last executing test programs: 2.993370044s ago: executing program 2 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 2.897779726s ago: executing program 2 (id=543): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB], 0xa58}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x2, 'veth1_to_team\x00', {0x4}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) socket$inet(0x2, 0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 2.762404609s ago: executing program 2 (id=546): mmap$IORING_OFF_SQ_RING(0x0, 0x400000, 0x200000f, 0x80010, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xfd, 0xc, 0x8, 0x17, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x5, @local, 0x4}}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2a, 0x14}, @sadb_lifetime={0x4, 0x4, 0x80000000, 0x5, 0x7, 0xfd}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x9, @remote, 0x2}}]}, 0xb8}}, 0xc800) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf250100000008000200020000004400048005000300070000000500030000000000050003000000000005000300060000000500030005000000050003000700000005000300020000000500030001000000080001"], 0xe8}, 0x1, 0x0, 0x0, 0x240040d0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) ioprio_set$pid(0x3, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000240)=r9, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e1d, 0xfffffff9, @mcast1, 0xd51}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x4054) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x2f0}}, @txtime={{0x18, 0x11, 0x3d, 0x5}}], 0x30}, 0x0) setpgid(r4, r4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setpgid(0x0, r4) statfs(&(0x7f0000000240)='./file0\x00', 0x0) 2.506786855s ago: executing program 1 (id=552): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1}, 0x0, 0x0, 0x0) 2.26646152s ago: executing program 1 (id=561): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fe, 0x82400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x82, 0xfffffffffffffff8}, 0x6080, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000"], 0x50) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x3, 0x0) sigaltstack(0x0, &(0x7f0000000740)={0x0}) inotify_init() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x41}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x4f0}, 0x9b00, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0xa004c59) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x86, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000d00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000d00000000f03bc5f7ac00000000000d00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.907895288s ago: executing program 4 (id=568): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_config_ext={0xd90, 0x9}, 0x10a010, 0x3, 0x3, 0x9, 0x2, 0x100, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5393, &(0x7f00000001c0)) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="018e9d145d00fedbdf0101000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r14, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.755926932s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8884010000000000340012800b00010067656e6576650000240002660400060005000900010000001400c26bb6b8000400"/60], 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@nodioread_nolock}, {@nodioread_nolock}]}, 0x85, 0x48f, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000400)={0x7}, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="380000001000030400000000fbdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265000c000280069d866837acb31109abc97ab9a1104594000e0006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x9, 0x4}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x808084, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x4b2, &(0x7f0000000780)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000000c0)=0x200) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x70]}}]}) r6 = io_uring_setup(0x1d4c, &(0x7f00000002c0)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x0) io_uring_enter(r6, 0x3910, 0xaa76, 0x8, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x0) close_range(r6, r1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc038586b, &(0x7f0000000900)={r7, &(0x7f00000001c0)='ext4\x00', 0x2000, &(0x7f0000000340)={@align=0xef, {0x10, 0x9, 0x7, 0x3ff}}, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x7}) statx(r4, &(0x7f0000000000)='./file1\x00', 0x1000, 0x4, &(0x7f0000000240)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000013c0)="efce6d", 0x3}], 0x1, 0xe4, 0x8) 1.38565685s ago: executing program 4 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1.306705922s ago: executing program 4 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800600010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = creat(&(0x7f0000000180)='./file1\x00', 0x18) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 1.205209724s ago: executing program 3 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000500"/20, @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x0) (fail_nth: 2) 1.205034504s ago: executing program 4 (id=580): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) getsockopt(r0, 0xa80, 0x871c, &(0x7f00000000c0)=""/202, &(0x7f00000001c0)=0xca) 1.198793874s ago: executing program 3 (id=582): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1}, 0x0, 0x0, 0x0) 1.194037284s ago: executing program 1 (id=583): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x6000}, 0xc) 1.098507396s ago: executing program 3 (id=584): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x554, r1) 1.005314388s ago: executing program 3 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 875.521881ms ago: executing program 1 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x2000000, 0x40}, 0x0) 859.219211ms ago: executing program 4 (id=588): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$pppoe(0x18, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) 844.831361ms ago: executing program 1 (id=589): accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800) 774.404133ms ago: executing program 2 (id=590): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r3, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/13, 0xd}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/63, 0x3f}, 0x6}], 0x2, 0xf1, 0x0) getdents(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x2219, 0x1adf, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) 742.196034ms ago: executing program 1 (id=591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x1e9, 0x80ac5) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x4, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) r5 = syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0000180000000800f0ff0b0000000c00000004000000010000000000002804000000004f3000"], 0x0, 0x28, 0x0, 0x1, 0x3}, 0x28) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=[{&(0x7f0000001400)=""/25, 0x19}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0x90, 0x30, 0xb, 0x300, 0x4, {}, [{0x7c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffeffff, 0x2, 0x0, 0x80009}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r6 = creat(&(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x10) ioctl$VT_WAITACTIVE(r6, 0x5607) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x8001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x113, 0x4}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40242, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x8088, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0x13, r7, 0x8000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) 693.856675ms ago: executing program 3 (id=592): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80, 0xe) write$cgroup_devices(r2, 0x0, 0x9) write(r0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast, @loopback}, &(0x7f0000000540)=0xc) 628.093036ms ago: executing program 0 (id=593): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x101, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7, @perf_config_ext={0x10000, 0x6}, 0x1a1ed, 0x0, 0x11001, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x2000000, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 627.947826ms ago: executing program 0 (id=594): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1}, 0x0, 0x0, 0x0) 616.489667ms ago: executing program 4 (id=595): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000030000006401010200"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101000000003c"], 0xfc}}, 0x0) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6", 0x26}], 0x1}, 0x30008b08) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200026bd7000fddbdf27010000000800030007000053daed7b9c9eb6cb4e08a9000500050000"], 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000016"], 0x18}}, 0x24080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="37002b00000004146b9acdd0bdf200ff07000018118855", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000300000085200000040000000d88fffff0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) prctl$PR_MCE_KILL(0x4e, 0xd8fb45a92c88f6c8, 0x0) open(0x0, 0x4827e, 0x195) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000000)={0x147ae14, 0x0, 0xada0}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 555.187088ms ago: executing program 0 (id=596): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="580a00001e002102000000000000000007000000440a1980400af3800800288004"], 0xa58}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x2, 'veth1_to_team\x00', {0x4}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) socket$inet(0x2, 0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 444.18812ms ago: executing program 3 (id=597): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 318.810063ms ago: executing program 0 (id=598): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7, 0x4340, 0x3, 0x1837, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @empty}}}}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 252.042324ms ago: executing program 0 (id=599): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x3287, 0x40, 0x2, 0x5b}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r2, 0x0, 0x482, &(0x7f0000000100)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff", 0x2c) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x2b}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/201, 0xc9}], 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x100}, 0x8, 0x0, 0x9, 0x6, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 187.44µs ago: executing program 0 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000040)='./file1\x00', 0x84ce01, 0x25) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="7b3407a95a8b1d45919b2950f9b06fbdbee7732fac60428ef67e6bca400e3c45ad32f1a195822f59a012987fb2f5752aa0062225c08bd3c64d202e80f5d2fbd542194fa017ad7dbed3ecef6116"], 0x70}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002bc0)=[{0x0, &(0x7f0000000580)="88a3be08be0f30959122bb369f537c423e4836b6a44cfa15fae13491e3a8671c7da7ed3fd418d9fe8c588a3d0cabefb4be69", 0x0, 0x32}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 68.05µs ago: executing program 2 (id=601): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r0, 0x0, &(0x7f0000000080), 0x80800) 0s ago: executing program 32 (id=601): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r0, 0x0, &(0x7f0000000080), 0x80800) kernel console output (not intermixed with test programs): e=1400 audit(1788381736.158:275): avc: denied { setopt } for pid=3592 comm="syz.2.31" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.634940][ T3593] pim6reg: entered allmulticast mode [ 33.671086][ T29] audit: type=1400 audit(1788381736.218:276): avc: denied { mmap_zero } for pid=3595 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 33.691974][ T3593] pim6reg: left allmulticast mode [ 33.710327][ T29] audit: type=1400 audit(1788381736.258:277): avc: denied { write } for pid=3595 comm="syz.4.32" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.811584][ T3599] FAULT_INJECTION: forcing a failure. [ 33.811584][ T3599] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.811693][ T3599] CPU: 1 UID: 0 PID: 3599 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.811718][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.811736][ T3599] Call Trace: [ 33.811743][ T3599] [ 33.811753][ T3599] __dump_stack+0x1d/0x30 [ 33.811823][ T3599] dump_stack_lvl+0x95/0xd0 [ 33.811845][ T3599] dump_stack+0x15/0x1b [ 33.811869][ T3599] should_fail_ex+0x262/0x280 [ 33.811894][ T3599] should_fail+0xb/0x20 [ 33.811916][ T3599] should_fail_usercopy+0x1a/0x20 [ 33.811979][ T3599] _copy_to_user+0x20/0xa0 [ 33.812045][ T3599] simple_read_from_buffer+0xb5/0x130 [ 33.812090][ T3599] proc_fail_nth_read+0x10e/0x150 [ 33.812126][ T3599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 33.812221][ T3599] vfs_read+0x18e/0x7c0 [ 33.812327][ T3599] ? __rcu_read_unlock+0x4e/0x70 [ 33.812355][ T3599] ? __fget_files+0x184/0x1c0 [ 33.812376][ T3599] ? mutex_lock+0x57/0x90 [ 33.812400][ T3599] ksys_read+0xdc/0x1a0 [ 33.812520][ T3599] __x64_sys_read+0x40/0x50 [ 33.812544][ T3599] x64_sys_call+0x2135/0x2550 [ 33.812568][ T3599] do_syscall_64+0x112/0x360 [ 33.812598][ T3599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.812666][ T3599] RIP: 0033:0x7f94b2fde98e [ 33.812690][ T3599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.812707][ T3599] RSP: 002b:00007f94b1a76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.812726][ T3599] RAX: ffffffffffffffda RBX: 00007f94b1a776c0 RCX: 00007f94b2fde98e [ 33.812798][ T3599] RDX: 000000000000000f RSI: 00007f94b1a770a0 RDI: 0000000000000005 [ 33.812814][ T3599] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 33.812884][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.812896][ T3599] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 33.812913][ T3599] [ 34.029067][ T3600] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 34.231117][ T3612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.37'. [ 34.308940][ T3612] bond1: (slave bond_slave_1): Device is not our slave [ 34.316101][ T3612] bond1: option active_slave: invalid value (bond_slave_1) [ 34.325890][ T3612] bond1 (unregistering): Released all slaves [ 34.480479][ T3609] syzkaller0: entered promiscuous mode [ 34.480504][ T3609] syzkaller0: entered allmulticast mode [ 34.514139][ T3619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.40'. [ 34.672544][ T3624] hub 8-0:1.0: USB hub found [ 34.672704][ T3624] hub 8-0:1.0: 8 ports detected [ 34.769285][ T3639] FAULT_INJECTION: forcing a failure. [ 34.769285][ T3639] name failslab, interval 1, probability 0, space 0, times 1 [ 34.769354][ T3639] CPU: 1 UID: 0 PID: 3639 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(lazy) [ 34.769458][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.769473][ T3639] Call Trace: [ 34.769481][ T3639] [ 34.769490][ T3639] __dump_stack+0x1d/0x30 [ 34.769572][ T3639] dump_stack_lvl+0x95/0xd0 [ 34.769598][ T3639] dump_stack+0x15/0x1b [ 34.769623][ T3639] should_fail_ex+0x262/0x280 [ 34.769648][ T3639] should_failslab+0x8c/0xb0 [ 34.769681][ T3639] __kvmalloc_node_noprof+0x168/0x5c0 [ 34.769725][ T3639] ? page_pool_create_percpu+0x213/0x680 [ 34.769787][ T3639] ? page_pool_create_percpu+0x213/0x680 [ 34.769822][ T3639] page_pool_create_percpu+0x213/0x680 [ 34.769863][ T3639] page_pool_create+0x1a/0x30 [ 34.769891][ T3639] bpf_test_run_xdp_live+0x1a5/0x1330 [ 34.769980][ T3639] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 34.770004][ T3639] ? __pfx_autoremove_wake_function+0x10/0x10 [ 34.770067][ T3639] ? mutex_unlock+0x4e/0x90 [ 34.770093][ T3639] ? 