 93.393052][ T4842] EXT4-fs (loop0): 1 truncate cleaned up [ 93.394285][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.405321][ T4842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.420839][ T4852] EXT4-fs (loop3): Unrecognized mount option "fsuuid=0d1da630-d760-fbb" or missing value [ 93.897558][ T4835] team0: Port device team_slave_0 added [ 93.916903][ T4835] team0: Port device team_slave_1 added [ 94.007934][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.077104][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.107252][ T4835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.146065][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.188413][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.249824][ T4835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.312589][ T4835] device hsr_slave_0 entered promiscuous mode [ 94.327342][ T4835] device hsr_slave_1 entered promiscuous mode [ 94.357149][ T4835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.377120][ T4855] loop2: detected capacity change from 0 to 2048 [ 94.386899][ T4835] Cannot create hsr debugfs directory [ 94.415567][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 94.587847][ T4872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.326992][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 95.392829][ T4835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.450406][ T4835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.486081][ T4835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.520803][ T4883] device macsec0 entered promiscuous mode [ 95.543067][ T4883] device macsec1 entered promiscuous mode [ 95.623528][ T4835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.734411][ T4890] loop8: detected capacity change from 0 to 16384 [ 95.850067][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.906883][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.929851][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.958661][ T4835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.965624][ T4891] loop_set_status: loop8 () has still dirty pages (nrpages=353) [ 95.974823][ T4894] FAULT_INJECTION: forcing a failure. [ 95.974823][ T4894] name failslab, interval 1, probability 0, space 0, times 0 [ 95.995389][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.028807][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.048578][ T4894] CPU: 0 PID: 4894 Comm: syz.3.216 Not tainted syzkaller #0 [ 96.055902][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.065977][ T4894] Call Trace: [ 96.069276][ T4894] [ 96.072303][ T4894] dump_stack_lvl+0x188/0x250 [ 96.076999][ T4894] ? show_regs_print_info+0x20/0x20 [ 96.082224][ T4894] ? load_image+0x410/0x410 [ 96.086751][ T4894] ? prep_compound_page+0x3d5/0x500 [ 96.091974][ T4894] should_fail+0x383/0x4b0 [ 96.096410][ T4894] should_failslab+0x5/0x20 [ 96.101012][ T4894] slab_pre_alloc_hook+0x51/0xc0 [ 96.105972][ T4894] __kmalloc+0x6b/0x340 [ 96.110133][ T4894] ? blk_rq_map_user_iov+0xceb/0x1b70 [ 96.115519][ T4894] blk_rq_map_user_iov+0xceb/0x1b70 [ 96.120735][ T4894] ? sg_write+0xac0/0xe90 [ 96.125084][ T4894] ? blk_rq_append_bio+0x550/0x550 [ 96.130219][ T4894] ? memset+0x1e/0x40 [ 96.134220][ T4894] ? import_single_range+0x1aa/0x2a0 [ 96.139529][ T4894] blk_rq_map_user+0x14c/0x1e0 [ 96.144308][ T4894] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 96.149426][ T4894] ? mutex_unlock+0x10/0x10 [ 96.153952][ T4894] sg_common_write+0x109f/0x1c10 [ 96.158910][ T4894] ? sg_add_request+0x690/0x690 [ 96.163771][ T4894] ? __lock_acquire+0x7b50/0x7b50 [ 96.168805][ T4894] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 96.174794][ T4894] ? mutex_unlock+0x10/0x10 [ 96.179312][ T4894] ? __lock_acquire+0x7b50/0x7b50 [ 96.184347][ T4894] ? __might_fault+0xb3/0x110 [ 96.189036][ T4894] ? _copy_from_user+0x111/0x170 [ 96.193995][ T4894] sg_write+0xac0/0xe90 [ 96.198166][ T4894] ? __lock_acquire+0x7b50/0x7b50 [ 96.203207][ T4894] ? sg_read+0x1420/0x1420 [ 96.207634][ T4894] ? aa_file_perm+0x38b/0xe80 [ 96.212338][ T4894] ? end_current_label_crit_section+0x14b/0x170 [ 96.218588][ T4894] ? common_file_perm+0x171/0x1c0 [ 96.223626][ T4894] ? fsnotify_perm+0x5d/0x560 [ 96.228310][ T4894] ? security_file_permission+0x75/0xa0 [ 96.233862][ T4894] do_iter_write+0x3c3/0x7a0 [ 96.238473][ T4894] do_writev+0x281/0x480 [ 96.242735][ T4894] ? do_readv+0x460/0x460 [ 96.247088][ T4894] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.253084][ T4894] ? lock_chain_count+0x20/0x20 [ 96.257950][ T4894] ? lockdep_hardirqs_on+0x94/0x140 [ 96.263165][ T4894] do_syscall_64+0x4c/0xa0 [ 96.267591][ T4894] ? clear_bhb_loop+0x30/0x80 [ 96.272328][ T4894] ? clear_bhb_loop+0x30/0x80 [ 96.277017][ T4894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.282921][ T4894] RIP: 0033:0x7f3d77306159 [ 96.287344][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.306952][ T4894] RSP: 002b:00007f3d7555e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 96.315373][ T4894] RAX: ffffffffffffffda RBX: 00007f3d7758dfa0 RCX: 00007f3d77306159 [ 96.323359][ T4894] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 96.331341][ T4894] RBP: 00007f3d7739d024 R08: 0000000000000000 R09: 0000000000000000 [ 96.339326][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.347310][ T4894] R13: 00007f3d7758e038 R14: 00007f3d7758dfa0 R15: 00007ffe98e3ebc8 [ 96.355316][ T4894] [ 96.366088][ T4897] loop0: detected capacity change from 0 to 128 [ 96.379081][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.386217][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.406985][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.446508][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.486199][ T4897] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 96.498249][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop0 [ 96.503040][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.505272][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 96.556383][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.563529][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.583428][ T4895] loop3: detected capacity change from 0 to 4096 [ 96.713423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.741630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.049651][ T4895] EXT4-fs (loop3): Unrecognized mount option "fsuuid=0d1da630-d760-fbb" or missing value [ 97.194233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.255364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.304759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.320023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.328713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.338631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.419942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.479622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.505091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.526531][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.706846][ T4913] loop0: detected capacity change from 0 to 128 [ 97.867357][ T4918] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 97.874676][ T4918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.981449][ T4918] vhci_hcd vhci_hcd.0: Device attached [ 98.037059][ T4919] vhci_hcd: connection closed [ 98.039973][ T4326] vhci_hcd: stop threads [ 98.110015][ T4326] vhci_hcd: release socket [ 98.115124][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.134399][ T4326] vhci_hcd: disconnect device [ 98.148955][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.199910][ T4195] vhci_hcd: vhci_device speed not set [ 98.569774][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 98.742696][ T4835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.916806][ T4942] mip6: mip6_rthdr_init_state: spi is not 0: 33554432 [ 98.921443][ T4939] FAULT_INJECTION: forcing a failure. [ 98.921443][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 98.985782][ T4939] CPU: 0 PID: 4939 Comm: syz.3.228 Not tainted syzkaller #0 [ 98.993116][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.003180][ T4939] Call Trace: [ 99.006464][ T4939] [ 99.009400][ T4939] dump_stack_lvl+0x188/0x250 [ 99.014094][ T4939] ? show_regs_print_info+0x20/0x20 [ 99.019311][ T4939] ? load_image+0x410/0x410 [ 99.023832][ T4939] ? prep_compound_page+0x3d5/0x500 [ 99.029063][ T4939] should_fail+0x383/0x4b0 [ 99.033506][ T4939] should_failslab+0x5/0x20 [ 99.038017][ T4939] slab_pre_alloc_hook+0x51/0xc0 [ 99.042963][ T4939] __kmalloc+0x6b/0x340 [ 99.047239][ T4939] ? blk_rq_map_user_iov+0xceb/0x1b70 [ 99.052742][ T4939] blk_rq_map_user_iov+0xceb/0x1b70 [ 99.057965][ T4939] ? sg_write+0xac0/0xe90 [ 99.062449][ T4939] ? blk_rq_append_bio+0x550/0x550 [ 99.067597][ T4939] ? memset+0x1e/0x40 [ 99.071600][ T4939] ? import_single_range+0x1aa/0x2a0 [ 99.076902][ T4939] blk_rq_map_user+0x14c/0x1e0 [ 99.081686][ T4939] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 99.086789][ T4939] ? mutex_unlock+0x10/0x10 [ 99.091310][ T4939] sg_common_write+0x109f/0x1c10 [ 99.096302][ T4939] ? sg_add_request+0x690/0x690 [ 99.101171][ T4939] ? __lock_acquire+0x7b50/0x7b50 [ 99.106204][ T4939] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 99.112203][ T4939] ? mutex_unlock+0x10/0x10 [ 99.116728][ T4939] ? __lock_acquire+0x7b50/0x7b50 [ 99.121768][ T4939] ? __might_fault+0xb3/0x110 [ 99.126434][ T4939] ? _copy_from_user+0x111/0x170 [ 99.131380][ T4939] sg_write+0xac0/0xe90 [ 99.135530][ T4939] ? __lock_acquire+0x7b50/0x7b50 [ 99.140555][ T4939] ? sg_read+0x1420/0x1420 [ 99.145136][ T4939] ? aa_file_perm+0x38b/0xe80 [ 99.149896][ T4939] ? end_current_label_crit_section+0x14b/0x170 [ 99.156160][ T4939] ? common_file_perm+0x171/0x1c0 [ 99.161278][ T4939] ? fsnotify_perm+0x5d/0x560 [ 99.165964][ T4939] ? security_file_permission+0x75/0xa0 [ 99.171514][ T4939] do_iter_write+0x3c3/0x7a0 [ 99.176122][ T4939] do_writev+0x281/0x480 [ 99.180369][ T4939] ? do_readv+0x460/0x460 [ 99.184714][ T4939] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.190707][ T4939] ? lock_chain_count+0x20/0x20 [ 99.195585][ T4939] ? lockdep_hardirqs_on+0x94/0x140 [ 99.200800][ T4939] do_syscall_64+0x4c/0xa0 [ 99.205236][ T4939] ? clear_bhb_loop+0x30/0x80 [ 99.209923][ T4939] ? clear_bhb_loop+0x30/0x80 [ 99.214613][ T4939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.220561][ T4939] RIP: 0033:0x7f3d77306159 [ 99.225161][ T4939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.244769][ T4939] RSP: 002b:00007f3d7555e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 99.245660][ T4943] bonding: unable to delete non-existent bo [ 99.253296][ T4939] RAX: ffffffffffffffda RBX: 00007f3d7758dfa0 RCX: 00007f3d77306159 [ 99.253316][ T4939] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 99.253326][ T4939] RBP: 00007f3d7739d024 R08: 0000000000000000 R09: 0000000000000000 [ 99.253337][ T4939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.253355][ T4939] R13: 00007f3d7758e038 R14: 00007f3d7758dfa0 R15: 00007ffe98e3ebc8 [ 99.253380][ T4939] [ 99.386241][ T4949] device syzkaller0 entered promiscuous mode [ 99.720261][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.734023][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.753759][ T4966] loop1: detected capacity change from 0 to 512 [ 99.756211][ T4968] loop3: detected capacity change from 0 to 128 [ 99.828110][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.861095][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.904571][ T4835] device veth0_vlan entered promiscuous mode [ 99.921876][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.039008][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.154059][ T4835] device veth1_vlan entered promiscuous mode [ 100.514272][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.637732][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.688445][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.757961][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.769526][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 100.863208][ T4835] device veth0_macvtap entered promiscuous mode [ 100.883495][ T4982] device veth0 entered promiscuous mode [ 100.889248][ T4982] device veth0 left promiscuous mode [ 101.052152][ T4835] device veth1_macvtap entered promiscuous mode [ 101.168257][ T4997] loop3: detected capacity change from 0 to 512 [ 101.583764][ T4997] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 101.598388][ T4997] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.241: corrupted inode contents [ 101.614377][ T4997] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #11: comm syz.3.241: mark_inode_dirty error [ 101.629011][ T4997] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.241: invalid indirect mapped block 1 (level 1) [ 101.644622][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.659974][ T4997] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.241: corrupted inode contents [ 101.676805][ T4997] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 101.685773][ T4997] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.241: corrupted inode contents [ 101.698214][ T4997] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.241: mark_inode_dirty error [ 101.716587][ T5005] loop2: detected capacity change from 0 to 164 [ 101.721218][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.723073][ T4997] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 101.744099][ T4997] EXT4-fs (loop3): 1 truncate cleaned up [ 101.750257][ T4997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.816523][ T4992] infiniband syz0: set active [ 101.822704][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.823340][ T4992] infiniband syz0: added veth0_vlan [ 101.855695][ T4992] infiniband syz0: Couldn't open port 1 [ 101.863317][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.944137][ T5010] FAULT_INJECTION: forcing a failure. [ 101.944137][ T5010] name failslab, interval 1, probability 0, space 0, times 0 [ 101.967795][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.004257][ T5010] CPU: 1 PID: 5010 Comm: syz.1.246 Not tainted syzkaller #0 [ 102.007754][ T4992] RDS/IB: syz0: added [ 102.011575][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.011588][ T5010] Call Trace: [ 102.011595][ T5010] [ 102.011601][ T5010] dump_stack_lvl+0x188/0x250 [ 102.011631][ T5010] ? show_regs_print_info+0x20/0x20 [ 102.011651][ T5010] ? load_image+0x410/0x410 [ 102.011673][ T5010] ? __might_sleep+0xf0/0xf0 [ 102.011690][ T5010] ? __lock_acquire+0x7b50/0x7b50 [ 102.011710][ T5010] ? lockdep_init_map_type+0x98/0x900 [ 102.018125][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.025730][ T5010] should_fail+0x383/0x4b0 [ 102.025759][ T5010] should_failslab+0x5/0x20 [ 102.025775][ T5010] slab_pre_alloc_hook+0x51/0xc0 [ 102.025792][ T5010] ? security_inode_alloc+0x30/0x110 [ 102.025809][ T5010] kmem_cache_alloc+0x3d/0x280 [ 102.025829][ T5010] security_inode_alloc+0x30/0x110 [ 102.025854][ T5010] inode_init_always+0x8e5/0xc90 [ 102.025877][ T5010] new_inode_pseudo+0x8e/0x210 [ 102.025897][ T5010] do_accept+0x196/0x6f0 [ 102.032194][ T4992] smc: adding ib device syz0 with port count 1 [ 102.036764][ T5010] ? alloc_fd+0x59e/0x650 [ 102.066396][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.071746][ T5010] ? __ia32_sys_listen+0x60/0x60 [ 102.071781][ T5010] ? alloc_fd+0x59e/0x650 [ 102.071804][ T5010] __sys_accept4+0x103/0x170 [ 102.071824][ T5010] __x64_sys_accept4+0x96/0xb0 [ 102.071840][ T5010] do_syscall_64+0x4c/0xa0 [ 102.071858][ T5010] ? clear_bhb_loop+0x30/0x80 [ 102.078726][ T4992] smc: ib device syz0 port 1 has pnetid [ 102.080754][ T5010] ? clear_bhb_loop+0x30/0x80 [ 102.080780][ T5010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.080798][ T5010] RIP: 0033:0x7f4183eb3159 [ 102.080813][ T5010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.080826][ T5010] RSP: 002b:00007f41820ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 102.080845][ T5010] RAX: ffffffffffffffda RBX: 00007f418413b090 RCX: 00007f4183eb3159 [ 102.080859][ T5010] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 102.080870][ T5010] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 102.080881][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.080891][ T5010] R13: 00007f418413b128 R14: 00007f418413b090 R15: 00007fff5730e368 [ 102.080916][ T5010] [ 102.129416][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.385068][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.450535][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.475098][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.554305][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.593900][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.633205][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.663438][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.739876][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.768324][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.779726][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.789776][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.800757][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.812645][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.832209][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.842994][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.885044][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 102.887217][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.912079][ T5030] device bridge_slave_0 left promiscuous mode [ 102.918357][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.943302][ T5030] device bridge_slave_1 left promiscuous mode [ 102.945784][ T5037] loop2: detected capacity change from 0 to 128 [ 102.957432][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.005903][ T5030] bond0: (slave bond_slave_0): Releasing backup interface [ 103.028289][ T5030] bond0: (slave bond_slave_1): Releasing backup interface [ 103.115215][ T5030] team0: Port device team_slave_0 removed [ 103.145917][ T5030] team0: Port device team_slave_1 removed [ 103.155054][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.162567][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.175132][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.183438][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.459948][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.548877][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.828330][ T4835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.847598][ T4835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.866200][ T4835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.882469][ T4835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.046203][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.078416][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.124554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.215480][ T5044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.274081][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.293259][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.336820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.421356][ T5044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.454190][ T5055] FAULT_INJECTION: forcing a failure. [ 104.454190][ T5055] name failslab, interval 1, probability 0, space 0, times 0 [ 104.506500][ T5057] loop5: detected capacity change from 0 to 512 [ 104.524514][ T5044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.537583][ T5055] CPU: 0 PID: 5055 Comm: syz.2.257 Not tainted syzkaller #0 [ 104.544892][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.554957][ T5055] Call Trace: [ 104.558261][ T5055] [ 104.561195][ T5055] dump_stack_lvl+0x188/0x250 [ 104.565887][ T5055] ? blk_rq_map_user+0x14c/0x1e0 [ 104.570833][ T5055] ? sg_write+0xac0/0xe90 [ 104.575175][ T5055] ? show_regs_print_info+0x20/0x20 [ 104.580387][ T5055] ? load_image+0x410/0x410 [ 104.584915][ T5055] should_fail+0x383/0x4b0 [ 104.589345][ T5055] should_failslab+0x5/0x20 [ 104.593852][ T5055] slab_pre_alloc_hook+0x51/0xc0 [ 104.598803][ T5055] __kmalloc+0x6b/0x340 [ 104.603136][ T5055] ? bio_kmalloc+0x47/0x1e0 [ 104.607648][ T5055] bio_kmalloc+0x47/0x1e0 [ 104.611968][ T5055] blk_rq_map_user_iov+0xe02/0x1b70 [ 104.617160][ T5055] ? blk_rq_append_bio+0x550/0x550 [ 104.622263][ T5055] ? memset+0x1e/0x40 [ 104.626233][ T5055] ? import_single_range+0x1aa/0x2a0 [ 104.631506][ T5055] blk_rq_map_user+0x14c/0x1e0 [ 104.636260][ T5055] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 104.641363][ T5055] ? mutex_unlock+0x10/0x10 [ 104.645886][ T5055] sg_common_write+0x109f/0x1c10 [ 104.650839][ T5055] ? sg_add_request+0x690/0x690 [ 104.655717][ T5055] ? __lock_acquire+0x7b50/0x7b50 [ 104.660757][ T5055] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 104.666741][ T5055] ? mutex_unlock+0x10/0x10 [ 104.671257][ T5055] ? __lock_acquire+0x7b50/0x7b50 [ 104.676291][ T5055] ? __might_fault+0xb3/0x110 [ 104.680964][ T5055] ? _copy_from_user+0x111/0x170 [ 104.685973][ T5055] sg_write+0xac0/0xe90 [ 104.690115][ T5055] ? __lock_acquire+0x7b50/0x7b50 [ 104.695149][ T5055] ? sg_read+0x1420/0x1420 [ 104.701982][ T5055] ? aa_file_perm+0x38b/0xe80 [ 104.707432][ T5055] ? end_current_label_crit_section+0x14b/0x170 [ 104.713696][ T5055] ? common_file_perm+0x171/0x1c0 [ 104.718708][ T5055] ? fsnotify_perm+0x5d/0x560 [ 104.723488][ T5055] ? security_file_permission+0x75/0xa0 [ 104.729047][ T5055] do_iter_write+0x3c3/0x7a0 [ 104.733632][ T5055] do_writev+0x281/0x480 [ 104.737878][ T5055] ? do_readv+0x460/0x460 [ 104.742211][ T5055] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.748199][ T5055] ? lock_chain_count+0x20/0x20 [ 104.753053][ T5055] ? lockdep_hardirqs_on+0x94/0x140 [ 104.758252][ T5055] do_syscall_64+0x4c/0xa0 [ 104.762714][ T5055] ? clear_bhb_loop+0x30/0x80 [ 104.767546][ T5055] ? clear_bhb_loop+0x30/0x80 [ 104.772226][ T5055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.778129][ T5055] RIP: 0033:0x7f7f1fe29159 [ 104.782532][ T5055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.802123][ T5055] RSP: 002b:00007f7f1e060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 104.810527][ T5055] RAX: ffffffffffffffda RBX: 00007f7f200b1090 RCX: 00007f7f1fe29159 [ 104.818578][ T5055] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 104.826538][ T5055] RBP: 00007f7f1fec0024 R08: 0000000000000000 R09: 0000000000000000 [ 104.834499][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.842467][ T5055] R13: 00007f7f200b1128 R14: 00007f7f200b1090 R15: 00007fff09a17e48 [ 104.850460][ T5055] [ 104.905767][ T5044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.987710][ T5057] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.031965][ T5057] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.098368][ T5044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.144466][ T5044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.189136][ T5044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.238362][ T5044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.382144][ T5066] FAULT_INJECTION: forcing a failure. [ 105.382144][ T5066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.397885][ T5071] loop0: detected capacity change from 0 to 128 [ 105.444874][ T5066] CPU: 0 PID: 5066 Comm: syz.1.260 Not tainted syzkaller #0 [ 105.452195][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.462694][ T5066] Call Trace: [ 105.465974][ T5066] [ 105.468901][ T5066] dump_stack_lvl+0x188/0x250 [ 105.473600][ T5066] ? show_regs_print_info+0x20/0x20 [ 105.478804][ T5066] ? load_image+0x410/0x410 [ 105.483427][ T5066] ? __lock_acquire+0x7b50/0x7b50 [ 105.488463][ T5066] ? __lock_acquire+0x1305/0x7b50 [ 105.493503][ T5066] should_fail+0x383/0x4b0 [ 105.497945][ T5066] prepare_alloc_pages+0x1e3/0x5b0 [ 105.503076][ T5066] __alloc_pages+0x11b/0x480 [ 105.507680][ T5066] ? zone_statistics+0x170/0x170 [ 105.512630][ T5066] ? count_memcg_event_mm+0x324/0x370 [ 105.518121][ T5066] ? remove_device_exclusive_entry+0xac0/0xac0 [ 105.524283][ T5066] alloc_pages_vma+0x2bc/0x790 [ 105.529059][ T5066] handle_mm_fault+0x23be/0x4440 [ 105.534016][ T5066] ? get_page+0xe0/0xe0 [ 105.538278][ T5066] ? vmacache_find+0x238/0x590 [ 105.543064][ T5066] ? find_vma+0xd2/0x230 [ 105.547317][ T5066] do_user_addr_fault+0x494/0xc90 [ 105.552366][ T5066] exc_page_fault+0x60/0x100 [ 105.556968][ T5066] ? clear_bhb_loop+0x30/0x80 [ 105.561665][ T5066] asm_exc_page_fault+0x22/0x30 [ 105.566524][ T5066] RIP: 0033:0x7f4183d746cb [ 105.570946][ T5066] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 105.590554][ T5066] RSP: 002b:00007f4182109fa0 EFLAGS: 00010206 [ 105.596632][ T5066] RAX: 0000000000000000 RBX: 00007f418413afa0 RCX: 0000000000000000 [ 105.604614][ T5066] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 105.612598][ T5066] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 105.620582][ T5066] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000000 [ 105.628565][ T5066] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 105.636561][ T5066] [ 106.516772][ T5066] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.983275][ T5063] loop5: detected capacity change from 0 to 40427 [ 107.066614][ T5063] F2FS-fs (loop5): invalid crc value [ 107.138136][ T5063] F2FS-fs (loop5): Found nat_bits in checkpoint [ 107.248325][ T5063] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 107.538120][ T4835] attempt to access beyond end of device [ 107.538120][ T4835] loop5: rw=2049, want=45104, limit=40427 [ 107.772911][ T5096] syz.0.264 uses obsolete (PF_INET,SOCK_PACKET) [ 108.279860][ T5114] loop0: detected capacity change from 0 to 128 [ 108.972174][ T5121] loop1: detected capacity change from 0 to 512 [ 109.364996][ T5121] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 109.379676][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.275: corrupted inode contents [ 109.392659][ T5121] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #11: comm syz.1.275: mark_inode_dirty error [ 109.404458][ T5121] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.275: invalid indirect mapped block 1 (level 1) [ 109.417985][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.275: corrupted inode contents [ 109.431599][ T5121] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 109.440597][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.275: corrupted inode contents [ 109.452749][ T5121] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.275: mark_inode_dirty error [ 109.464898][ T5121] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 109.474497][ T5121] EXT4-fs (loop1): 1 truncate cleaned up [ 109.480263][ T5121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.796756][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.804555][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.944607][ T26] audit: type=1326 audit(1788548593.144:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.028095][ T26] audit: type=1326 audit(1788548593.144:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.077535][ T5143] loop5: detected capacity change from 0 to 128 [ 110.095883][ T26] audit: type=1326 audit(1788548593.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.162429][ T26] audit: type=1326 audit(1788548593.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.173780][ T5149] loop1: detected capacity change from 0 to 128 [ 110.186884][ T26] audit: type=1326 audit(1788548593.184:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.218119][ T26] audit: type=1326 audit(1788548593.184:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.243427][ T26] audit: type=1326 audit(1788548593.184:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.271410][ T26] audit: type=1326 audit(1788548593.184:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.287348][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop5 [ 110.297097][ T26] audit: type=1326 audit(1788548593.184:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.327263][ T5143] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 110.337664][ T5149] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 110.358194][ T26] audit: type=1326 audit(1788548593.194:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.5.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3eaca30159 code=0x7ffc0000 [ 110.394275][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop1 [ 111.832073][ T5109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.866637][ T5109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.380339][ T5167] loop5: detected capacity change from 0 to 512 [ 112.593961][ T5167] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 112.609334][ T5167] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.288: corrupted inode contents [ 112.634039][ T5167] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #11: comm syz.5.288: mark_inode_dirty error [ 112.647712][ T5167] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.288: invalid indirect mapped block 1 (level 1) [ 112.663624][ T5167] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.288: corrupted inode contents [ 112.680141][ T5167] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 112.691432][ T5167] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.288: corrupted inode contents [ 112.711951][ T5167] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.288: mark_inode_dirty error [ 112.725194][ T5167] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 112.736858][ T5167] EXT4-fs (loop5): 1 truncate cleaned up [ 112.742647][ T5167] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.949652][ T5109] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.958660][ T5109] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.967983][ T5109] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.977307][ T5109] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.124305][ T5129] tap0: tun_chr_ioctl cmd 2147767521 [ 113.166515][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 113.166667][ T5173] loop2: detected capacity change from 0 to 512 [ 113.214268][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 113.258568][ T5173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.293307][ T5173] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.290: corrupted in-inode xattr [ 113.307733][ T5173] EXT4-fs (loop2): Remounting filesystem read-only [ 113.314801][ T5173] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.290: couldn't read orphan inode 15 (err -117) [ 113.334817][ T5173] EXT4-fs (loop2): Remounting filesystem read-only [ 113.341545][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,errors=remount-ro,inode_readahead_blks=0x0000000000000400,jqfmt=vfsold,bsdgroups,grpjquota=,. Quota mode: none. [ 113.347023][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 113.389695][ T5173] EXT4-fs (loop2): shut down requested (1) [ 114.292624][ T5193] loop2: detected capacity change from 0 to 128 [ 114.325883][ T5194] loop5: detected capacity change from 0 to 128 [ 114.374227][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop2 [ 114.397627][ T5193] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 114.418096][ T5198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.083817][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.309'. [ 116.264794][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.309'. [ 117.076136][ T5196] loop0: detected capacity change from 0 to 40427 [ 117.179685][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.309'. [ 117.199211][ T5196] F2FS-fs (loop0): invalid crc value [ 117.293375][ T5196] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.313820][ T5241] FAULT_INJECTION: forcing a failure. [ 117.313820][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 117.326660][ T5241] CPU: 0 PID: 5241 Comm: syz.1.313 Not tainted syzkaller #0 [ 117.333953][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.344010][ T5241] Call Trace: [ 117.347290][ T5241] [ 117.350268][ T5241] dump_stack_lvl+0x188/0x250 [ 117.354958][ T5241] ? show_regs_print_info+0x20/0x20 [ 117.360157][ T5241] ? load_image+0x410/0x410 [ 117.364668][ T5241] ? verify_lock_unused+0x140/0x140 [ 117.369875][ T5241] ? verify_lock_unused+0x140/0x140 [ 117.375085][ T5241] ? mark_lock+0x94/0x320 [ 117.379412][ T5241] should_fail+0x383/0x4b0 [ 117.383842][ T5241] should_failslab+0x5/0x20 [ 117.388344][ T5241] slab_pre_alloc_hook+0x51/0xc0 [ 117.393286][ T5241] ? mempool_alloc+0x19d/0x510 [ 117.398048][ T5241] kmem_cache_alloc+0x3d/0x280 [ 117.402810][ T5241] ? mempool_free+0x320/0x320 [ 117.407483][ T5241] mempool_alloc+0x19d/0x510 [ 117.412081][ T5241] ? rcu_lock_release+0x5/0x20 [ 117.416849][ T5241] ? mempool_resize+0x860/0x860 [ 117.421712][ T5241] ? unwind_next_frame+0x11ec/0x1cf0 [ 117.427000][ T5241] __sg_alloc_table+0x1b9/0x6d0 [ 117.431863][ T5241] sg_alloc_table_chained+0x81/0x1d0 [ 117.437152][ T5241] ? sg_alloc_table_chained+0x1d0/0x1d0 [ 117.442715][ T5241] scsi_alloc_sgtables+0x29b/0xcd0 [ 117.447843][ T5241] ? scsi_io_completion_action+0xeb0/0xeb0 [ 117.453664][ T5241] ? init_timer_key+0x15d/0x2a0 [ 117.458522][ T5241] scsi_queue_rq+0x17a7/0x30f0 [ 117.463304][ T5241] blk_mq_dispatch_rq_list+0xa06/0x1c50 [ 117.468865][ T5241] ? bio_add_hw_page+0x52f/0xa30 [ 117.473844][ T5241] ? do_raw_spin_lock+0x128/0x2f0 [ 117.478879][ T5241] ? blk_mq_get_driver_tag+0x930/0x930 [ 117.484344][ T5241] ? __rwlock_init+0x140/0x140 [ 117.489116][ T5241] ? do_raw_spin_unlock+0x11d/0x230 [ 117.494329][ T5241] __blk_mq_sched_dispatch_requests+0x313/0x410 [ 117.500584][ T5241] ? blk_mq_sched_dispatch_requests+0x1b0/0x1b0 [ 117.506837][ T5241] ? rcu_lock_release+0x9/0x20 [ 117.511628][ T5241] blk_mq_sched_dispatch_requests+0xf4/0x1b0 [ 117.517632][ T5241] __blk_mq_run_hw_queue+0xbb/0x100 [ 117.522851][ T5241] __blk_mq_delay_run_hw_queue+0x137/0x610 [ 117.528675][ T5241] ? blk_mq_run_hw_queue+0x153/0x260 [ 117.533976][ T5241] blk_mq_sched_insert_request+0x1eb/0x420 [ 117.539795][ T5241] ? blk_mq_sched_try_insert_merge+0x160/0x160 [ 117.546041][ T5241] ? blk_rq_map_user+0x14c/0x1e0 [ 117.550990][ T5241] ? blk_account_io_start+0x82/0x2f0 [ 117.556286][ T5241] blk_execute_rq_nowait+0x173/0x1e0 [ 117.561582][ T5241] ? sg_allow_access+0x110/0x110 [ 117.566526][ T5241] ? bio_map_kern_endio+0x20/0x20 [ 117.571569][ T5241] sg_common_write+0x9e0/0x1c10 [ 117.576445][ T5241] ? sg_add_request+0x690/0x690 [ 117.581412][ T5241] ? __lock_acquire+0x7b50/0x7b50 [ 117.586443][ T5241] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 117.592428][ T5241] ? mutex_unlock+0x10/0x10 [ 117.596945][ T5241] ? __lock_acquire+0x7b50/0x7b50 [ 117.601998][ T5241] ? __might_fault+0xb3/0x110 [ 117.606712][ T5241] ? _copy_from_user+0x111/0x170 [ 117.611666][ T5241] sg_write+0xac0/0xe90 [ 117.615837][ T5241] ? __lock_acquire+0x7b50/0x7b50 [ 117.620972][ T5241] ? sg_read+0x1420/0x1420 [ 117.625402][ T5241] ? aa_file_perm+0x38b/0xe80 [ 117.630120][ T5241] ? end_current_label_crit_section+0x14b/0x170 [ 117.636378][ T5241] ? common_file_perm+0x171/0x1c0 [ 117.641415][ T5241] ? fsnotify_perm+0x5d/0x560 [ 117.646099][ T5241] ? security_file_permission+0x75/0xa0 [ 117.651656][ T5241] do_iter_write+0x3c3/0x7a0 [ 117.656267][ T5241] do_writev+0x281/0x480 [ 117.660522][ T5241] ? do_readv+0x460/0x460 [ 117.664877][ T5241] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.670870][ T5241] ? lock_chain_count+0x20/0x20 [ 117.675740][ T5241] ? lockdep_hardirqs_on+0x94/0x140 [ 117.680954][ T5241] do_syscall_64+0x4c/0xa0 [ 117.685377][ T5241] ? clear_bhb_loop+0x30/0x80 [ 117.690062][ T5241] ? clear_bhb_loop+0x30/0x80 [ 117.694749][ T5241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.700650][ T5241] RIP: 0033:0x7f4183eb3159 [ 117.705130][ T5241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.724746][ T5241] RSP: 002b:00007f418210b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.733171][ T5241] RAX: ffffffffffffffda RBX: 00007f418413afa0 RCX: 00007f4183eb3159 [ 117.741241][ T5241] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 117.749752][ T5241] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 117.757755][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.765726][ T5241] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 117.773723][ T5241] [ 117.970255][ T5254] loop5: detected capacity change from 0 to 128 [ 118.056899][ T5254] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 118.728142][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 119.086460][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.323'. [ 119.136602][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.323'. [ 120.436943][ T5296] loop3: detected capacity change from 0 to 128 [ 120.550362][ T5296] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 120.568637][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop3 [ 120.601723][ T5302] loop0: detected capacity change from 0 to 512 [ 120.811979][ T5302] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.332: casefold flag without casefold feature [ 120.838536][ T5302] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.332: couldn't read orphan inode 15 (err -117) [ 121.178885][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 121.253501][ T5315] loop5: detected capacity change from 0 to 128 [ 121.419462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 121.615202][ T5311] tipc: Enabling of bearer rejected, failed to enable media [ 121.651707][ T5315] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 121.898023][ T5327] FAULT_INJECTION: forcing a failure. [ 121.898023][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 121.912421][ T5327] CPU: 1 PID: 5327 Comm: syz.3.337 Not tainted syzkaller #0 [ 121.919725][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.929788][ T5327] Call Trace: [ 121.933192][ T5327] [ 121.936132][ T5327] dump_stack_lvl+0x188/0x250 [ 121.940823][ T5327] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 121.946733][ T5327] ? show_regs_print_info+0x20/0x20 [ 121.952289][ T5327] ? load_image+0x410/0x410 [ 121.956829][ T5327] ? rcu_read_unlock_special+0xf0/0x4a0 [ 121.962410][ T5327] should_fail+0x383/0x4b0 [ 121.966844][ T5327] should_failslab+0x5/0x20 [ 121.971362][ T5327] slab_pre_alloc_hook+0x51/0xc0 [ 121.976313][ T5327] ? anon_vma_clone+0xbc/0x4d0 [ 121.981082][ T5327] kmem_cache_alloc+0x3d/0x280 [ 121.985858][ T5327] anon_vma_clone+0xbc/0x4d0 [ 121.990471][ T5327] __split_vma+0x1ab/0x410 [ 121.994900][ T5327] ? split_vma+0x6b/0xd0 [ 121.999154][ T5327] mlock_fixup+0x501/0x5c0 [ 122.003595][ T5327] apply_vma_lock_flags+0x1e8/0x2c0 [ 122.008812][ T5327] do_mlock+0x441/0x550 [ 122.012987][ T5327] __x64_sys_mlock+0x5c/0x70 [ 122.017590][ T5327] do_syscall_64+0x4c/0xa0 [ 122.022015][ T5327] ? clear_bhb_loop+0x30/0x80 [ 122.026703][ T5327] ? clear_bhb_loop+0x30/0x80 [ 122.031394][ T5327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.037292][ T5327] RIP: 0033:0x7f3d77306159 [ 122.041719][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.061329][ T5327] RSP: 002b:00007f3d7555e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 122.069938][ T5327] RAX: ffffffffffffffda RBX: 00007f3d7758dfa0 RCX: 00007f3d77306159 [ 122.077920][ T5327] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 122.085902][ T5327] RBP: 00007f3d7739d024 R08: 0000000000000000 R09: 0000000000000000 [ 122.093883][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.101860][ T5327] R13: 00007f3d7758e038 R14: 00007f3d7758dfa0 R15: 00007ffe98e3ebc8 [ 122.109862][ T5327] [ 122.378848][ T5336] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 122.407503][ T5336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 122.601653][ T5346] FAULT_INJECTION: forcing a failure. [ 122.601653][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 122.624837][ T5346] CPU: 0 PID: 5346 Comm: syz.1.345 Not tainted syzkaller #0 [ 122.632161][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.642222][ T5346] Call Trace: [ 122.645501][ T5346] [ 122.648433][ T5346] dump_stack_lvl+0x188/0x250 [ 122.653118][ T5346] ? show_regs_print_info+0x20/0x20 [ 122.658326][ T5346] ? load_image+0x410/0x410 [ 122.662848][ T5346] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 122.668751][ T5346] should_fail+0x383/0x4b0 [ 122.673169][ T5346] ? netlink_trim+0x180/0x220 [ 122.677854][ T5346] should_failslab+0x5/0x20 [ 122.682358][ T5346] slab_pre_alloc_hook+0x51/0xc0 [ 122.687293][ T5346] ? netlink_trim+0x180/0x220 [ 122.695403][ T5346] __kmalloc_node_track_caller+0x68/0x3a0 [ 122.701135][ T5346] ? netlink_trim+0x180/0x220 [ 122.705825][ T5346] ? __wake_up+0x11c/0x180 [ 122.710244][ T5346] ? netlink_trim+0x180/0x220 [ 122.714963][ T5346] pskb_expand_head+0x128/0x1100 [ 122.719955][ T5346] ? rcu_is_watching+0x11/0xa0 [ 122.724736][ T5346] ? skb_release_head_state+0x1e7/0x240 [ 122.730299][ T5346] netlink_trim+0x180/0x220 [ 122.734813][ T5346] netlink_unicast+0x62/0x940 [ 122.739508][ T5346] nlmsg_notify+0x122/0x190 [ 122.744023][ T5346] tc_ctl_action+0x83a/0xba0 [ 122.748622][ T5346] ? tcf_free_cookie_rcu+0x40/0x40 [ 122.753738][ T5346] ? __dev_queue_xmit+0x195d/0x2e50 [ 122.758968][ T5346] ? ___sys_sendmsg+0x236/0x2e0 [ 122.763876][ T5346] ? tcf_free_cookie_rcu+0x40/0x40 [ 122.768991][ T5346] rtnetlink_rcv_msg+0x7f1/0xf10 [ 122.773934][ T5346] ? lock_chain_count+0x20/0x20 [ 122.778788][ T5346] ? rtnetlink_bind+0x80/0x80 [ 122.783470][ T5346] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.788844][ T5346] ? lockdep_hardirqs_on+0x94/0x140 [ 122.794049][ T5346] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.799421][ T5346] ? _local_bh_enable+0xa0/0xa0 [ 122.804282][ T5346] ? __dev_queue_xmit+0x1b64/0x2e50 [ 122.809502][ T5346] ? dev_queue_xmit+0x20/0x20 [ 122.814180][ T5346] ? memcpy+0x3c/0x60 [ 122.818160][ T5346] ? __copy_skb_header+0x3ba/0x4f0 [ 122.823280][ T5346] netlink_rcv_skb+0x1e9/0x430 [ 122.828050][ T5346] ? rtnetlink_bind+0x80/0x80 [ 122.832740][ T5346] ? netlink_ack+0xb10/0xb10 [ 122.837352][ T5346] netlink_unicast+0x78f/0x940 [ 122.842120][ T5346] netlink_sendmsg+0x8ba/0xbe0 [ 122.846880][ T5346] ? netlink_getsockopt+0x570/0x570 [ 122.852498][ T5346] ? aa_sock_msg_perm+0x94/0x150 [ 122.857424][ T5346] ? apparmor_socket_sendmsg+0x88/0x230 [ 122.862970][ T5346] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 122.868255][ T5346] ? security_socket_sendmsg+0x7c/0xa0 [ 122.873700][ T5346] ? netlink_getsockopt+0x570/0x570 [ 122.878889][ T5346] ____sys_sendmsg+0x5be/0x8f0 [ 122.883646][ T5346] ? __sys_sendmsg_sock+0x30/0x30 [ 122.888665][ T5346] ? import_iovec+0x6f/0xa0 [ 122.893310][ T5346] ___sys_sendmsg+0x236/0x2e0 [ 122.898002][ T5346] ? __sys_sendmsg+0x290/0x290 [ 122.902787][ T5346] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.907641][ T5346] ? __x64_sys_sendmsg+0x80/0x80 [ 122.912569][ T5346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.918553][ T5346] ? lockdep_hardirqs_on+0x94/0x140 [ 122.923747][ T5346] do_syscall_64+0x4c/0xa0 [ 122.928154][ T5346] ? clear_bhb_loop+0x30/0x80 [ 122.933175][ T5346] ? clear_bhb_loop+0x30/0x80 [ 122.937861][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.943761][ T5346] RIP: 0033:0x7f4183eb3159 [ 122.951646][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.971360][ T5346] RSP: 002b:00007f418210b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.979776][ T5346] RAX: ffffffffffffffda RBX: 00007f418413afa0 RCX: 00007f4183eb3159 [ 122.987743][ T5346] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 122.995723][ T5346] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 123.003790][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.011751][ T5346] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 123.019743][ T5346] [ 123.094937][ T5349] FAULT_INJECTION: forcing a failure. [ 123.094937][ T5349] name failslab, interval 1, probability 0, space 0, times 0 [ 123.152089][ T5351] loop2: detected capacity change from 0 to 128 [ 123.177057][ T5349] CPU: 0 PID: 5349 Comm: syz.0.342 Not tainted syzkaller #0 [ 123.184375][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.194434][ T5349] Call Trace: [ 123.197707][ T5349] [ 123.200631][ T5349] dump_stack_lvl+0x188/0x250 [ 123.205304][ T5349] ? show_regs_print_info+0x20/0x20 [ 123.210495][ T5349] ? load_image+0x410/0x410 [ 123.214999][ T5349] ? __lock_acquire+0x7b50/0x7b50 [ 123.220021][ T5349] should_fail+0x383/0x4b0 [ 123.224428][ T5349] should_failslab+0x5/0x20 [ 123.228916][ T5349] slab_pre_alloc_hook+0x51/0xc0 [ 123.233846][ T5349] ? __alloc_file+0x25/0x240 [ 123.238424][ T5349] kmem_cache_alloc+0x3d/0x280 [ 123.243177][ T5349] __alloc_file+0x25/0x240 [ 123.247581][ T5349] alloc_empty_file+0x90/0x180 [ 123.252333][ T5349] alloc_file+0x5c/0x510 [ 123.256561][ T5349] ? do_raw_spin_unlock+0x11d/0x230 [ 123.261753][ T5349] alloc_file_pseudo+0x180/0x200 [ 123.266679][ T5349] ? alloc_empty_file_noaccount+0x80/0x80 [ 123.272391][ T5349] ? alloc_fd+0x59e/0x650 [ 123.276749][ T5349] sock_alloc_file+0xb3/0x240 [ 123.281415][ T5349] __sys_socket+0x11d/0x170 [ 123.285909][ T5349] __x64_sys_socket+0x76/0x80 [ 123.290573][ T5349] do_syscall_64+0x4c/0xa0 [ 123.294979][ T5349] ? clear_bhb_loop+0x30/0x80 [ 123.299734][ T5349] ? clear_bhb_loop+0x30/0x80 [ 123.304750][ T5349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.310628][ T5349] RIP: 0033:0x7f9127c6a159 [ 123.315033][ T5349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.334623][ T5349] RSP: 002b:00007f9125ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 123.343095][ T5349] RAX: ffffffffffffffda RBX: 00007f9127ef1fa0 RCX: 00007f9127c6a159 [ 123.351404][ T5349] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 123.359359][ T5349] RBP: 00007f9127d01024 R08: 0000000000000000 R09: 0000000000000000 [ 123.367323][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.375280][ T5349] R13: 00007f9127ef2038 R14: 00007f9127ef1fa0 R15: 00007ffc84742d88 [ 123.383251][ T5349] [ 123.412814][ T5356] loop3: detected capacity change from 0 to 128 [ 123.428524][ T5351] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 123.457191][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop2 [ 124.494528][ T5375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.353'. [ 124.669648][ T5380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 124.815661][ T5383] device veth0 entered promiscuous mode [ 124.867009][ T5382] device veth0 left promiscuous mode [ 125.010414][ T5393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 125.127408][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.499686][ T5369] loop0: detected capacity change from 0 to 40427 [ 125.560625][ T5369] F2FS-fs (loop0): invalid crc value [ 125.606387][ T5413] loop2: detected capacity change from 0 to 128 [ 125.624216][ T5369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.732189][ T5413] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 125.760526][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop2 [ 125.938047][ T5369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.485885][ T4185] attempt to access beyond end of device [ 126.485885][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 126.844916][ T5430] loop1: detected capacity change from 0 to 2048 [ 127.006806][ T5430] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.059855][ T5430] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.110127][ T5430] fs-verity: sha512 using implementation "sha512-avx2" [ 127.153363][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 127.358445][ T5448] FAULT_INJECTION: forcing a failure. [ 127.358445][ T5448] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.410997][ T5444] loop3: detected capacity change from 0 to 4096 [ 127.439879][ T5448] CPU: 1 PID: 5448 Comm: syz.5.376 Not tainted syzkaller #0 [ 127.443517][ T5457] loop2: detected capacity change from 0 to 128 [ 127.447199][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.447215][ T5448] Call Trace: [ 127.447223][ T5448] [ 127.447230][ T5448] dump_stack_lvl+0x188/0x250 [ 127.447261][ T5448] ? show_regs_print_info+0x20/0x20 [ 127.479726][ T5448] ? load_image+0x410/0x410 [ 127.484251][ T5448] ? cgroup_rstat_updated+0xce/0x350 [ 127.489548][ T5448] ? place_entity+0x4f0/0x4f0 [ 127.494237][ T5448] should_fail+0x383/0x4b0 [ 127.498674][ T5448] get_futex_key+0x1a1/0x12d0 [ 127.503373][ T5448] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.509366][ T5448] ? futex_wait_restart+0x250/0x250 [ 127.514575][ T5448] ? lock_chain_count+0x20/0x20 [ 127.519447][ T5448] futex_wait_setup+0x4b/0x520 [ 127.524306][ T5448] ? lockdep_hardirqs_on+0x94/0x140 [ 127.529511][ T5448] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.535420][ T5448] futex_wait+0x22f/0x680 [ 127.539785][ T5448] ? do_futex+0x12b0/0x12b0 [ 127.544319][ T5448] ? verify_lock_unused+0x140/0x140 [ 127.549536][ T5448] ? verify_lock_unused+0x140/0x140 [ 127.554750][ T5448] do_futex+0xdc2/0x12b0 [ 127.559012][ T5448] ? tun_chr_write_iter+0x17b/0x1e0 [ 127.564222][ T5448] ? file_end_write+0xd8/0x250 [ 127.568998][ T5448] ? vfs_write+0xaa6/0xd70 [ 127.573436][ T5448] ? futex_exit_release+0x1c0/0x1c0 [ 127.578646][ T5448] ? __context_tracking_exit+0x4c/0x80 [ 127.584116][ T5448] __se_sys_futex+0x389/0x420 [ 127.588834][ T5448] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.594833][ T5448] ? __x64_sys_futex+0xf0/0xf0 [ 127.599614][ T5448] ? __x64_sys_futex+0x1d/0xf0 [ 127.604425][ T5448] do_syscall_64+0x4c/0xa0 [ 127.608853][ T5448] ? clear_bhb_loop+0x30/0x80 [ 127.613542][ T5448] ? clear_bhb_loop+0x30/0x80 [ 127.618229][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.624134][ T5448] RIP: 0033:0x7f3eaca30159 [ 127.628558][ T5448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.648164][ T5448] RSP: 002b:00007f3eaac880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.656590][ T5448] RAX: ffffffffffffffda RBX: 00007f3eaccb7fa8 RCX: 00007f3eaca30159 [ 127.664575][ T5448] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3eaccb7fa8 [ 127.672553][ T5448] RBP: 00007f3eaccb7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 127.680525][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.688502][ T5448] R13: 00007f3eaccb8038 R14: 00007ffc32166380 R15: 00007ffc32166468 [ 127.696496][ T5448] [ 127.710865][ T5444] EXT4-fs (loop3): inline encryption not supported [ 127.758923][ T5444] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 127.773440][ T5457] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.801738][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop2 [ 127.844521][ T5444] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,noblock_validity,grpjquota=,lazytime,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 127.966483][ T5444] EXT4-fs (loop3): shut down requested (2) [ 128.564320][ T5476] loop3: detected capacity change from 0 to 2048 [ 128.734272][ T5476] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.753035][ T5476] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.910638][ T5485] loop3: detected capacity change from 0 to 512 [ 129.008050][ T5486] loop2: detected capacity change from 0 to 1024 [ 129.143597][ T5486] EXT4-fs (loop2): Unrecognized mount option "context=sysadm_u" or missing value [ 129.181114][ T5485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.335376][ T5485] EXT4-fs (loop3): 1 truncate cleaned up [ 129.368224][ T5485] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 130.641141][ T5459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.192174][ T5504] loop0: detected capacity change from 0 to 256 [ 131.244478][ T5506] loop1: detected capacity change from 0 to 512 [ 131.303042][ T5511] loop2: detected capacity change from 0 to 128 [ 131.352906][ T5512] process 'syz.5.393' launched './file0' with NULL argv: empty string added [ 131.398230][ T5511] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 131.405341][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop2 [ 131.451518][ T5506] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 131.640058][ T5506] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.956439][ T5506] EXT4-fs (loop1): shut down requested (2) [ 132.157918][ T5529] loop0: detected capacity change from 0 to 128 [ 132.187992][ T5529] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 132.376470][ T4423] udevd[4423]: incorrect ext4 checksum on /dev/loop0 [ 132.651398][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657760][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079925][ T5546] mmap: syz.1.401 (5546) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 133.305322][ T5548] loop1: detected capacity change from 0 to 128 [ 133.354240][ T5550] loop0: detected capacity change from 0 to 2048 [ 133.595841][ T5550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.665170][ T5550] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.928938][ T5559] loop3: detected capacity change from 0 to 128 [ 133.987061][ T5559] EXT4-fs (loop3): Unrecognized mount option "func=FILE_CHECK" or missing value [ 134.092663][ T5543] loop5: detected capacity change from 0 to 40427 [ 134.132991][ T5543] F2FS-fs (loop5): invalid crc value [ 134.144791][ T5543] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.292778][ T5543] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 134.433506][ T4835] attempt to access beyond end of device [ 134.433506][ T4835] loop5: rw=2049, want=45104, limit=40427 [ 134.466789][ T5574] FAULT_INJECTION: forcing a failure. [ 134.466789][ T5574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.481924][ T5576] loop3: detected capacity change from 0 to 512 [ 134.509702][ T5574] CPU: 0 PID: 5574 Comm: syz.2.410 Not tainted syzkaller #0 [ 134.517010][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.527210][ T5574] Call Trace: [ 134.530506][ T5574] [ 134.533450][ T5574] dump_stack_lvl+0x188/0x250 [ 134.538152][ T5574] ? __lock_acquire+0x7b50/0x7b50 [ 134.543194][ T5574] ? show_regs_print_info+0x20/0x20 [ 134.548401][ T5574] ? load_image+0x410/0x410 [ 134.552920][ T5574] ? sg_write+0xacc/0xe90 [ 134.557260][ T5574] ? __lock_acquire+0x7b50/0x7b50 [ 134.562296][ T5574] should_fail+0x383/0x4b0 [ 134.566725][ T5574] get_futex_key+0x1a1/0x12d0 [ 134.571416][ T5574] ? futex_wait_restart+0x250/0x250 [ 134.576620][ T5574] ? __lock_acquire+0x13dc/0x7b50 [ 134.581660][ T5574] futex_wake+0x101/0x540 [ 134.585995][ T5574] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 134.592600][ T5574] ? futex_wait+0x680/0x680 [ 134.597110][ T5574] ? verify_lock_unused+0x140/0x140 [ 134.602310][ T5574] ? verify_lock_unused+0x140/0x140 [ 134.607518][ T5574] do_futex+0xd83/0x12b0 [ 134.611759][ T5574] ? do_writev+0x299/0x480 [ 134.616182][ T5574] ? do_writev+0x299/0x480 [ 134.620619][ T5574] ? kfree+0x4a/0x2a0 [ 134.624619][ T5574] ? futex_exit_release+0x1c0/0x1c0 [ 134.629823][ T5574] ? __context_tracking_exit+0x4c/0x80 [ 134.635291][ T5574] __se_sys_futex+0x389/0x420 [ 134.639980][ T5574] ? __x64_sys_futex+0xf0/0xf0 [ 134.644751][ T5574] ? __x64_sys_futex+0x1d/0xf0 [ 134.649518][ T5574] do_syscall_64+0x4c/0xa0 [ 134.653932][ T5574] ? clear_bhb_loop+0x30/0x80 [ 134.658611][ T5574] ? clear_bhb_loop+0x30/0x80 [ 134.663289][ T5574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.669190][ T5574] RIP: 0033:0x7f7f1fe29159 [ 134.673604][ T5574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.693218][ T5574] RSP: 002b:00007f7f1e0810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.701643][ T5574] RAX: ffffffffffffffda RBX: 00007f7f200b0fa8 RCX: 00007f7f1fe29159 [ 134.709628][ T5574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f200b0fac [ 134.717604][ T5574] RBP: 00007f7f200b0fa0 R08: 001914eca6bfec3e R09: 0000000000000000 [ 134.725578][ T5574] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000000 [ 134.733559][ T5574] R13: 00007f7f200b1038 R14: 00007fff09a17d60 R15: 00007fff09a17e48 [ 134.741560][ T5574] [ 134.954102][ T5576] EXT4-fs (loop3): Ignoring removed oldalloc option [ 135.202210][ T5576] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.411: bad orphan inode 32 [ 135.262840][ T5590] loop2: detected capacity change from 0 to 4096 [ 135.286627][ T5576] ext4_test_bit(bit=31, block=4) = 0 [ 135.333428][ T5576] EXT4-fs (loop3): 1 truncate cleaned up [ 135.339120][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,oldalloc,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 135.389675][ T5590] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.490398][ T5590] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 135.533322][ T5576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.411: bg 0: block 5: invalid block bitmap [ 135.550339][ T5599] loop1: detected capacity change from 0 to 128 [ 136.074027][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 136.074042][ T26] audit: type=1800 audit(1788548619.274:16): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.421" name="UDC" dev="configfs" ino=37319 res=0 errno=0 [ 136.409511][ T5614] loop0: detected capacity change from 0 to 1024 [ 136.464089][ T5614] EXT4-fs (loop0): inline encryption not supported [ 136.541810][ T5614] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,data_err=abort,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 136.576955][ T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 136.672072][ T13] Bluetooth: hci2: Injecting HCI hardware error event [ 136.730159][ T4201] Bluetooth: hci2: hardware error 0x00 [ 136.741971][ T5626] FAULT_INJECTION: forcing a failure. [ 136.741971][ T5626] name failslab, interval 1, probability 0, space 0, times 0 [ 136.779666][ T5626] CPU: 0 PID: 5626 Comm: syz.1.426 Not tainted syzkaller #0 [ 136.786994][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.797063][ T5626] Call Trace: [ 136.800356][ T5626] [ 136.803287][ T5626] dump_stack_lvl+0x188/0x250 [ 136.807977][ T5626] ? show_regs_print_info+0x20/0x20 [ 136.813188][ T5626] ? load_image+0x410/0x410 [ 136.817718][ T5626] ? __might_sleep+0xf0/0xf0 [ 136.822309][ T5626] ? __lock_acquire+0x7b50/0x7b50 [ 136.827347][ T5626] should_fail+0x383/0x4b0 [ 136.831781][ T5626] should_failslab+0x5/0x20 [ 136.836295][ T5626] slab_pre_alloc_hook+0x51/0xc0 [ 136.841247][ T5626] kmem_cache_alloc_trace+0x47/0x290 [ 136.846541][ T5626] ? sg_read+0x5fe/0x1420 [ 136.850881][ T5626] sg_read+0x5fe/0x1420 [ 136.855055][ T5626] ? sg_remove_device+0x410/0x410 [ 136.860091][ T5626] ? common_file_perm+0x171/0x1c0 [ 136.865123][ T5626] ? fsnotify_perm+0x3a7/0x560 [ 136.869898][ T5626] ? sg_remove_device+0x410/0x410 [ 136.874943][ T5626] vfs_read+0x2ff/0xd50 [ 136.879104][ T5626] ? __lock_acquire+0x7b50/0x7b50 [ 136.884156][ T5626] ? kernel_read+0x1e0/0x1e0 [ 136.888794][ T5626] ? __fget_files+0x402/0x470 [ 136.893494][ T5626] ? __fdget_pos+0x1e2/0x370 [ 136.898114][ T5626] ? ksys_read+0x70/0x260 [ 136.902473][ T5626] ksys_read+0x153/0x260 [ 136.906827][ T5626] ? vfs_write+0xd70/0xd70 [ 136.911468][ T5626] ? lockdep_hardirqs_on+0x94/0x140 [ 136.916692][ T5626] do_syscall_64+0x4c/0xa0 [ 136.921138][ T5626] ? clear_bhb_loop+0x30/0x80 [ 136.925830][ T5626] ? clear_bhb_loop+0x30/0x80 [ 136.930602][ T5626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.936489][ T5626] RIP: 0033:0x7f4183eb3159 [ 136.940899][ T5626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.960497][ T5626] RSP: 002b:00007f418210b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.968899][ T5626] RAX: ffffffffffffffda RBX: 00007f418413afa0 RCX: 00007f4183eb3159 [ 136.976951][ T5626] RDX: 00000000fffffeea RSI: 0000200000001400 RDI: 0000000000000005 [ 136.984998][ T5626] RBP: 00007f4183f4a024 R08: 0000000000000000 R09: 0000000000000000 [ 136.992960][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.000917][ T5626] R13: 00007f418413b038 R14: 00007f418413afa0 R15: 00007fff5730e368 [ 137.008974][ T5626] [ 140.411494][ T5655] loop0: detected capacity change from 0 to 1024 [ 140.432481][ T5657] loop1: detected capacity change from 0 to 128 [ 140.493362][ T5655] EXT4-fs (loop0): Ignoring removed bh option [ 140.662567][ T5660] loop2: detected capacity change from 0 to 8 [ 140.685025][ T5655] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,auto_da_alloc,barrier=0x0000000000000001,nolazytime,dax=inode,lazytime,errors=remount-ro,stripe=0x0000000000000004,bh,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 140.695437][ T5665] capability: warning: `syz.3.439' uses deprecated v2 capabilities in a way that may be insecure [ 141.168450][ T5683] overlayfs: conflicting lowerdir path [ 142.343912][ T21] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 142.381130][ T21] wiimote 0005:057E:0306.0002: New device registered [ 142.430249][ T5706] wiimote 0005:057E:0306.0002: Device removed [ 142.528038][ T5712] fido_id[5712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.732699][ T5716] loop3: detected capacity change from 0 to 512 [ 142.835664][ T5716] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.956796][ T5716] EXT4-fs (loop3): 1 truncate cleaned up [ 143.059914][ T5716] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 143.237207][ T5723] ------------[ cut here ]------------ [ 143.243273][ T5723] WARNING: CPU: 0 PID: 5723 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 143.253548][ T5723] Modules linked in: [ 143.257450][ T5723] CPU: 0 PID: 5723 Comm: syz.0.462 Not tainted syzkaller #0 [ 143.264750][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.274819][ T5723] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 143.280645][ T5723] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 50 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 52 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 143.300348][ T5723] RSP: 0018:ffffc9000327f7c0 EFLAGS: 00010002 [ 143.306432][ T5723] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817becab [ 143.314416][ T5723] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 143.322404][ T5723] RBP: ffffc9000327f960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 143.330389][ T5723] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 143.338377][ T5723] R13: 0000000000000044 R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 143.346362][ T5723] FS: 00007f9125ec26c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 143.355304][ T5723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.361898][ T5723] CR2: 0000200000001340 CR3: 0000000066842000 CR4: 00000000003506f0 [ 143.369885][ T5723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.377960][ T5723] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.385943][ T5723] Call Trace: [ 143.389230][ T5723] [ 143.392199][ T5723] ? ring_buffer_read_page+0x12c0/0x12c0 [ 143.397858][ T5723] ? do_raw_spin_lock+0x128/0x2f0 [ 143.402913][ T5723] ? __rwlock_init+0x140/0x140 [ 143.407701][ T5723] rb_buffer_peek+0x5c/0x780 [ 143.412312][ T5723] ring_buffer_peek+0x1de/0x400 [ 143.417184][ T5723] ? ring_buffer_iter_empty+0x340/0x340 [ 143.422750][ T5723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.428745][ T5723] ? __lock_acquire+0x7b50/0x7b50 [ 143.433791][ T5723] ? lock_chain_count+0x20/0x20 [ 143.438416][ T5721] loop2: detected capacity change from 0 to 128 [ 143.438656][ T5723] ? __rwlock_init+0x140/0x140 [ 143.449753][ T5723] __find_next_entry+0x350/0x6b0 [ 143.454739][ T5723] ? lockdep_hardirqs_on+0x94/0x140 [ 143.459973][ T5723] ? trace_find_next_entry+0x3a0/0x3a0 [ 143.465463][ T5723] tracing_read_pipe+0x3b1/0xae0 [ 143.470427][ T5723] ? s_show+0x300/0x300 [ 143.474598][ T5723] vfs_read+0x2ff/0xd50 [ 143.478769][ T5723] ? __lock_acquire+0x7b50/0x7b50 [ 143.483821][ T5723] ? kernel_read+0x1e0/0x1e0 [ 143.488444][ T5723] ? mutex_lock_nested+0x17/0x20 [ 143.493396][ T5723] ? __fdget_pos+0x2bf/0x370 [ 143.497992][ T5723] ? ksys_read+0x70/0x260 [ 143.502344][ T5723] ksys_read+0x153/0x260 [ 143.506695][ T5723] ? vfs_write+0xd70/0xd70 [ 143.511253][ T5723] ? lockdep_hardirqs_on+0x94/0x140 [ 143.516475][ T5723] do_syscall_64+0x4c/0xa0 [ 143.521039][ T5723] ? clear_bhb_loop+0x30/0x80 [ 143.525732][ T5723] ? clear_bhb_loop+0x30/0x80 [ 143.530431][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.536342][ T5723] RIP: 0033:0x7f9127c6a159 [ 143.540762][ T5723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.560464][ T5723] RSP: 002b:00007f9125ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.568881][ T5723] RAX: ffffffffffffffda RBX: 00007f9127ef1fa0 RCX: 00007f9127c6a159 [ 143.576852][ T5723] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 143.584810][ T5723] RBP: 00007f9127d01024 R08: 0000000000000000 R09: 0000000000000000 [ 143.592772][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.600732][ T5723] R13: 00007f9127ef2038 R14: 00007f9127ef1fa0 R15: 00007ffc84742d88 [ 143.608702][ T5723] [ 143.611720][ T5723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.618980][ T5723] CPU: 0 PID: 5723 Comm: syz.0.462 Not tainted syzkaller #0 [ 143.626246][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.636289][ T5723] Call Trace: [ 143.639557][ T5723] [ 143.642474][ T5723] dump_stack_lvl+0x188/0x250 [ 143.647153][ T5723] ? show_regs_print_info+0x20/0x20 [ 143.652341][ T5723] ? load_image+0x410/0x410 [ 143.656840][ T5723] panic+0x2f8/0x850 [ 143.660720][ T5723] ? bpf_jit_dump+0xd0/0xd0 [ 143.665220][ T5723] ? rb_get_reader_page+0xac0/0xcd0 [ 143.670399][ T5723] __warn+0x248/0x2b0 [ 143.674366][ T5723] ? rb_get_reader_page+0xac0/0xcd0 [ 143.679548][ T5723] report_bug+0x1b9/0x2e0 [ 143.683866][ T5723] handle_bug+0x3a/0x70 [ 143.688009][ T5723] exc_invalid_op+0x16/0x40 [ 143.692500][ T5723] asm_exc_invalid_op+0x16/0x20 [ 143.697338][ T5723] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 143.703127][ T5723] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 50 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 52 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 143.722715][ T5723] RSP: 0018:ffffc9000327f7c0 EFLAGS: 00010002 [ 143.728780][ T5723] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817becab [ 143.736737][ T5723] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 143.744691][ T5723] RBP: ffffc9000327f960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 143.752657][ T5723] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 143.760666][ T5723] R13: 0000000000000044 R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 143.768644][ T5723] ? rb_get_reader_page+0xabb/0xcd0 [ 143.773861][ T5723] ? ring_buffer_read_page+0x12c0/0x12c0 [ 143.779490][ T5723] ? do_raw_spin_lock+0x128/0x2f0 [ 143.784505][ T5723] ? __rwlock_init+0x140/0x140 [ 143.789261][ T5723] rb_buffer_peek+0x5c/0x780 [ 143.793843][ T5723] ring_buffer_peek+0x1de/0x400 [ 143.798695][ T5723] ? ring_buffer_iter_empty+0x340/0x340 [ 143.804221][ T5723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.810223][ T5723] ? __lock_acquire+0x7b50/0x7b50 [ 143.815237][ T5723] ? lock_chain_count+0x20/0x20 [ 143.820072][ T5723] ? __rwlock_init+0x140/0x140 [ 143.824823][ T5723] __find_next_entry+0x350/0x6b0 [ 143.829764][ T5723] ? lockdep_hardirqs_on+0x94/0x140 [ 143.835055][ T5723] ? trace_find_next_entry+0x3a0/0x3a0 [ 143.840512][ T5723] tracing_read_pipe+0x3b1/0xae0 [ 143.845447][ T5723] ? s_show+0x300/0x300 [ 143.849593][ T5723] vfs_read+0x2ff/0xd50 [ 143.853736][ T5723] ? __lock_acquire+0x7b50/0x7b50 [ 143.858750][ T5723] ? kernel_read+0x1e0/0x1e0 [ 143.863338][ T5723] ? mutex_lock_nested+0x17/0x20 [ 143.868263][ T5723] ? __fdget_pos+0x2bf/0x370 [ 143.872867][ T5723] ? ksys_read+0x70/0x260 [ 143.877192][ T5723] ksys_read+0x153/0x260 [ 143.881436][ T5723] ? vfs_write+0xd70/0xd70 [ 143.885857][ T5723] ? lockdep_hardirqs_on+0x94/0x140 [ 143.891045][ T5723] do_syscall_64+0x4c/0xa0 [ 143.895450][ T5723] ? clear_bhb_loop+0x30/0x80 [ 143.900118][ T5723] ? clear_bhb_loop+0x30/0x80 [ 143.904784][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.910665][ T5723] RIP: 0033:0x7f9127c6a159 [ 143.915094][ T5723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.934685][ T5723] RSP: 002b:00007f9125ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.943126][ T5723] RAX: ffffffffffffffda RBX: 00007f9127ef1fa0 RCX: 00007f9127c6a159 [ 143.951118][ T5723] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 143.959089][ T5723] RBP: 00007f9127d01024 R08: 0000000000000000 R09: 0000000000000000 [ 143.967060][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.975107][ T5723] R13: 00007f9127ef2038 R14: 00007f9127ef1fa0 R15: 00007ffc84742d88 [ 143.983082][ T5723] [ 143.986191][ T5723] Kernel Offset: disabled [ 143.990850][ T5723] Rebooting in 86400 seconds..