0xffffffffa0404240 [ 34.770109][ T3639] ? bpf_dispatcher_change_prog+0x7b9/0x800 [ 34.770145][ T3639] ? 0xffffffffa0404240 [ 34.770236][ T3639] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 34.770389][ T3639] bpf_prog_test_run_xdp+0x559/0x9e0 [ 34.770421][ T3639] ? __rcu_read_unlock+0x4e/0x70 [ 34.770530][ T3639] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 34.770563][ T3639] bpf_prog_test_run+0x208/0x340 [ 34.770588][ T3639] __sys_bpf+0x8da/0xc30 [ 34.770612][ T3639] ? vfs_write+0x7b0/0x9a0 [ 34.770704][ T3639] __x64_sys_bpf+0x69/0x80 [ 34.770724][ T3639] x64_sys_call+0xf26/0x2550 [ 34.770792][ T3639] do_syscall_64+0x112/0x360 [ 34.770847][ T3639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.770871][ T3639] RIP: 0033:0x7efe64a0e159 [ 34.770886][ T3639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.770903][ T3639] RSP: 002b:00007efe63467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.770930][ T3639] RAX: ffffffffffffffda RBX: 00007efe64c95fa0 RCX: 00007efe64a0e159 [ 34.770945][ T3639] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 34.770959][ T3639] RBP: 00007efe63467090 R08: 0000000000000000 R09: 0000000000000000 [ 34.770971][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.770983][ T3639] R13: 00007efe64c96038 R14: 00007efe64c95fa0 R15: 00007ffd45b14378 [ 34.771002][ T3639] [ 34.991811][ T3639] page_pool_create_percpu() gave up with errno -12 [ 35.104401][ T3659] pimreg: entered allmulticast mode [ 35.236319][ T3659] loop3: detected capacity change from 0 to 1024 [ 35.252654][ T3659] ======================================================= [ 35.252654][ T3659] WARNING: The mand mount option has been deprecated and [ 35.252654][ T3659] and is ignored by this kernel. Remove the mand [ 35.252654][ T3659] option from the mount to silence this warning. [ 35.252654][ T3659] ======================================================= [ 35.297250][ T3659] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.312168][ T3659] JBD2: no valid journal superblock found [ 35.312409][ T3659] EXT4-fs (loop3): Could not load journal inode [ 35.573401][ T3693] loop2: detected capacity change from 0 to 128 [ 35.597894][ T3693] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.612317][ T3693] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.627069][ T3693] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.770718][ T3696] loop2: detected capacity change from 0 to 512 [ 35.810165][ T3690] loop4: detected capacity change from 0 to 1024 [ 35.829426][ T3690] EXT4-fs: Ignoring removed bh option [ 35.833768][ T3696] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.67: inode has both inline data and extents flags [ 35.833858][ T3696] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.834187][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 35.834215][ C0] EXT4-fs (loop2): initial error at time 1788381738: ext4_orphan_get:1403: inode 15 [ 35.834448][ C0] EXT4-fs (loop2): last error at time 1788381738: ext4_orphan_get:1403: inode 15 [ 35.835739][ T3696] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.67: couldn't read orphan inode 15 (err -117) [ 35.835777][ T3696] loop2: lost filesystem error report for type 5 error -117 [ 35.840882][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.848761][ T3696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.878547][ T3690] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.966965][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.016353][ T3690] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.068046][ T3718] vlan2: entered promiscuous mode [ 36.068078][ T3718] bond0: entered promiscuous mode [ 36.068126][ T3718] bond_slave_0: entered promiscuous mode [ 36.068212][ T3718] bond_slave_1: entered promiscuous mode [ 36.080777][ T3718] loop1: detected capacity change from 0 to 164 [ 36.095377][ T3718] isofs_fill_super: root inode is not a directory. Corrupted media? [ 36.100742][ T3696] syz.2.67 (3696) used greatest stack depth: 10784 bytes left [ 36.113780][ T3664] syz.0.57 (3664) used greatest stack depth: 9264 bytes left [ 36.203070][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.391776][ T3738] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 36.396570][ T3739] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 36.461811][ T3745] syz.4.86 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.568589][ T3738] mmap: syz.0.82 (3738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.668891][ T3759] tmpfs: Bad value for 'mpol' [ 36.941459][ T3771] syzkaller0: entered promiscuous mode [ 36.941487][ T3771] syzkaller0: entered allmulticast mode [ 37.201797][ T3793] __nla_validate_parse: 7 callbacks suppressed [ 37.201820][ T3793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 37.353732][ T3791] loop2: detected capacity change from 0 to 1024 [ 37.439181][ T3791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.458037][ T3815] FAULT_INJECTION: forcing a failure. [ 37.458037][ T3815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.458078][ T3815] CPU: 0 UID: 0 PID: 3815 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.458104][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.458117][ T3815] Call Trace: [ 37.458125][ T3815] [ 37.458133][ T3815] __dump_stack+0x1d/0x30 [ 37.458199][ T3815] dump_stack_lvl+0x95/0xd0 [ 37.458222][ T3815] dump_stack+0x15/0x1b [ 37.458245][ T3815] should_fail_ex+0x262/0x280 [ 37.458266][ T3815] should_fail+0xb/0x20 [ 37.458283][ T3815] should_fail_usercopy+0x1a/0x20 [ 37.458321][ T3815] _copy_from_iter+0xcc/0xe70 [ 37.458353][ T3815] ? __alloc_skb+0x516/0x6f0 [ 37.458383][ T3815] ? __alloc_skb+0x209/0x6f0 [ 37.458480][ T3815] netlink_sendmsg+0x4a4/0x6f0 [ 37.458508][ T3815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.458536][ T3815] ____sys_sendmsg+0x532/0x580 [ 37.458567][ T3815] ___sys_sendmsg+0x195/0x1e0 [ 37.458668][ T3815] __x64_sys_sendmsg+0xd4/0x160 [ 37.458702][ T3815] x64_sys_call+0x22ab/0x2550 [ 37.458727][ T3815] do_syscall_64+0x112/0x360 [ 37.458824][ T3815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.458851][ T3815] RIP: 0033:0x7efe64a0e159 [ 37.458869][ T3815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.458890][ T3815] RSP: 002b:00007efe63467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.458913][ T3815] RAX: ffffffffffffffda RBX: 00007efe64c95fa0 RCX: 00007efe64a0e159 [ 37.458935][ T3815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 37.458947][ T3815] RBP: 00007efe63467090 R08: 0000000000000000 R09: 0000000000000000 [ 37.458960][ T3815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.459020][ T3815] R13: 00007efe64c96038 R14: 00007efe64c95fa0 R15: 00007ffd45b14378 [ 37.459040][ T3815] [ 37.471045][ T3791] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.506161][ T3820] FAULT_INJECTION: forcing a failure. [ 37.506161][ T3820] name failslab, interval 1, probability 0, space 0, times 0 [ 37.506192][ T3820] CPU: 0 UID: 0 PID: 3820 Comm: syz.4.113 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.506219][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.506232][ T3820] Call Trace: [ 37.506240][ T3820] [ 37.506249][ T3820] __dump_stack+0x1d/0x30 [ 37.506282][ T3820] dump_stack_lvl+0x95/0xd0 [ 37.506314][ T3820] dump_stack+0x15/0x1b [ 37.506336][ T3820] should_fail_ex+0x262/0x280 [ 37.506388][ T3820] ? __alloc_skb+0x2e0/0x6f0 [ 37.506416][ T3820] should_failslab+0x8c/0xb0 [ 37.506447][ T3820] kmem_cache_alloc_node_noprof+0x82/0x400 [ 37.506546][ T3820] ? netlink_insert+0x684/0x900 [ 37.506574][ T3820] ? __alloc_skb+0x2e0/0x6f0 [ 37.506602][ T3820] __alloc_skb+0x2e0/0x6f0 [ 37.506630][ T3820] ? __alloc_skb+0x209/0x6f0 [ 37.506698][ T3820] netlink_alloc_large_skb+0xbf/0xf0 [ 37.506725][ T3820] netlink_sendmsg+0x40c/0x6f0 [ 37.506818][ T3820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.506847][ T3820] ____sys_sendmsg+0x532/0x580 [ 37.506903][ T3820] ___sys_sendmsg+0x195/0x1e0 [ 37.506946][ T3820] __x64_sys_sendmsg+0xd4/0x160 [ 37.507025][ T3820] x64_sys_call+0x22ab/0x2550 [ 37.507053][ T3820] do_syscall_64+0x112/0x360 [ 37.507132][ T3820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.507213][ T3820] RIP: 0033:0x7f94b301e159 [ 37.507230][ T3820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.507249][ T3820] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.507276][ T3820] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 37.507292][ T3820] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 37.507307][ T3820] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 37.507384][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.507399][ T3820] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 37.507487][ T3820] [ 37.520267][ T3818] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 37.520505][ T3818] macvlan2: entered promiscuous mode [ 37.534379][ T3818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 37.721938][ T1014] bridge0: entered promiscuous mode [ 37.937336][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.974599][ T3081] bridge0: entered promiscuous mode [ 38.006191][ T3855] loop4: detected capacity change from 0 to 512 [ 38.016075][ T3855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.016120][ T3855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.047481][ T3855] EXT4-fs (loop4): 1 truncate cleaned up [ 38.048227][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.128316][ T3855] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6537: inode #15: comm syz.4.127: bad extra_isize 62 (inode size 256) [ 38.142011][ T3855] EXT4-fs (loop4): Remounting filesystem read-only [ 38.167775][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.274763][ T3848] loop3: detected capacity change from 0 to 1024 [ 38.287150][ T3848] EXT4-fs: Ignoring removed bh option [ 38.295211][ T3848] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.316089][ T3878] loop2: detected capacity change from 0 to 2048 [ 38.316427][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 38.316446][ T29] audit: type=1400 audit(1788381740.868:795): avc: denied { mounton } for pid=3868 comm="syz.2.133" path="/16/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 38.361688][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.374412][ T3878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.379297][ T3887] FAULT_INJECTION: forcing a failure. [ 38.379297][ T3887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.379329][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.4.138 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.379356][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.379370][ T3887] Call Trace: [ 38.379378][ T3887] [ 38.379387][ T3887] __dump_stack+0x1d/0x30 [ 38.379458][ T3887] dump_stack_lvl+0x95/0xd0 [ 38.379482][ T3887] dump_stack+0x15/0x1b [ 38.379504][ T3887] should_fail_ex+0x262/0x280 [ 38.379527][ T3887] should_fail+0xb/0x20 [ 38.379621][ T3887] should_fail_usercopy+0x1a/0x20 [ 38.379703][ T3887] _copy_from_user+0x1c/0xb0 [ 38.379729][ T3887] ___sys_sendmsg+0xc1/0x1e0 [ 38.379774][ T3887] __x64_sys_sendmsg+0xd4/0x160 [ 38.379848][ T3887] x64_sys_call+0x22ab/0x2550 [ 38.379875][ T3887] do_syscall_64+0x112/0x360 [ 38.379906][ T3887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.379931][ T3887] RIP: 0033:0x7f94b301e159 [ 38.379948][ T3887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.380021][ T3887] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.380045][ T3887] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 38.380061][ T3887] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 38.380075][ T3887] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 38.380089][ T3887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.380168][ T3887] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 38.380188][ T3887] [ 38.416838][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.438621][ T29] audit: type=1400 audit(1788381740.988:796): avc: denied { connect } for pid=3874 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.446055][ T29] audit: type=1400 audit(1788381740.988:797): avc: denied { write } for pid=3847 comm="syz.3.124" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.453147][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.140'. [ 38.456324][ T29] audit: type=1400 audit(1788381741.008:798): avc: denied { create } for pid=3889 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.470594][ T29] audit: type=1400 audit(1788381741.018:799): avc: denied { setopt } for pid=3889 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.477790][ T3880] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20003 [ 38.478791][ T29] audit: type=1400 audit(1788381741.028:800): avc: denied { bind } for pid=3889 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.479067][ T29] audit: type=1400 audit(1788381741.028:801): avc: denied { connect } for pid=3889 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.479579][ T29] audit: type=1400 audit(1788381741.028:802): avc: denied { ioctl } for pid=3889 comm="syz.4.140" path="socket:[6512]" dev="sockfs" ino=6512 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.510484][ T29] audit: type=1400 audit(1788381741.058:803): avc: denied { lock } for pid=3889 comm="syz.4.140" path="socket:[6503]" dev="sockfs" ino=6503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.518888][ T29] audit: type=1400 audit(1788381741.068:804): avc: denied { mount } for pid=3888 comm="syz.0.139" name="/" dev="autofs" ino=6515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 38.714822][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.824625][ T3906] loop4: detected capacity change from 0 to 164 [ 38.827545][ T3906] iso9660: Unknown parameter '00000000000000000004' [ 38.869172][ T3904] loop3: detected capacity change from 0 to 512 [ 38.882553][ T3904] EXT4-fs (loop3): invalid #clusters per group: 95 [ 38.929537][ T3904] capability: warning: `syz.3.143' uses deprecated v2 capabilities in a way that may be insecure [ 39.373306][ T3918] loop1: detected capacity change from 0 to 2048 [ 39.775493][ T3918] loop1: unable to read partition table [ 39.775571][ T3918] loop1: partition table beyond EOD, truncated [ 39.775594][ T3918] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 40.081581][ T3933] loop1: detected capacity change from 0 to 512 [ 40.132042][ T3933] EXT4-fs (loop1): invalid #clusters per group: 95 [ 40.295538][ T3931] loop3: detected capacity change from 0 to 1024 [ 40.338622][ T3931] EXT4-fs: Ignoring removed bh option [ 40.350490][ T3931] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 40.430439][ T3931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.451990][ T3941] pimreg: tun_chr_ioctl cmd 1074025675 [ 40.452084][ T3941] pimreg: persist disabled [ 40.555224][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.573443][ T3944] FAULT_INJECTION: forcing a failure. [ 40.573443][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.573477][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.573505][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.573520][ T3944] Call Trace: [ 40.573527][ T3944] [ 40.573536][ T3944] __dump_stack+0x1d/0x30 [ 40.573616][ T3944] dump_stack_lvl+0x95/0xd0 [ 40.573641][ T3944] dump_stack+0x15/0x1b [ 40.573711][ T3944] should_fail_ex+0x262/0x280 [ 40.573731][ T3944] should_fail+0xb/0x20 [ 40.573749][ T3944] should_fail_usercopy+0x1a/0x20 [ 40.573771][ T3944] _copy_to_user+0x20/0xa0 [ 40.573825][ T3944] simple_read_from_buffer+0xb5/0x130 [ 40.573857][ T3944] proc_fail_nth_read+0x10e/0x150 [ 40.573918][ T3944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.573957][ T3944] vfs_read+0x18e/0x7c0 [ 40.574013][ T3944] ? __tun_chr_ioctl+0x52f/0x1550 [ 40.574045][ T3944] ? __rcu_read_unlock+0x4e/0x70 [ 40.574085][ T3944] ? __fget_files+0x184/0x1c0 [ 40.574104][ T3944] ? mutex_lock+0x57/0x90 [ 40.574128][ T3944] ksys_read+0xdc/0x1a0 [ 40.574158][ T3944] __x64_sys_read+0x40/0x50 [ 40.574242][ T3944] x64_sys_call+0x2135/0x2550 [ 40.574335][ T3944] do_syscall_64+0x112/0x360 [ 40.574370][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.574397][ T3944] RIP: 0033:0x7efe649ce98e [ 40.574415][ T3944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.574484][ T3944] RSP: 002b:00007efe63466fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.574506][ T3944] RAX: ffffffffffffffda RBX: 00007efe634676c0 RCX: 00007efe649ce98e [ 40.574522][ T3944] RDX: 000000000000000f RSI: 00007efe634670a0 RDI: 0000000000000004 [ 40.574600][ T3944] RBP: 00007efe63467090 R08: 0000000000000000 R09: 0000000000000000 [ 40.574628][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.574643][ T3944] R13: 00007efe64c96038 R14: 00007efe64c95fa0 R15: 00007ffd45b14378 [ 40.574662][ T3944] [ 40.852887][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 40.884245][ T3962] loop3: detected capacity change from 0 to 128 [ 40.891133][ T3966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.167'. [ 40.900704][ T3966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.901837][ T3966] EXT4-fs (loop0): 1 truncate cleaned up [ 40.902301][ T3966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.905184][ T3966] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.167: Logical block already allocated [ 40.905601][ T3966] EXT4-fs (loop0): Remounting filesystem read-only [ 40.950305][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.096394][ T3984] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.096517][ T3984] EXT4-fs: test_dummy_encryption option not supported [ 41.097254][ T3984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.175'. [ 41.129907][ T3986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 41.630954][ T4019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.189'. [ 41.662212][ T4021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.675888][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.810749][ T4038] netlink: 120 bytes leftover after parsing attributes in process `syz.1.190'. [ 41.811189][ T4038] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 41.859461][ T4042] xt_hashlimit: size too large, truncated to 1048576 [ 41.900602][ T4045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.197'. [ 41.920341][ T4045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.942488][ T4045] EXT4-fs (loop3): 1 truncate cleaned up [ 41.942880][ T4045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.965985][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.977044][ T4045] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.197: Logical block already allocated [ 41.986982][ T4045] EXT4-fs (loop3): Remounting filesystem read-only [ 42.018434][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.019558][ T4055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.022425][ T4055] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.051410][ T4063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.165564][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.251448][ T4067] EXT4-fs: Ignoring removed bh option [ 42.291180][ T4067] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.333427][ T4067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.770259][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.860367][ T4086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.209'. [ 42.882494][ T4089] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 42.979307][ T4100] set_capacity_and_notify: 6 callbacks suppressed [ 42.979335][ T4100] loop0: detected capacity change from 0 to 512 [ 42.982592][ T4102] FAULT_INJECTION: forcing a failure. [ 42.982592][ T4102] name fail_futex, interval 1, probability 0, space 0, times 1 [ 42.982623][ T4102] CPU: 0 UID: 0 PID: 4102 Comm: syz.4.218 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.982652][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.982666][ T4102] Call Trace: [ 42.982674][ T4102] [ 42.982683][ T4102] __dump_stack+0x1d/0x30 [ 42.982716][ T4102] dump_stack_lvl+0x95/0xd0 [ 42.982756][ T4102] dump_stack+0x15/0x1b [ 42.982782][ T4102] should_fail_ex+0x262/0x280 [ 42.982806][ T4102] should_fail+0xb/0x20 [ 42.982826][ T4102] get_futex_key+0x12d/0xb10 [ 42.982891][ T4102] futex_wait_setup+0x49/0x3e0 [ 42.982935][ T4102] ? __cgroup_account_cputime+0x83/0xa0 [ 42.982968][ T4102] ? update_se+0xc5/0x460 [ 42.982995][ T4102] __futex_wait+0xa9/0x260 [ 42.983016][ T4102] ? __pfx_futex_wake_mark+0x10/0x10 [ 42.983056][ T4102] futex_wait+0x98/0x1c0 [ 42.983094][ T4102] do_futex+0x391/0x460 [ 42.983126][ T4102] __se_sys_futex+0x2f6/0x370 [ 42.983159][ T4102] __x64_sys_futex+0x78/0x90 [ 42.983188][ T4102] x64_sys_call+0x22e2/0x2550 [ 42.983291][ T4102] do_syscall_64+0x112/0x360 [ 42.983326][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.983411][ T4102] RIP: 0033:0x7f94b301e159 [ 42.983432][ T4102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.983455][ T4102] RSP: 002b:00007f94b1a770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.983495][ T4102] RAX: ffffffffffffffda RBX: 00007f94b32a5fa8 RCX: 00007f94b301e159 [ 42.983511][ T4102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94b32a5fa8 [ 42.983565][ T4102] RBP: 00007f94b32a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.983593][ T4102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.983607][ T4102] R13: 00007f94b32a6038 R14: 00007ffc74658630 R15: 00007ffc74658718 [ 42.983628][ T4102] [ 43.120192][ T4100] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.217: inode has both inline data and extents flags [ 43.120313][ T4100] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.120402][ T4100] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.217: couldn't read orphan inode 15 (err -117) [ 43.120432][ T4100] loop0: lost filesystem error report for type 5 error -117 [ 43.120765][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.306741][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.340950][ T4122] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 43.380170][ T4122] macvtap1: entered allmulticast mode [ 43.385439][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 43.385457][ T29] audit: type=1400 audit(1788381745.938:954): avc: denied { append } for pid=4126 comm="syz.1.228" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.386262][ T29] audit: type=1400 audit(1788381745.938:955): avc: denied { mount } for pid=4126 comm="syz.1.228" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.386650][ T29] audit: type=1400 audit(1788381745.938:956): avc: denied { read } for pid=4126 comm="syz.1.228" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.386711][ T29] audit: type=1400 audit(1788381745.938:957): avc: denied { open } for pid=4126 comm="syz.1.228" path="/50/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.387082][ T29] audit: type=1400 audit(1788381745.938:958): avc: denied { ioctl } for pid=4126 comm="syz.1.228" path="/50/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.411464][ T4122] macvtap2: entered allmulticast mode [ 43.418598][ T4122] bond1: (slave bridge1): making interface the new active one [ 43.418947][ T4122] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 43.420022][ T4104] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 43.423285][ T4133] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 43.429802][ T4104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.437361][ T4131] macvtap3: entered allmulticast mode [ 43.445731][ T4132] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 43.450819][ T4138] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 43.524886][ T4104] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 43.962051][ T29] audit: type=1400 audit(1788381746.508:959): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.002731][ T29] audit: type=1400 audit(1788381746.548:960): avc: denied { setopt } for pid=4146 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.697743][ T29] audit: type=1400 audit(1788381747.236:961): avc: denied { write } for pid=4167 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.761978][ T4176] device-mapper: ioctl: Unable to rename non-existent device, to  [ 44.791791][ T4178] netlink: 'syz.4.243': attribute type 49 has an invalid length. [ 45.073700][ T29] audit: type=1400 audit(1788381747.587:962): avc: denied { create } for pid=4198 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.073737][ T29] audit: type=1400 audit(1788381747.587:963): avc: denied { sys_admin } for pid=4198 comm="syz.2.252" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.220085][ T4207] netlink: 'syz.2.254': attribute type 49 has an invalid length. [ 45.223391][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 45.229606][ T4203] IPVS: length: 27 != 24 [ 45.388869][ T4210] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.255'. [ 45.423337][ T4210] loop1: detected capacity change from 0 to 1024 [ 45.439170][ T4210] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 45.439258][ T4210] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 45.439324][ T4210] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (240!=20869) [ 45.439501][ T4210] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.442252][ T4210] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #3: comm syz.1.255: iget: bad extra_isize 65535 (inode size 1024) [ 45.442305][ T4210] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 45.444151][ T4210] EXT4-fs (loop1): no journal found [ 45.444177][ T4210] EXT4-fs (loop1): can't get journal size [ 45.447672][ T4210] EXT4-fs error (device loop1): __ext4_fill_super:5621: inode #2: comm syz.1.255: iget: bad extra_isize 65535 (inode size 1024) [ 45.447721][ T4210] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 45.447956][ T4210] EXT4-fs (loop1): get root inode failed [ 45.447981][ T4210] EXT4-fs (loop1): mount failed [ 45.456055][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 45.456076][ C1] EXT4-fs (loop1): initial error at time 1788381747: ext4_get_journal_inode:5927: inode 3 [ 45.456105][ C1] EXT4-fs (loop1): last error at time 1788381747: __ext4_fill_super:5621: inode 2 [ 45.790096][ T4233] loop1: detected capacity change from 0 to 512 [ 45.803734][ T4233] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.092656][ T4248] loop2: detected capacity change from 0 to 1024 [ 46.117282][ T4248] EXT4-fs: Ignoring removed orlov option [ 46.135523][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.156469][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 46.219057][ T4258] FAULT_INJECTION: forcing a failure. [ 46.219057][ T4258] name failslab, interval 1, probability 0, space 0, times 0 [ 46.219093][ T4258] CPU: 1 UID: 0 PID: 4258 Comm: syz.4.274 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.219121][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.219136][ T4258] Call Trace: [ 46.219146][ T4258] [ 46.219155][ T4258] __dump_stack+0x1d/0x30 [ 46.219262][ T4258] dump_stack_lvl+0x95/0xd0 [ 46.219285][ T4258] dump_stack+0x15/0x1b [ 46.219448][ T4258] should_fail_ex+0x262/0x280 [ 46.219471][ T4258] ? audit_log_start+0x34c/0x730 [ 46.219493][ T4258] should_failslab+0x8c/0xb0 [ 46.219515][ T4258] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 46.219603][ T4258] ? audit_log_start+0x34c/0x730 [ 46.219634][ T4258] audit_log_start+0x34c/0x730 [ 46.219699][ T4258] audit_seccomp+0x49/0x110 [ 46.219757][ T4258] __seccomp_filter+0x909/0x1360 [ 46.219793][ T4258] ? __fget_files+0x184/0x1c0 [ 46.219814][ T4258] ? mutex_lock+0x57/0x90 [ 46.219836][ T4258] ? mutex_unlock+0x4e/0x90 [ 46.219860][ T4258] __seccomp_permit_syscall+0x7d/0x150 [ 46.219959][ T4258] do_syscall_64+0xca/0x360 [ 46.220022][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.220047][ T4258] RIP: 0033:0x7f94b301e159 [ 46.220064][ T4258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.220084][ T4258] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 46.220169][ T4258] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 46.220182][ T4258] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000080 [ 46.220195][ T4258] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 46.220208][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.220265][ T4258] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 46.220285][ T4258] [ 46.264555][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.543985][ T4279] loop4: detected capacity change from 0 to 8192 [ 46.556818][ T4283] netlink: 'syz.0.282': attribute type 32 has an invalid length. [ 46.678687][ T4294] netlink: zone id is out of range [ 46.678779][ T4294] netlink: zone id is out of range [ 46.679401][ T4294] netlink: set zone limit has 4 unknown bytes [ 47.047712][ T4323] FAULT_INJECTION: forcing a failure. [ 47.047712][ T4323] name failslab, interval 1, probability 0, space 0, times 0 [ 47.047823][ T4323] CPU: 1 UID: 0 PID: 4323 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.047850][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.047863][ T4323] Call Trace: [ 47.047868][ T4323] [ 47.047876][ T4323] __dump_stack+0x1d/0x30 [ 47.047906][ T4323] dump_stack_lvl+0x95/0xd0 [ 47.048076][ T4323] dump_stack+0x15/0x1b [ 47.048099][ T4323] should_fail_ex+0x262/0x280 [ 47.048124][ T4323] ? mpi_alloc+0x31/0xd0 [ 47.048215][ T4323] should_failslab+0x8c/0xb0 [ 47.048246][ T4323] __kmalloc_cache_noprof+0x7a/0x400 [ 47.048279][ T4323] ? mpi_alloc+0x31/0xd0 [ 47.048427][ T4323] mpi_alloc+0x31/0xd0 [ 47.048458][ T4323] mpi_read_raw_data+0xf0/0x470 [ 47.048543][ T4323] rsa_set_pub_key+0x1ce/0x340 [ 47.048574][ T4323] software_key_query+0x46e/0x660 [ 47.048618][ T4323] ? __pfx_software_key_query+0x10/0x10 syzkaller [ 47.048648][ T4323] query_asymmetric_key+0xa7/0xd0 syzkaller login:[ 47.048678][ T4323] keyctl_pkey_params_get_2+0x128/0x3e0 [ 47.048750][ T4323] keyctl_pkey_e_d_s+0x54/0x260 [ 47.048784][ T4323] __se_sys_keyctl+0x5fb/0xb70 [ 47.048806][ T4323] ? vfs_write+0x850/0x9a0 [ 47.048916][ T4323] ? __fget_files+0x184/0x1c0 [ 47.048939][ T4323] ? mutex_lock+0x57/0x90 [ 47.048960][ T4323] ? mutex_unlock+0x4e/0x90 [ 47.048979][ T4323] ? fput+0x91/0xc0 [ 47.049076][ T4323] __x64_sys_keyctl+0x67/0x80 [ 47.049100][ T4323] x64_sys_call+0x1fe0/0x2550 [ 47.049125][ T4323] do_syscall_64+0x112/0x360 [ 47.049154][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.049177][ T4323] RIP: 0033:0x7fbaa762e159 [ 47.049224][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.049243][ T4323] RSP: 002b:00007fbaa6087028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 47.049264][ T4323] RAX: ffffffffffffffda RBX: 00007fbaa78b5fa0 RCX: 00007fbaa762e159 [ 47.049276][ T4323] RDX: 00002000000007c0 RSI: 0000200000000180 RDI: 000000000000001a [ 47.049288][ T4323] RBP: 00007fbaa6087090 R08: 0000000000000000 R09: 0000000000000000 [ 47.049300][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.049313][ T4323] R13: 00007fbaa78b6038 R14: 00007fbaa78b5fa0 R15: 00007ffe7bc55fa8 [ 47.049345][ T4323] [ 47.379556][ T4325] loop1: detected capacity change from 0 to 8192 [ 47.403708][ T4329] loop2: detected capacity change from 0 to 1024 [ 47.430151][ T4329] EXT4-fs: Ignoring removed bh option [ 47.459034][ T4329] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.484528][ T4329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.551251][ T4339] loop1: detected capacity change from 0 to 164 [ 47.559908][ T4339] iso9660: Unknown parameter 'ávD' [ 47.605433][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.630527][ T4345] loop2: detected capacity change from 0 to 512 [ 47.631185][ T4345] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 47.631210][ T4345] EXT4-fs (loop2): bad block size 32768 [ 47.640583][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 47.640681][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 47.712170][ T4349] loop3: detected capacity change from 0 to 512 [ 47.713170][ T4349] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 47.713192][ T4349] EXT4-fs (loop3): bad block size 32768 [ 47.742074][ T4349] FAULT_INJECTION: forcing a failure. [ 47.742074][ T4349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.742165][ T4349] CPU: 1 UID: 0 PID: 4349 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.742209][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.742221][ T4349] Call Trace: [ 47.742229][ T4349] [ 47.742238][ T4349] __dump_stack+0x1d/0x30 [ 47.742340][ T4349] dump_stack_lvl+0x95/0xd0 [ 47.742364][ T4349] dump_stack+0x15/0x1b [ 47.742386][ T4349] should_fail_ex+0x262/0x280 [ 47.742410][ T4349] should_fail+0xb/0x20 [ 47.742430][ T4349] should_fail_usercopy+0x1a/0x20 [ 47.742457][ T4349] _copy_from_user+0x1c/0xb0 [ 47.742538][ T4349] ___sys_sendmsg+0xc1/0x1e0 [ 47.742583][ T4349] __x64_sys_sendmsg+0xd4/0x160 [ 47.742652][ T4349] x64_sys_call+0x22ab/0x2550 [ 47.742679][ T4349] do_syscall_64+0x112/0x360 [ 47.742710][ T4349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.742735][ T4349] RIP: 0033:0x7f6c5ad7e159 [ 47.742796][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.742825][ T4349] RSP: 002b:00007f6c597d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.742928][ T4349] RAX: ffffffffffffffda RBX: 00007f6c5b005fa0 RCX: 00007f6c5ad7e159 [ 47.742944][ T4349] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 0000000000000004 [ 47.742958][ T4349] RBP: 00007f6c597d7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.742973][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.742987][ T4349] R13: 00007f6c5b006038 R14: 00007f6c5b005fa0 R15: 00007ffe00718af8 [ 47.743007][ T4349] [ 47.864465][ T4349] EXT4-fs: Ignoring removed orlov option [ 47.874777][ T4349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.887109][ T4349] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.309: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 47.890491][ T4349] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.891156][ T4349] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.309: couldn't read orphan inode 16 (err -117) [ 47.891231][ T4349] loop3: lost filesystem error report for type 5 error -117 [ 47.893216][ T4349] EXT4-fs (loop3): 1 orphan inode deleted [ 47.901003][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.975151][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.036116][ T4345] EXT4-fs: Ignoring removed orlov option [ 48.039559][ T4345] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.055360][ T4345] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.307: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 48.055447][ T4345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.056601][ T4345] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.307: couldn't read orphan inode 16 (err -117) [ 48.056675][ T4345] loop2: lost filesystem error report for type 5 error -117 [ 48.061449][ T4345] EXT4-fs (loop2): 1 orphan inode deleted [ 48.068901][ T4345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.164531][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.341152][ T4375] set_capacity_and_notify: 2 callbacks suppressed [ 48.341176][ T4375] loop2: detected capacity change from 0 to 512 [ 48.380681][ T4357] loop3: detected capacity change from 0 to 1164 [ 48.392219][ T4375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.392372][ T4375] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.491786][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.605598][ T4381] FAULT_INJECTION: forcing a failure. [ 48.605598][ T4381] name failslab, interval 1, probability 0, space 0, times 0 [ 48.605637][ T4381] CPU: 0 UID: 0 PID: 4381 Comm: syz.2.318 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.605665][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.605680][ T4381] Call Trace: [ 48.605688][ T4381] [ 48.605698][ T4381] __dump_stack+0x1d/0x30 [ 48.605800][ T4381] dump_stack_lvl+0x95/0xd0 [ 48.605825][ T4381] dump_stack+0x15/0x1b [ 48.605849][ T4381] should_fail_ex+0x262/0x280 [ 48.605873][ T4381] ? __send_signal_locked+0x14d/0x750 [ 48.605983][ T4381] should_failslab+0x8c/0xb0 [ 48.606014][ T4381] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 48.606058][ T4381] ? __send_signal_locked+0x14d/0x750 [ 48.606093][ T4381] __send_signal_locked+0x14d/0x750 [ 48.606123][ T4381] ? __rcu_read_unlock+0x33/0x70 [ 48.606214][ T4381] do_notify_parent+0x55f/0x600 [ 48.606250][ T4381] release_task+0xa92/0xb40 [ 48.606279][ T4381] do_exit+0xd79/0x1510 [ 48.606376][ T4381] do_group_exit+0xfe/0x140 [ 48.606403][ T4381] ? get_signal+0xe00/0xf10 [ 48.606444][ T4381] get_signal+0xe07/0xf10 [ 48.606536][ T4381] arch_do_signal_or_restart+0x96/0x480 [ 48.606634][ T4381] exit_to_user_mode_loop+0x15d/0x8c0 [ 48.606673][ T4381] do_syscall_64+0x212/0x360 [ 48.606725][ T4381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.606824][ T4381] RIP: 0033:0x7f708fa8e159 [ 48.606839][ T4381] Code: Unable to access opcode bytes at 0x7f708fa8e12f. [ 48.606849][ T4381] RSP: 002b:00007f708e4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.606873][ T4381] RAX: fffffffffffffe00 RBX: 00007f708fd15fa8 RCX: 00007f708fa8e159 [ 48.606923][ T4381] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f708fd15fa8 [ 48.606975][ T4381] RBP: 00007f708fd15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 48.607034][ T4381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.607050][ T4381] R13: 00007f708fd16038 R14: 00007ffeeccd3340 R15: 00007ffeeccd3428 [ 48.607106][ T4381] [ 48.674523][ T4357] loop3: detected capacity change from 0 to 512 [ 48.725337][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 48.725354][ T29] audit: type=1400 audit(1788381750.946:1074): avc: denied { search } for pid=4356 comm="syz.3.312" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.725482][ T29] audit: type=1400 audit(1788381750.955:1075): avc: denied { search } for pid=4356 comm="syz.3.312" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.729485][ T29] audit: type=1400 audit(1788381750.955:1076): avc: denied { write search } for pid=4356 comm="syz.3.312" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.735900][ T29] audit: type=1400 audit(1788381750.964:1077): avc: denied { search } for pid=4356 comm="syz.3.312" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.744107][ T29] audit: type=1400 audit(1788381750.964:1078): avc: denied { search } for pid=4356 comm="syz.3.312" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.748356][ T29] audit: type=1400 audit(1788381750.983:1079): avc: denied { read } for pid=4382 comm="syz.2.319" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.748386][ T29] audit: type=1400 audit(1788381750.983:1080): avc: denied { open } for pid=4382 comm="syz.2.319" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.954436][ T29] audit: type=1400 audit(1788381751.167:1081): avc: denied { shutdown } for pid=4388 comm="syz.3.321" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.009616][ T4392] netlink: 'syz.4.322': attribute type 6 has an invalid length. [ 49.112035][ T29] audit: type=1400 audit(1788381751.315:1082): avc: denied { mounton } for pid=4403 comm="syz.0.327" path="/66/file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.166604][ T4404] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=154 sclass=netlink_xfrm_socket pid=4404 comm=syz.0.327 [ 49.200147][ T4409] FAULT_INJECTION: forcing a failure. [ 49.200147][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 49.200180][ T4409] CPU: 1 UID: 0 PID: 4409 Comm: syz.4.329 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.200282][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.200297][ T4409] Call Trace: [ 49.200304][ T4409] [ 49.200313][ T4409] __dump_stack+0x1d/0x30 [ 49.200345][ T4409] dump_stack_lvl+0x95/0xd0 [ 49.200414][ T4409] dump_stack+0x15/0x1b [ 49.200504][ T4409] should_fail_ex+0x262/0x280 [ 49.200529][ T4409] ? __send_signal_locked+0x14d/0x750 [ 49.200562][ T4409] should_failslab+0x8c/0xb0 [ 49.200608][ T4409] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 49.200641][ T4409] ? __send_signal_locked+0x14d/0x750 [ 49.200675][ T4409] __send_signal_locked+0x14d/0x750 [ 49.200711][ T4409] ? __rcu_read_unlock+0x33/0x70 [ 49.200749][ T4409] do_notify_parent+0x55f/0x600 [ 49.200789][ T4409] release_task+0xa92/0xb40 [ 49.200865][ T4409] do_exit+0xd79/0x1510 [ 49.200892][ T4409] do_group_exit+0xfe/0x140 [ 49.200919][ T4409] ? get_signal+0xe00/0xf10 [ 49.200955][ T4409] get_signal+0xe07/0xf10 [ 49.201011][ T4409] arch_do_signal_or_restart+0x96/0x480 [ 49.201046][ T4409] exit_to_user_mode_loop+0x15d/0x8c0 [ 49.201091][ T4409] do_syscall_64+0x212/0x360 [ 49.201203][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.201235][ T4409] RIP: 0033:0x7f94b301e159 [ 49.201254][ T4409] Code: Unable to access opcode bytes at 0x7f94b301e12f. [ 49.201266][ T4409] RSP: 002b:00007f94b1a770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.201290][ T4409] RAX: fffffffffffffe00 RBX: 00007f94b32a5fa8 RCX: 00007f94b301e159 [ 49.201340][ T4409] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94b32a5fa8 [ 49.201355][ T4409] RBP: 00007f94b32a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.201369][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.201384][ T4409] R13: 00007f94b32a6038 R14: 00007ffc74658630 R15: 00007ffc74658718 [ 49.201446][ T4409] [ 49.209336][ T29] audit: type=1400 audit(1788381751.407:1083): avc: denied { read } for pid=4403 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.328613][ T4400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 49.446472][ T4431] loop4: detected capacity change from 0 to 512 [ 49.468551][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.468628][ T4431] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.667623][ T3022] veth0_vlan: left promiscuous mode [ 49.670546][ T1509] veth0_vlan: entered promiscuous mode [ 49.745544][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.797682][ T4464] FAULT_INJECTION: forcing a failure. [ 49.797682][ T4464] name failslab, interval 1, probability 0, space 0, times 0 [ 49.797713][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.797794][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.797826][ T4464] Call Trace: [ 49.797834][ T4464] [ 49.797844][ T4464] __dump_stack+0x1d/0x30 [ 49.797868][ T4464] dump_stack_lvl+0x95/0xd0 [ 49.797898][ T4464] dump_stack+0x15/0x1b [ 49.797925][ T4464] should_fail_ex+0x262/0x280 [ 49.797967][ T4464] ? __send_signal_locked+0x14d/0x750 [ 49.797997][ T4464] should_failslab+0x8c/0xb0 [ 49.798024][ T4464] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 49.798051][ T4464] ? __send_signal_locked+0x14d/0x750 [ 49.798162][ T4464] __send_signal_locked+0x14d/0x750 [ 49.798326][ T4464] ? __rcu_read_unlock+0x33/0x70 [ 49.798361][ T4464] do_notify_parent+0x55f/0x600 [ 49.798399][ T4464] release_task+0xa92/0xb40 [ 49.798456][ T4464] do_exit+0xd79/0x1510 [ 49.798490][ T4464] do_group_exit+0xfe/0x140 [ 49.798542][ T4464] ? get_signal+0xe00/0xf10 [ 49.798577][ T4464] get_signal+0xe07/0xf10 [ 49.798692][ T4464] arch_do_signal_or_restart+0x96/0x480 [ 49.798725][ T4464] exit_to_user_mode_loop+0x15d/0x8c0 [ 49.798768][ T4464] do_syscall_64+0x212/0x360 [ 49.798831][ T4464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.798903][ T4464] RIP: 0033:0x7f708fa8e159 [ 49.798918][ T4464] Code: Unable to access opcode bytes at 0x7f708fa8e12f. [ 49.798928][ T4464] RSP: 002b:00007f708e4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.798951][ T4464] RAX: fffffffffffffe00 RBX: 00007f708fd15fa8 RCX: 00007f708fa8e159 [ 49.798968][ T4464] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f708fd15fa8 [ 49.798983][ T4464] RBP: 00007f708fd15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.798998][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.799043][ T4464] R13: 00007f708fd16038 R14: 00007ffeeccd3340 R15: 00007ffeeccd3428 [ 49.799062][ T4464] [ 49.851610][ T4474] loop3: detected capacity change from 0 to 512 [ 49.883094][ T4474] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.883253][ T4474] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.884453][ T4474] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.884597][ T4474] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 49.885011][ T4474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.344: bg 0: block 15: invalid block bitmap [ 49.885095][ T4474] loop3: lost filesystem error report for type 5 error -117 [ 49.885311][ T4474] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 49.885330][ T4474] loop3: lost filesystem error report for type 5 error -117 [ 49.885519][ T4474] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.344: data will be lost [ 49.885667][ T4474] EXT4-fs (loop3): 1 truncate cleaned up [ 49.886082][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.439772][ T4545] loop1: detected capacity change from 0 to 4096 [ 50.459295][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.495813][ T4545] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.362: corrupted inode contents [ 50.510681][ T4545] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #15: comm syz.1.362: mark_inode_dirty error [ 50.522581][ T4545] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.362: corrupted inode contents [ 50.534830][ T4545] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.362: mark_inode_dirty error [ 50.546431][ T4545] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.362: corrupted inode contents [ 50.559658][ T4545] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.362: mark_inode_dirty error [ 50.571365][ T4545] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.362: corrupted inode contents [ 50.585748][ T4545] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.362: mark_inode_dirty error [ 50.597145][ T4545] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem [ 50.614477][ T4553] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.362: corrupted inode contents [ 50.695882][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.705725][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.880739][ T4580] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 50.880802][ T4580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.370'. [ 50.982206][ T4589] FAULT_INJECTION: forcing a failure. [ 50.982206][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 50.982237][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.982261][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.982274][ T4589] Call Trace: [ 50.982282][ T4589] [ 50.982289][ T4589] __dump_stack+0x1d/0x30 [ 50.982358][ T4589] dump_stack_lvl+0x95/0xd0 [ 50.982381][ T4589] dump_stack+0x15/0x1b [ 50.982478][ T4589] should_fail_ex+0x262/0x280 [ 50.982504][ T4589] ? __send_signal_locked+0x14d/0x750 [ 50.982536][ T4589] should_failslab+0x8c/0xb0 [ 50.982637][ T4589] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 50.982669][ T4589] ? __send_signal_locked+0x14d/0x750 [ 50.982704][ T4589] __send_signal_locked+0x14d/0x750 [ 50.982787][ T4589] ? __rcu_read_unlock+0x33/0x70 [ 50.982817][ T4589] do_notify_parent+0x55f/0x600 [ 50.982854][ T4589] release_task+0xa92/0xb40 [ 50.982889][ T4589] do_exit+0xd79/0x1510 [ 50.982925][ T4589] do_group_exit+0xfe/0x140 [ 50.983005][ T4589] ? get_signal+0xe00/0xf10 [ 50.983041][ T4589] get_signal+0xe07/0xf10 [ 50.983078][ T4589] arch_do_signal_or_restart+0x96/0x480 [ 50.983155][ T4589] exit_to_user_mode_loop+0x15d/0x8c0 [ 50.983203][ T4589] do_syscall_64+0x212/0x360 [ 50.983236][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.983258][ T4589] RIP: 0033:0x7f708fa8e159 [ 50.983272][ T4589] Code: Unable to access opcode bytes at 0x7f708fa8e12f. [ 50.983284][ T4589] RSP: 002b:00007f708e4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.983348][ T4589] RAX: fffffffffffffe00 RBX: 00007f708fd15fa8 RCX: 00007f708fa8e159 [ 50.983365][ T4589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f708fd15fa8 [ 50.983380][ T4589] RBP: 00007f708fd15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 50.983393][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.983407][ T4589] R13: 00007f708fd16038 R14: 00007ffeeccd3340 R15: 00007ffeeccd3428 [ 50.983428][ T4589] [ 51.166302][ T4607] FAULT_INJECTION: forcing a failure. [ 51.166302][ T4607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.166335][ T4607] CPU: 1 UID: 0 PID: 4607 Comm: syz.1.378 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.166412][ T4607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.166426][ T4607] Call Trace: [ 51.166496][ T4607] [ 51.166505][ T4607] __dump_stack+0x1d/0x30 [ 51.166595][ T4607] dump_stack_lvl+0x95/0xd0 [ 51.166700][ T4607] dump_stack+0x15/0x1b [ 51.166724][ T4607] should_fail_ex+0x262/0x280 [ 51.166749][ T4607] should_fail+0xb/0x20 [ 51.166780][ T4607] should_fail_usercopy+0x1a/0x20 [ 51.166805][ T4607] _copy_to_user+0x20/0xa0 [ 51.166833][ T4607] simple_read_from_buffer+0xb5/0x130 [ 51.166867][ T4607] proc_fail_nth_read+0x10e/0x150 [ 51.166957][ T4607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.166995][ T4607] vfs_read+0x18e/0x7c0 [ 51.167173][ T4607] ? __rcu_read_unlock+0x4e/0x70 [ 51.167207][ T4607] ? __fget_files+0x184/0x1c0 [ 51.167230][ T4607] ? mutex_lock+0x57/0x90 [ 51.167252][ T4607] ksys_read+0xdc/0x1a0 [ 51.167335][ T4607] __x64_sys_read+0x40/0x50 [ 51.167360][ T4607] x64_sys_call+0x2135/0x2550 [ 51.167383][ T4607] do_syscall_64+0x112/0x360 [ 51.167412][ T4607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.167443][ T4607] RIP: 0033:0x7fbaa75ee98e [ 51.167459][ T4607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.167477][ T4607] RSP: 002b:00007fbaa6086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.167497][ T4607] RAX: ffffffffffffffda RBX: 00007fbaa60876c0 RCX: 00007fbaa75ee98e [ 51.167571][ T4607] RDX: 000000000000000f RSI: 00007fbaa60870a0 RDI: 0000000000000003 [ 51.167584][ T4607] RBP: 00007fbaa6087090 R08: 0000000000000000 R09: 0000000000000000 [ 51.167597][ T4607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.167611][ T4607] R13: 00007fbaa78b6038 R14: 00007fbaa78b5fa0 R15: 00007ffe7bc55fa8 [ 51.167632][ T4607] [ 51.327404][ T4619] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 51.459149][ T4630] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 51.459179][ T4630] netlink: 'syz.1.386': attribute type 8 has an invalid length. [ 51.459195][ T4630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.386'. [ 51.477726][ T4628] FAULT_INJECTION: forcing a failure. [ 51.477726][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 51.477775][ T4628] CPU: 0 UID: 0 PID: 4628 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.477803][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.477817][ T4628] Call Trace: [ 51.477825][ T4628] [ 51.477857][ T4628] __dump_stack+0x1d/0x30 [ 51.477885][ T4628] dump_stack_lvl+0x95/0xd0 [ 51.477908][ T4628] dump_stack+0x15/0x1b [ 51.477931][ T4628] should_fail_ex+0x262/0x280 [ 51.477968][ T4628] ? __send_signal_locked+0x14d/0x750 [ 51.477999][ T4628] should_failslab+0x8c/0xb0 [ 51.478155][ T4628] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 51.478184][ T4628] ? __send_signal_locked+0x14d/0x750 [ 51.478217][ T4628] __send_signal_locked+0x14d/0x750 [ 51.478275][ T4628] ? __rcu_read_unlock+0x33/0x70 [ 51.478310][ T4628] do_notify_parent+0x55f/0x600 [ 51.478419][ T4628] release_task+0xa92/0xb40 [ 51.478453][ T4628] do_exit+0xd79/0x1510 [ 51.478513][ T4628] do_group_exit+0xfe/0x140 [ 51.478542][ T4628] ? get_signal+0xe00/0xf10 [ 51.478576][ T4628] get_signal+0xe07/0xf10 [ 51.478683][ T4628] arch_do_signal_or_restart+0x96/0x480 [ 51.478719][ T4628] exit_to_user_mode_loop+0x15d/0x8c0 [ 51.478756][ T4628] do_syscall_64+0x212/0x360 [ 51.478786][ T4628] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 51.478871][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.478896][ T4628] RIP: 0033:0x7efe64a0e159 [ 51.478913][ T4628] Code: Unable to access opcode bytes at 0x7efe64a0e12f. [ 51.478985][ T4628] RSP: 002b:00007efe634670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.479074][ T4628] RAX: fffffffffffffe00 RBX: 00007efe64c95fa8 RCX: 00007efe64a0e159 [ 51.479087][ T4628] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe64c95fa8 [ 51.479099][ T4628] RBP: 00007efe64c95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.479112][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.479124][ T4628] R13: 00007efe64c96038 R14: 00007ffd45b14290 R15: 00007ffd45b14378 [ 51.479144][ T4628] [ 51.591502][ T4635] loop4: detected capacity change from 0 to 4096 [ 51.613462][ T4635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.751045][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.763610][ T4646] loop3: detected capacity change from 0 to 512 [ 51.778796][ T4646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.390: bg 0: block 7: invalid block bitmap [ 51.778835][ T4646] loop3: lost filesystem error report for type 5 error -117 [ 51.785154][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.785174][ C0] EXT4-fs (loop3): initial error at time 1788381753: ext4_validate_block_bitmap:436 [ 51.785199][ C0] EXT4-fs (loop3): last error at time 1788381753: ext4_validate_block_bitmap:436 [ 51.807384][ T4646] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 51.807407][ T4646] loop3: lost filesystem error report for type 5 error -117 [ 51.808240][ T4646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.390: corrupted xattr block 95: invalid header [ 51.808318][ T4646] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.808419][ T4646] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 51.808451][ T4646] EXT4-fs (loop3): 1 orphan inode deleted [ 51.808913][ T4646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.818605][ T4646] EXT4-fs error (device loop3) in ext4_setattr:6247: error 28 [ 51.823328][ T4651] capability: warning: `syz.0.391' uses 32-bit capabilities (legacy support in use) [ 51.823425][ T4651] Falling back ldisc for ptm0. [ 51.926904][ T4658] FAULT_INJECTION: forcing a failure. [ 51.926904][ T4658] name failslab, interval 1, probability 0, space 0, times 0 [ 51.926986][ T4658] CPU: 1 UID: 0 PID: 4658 Comm: syz.4.392 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.927040][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.927054][ T4658] Call Trace: [ 51.927062][ T4658] [ 51.927071][ T4658] __dump_stack+0x1d/0x30 [ 51.927100][ T4658] dump_stack_lvl+0x95/0xd0 [ 51.927123][ T4658] dump_stack+0x15/0x1b [ 51.927148][ T4658] should_fail_ex+0x262/0x280 [ 51.927206][ T4658] ? skb_clone+0x151/0x1f0 [ 51.927304][ T4658] should_failslab+0x8c/0xb0 [ 51.927352][ T4658] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 51.927464][ T4658] ? skb_clone+0x151/0x1f0 [ 51.927540][ T4658] ? _raw_spin_unlock+0x9/0x30 [ 51.927630][ T4658] skb_clone+0x151/0x1f0 [ 51.927670][ T4658] packet_rcv+0x38a/0xa70 [ 51.927693][ T4658] packet_rcv_fanout+0x2b8/0x2d0 [ 51.927721][ T4658] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 51.927748][ T4658] deliver_skb+0xee/0x160 [ 51.927797][ T4658] __netif_receive_skb_core+0x6eb/0x1950 [ 51.927871][ T4658] ? tick_program_event+0x79/0xc0 [ 51.927949][ T4658] ? _raw_spin_unlock+0x9/0x30 [ 51.927978][ T4658] ? __hrtimer_rearm_deferred+0x571/0x650 [ 51.928087][ T4658] ? irqentry_exit+0x58f/0x610 [ 51.928178][ T4658] __netif_receive_skb_list_core+0x112/0x520 [ 51.928292][ T4658] netif_receive_skb_list_internal+0x471/0x5e0 [ 51.928408][ T4658] ? eth_type_trans+0x20b/0x460 [ 51.928433][ T4658] netif_receive_skb_list+0x33/0x1c0 [ 51.928491][ T4658] bpf_test_run_xdp_live+0x1014/0x1330 [ 51.928523][ T4658] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 51.928546][ T4658] ? mutex_unlock+0x4e/0x90 [ 51.928566][ T4658] ? bpf_test_run_xdp_live+0x436/0x1330 [ 51.928619][ T4658] bpf_prog_test_run_xdp+0x559/0x9e0 [ 51.928652][ T4658] ? __rcu_read_unlock+0x4e/0x70 [ 51.928692][ T4658] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 51.928718][ T4658] bpf_prog_test_run+0x208/0x340 [ 51.928744][ T4658] __sys_bpf+0x8da/0xc30 [ 51.928853][ T4658] ? vfs_write+0x7b0/0x9a0 [ 51.928890][ T4658] __x64_sys_bpf+0x69/0x80 [ 51.928915][ T4658] x64_sys_call+0xf26/0x2550 [ 51.928950][ T4658] do_syscall_64+0x112/0x360 [ 51.929001][ T4658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.929024][ T4658] RIP: 0033:0x7f94b301e159 [ 51.929040][ T4658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.929057][ T4658] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.929086][ T4658] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 51.929176][ T4658] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 51.929190][ T4658] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 51.929206][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.929221][ T4658] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 51.929244][ T4658] [ 52.326595][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.424905][ T4673] FAULT_INJECTION: forcing a failure. [ 52.424905][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 52.424933][ T4673] CPU: 0 UID: 0 PID: 4673 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.425001][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.425025][ T4673] Call Trace: [ 52.425032][ T4673] [ 52.425040][ T4673] __dump_stack+0x1d/0x30 [ 52.425067][ T4673] dump_stack_lvl+0x95/0xd0 [ 52.425091][ T4673] dump_stack+0x15/0x1b [ 52.425111][ T4673] should_fail_ex+0x262/0x280 [ 52.425208][ T4673] ? __send_signal_locked+0x14d/0x750 [ 52.425244][ T4673] should_failslab+0x8c/0xb0 [ 52.425274][ T4673] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 52.425303][ T4673] ? __send_signal_locked+0x14d/0x750 [ 52.425385][ T4673] __send_signal_locked+0x14d/0x750 [ 52.425418][ T4673] ? __rcu_read_unlock+0x33/0x70 [ 52.425448][ T4673] do_notify_parent+0x55f/0x600 [ 52.425542][ T4673] release_task+0xa92/0xb40 [ 52.425644][ T4673] do_exit+0xd79/0x1510 [ 52.425754][ T4673] do_group_exit+0xfe/0x140 [ 52.425919][ T4673] ? get_signal+0xe00/0xf10 [ 52.425956][ T4673] get_signal+0xe07/0xf10 [ 52.426046][ T4673] arch_do_signal_or_restart+0x96/0x480 [ 52.426081][ T4673] exit_to_user_mode_loop+0x15d/0x8c0 [ 52.426180][ T4673] do_syscall_64+0x212/0x360 [ 52.426212][ T4673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.426238][ T4673] RIP: 0033:0x7f708fa8e159 [ 52.426261][ T4673] Code: Unable to access opcode bytes at 0x7f708fa8e12f. [ 52.426273][ T4673] RSP: 002b:00007f708e4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.426372][ T4673] RAX: fffffffffffffe00 RBX: 00007f708fd15fa8 RCX: 00007f708fa8e159 [ 52.426392][ T4673] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f708fd15fa8 [ 52.426412][ T4673] RBP: 00007f708fd15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 52.426428][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.426443][ T4673] R13: 00007f708fd16038 R14: 00007ffeeccd3340 R15: 00007ffeeccd3428 [ 52.426465][ T4673] [ 52.493760][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 52.512642][ T4687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.528252][ T4687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 52.535165][ T4687] bond2: entered promiscuous mode [ 52.535184][ T4687] bond2: entered allmulticast mode [ 52.537598][ T4687] FAULT_INJECTION: forcing a failure. [ 52.537598][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 52.537626][ T4687] CPU: 0 UID: 0 PID: 4687 Comm: syz.4.400 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.537653][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.537667][ T4687] Call Trace: [ 52.537681][ T4687] [ 52.537688][ T4687] __dump_stack+0x1d/0x30 [ 52.537715][ T4687] dump_stack_lvl+0x95/0xd0 [ 52.537740][ T4687] dump_stack+0x15/0x1b [ 52.537823][ T4687] should_fail_ex+0x262/0x280 [ 52.537845][ T4687] ? __alloc_skb+0x2e0/0x6f0 [ 52.537873][ T4687] should_failslab+0x8c/0xb0 [ 52.537954][ T4687] kmem_cache_alloc_node_noprof+0x82/0x400 [ 52.537985][ T4687] ? netlink_insert+0x684/0x900 [ 52.538010][ T4687] ? __alloc_skb+0x2e0/0x6f0 [ 52.538110][ T4687] __alloc_skb+0x2e0/0x6f0 [ 52.538134][ T4687] ? __alloc_skb+0x209/0x6f0 [ 52.538193][ T4687] netlink_alloc_large_skb+0xbf/0xf0 [ 52.538271][ T4687] netlink_sendmsg+0x40c/0x6f0 [ 52.538302][ T4687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.538331][ T4687] ____sys_sendmsg+0x532/0x580 [ 52.538373][ T4687] ___sys_sendmsg+0x195/0x1e0 [ 52.538430][ T4687] __x64_sys_sendmsg+0xd4/0x160 [ 52.538465][ T4687] x64_sys_call+0x22ab/0x2550 [ 52.538492][ T4687] do_syscall_64+0x112/0x360 [ 52.538547][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.538571][ T4687] RIP: 0033:0x7f94b301e159 [ 52.538588][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.538607][ T4687] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.538674][ T4687] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 52.538690][ T4687] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000007 [ 52.538704][ T4687] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 52.538719][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.538733][ T4687] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 52.538754][ T4687] [ 52.543473][ T4691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4691 comm=syz.3.402 [ 52.704227][ T4702] loop0: detected capacity change from 0 to 512 [ 52.706112][ T4703] FAULT_INJECTION: forcing a failure. [ 52.706112][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 52.706197][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.4.405 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.706227][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.706240][ T4703] Call Trace: [ 52.706249][ T4703] [ 52.706258][ T4703] __dump_stack+0x1d/0x30 [ 52.706347][ T4703] dump_stack_lvl+0x95/0xd0 [ 52.706463][ T4703] dump_stack+0x15/0x1b [ 52.706549][ T4703] should_fail_ex+0x262/0x280 [ 52.706572][ T4703] should_failslab+0x8c/0xb0 [ 52.706655][ T4703] __kvmalloc_node_noprof+0x168/0x5c0 [ 52.706689][ T4703] ? cache_write+0x9a/0x190 [ 52.706771][ T4703] ? cache_write+0x9a/0x190 [ 52.706794][ T4703] cache_write+0x9a/0x190 [ 52.706828][ T4703] ? __pfx_cache_write_procfs+0x10/0x10 [ 52.706884][ T4703] cache_write_procfs+0x49/0x60 [ 52.706907][ T4703] proc_reg_write+0x128/0x1c0 [ 52.706971][ T4703] ? __pfx_proc_reg_write+0x10/0x10 [ 52.707010][ T4703] vfs_write+0x254/0x9a0 [ 52.707038][ T4703] ? __fget_files+0x184/0x1c0 [ 52.707059][ T4703] ? mutex_lock+0x57/0x90 [ 52.707083][ T4703] ksys_write+0xdc/0x1a0 [ 52.707179][ T4703] __x64_sys_write+0x40/0x50 [ 52.707208][ T4703] x64_sys_call+0x154e/0x2550 [ 52.707261][ T4703] do_syscall_64+0x112/0x360 [ 52.707292][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.707348][ T4703] RIP: 0033:0x7f94b301e159 [ 52.707366][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.707386][ T4703] RSP: 002b:00007f94b1a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.707408][ T4703] RAX: ffffffffffffffda RBX: 00007f94b32a6090 RCX: 00007f94b301e159 [ 52.707424][ T4703] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004 [ 52.707439][ T4703] RBP: 00007f94b1a56090 R08: 0000000000000000 R09: 0000000000000000 [ 52.707458][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.707473][ T4703] R13: 00007f94b32a6128 R14: 00007f94b32a6090 R15: 00007ffc74658718 [ 52.707494][ T4703] [ 52.722388][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.722577][ T4702] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.769326][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 52.775611][ T4707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.781868][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 52.782045][ T4707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 52.782772][ T4707] bond1: entered promiscuous mode [ 52.782790][ T4707] bond1: entered allmulticast mode [ 52.786733][ T4707] dummy0: entered promiscuous mode [ 52.786922][ T4707] dummy0: entered allmulticast mode [ 52.787336][ T4707] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 52.831422][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.409'. [ 53.124746][ T4736] FAULT_INJECTION: forcing a failure. [ 53.124746][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 53.124777][ T4736] CPU: 0 UID: 0 PID: 4736 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.124811][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.124825][ T4736] Call Trace: [ 53.124833][ T4736] [ 53.124854][ T4736] __dump_stack+0x1d/0x30 [ 53.124947][ T4736] dump_stack_lvl+0x95/0xd0 [ 53.124971][ T4736] dump_stack+0x15/0x1b [ 53.124993][ T4736] should_fail_ex+0x262/0x280 [ 53.125056][ T4736] ? __send_signal_locked+0x14d/0x750 [ 53.125087][ T4736] should_failslab+0x8c/0xb0 [ 53.125196][ T4736] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 53.125294][ T4736] ? __send_signal_locked+0x14d/0x750 [ 53.125332][ T4736] __send_signal_locked+0x14d/0x750 [ 53.125420][ T4736] ? __rcu_read_unlock+0x33/0x70 [ 53.125453][ T4736] do_notify_parent+0x55f/0x600 [ 53.125492][ T4736] release_task+0xa92/0xb40 [ 53.125579][ T4736] do_exit+0xd79/0x1510 [ 53.125612][ T4736] do_group_exit+0xfe/0x140 [ 53.125685][ T4736] ? get_signal+0xe00/0xf10 [ 53.125753][ T4736] get_signal+0xe07/0xf10 [ 53.125800][ T4736] arch_do_signal_or_restart+0x96/0x480 [ 53.125837][ T4736] exit_to_user_mode_loop+0x15d/0x8c0 [ 53.126008][ T4736] do_syscall_64+0x212/0x360 [ 53.126040][ T4736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.126065][ T4736] RIP: 0033:0x7f6c5ad7e159 [ 53.126082][ T4736] Code: Unable to access opcode bytes at 0x7f6c5ad7e12f. [ 53.126094][ T4736] RSP: 002b:00007f6c597d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 53.126119][ T4736] RAX: fffffffffffffe00 RBX: 00007f6c5b005fa8 RCX: 00007f6c5ad7e159 [ 53.126191][ T4736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c5b005fa8 [ 53.126206][ T4736] RBP: 00007f6c5b005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 53.126220][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.126234][ T4736] R13: 00007f6c5b006038 R14: 00007ffe00718a10 R15: 00007ffe00718af8 [ 53.126256][ T4736] [ 53.210644][ T4744] loop4: detected capacity change from 0 to 512 [ 53.211109][ T4744] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.211142][ T4744] EXT4-fs: Ignoring removed nobh option [ 53.217403][ T4744] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.413: EA inode 11 has unexpected i_nlink=1026 ref_count=1 [ 53.217466][ T4744] loop4: lost filesystem error report for type 5 error -117 [ 53.217610][ T4744] EXT4-fs (loop4): Remounting filesystem read-only [ 53.217637][ T4744] EXT4-fs (loop4): 1 orphan inode deleted [ 53.218093][ T4744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.324902][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.412092][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.437567][ T4751] vfat: Unknown parameter 'ÿ' [ 53.619891][ T4762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 53.712583][ T4768] FAULT_INJECTION: forcing a failure. [ 53.712583][ T4768] name failslab, interval 1, probability 0, space 0, times 0 [ 53.712620][ T4768] CPU: 1 UID: 0 PID: 4768 Comm: syz.0.424 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.712650][ T4768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.712664][ T4768] Call Trace: [ 53.712672][ T4768] [ 53.712680][ T4768] __dump_stack+0x1d/0x30 [ 53.712771][ T4768] dump_stack_lvl+0x95/0xd0 [ 53.712797][ T4768] dump_stack+0x15/0x1b [ 53.712821][ T4768] should_fail_ex+0x262/0x280 [ 53.712855][ T4768] ? __send_signal_locked+0x14d/0x750 [ 53.712882][ T4768] should_failslab+0x8c/0xb0 [ 53.712971][ T4768] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 53.712996][ T4768] ? __send_signal_locked+0x14d/0x750 [ 53.713102][ T4768] __send_signal_locked+0x14d/0x750 [ 53.713127][ T4768] ? __rcu_read_unlock+0x33/0x70 [ 53.713193][ T4768] do_notify_parent+0x55f/0x600 [ 53.713276][ T4768] release_task+0xa92/0xb40 [ 53.713313][ T4768] do_exit+0xd79/0x1510 [ 53.713382][ T4768] do_group_exit+0xfe/0x140 [ 53.713414][ T4768] ? get_signal+0xe00/0xf10 [ 53.713495][ T4768] get_signal+0xe07/0xf10 [ 53.713535][ T4768] arch_do_signal_or_restart+0x96/0x480 [ 53.713621][ T4768] exit_to_user_mode_loop+0x15d/0x8c0 [ 53.713661][ T4768] do_syscall_64+0x212/0x360 [ 53.713720][ T4768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.713742][ T4768] RIP: 0033:0x7efe64a0e159 [ 53.713758][ T4768] Code: Unable to access opcode bytes at 0x7efe64a0e12f. [ 53.713768][ T4768] RSP: 002b:00007efe634670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 53.713798][ T4768] RAX: fffffffffffffe00 RBX: 00007efe64c95fa8 RCX: 00007efe64a0e159 [ 53.713811][ T4768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe64c95fa8 [ 53.713827][ T4768] RBP: 00007efe64c95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 53.713843][ T4768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.713858][ T4768] R13: 00007efe64c96038 R14: 00007ffd45b14290 R15: 00007ffd45b14378 [ 53.713881][ T4768] [ 53.747779][ T4760] Set syz1 is full, maxelem 6117 reached [ 53.803083][ T4776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.426'. [ 53.803167][ T4776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.426'. [ 54.221092][ T4817] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.250061][ T4821] FAULT_INJECTION: forcing a failure. [ 54.250061][ T4821] name failslab, interval 1, probability 0, space 0, times 0 [ 54.250098][ T4821] CPU: 0 UID: 0 PID: 4821 Comm: syz.4.446 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.250125][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.250136][ T4821] Call Trace: [ 54.250141][ T4821] [ 54.250165][ T4821] __dump_stack+0x1d/0x30 [ 54.250192][ T4821] dump_stack_lvl+0x95/0xd0 [ 54.250214][ T4821] dump_stack+0x15/0x1b [ 54.250240][ T4821] should_fail_ex+0x262/0x280 [ 54.250260][ T4821] ? skb_clone+0x151/0x1f0 [ 54.250388][ T4821] should_failslab+0x8c/0xb0 [ 54.250425][ T4821] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 54.250454][ T4821] ? bond_3ad_lacpdu_recv+0x203/0x650 [ 54.250482][ T4821] ? skb_clone+0x151/0x1f0 [ 54.250532][ T4821] skb_clone+0x151/0x1f0 [ 54.250562][ T4821] ? __pfx_ip_rcv+0x10/0x10 [ 54.250685][ T4821] ip_rcv_core+0xd0/0x6e0 [ 54.250712][ T4821] ? __pfx_ip_rcv+0x10/0x10 [ 54.250732][ T4821] ip_rcv+0x48/0x160 [ 54.250753][ T4821] ? __pfx_ip_rcv+0x10/0x10 [ 54.250899][ T4821] deliver_skb+0xee/0x160 [ 54.250931][ T4821] __netif_receive_skb_core+0x1546/0x1950 [ 54.250978][ T4821] ? tun_rx_batched+0xca/0x430 [ 54.251053][ T4821] netif_receive_skb+0x80/0x4c0 [ 54.251089][ T4821] ? tun_rx_batched+0xca/0x430 [ 54.251137][ T4821] tun_rx_batched+0x101/0x430 [ 54.251209][ T4821] tun_get_user+0x1fd6/0x2870 [ 54.251241][ T4821] ? ref_tracker_alloc+0x1eb/0x2f0 [ 54.251268][ T4821] tun_chr_write_iter+0x15a/0x210 [ 54.251296][ T4821] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.251371][ T4821] vfs_write+0x57f/0x9a0 [ 54.251427][ T4821] ksys_write+0xdc/0x1a0 [ 54.251456][ T4821] __x64_sys_write+0x40/0x50 [ 54.251485][ T4821] x64_sys_call+0x154e/0x2550 [ 54.251512][ T4821] do_syscall_64+0x112/0x360 [ 54.251573][ T4821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.251598][ T4821] RIP: 0033:0x7f94b2fde98e [ 54.251616][ T4821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.251637][ T4821] RSP: 002b:00007f94b1a76fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.251695][ T4821] RAX: ffffffffffffffda RBX: 00007f94b1a776c0 RCX: 00007f94b2fde98e [ 54.251717][ T4821] RDX: 0000000000000086 RSI: 0000200000000180 RDI: 00000000000000c8 [ 54.251757][ T4821] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 54.251840][ T4821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.251855][ T4821] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 54.251876][ T4821] [ 54.402878][ T4827] FAULT_INJECTION: forcing a failure. [ 54.402878][ T4827] name failslab, interval 1, probability 0, space 0, times 0 [ 54.402909][ T4827] CPU: 0 UID: 0 PID: 4827 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.402993][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.403007][ T4827] Call Trace: [ 54.403015][ T4827] [ 54.403024][ T4827] __dump_stack+0x1d/0x30 [ 54.403051][ T4827] dump_stack_lvl+0x95/0xd0 [ 54.403074][ T4827] dump_stack+0x15/0x1b [ 54.403100][ T4827] should_fail_ex+0x262/0x280 [ 54.403158][ T4827] ? __send_signal_locked+0x14d/0x750 [ 54.403186][ T4827] should_failslab+0x8c/0xb0 [ 54.403260][ T4827] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 54.403290][ T4827] ? __send_signal_locked+0x14d/0x750 [ 54.403322][ T4827] __send_signal_locked+0x14d/0x750 [ 54.403353][ T4827] ? __rcu_read_unlock+0x33/0x70 [ 54.403405][ T4827] do_notify_parent+0x55f/0x600 [ 54.403466][ T4827] release_task+0xa92/0xb40 [ 54.403500][ T4827] do_exit+0xd79/0x1510 [ 54.403577][ T4827] do_group_exit+0xfe/0x140 [ 54.403608][ T4827] ? get_signal+0xe00/0xf10 [ 54.403642][ T4827] get_signal+0xe07/0xf10 [ 54.403702][ T4827] arch_do_signal_or_restart+0x96/0x480 [ 54.403739][ T4827] exit_to_user_mode_loop+0x15d/0x8c0 [ 54.403834][ T4827] do_syscall_64+0x212/0x360 [ 54.403866][ T4827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.403907][ T4827] RIP: 0033:0x7fbaa762e159 [ 54.403925][ T4827] Code: Unable to access opcode bytes at 0x7fbaa762e12f. [ 54.403936][ T4827] RSP: 002b:00007fbaa60870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.403963][ T4827] RAX: fffffffffffffe00 RBX: 00007fbaa78b5fa8 RCX: 00007fbaa762e159 [ 54.403979][ T4827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbaa78b5fa8 [ 54.403993][ T4827] RBP: 00007fbaa78b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.404008][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.404022][ T4827] R13: 00007fbaa78b6038 R14: 00007ffe7bc55ec0 R15: 00007ffe7bc55fa8 [ 54.404043][ T4827] [ 54.485061][ T4834] set_capacity_and_notify: 2 callbacks suppressed [ 54.485078][ T4834] loop1: detected capacity change from 0 to 164 [ 54.509731][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 54.509743][ T29] audit: type=1400 audit(1788381756.297:1189): avc: denied { mount } for pid=4832 comm="syz.1.451" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.511653][ T4834] Unsupported NM flag settings (240) [ 54.511699][ T4834] Unsupported NM flag settings (240) [ 54.598704][ T29] audit: type=1400 audit(1788381756.381:1190): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.714480][ T4846] FAULT_INJECTION: forcing a failure. [ 54.714480][ T4846] name failslab, interval 1, probability 0, space 0, times 0 [ 54.714579][ T4846] CPU: 0 UID: 0 PID: 4846 Comm: syz.4.453 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.714609][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.714622][ T4846] Call Trace: [ 54.714630][ T4846] [ 54.714647][ T4846] __dump_stack+0x1d/0x30 [ 54.714685][ T4846] dump_stack_lvl+0x95/0xd0 [ 54.714731][ T4846] dump_stack+0x15/0x1b [ 54.714754][ T4846] should_fail_ex+0x262/0x280 [ 54.714781][ T4846] ? skb_clone+0x151/0x1f0 [ 54.714813][ T4846] should_failslab+0x8c/0xb0 [ 54.714895][ T4846] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 54.714942][ T4846] ? skb_clone+0x151/0x1f0 [ 54.714985][ T4846] skb_clone+0x151/0x1f0 [ 54.715013][ T4846] __netlink_deliver_tap+0x2be/0x510 [ 54.715044][ T4846] netlink_unicast+0x656/0x680 [ 54.715071][ T4846] netlink_sendmsg+0x5be/0x6f0 [ 54.715178][ T4846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.715233][ T4846] ____sys_sendmsg+0x532/0x580 [ 54.715270][ T4846] ___sys_sendmsg+0x195/0x1e0 [ 54.715340][ T4846] __x64_sys_sendmsg+0xd4/0x160 [ 54.715378][ T4846] x64_sys_call+0x22ab/0x2550 [ 54.715405][ T4846] do_syscall_64+0x112/0x360 [ 54.715436][ T4846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.715532][ T4846] RIP: 0033:0x7f94b301e159 [ 54.715554][ T4846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.715619][ T4846] RSP: 002b:00007f94b1a56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.715641][ T4846] RAX: ffffffffffffffda RBX: 00007f94b32a6090 RCX: 00007f94b301e159 [ 54.715682][ T4846] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 54.715696][ T4846] RBP: 00007f94b1a56090 R08: 0000000000000000 R09: 0000000000000000 [ 54.715711][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.715725][ T4846] R13: 00007f94b32a6128 R14: 00007f94b32a6090 R15: 00007ffc74658718 [ 54.715763][ T4846] [ 54.813110][ T4849] FAULT_INJECTION: forcing a failure. [ 54.813110][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 54.813193][ T4849] CPU: 0 UID: 0 PID: 4849 Comm: syz.2.456 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.813221][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.813235][ T4849] Call Trace: [ 54.813243][ T4849] [ 54.813274][ T4849] __dump_stack+0x1d/0x30 [ 54.813308][ T4849] dump_stack_lvl+0x95/0xd0 [ 54.813368][ T4849] dump_stack+0x15/0x1b [ 54.813391][ T4849] should_fail_ex+0x262/0x280 [ 54.813414][ T4849] ? sctp_association_new+0x6d/0x1160 [ 54.813445][ T4849] should_failslab+0x8c/0xb0 [ 54.813510][ T4849] __kmalloc_cache_noprof+0x7a/0x400 [ 54.813591][ T4849] ? sctp_association_new+0x6d/0x1160 [ 54.813779][ T4849] sctp_association_new+0x6d/0x1160 [ 54.813809][ T4849] ? sctp_v6_scope+0x4c/0x80 [ 54.813834][ T4849] sctp_connect_new_asoc+0x1a8/0x3a0 [ 54.813879][ T4849] sctp_sendmsg+0x105f/0x1d00 [ 54.813985][ T4849] ? __pfx_sctp_sendmsg+0x10/0x10 [ 54.814012][ T4849] ? __pfx_inet_sendmsg+0x10/0x10 [ 54.814104][ T4849] inet_sendmsg+0xc5/0xd0 [ 54.814146][ T4849] __sys_sendto+0x3be/0x470 [ 54.814184][ T4849] __x64_sys_sendto+0x76/0x90 [ 54.814217][ T4849] x64_sys_call+0x200c/0x2550 [ 54.814359][ T4849] do_syscall_64+0x112/0x360 [ 54.814390][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.814416][ T4849] RIP: 0033:0x7f708fa8e159 [ 54.814434][ T4849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.814532][ T4849] RSP: 002b:00007f708e4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.814554][ T4849] RAX: ffffffffffffffda RBX: 00007f708fd15fa0 RCX: 00007f708fa8e159 [ 54.814570][ T4849] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 54.814585][ T4849] RBP: 00007f708e4e7090 R08: 000020000005ffe4 R09: 000000000000001c [ 54.814600][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.814614][ T4849] R13: 00007f708fd16038 R14: 00007f708fd15fa0 R15: 00007ffeeccd3428 [ 54.814680][ T4849] [ 54.999386][ T4854] hsr_slave_1 (unregistering): left promiscuous mode [ 55.020204][ T4858] loop1: detected capacity change from 0 to 512 [ 55.097529][ T29] audit: type=1400 audit(1788381756.842:1191): avc: denied { create } for pid=4875 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.105627][ T4873] loop1: detected capacity change from 0 to 512 [ 55.184847][ T4877] FAULT_INJECTION: forcing a failure. [ 55.184847][ T4877] name failslab, interval 1, probability 0, space 0, times 0 [ 55.184960][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.2.463 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.184988][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.185001][ T4877] Call Trace: [ 55.185009][ T4877] [ 55.185018][ T4877] __dump_stack+0x1d/0x30 [ 55.185049][ T4877] dump_stack_lvl+0x95/0xd0 [ 55.185073][ T4877] dump_stack+0x15/0x1b [ 55.185101][ T4877] should_fail_ex+0x262/0x280 [ 55.185191][ T4877] ? sdev_prefix_printk+0x79/0x170 [ 55.185224][ T4877] should_failslab+0x8c/0xb0 [ 55.185302][ T4877] __kmalloc_cache_noprof+0x7a/0x400 [ 55.185488][ T4877] ? sdev_prefix_printk+0x79/0x170 [ 55.185548][ T4877] sdev_prefix_printk+0x79/0x170 [ 55.185602][ T4877] sd_pr_in_command+0x212/0x3c0 [ 55.185642][ T4877] sd_pr_read_reservation+0x7b/0x1a0 [ 55.185674][ T4877] blkdev_common_ioctl+0x1116/0x2060 [ 55.185768][ T4877] ? do_vfs_ioctl+0x761/0xe50 [ 55.185798][ T4877] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 55.185826][ T4877] ? __pfx_blkdev_ioctl+0x10/0x10 [ 55.185960][ T4877] blkdev_ioctl+0x31f/0x460 [ 55.185990][ T4877] ? __pfx_blkdev_ioctl+0x10/0x10 [ 55.186111][ T4877] __se_sys_ioctl+0xce/0x140 [ 55.186143][ T4877] __x64_sys_ioctl+0x43/0x50 [ 55.186205][ T4877] x64_sys_call+0x239d/0x2550 [ 55.186233][ T4877] do_syscall_64+0x112/0x360 [ 55.186327][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.186396][ T4877] RIP: 0033:0x7f708fa8e159 [ 55.186414][ T4877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.186484][ T4877] RSP: 002b:00007f708e4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.186507][ T4877] RAX: ffffffffffffffda RBX: 00007f708fd15fa0 RCX: 00007f708fa8e159 [ 55.186523][ T4877] RDX: 0000000000000000 RSI: 00000000801070cf RDI: 0000000000000005 [ 55.186608][ T4877] RBP: 00007f708e4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.186622][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.186636][ T4877] R13: 00007f708fd16038 R14: 00007f708fd15fa0 R15: 00007ffeeccd3428 [ 55.186657][ T4877] [ 55.195890][ T4877] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 55.196139][ T4877] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 55.200578][ T29] audit: type=1400 audit(1788381756.934:1192): avc: denied { write } for pid=4875 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.593083][ T4903] loop1: detected capacity change from 0 to 1024 [ 55.618010][ T4903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.632954][ T4905] loop0: detected capacity change from 0 to 1024 [ 55.637025][ T4905] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.648771][ T29] audit: type=1400 audit(1788381757.349:1193): avc: denied { append } for pid=4901 comm="syz.1.471" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.649304][ T4905] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 55.720345][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.747692][ T29] audit: type=1326 audit(1788381757.442:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe64a0e159 code=0x7ffc0000 [ 55.747783][ T29] audit: type=1326 audit(1788381757.442:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe64a0e159 code=0x7ffc0000 [ 55.799315][ T29] audit: type=1326 audit(1788381757.488:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe64a0e159 code=0x7ffc0000 [ 55.799351][ T29] audit: type=1326 audit(1788381757.488:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe64a0e159 code=0x7ffc0000 [ 55.799441][ T29] audit: type=1326 audit(1788381757.488:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe64a0e159 code=0x7ffc0000 [ 55.810170][ T4920] key id 000004d2 not found [ 55.966985][ T4923] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 55.981050][ T4923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.124113][ T4942] FAULT_INJECTION: forcing a failure. [ 56.124113][ T4942] name failslab, interval 1, probability 0, space 0, times 0 [ 56.124144][ T4942] CPU: 0 UID: 0 PID: 4942 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.124211][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.124226][ T4942] Call Trace: [ 56.124234][ T4942] [ 56.124244][ T4942] __dump_stack+0x1d/0x30 [ 56.124273][ T4942] dump_stack_lvl+0x95/0xd0 [ 56.124294][ T4942] dump_stack+0x15/0x1b [ 56.124385][ T4942] should_fail_ex+0x262/0x280 [ 56.124410][ T4942] ? __send_signal_locked+0x14d/0x750 [ 56.124443][ T4942] should_failslab+0x8c/0xb0 [ 56.124510][ T4942] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 56.124603][ T4942] ? __send_signal_locked+0x14d/0x750 [ 56.124641][ T4942] __send_signal_locked+0x14d/0x750 [ 56.124669][ T4942] ? __rcu_read_unlock+0x33/0x70 [ 56.124732][ T4942] do_notify_parent+0x55f/0x600 [ 56.124808][ T4942] release_task+0xa92/0xb40 [ 56.124897][ T4942] do_exit+0xd79/0x1510 [ 56.124954][ T4942] do_group_exit+0xfe/0x140 [ 56.124992][ T4942] ? get_signal+0xe00/0xf10 [ 56.125096][ T4942] get_signal+0xe07/0xf10 [ 56.125138][ T4942] arch_do_signal_or_restart+0x96/0x480 [ 56.125240][ T4942] exit_to_user_mode_loop+0x15d/0x8c0 [ 56.125277][ T4942] do_syscall_64+0x212/0x360 [ 56.125429][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.125451][ T4942] RIP: 0033:0x7f6c5ad7e159 [ 56.125467][ T4942] Code: Unable to access opcode bytes at 0x7f6c5ad7e12f. [ 56.125477][ T4942] RSP: 002b:00007f6c597d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.125572][ T4942] RAX: fffffffffffffe00 RBX: 00007f6c5b005fa8 RCX: 00007f6c5ad7e159 [ 56.125586][ T4942] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c5b005fa8 [ 56.125599][ T4942] RBP: 00007f6c5b005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 56.125653][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.125669][ T4942] R13: 00007f6c5b006038 R14: 00007ffe00718a10 R15: 00007ffe00718af8 [ 56.125730][ T4942] [ 56.160890][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.161030][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.227142][ T4927] loop1: detected capacity change from 0 to 1024 [ 56.239754][ T4927] EXT4-fs: Ignoring removed bh option [ 56.252806][ T4927] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.298628][ T4927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.433500][ T4954] FAULT_INJECTION: forcing a failure. [ 56.433500][ T4954] name failslab, interval 1, probability 0, space 0, times 0 [ 56.433759][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.433901][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.433915][ T4954] Call Trace: [ 56.433922][ T4954] [ 56.433930][ T4954] __dump_stack+0x1d/0x30 [ 56.433967][ T4954] dump_stack_lvl+0x95/0xd0 [ 56.433992][ T4954] dump_stack+0x15/0x1b [ 56.434014][ T4954] should_fail_ex+0x262/0x280 [ 56.434128][ T4954] ? wakeup_source_sysfs_add+0x39/0x1d0 [ 56.434157][ T4954] should_failslab+0x8c/0xb0 [ 56.434190][ T4954] __kmalloc_cache_noprof+0x7a/0x400 [ 56.434222][ T4954] ? wakeup_source_sysfs_add+0x39/0x1d0 [ 56.434300][ T4954] wakeup_source_sysfs_add+0x39/0x1d0 [ 56.434324][ T4954] wakeup_source_register+0xfd/0x240 [ 56.434392][ T4954] ep_insert+0x86c/0xd70 [ 56.434472][ T4954] do_epoll_ctl_file+0x645/0x700 [ 56.434605][ T4954] __se_sys_epoll_ctl+0xf1/0x190 [ 56.434638][ T4954] __x64_sys_epoll_ctl+0x55/0x70 [ 56.434669][ T4954] x64_sys_call+0x6a5/0x2550 [ 56.434697][ T4954] do_syscall_64+0x112/0x360 [ 56.434767][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.434792][ T4954] RIP: 0033:0x7f6c5ad7e159 [ 56.434810][ T4954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.434830][ T4954] RSP: 002b:00007f6c597d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 56.434852][ T4954] RAX: ffffffffffffffda RBX: 00007f6c5b005fa0 RCX: 00007f6c5ad7e159 [ 56.434868][ T4954] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 56.434918][ T4954] RBP: 00007f6c5ae15024 R08: 0000000000000000 R09: 0000000000000000 [ 56.434933][ T4954] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 56.434987][ T4954] R13: 00007f6c5b006038 R14: 00007f6c5b005fa0 R15: 00007ffe00718af8 [ 56.435057][ T4954] [ 56.498560][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.762501][ T4978] FAULT_INJECTION: forcing a failure. [ 56.762501][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 56.762593][ T4978] CPU: 0 UID: 0 PID: 4978 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.762609][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.762616][ T4978] Call Trace: [ 56.762621][ T4978] [ 56.762626][ T4978] __dump_stack+0x1d/0x30 [ 56.762642][ T4978] dump_stack_lvl+0x95/0xd0 [ 56.762661][ T4978] dump_stack+0x15/0x1b [ 56.762673][ T4978] should_fail_ex+0x262/0x280 [ 56.762755][ T4978] ? __send_signal_locked+0x14d/0x750 [ 56.762772][ T4978] should_failslab+0x8c/0xb0 [ 56.762823][ T4978] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 56.762839][ T4978] ? __send_signal_locked+0x14d/0x750 [ 56.762873][ T4978] __send_signal_locked+0x14d/0x750 [ 56.762889][ T4978] ? __rcu_read_unlock+0x33/0x70 [ 56.762986][ T4978] do_notify_parent+0x55f/0x600 [ 56.763035][ T4978] release_task+0xa92/0xb40 [ 56.763053][ T4978] do_exit+0xd79/0x1510 [ 56.763071][ T4978] do_group_exit+0xfe/0x140 [ 56.763129][ T4978] ? get_signal+0xe00/0xf10 [ 56.763209][ T4978] get_signal+0xe07/0xf10 [ 56.763231][ T4978] arch_do_signal_or_restart+0x96/0x480 [ 56.763289][ T4978] exit_to_user_mode_loop+0x15d/0x8c0 [ 56.763309][ T4978] do_syscall_64+0x212/0x360 [ 56.763327][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.763411][ T4978] RIP: 0033:0x7f708fa8e159 [ 56.763422][ T4978] Code: Unable to access opcode bytes at 0x7f708fa8e12f. [ 56.763427][ T4978] RSP: 002b:00007f708e4e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.763440][ T4978] RAX: fffffffffffffe00 RBX: 00007f708fd15fa8 RCX: 00007f708fa8e159 [ 56.763449][ T4978] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f708fd15fa8 [ 56.763459][ T4978] RBP: 00007f708fd15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 56.763467][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.763537][ T4978] R13: 00007f708fd16038 R14: 00007ffeeccd3340 R15: 00007ffeeccd3428 [ 56.763548][ T4978] [ 56.894149][ T4989] xfrm0: entered allmulticast mode [ 56.905773][ T4989] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 56.994229][ T4987] __nla_validate_parse: 3 callbacks suppressed [ 56.994256][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 56.994272][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 56.994286][ T4987] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 57.043161][ T4997] sd 0:0:1:0: PR command failed: 1026 [ 57.043256][ T4997] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 57.043472][ T4997] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 57.373768][ T9] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.07 Device [syz1] on syz1 [ 57.548311][ T5043] fido_id[5043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.579192][ T5064] FAULT_INJECTION: forcing a failure. [ 57.579192][ T5064] name failslab, interval 1, probability 0, space 0, times 0 [ 57.579304][ T5064] CPU: 1 UID: 0 PID: 5064 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.579335][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.579349][ T5064] Call Trace: [ 57.579358][ T5064] [ 57.579367][ T5064] __dump_stack+0x1d/0x30 [ 57.579397][ T5064] dump_stack_lvl+0x95/0xd0 [ 57.579469][ T5064] dump_stack+0x15/0x1b [ 57.579554][ T5064] should_fail_ex+0x262/0x280 [ 57.579652][ T5064] ? __send_signal_locked+0x14d/0x750 [ 57.579685][ T5064] should_failslab+0x8c/0xb0 [ 57.579789][ T5064] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 57.579819][ T5064] ? __send_signal_locked+0x14d/0x750 [ 57.579853][ T5064] __send_signal_locked+0x14d/0x750 [ 57.579886][ T5064] ? __rcu_read_unlock+0x33/0x70 [ 57.579993][ T5064] do_notify_parent+0x55f/0x600 [ 57.580083][ T5064] release_task+0xa92/0xb40 [ 57.580119][ T5064] do_exit+0xd79/0x1510 [ 57.580151][ T5064] do_group_exit+0xfe/0x140 [ 57.580196][ T5064] ? get_signal+0xe00/0xf10 [ 57.580232][ T5064] get_signal+0xe07/0xf10 [ 57.580274][ T5064] arch_do_signal_or_restart+0x96/0x480 [ 57.580334][ T5064] exit_to_user_mode_loop+0x15d/0x8c0 [ 57.580402][ T5064] do_syscall_64+0x212/0x360 [ 57.580431][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.580453][ T5064] RIP: 0033:0x7fbaa762e159 [ 57.580497][ T5064] Code: Unable to access opcode bytes at 0x7fbaa762e12f. [ 57.580507][ T5064] RSP: 002b:00007fbaa60870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.580526][ T5064] RAX: fffffffffffffe00 RBX: 00007fbaa78b5fa8 RCX: 00007fbaa762e159 [ 57.580563][ T5064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbaa78b5fa8 [ 57.580575][ T5064] RBP: 00007fbaa78b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 57.580587][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.580636][ T5064] R13: 00007fbaa78b6038 R14: 00007ffe7bc55ec0 R15: 00007ffe7bc55fa8 [ 57.580653][ T5064] [ 57.878826][ T5091] sch_tbf: peakrate 4 is lower than or equals to rate 9 ! [ 57.919310][ T5086] loop3: detected capacity change from 0 to 512 [ 57.948456][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.112688][ T5116] loop0: detected capacity change from 0 to 736 [ 58.124675][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.134899][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.146065][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.157041][ T5107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.160970][ T5107] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.234502][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.264843][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.295173][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.305028][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.319293][ T5107] wg1 speed is unknown, defaulting to 1000 [ 58.440976][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.492019][ T5139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.546'. [ 58.684149][ T5158] C: renamed from veth1_to_team (while UP) [ 58.691852][ T5158] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 58.691875][ T5158] netlink: 152 bytes leftover after parsing attributes in process `syz.4.554'. [ 58.691894][ T5158] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 58.724981][ T5159] usb usb7: usbfs: process 5159 (syz.3.553) did not claim interface 0 before use [ 58.746496][ T5164] FAULT_INJECTION: forcing a failure. [ 58.746496][ T5164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.746528][ T5164] CPU: 1 UID: 0 PID: 5164 Comm: syz.4.556 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.746611][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.746625][ T5164] Call Trace: [ 58.746633][ T5164] [ 58.746642][ T5164] __dump_stack+0x1d/0x30 [ 58.746670][ T5164] dump_stack_lvl+0x95/0xd0 [ 58.746695][ T5164] dump_stack+0x15/0x1b [ 58.746742][ T5164] should_fail_ex+0x262/0x280 [ 58.746763][ T5164] should_fail+0xb/0x20 [ 58.746786][ T5164] should_fail_usercopy+0x1a/0x20 [ 58.746812][ T5164] _copy_from_user+0x1c/0xb0 [ 58.746844][ T5164] proc_submiturb_compat+0x45/0x190 [ 58.746889][ T5164] ? do_vfs_ioctl+0x848/0xe50 [ 58.746927][ T5164] usbdev_ioctl+0xfcf/0x16a0 [ 58.746951][ T5164] ? __pfx_usbdev_ioctl+0x10/0x10 [ 58.746979][ T5164] __se_sys_ioctl+0xce/0x140 [ 58.747012][ T5164] __x64_sys_ioctl+0x43/0x50 [ 58.747049][ T5164] x64_sys_call+0x239d/0x2550 [ 58.747078][ T5164] do_syscall_64+0x112/0x360 [ 58.747106][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.747160][ T5164] RIP: 0033:0x7f94b301e159 [ 58.747177][ T5164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.747243][ T5164] RSP: 002b:00007f94b1a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.747266][ T5164] RAX: ffffffffffffffda RBX: 00007f94b32a5fa0 RCX: 00007f94b301e159 [ 58.747283][ T5164] RDX: 00002000000000c0 RSI: 00000000802c550a RDI: 0000000000000003 [ 58.747298][ T5164] RBP: 00007f94b1a77090 R08: 0000000000000000 R09: 0000000000000000 [ 58.747312][ T5164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.747326][ T5164] R13: 00007f94b32a6038 R14: 00007f94b32a5fa0 R15: 00007ffc74658718 [ 58.747376][ T5164] [ 58.771953][ T5166] netlink: 2616 bytes leftover after parsing attributes in process `syz.4.557'. [ 58.919365][ T5179] syz.1.561 uses obsolete (PF_INET,SOCK_PACKET) [ 58.963454][ T5177] FAULT_INJECTION: forcing a failure. [ 58.963454][ T5177] name failslab, interval 1, probability 0, space 0, times 0 [ 58.963487][ T5177] CPU: 1 UID: 0 PID: 5177 Comm: syz.0.562 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.963516][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.963530][ T5177] Call Trace: [ 58.963538][ T5177] [ 58.963548][ T5177] __dump_stack+0x1d/0x30 [ 58.963620][ T5177] dump_stack_lvl+0x95/0xd0 [ 58.963641][ T5177] dump_stack+0x15/0x1b [ 58.963711][ T5177] should_fail_ex+0x262/0x280 [ 58.963810][ T5177] ? __send_signal_locked+0x14d/0x750 [ 58.963882][ T5177] should_failslab+0x8c/0xb0 [ 58.963909][ T5177] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 58.963935][ T5177] ? __send_signal_locked+0x14d/0x750 [ 58.963967][ T5177] __send_signal_locked+0x14d/0x750 [ 58.964021][ T5177] ? __rcu_read_unlock+0x33/0x70 [ 58.964056][ T5177] do_notify_parent+0x55f/0x600 [ 58.964158][ T5177] release_task+0xa92/0xb40 [ 58.964187][ T5177] do_exit+0xd79/0x1510 [ 58.964221][ T5177] do_group_exit+0xfe/0x140 [ 58.964251][ T5177] ? get_signal+0xe00/0xf10 [ 58.964281][ T5177] get_signal+0xe07/0xf10 [ 58.964416][ T5177] arch_do_signal_or_restart+0x96/0x480 [ 58.964454][ T5177] exit_to_user_mode_loop+0x15d/0x8c0 [ 58.964545][ T5177] do_syscall_64+0x212/0x360 [ 58.964619][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.964668][ T5177] RIP: 0033:0x7efe64a0e159 [ 58.964693][ T5177] Code: Unable to access opcode bytes at 0x7efe64a0e12f. [ 58.964704][ T5177] RSP: 002b:00007efe634670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 58.964727][ T5177] RAX: fffffffffffffe00 RBX: 00007efe64c95fa8 RCX: 00007efe64a0e159 [ 58.964744][ T5177] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe64c95fa8 [ 58.964759][ T5177] RBP: 00007efe64c95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 58.964843][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.964856][ T5177] R13: 00007efe64c96038 R14: 00007ffd45b14290 R15: 00007ffd45b14378 [ 58.964876][ T5177] [ 58.999788][ T5176] 9p: Bad value for 'wfdno' [ 59.011125][ T5183] usb usb7: usbfs: process 5183 (syz.0.563) did not claim interface 0 before use [ 59.104871][ T5181] loop1: detected capacity change from 0 to 512 [ 59.121551][ T5181] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.561: corrupted in-inode xattr: e_value out of bounds [ 59.121583][ T5181] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.126894][ T5181] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.561: couldn't read orphan inode 15 (err -117) [ 59.126997][ T5181] loop1: lost filesystem error report for type 5 error -117 [ 59.132483][ T5181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.143871][ T5181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.297117][ T5196] netlink: 2616 bytes leftover after parsing attributes in process `syz.3.569'. [ 59.330969][ T5194] loop0: detected capacity change from 0 to 512 [ 59.346117][ T5194] EXT4-fs: Ignoring removed oldalloc option [ 59.362370][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.384755][ T5204] EXT4-fs (loop2): 1 truncate cleaned up [ 59.385300][ T5204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.398968][ T5204] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.570: bg 0: block 465: padding at end of block bitmap is not set [ 59.399676][ T5204] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 117 [ 59.399712][ T5204] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.399712][ T5204] [ 59.432885][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 59.462131][ T5204] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.570: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 59.717417][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.834597][ T5219] 9p: Bad value for 'wfdno' [ 59.958823][ T5232] netlink: 2616 bytes leftover after parsing attributes in process `syz.0.581'. [ 60.089749][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 60.089772][ T29] audit: type=1400 audit(1788381761.446:1302): avc: denied { getopt } for pid=5228 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.123538][ T5239] FAULT_INJECTION: forcing a failure. [ 60.123538][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 60.123565][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.3.584 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.123611][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.123625][ T5239] Call Trace: [ 60.123632][ T5239] [ 60.123641][ T5239] __dump_stack+0x1d/0x30 [ 60.123698][ T5239] dump_stack_lvl+0x95/0xd0 [ 60.123723][ T5239] dump_stack+0x15/0x1b [ 60.123751][ T5239] should_fail_ex+0x262/0x280 [ 60.123775][ T5239] ? __send_signal_locked+0x14d/0x750 [ 60.123862][ T5239] should_failslab+0x8c/0xb0 [ 60.123891][ T5239] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 60.123917][ T5239] ? __send_signal_locked+0x14d/0x750 [ 60.123946][ T5239] __send_signal_locked+0x14d/0x750 [ 60.124122][ T5239] ? __rcu_read_unlock+0x33/0x70 [ 60.124167][ T5239] do_notify_parent+0x55f/0x600 [ 60.124226][ T5239] release_task+0xa92/0xb40 [ 60.124262][ T5239] do_exit+0xd79/0x1510 [ 60.124400][ T5239] do_group_exit+0xfe/0x140 [ 60.124438][ T5239] ? get_signal+0xe00/0xf10 [ 60.124488][ T5239] get_signal+0xe07/0xf10 [ 60.124547][ T5239] arch_do_signal_or_restart+0x96/0x480 [ 60.124583][ T5239] exit_to_user_mode_loop+0x15d/0x8c0 [ 60.124647][ T5239] do_syscall_64+0x212/0x360 [ 60.124691][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.124722][ T5239] RIP: 0033:0x7f6c5ad7e159 [ 60.124754][ T5239] Code: Unable to access opcode bytes at 0x7f6c5ad7e12f. [ 60.124773][ T5239] RSP: 002b:00007f6c597d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.124876][ T5239] RAX: fffffffffffffe00 RBX: 00007f6c5b005fa8 RCX: 00007f6c5ad7e159 [ 60.124896][ T5239] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c5b005fa8 [ 60.124909][ T5239] RBP: 00007f6c5b005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 60.124957][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.124972][ T5239] R13: 00007f6c5b006038 R14: 00007ffe00718a10 R15: 00007ffe00718af8 [ 60.124995][ T5239] [ 60.333433][ T3299] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 60.338232][ T29] audit: type=1400 audit(1788381761.668:1303): avc: denied { unlink } for pid=3299 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 60.338262][ T29] audit: type=1400 audit(1788381761.668:1304): avc: denied { unlink } for pid=3299 comm="syz-executor" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.354130][ T3299] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 60.354463][ T3299] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 60.378118][ T5243] syz_tun: entered allmulticast mode [ 60.453179][ T5258] 9p: Bad value for 'wfdno' [ 60.455017][ T29] audit: type=1400 audit(1788381761.778:1305): avc: denied { bind } for pid=5259 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.644166][ T313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.649196][ T29] audit: type=1400 audit(1788381761.963:1306): avc: denied { tracepoint } for pid=5259 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.681006][ T5275] netlink: 2612 bytes leftover after parsing attributes in process `syz.0.596'. [ 60.735418][ T313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.933946][ T5271] set_capacity_and_notify: 1 callbacks suppressed [ 60.933985][ T5271] loop4: detected capacity change from 0 to 1024 [ 60.948257][ T5284] netlink: 168 bytes leftover after parsing attributes in process `syz.0.599'. [ 60.957171][ T5271] EXT4-fs: Ignoring removed orlov option [ 60.957723][ T5271] EXT4-fs: Ignoring removed orlov option [ 60.970678][ T12] IPVS: starting estimator thread 0... [ 60.978171][ T29] audit: type=1400 audit(1788381762.267:1307): avc: denied { write } for pid=5283 comm="syz.0.599" name="sched" dev="tracefs" ino=10145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.978273][ T29] audit: type=1400 audit(1788381762.267:1308): avc: denied { add_name } for pid=5283 comm="syz.0.599" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.978298][ T29] audit: type=1400 audit(1788381762.267:1309): avc: denied { create } for pid=5283 comm="syz.0.599" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 60.978319][ T29] audit: type=1400 audit(1788381762.267:1310): avc: denied { write } for pid=5283 comm="syz.0.599" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 60.999293][ T5271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.004197][ T5271] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 61.005319][ T29] audit: type=1400 audit(1788381762.295:1311): avc: denied { mac_admin } for pid=5270 comm="syz.4.595" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.084060][ T5285] IPVS: using max 2448 ests per chain, 122400 per kthread [ 61.119967][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.342739][ T5260] ================================================================== [ 61.342780][ T5260] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 61.342817][ T5260] [ 61.342824][ T5260] write to 0xffffea0004b5b398 of 8 bytes by task 5153 on cpu 1: [ 61.342842][ T5260] __filemap_remove_folio+0x201/0x2e0 [ 61.342872][ T5260] filemap_remove_folio+0x6d/0x1d0 [ 61.342905][ T5260] truncate_inode_folio+0x42/0x50 [ 61.342930][ T5260] shmem_undo_range+0x27f/0xb60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.342954][ T5260] shmem_evict_inode+0x12d/0x580 [ 61.342983][ T5260] evict+0x2a5/0x510 [ 61.343014][ T5260] iput+0x430/0x5a0 [ 61.343030][ T5260] dentry_unlink_inode+0x24a/0x260 [ 61.343056][ T5260] dentry_kill+0x184/0x500 [ 61.343083][ T5260] finish_dput+0x16/0x1d0 [ 61.343100][ T5260] dput+0x48/0x50 [ 61.343116][ T5260] __fput+0x43e/0x630 [ 61.343134][ T5260] ____fput+0x1c/0x30 [ 61.343155][ T5260] task_work_run+0x130/0x1a0 [ 61.343178][ T5260] do_exit+0x4a4/0x1510 [ 61.343204][ T5260] do_group_exit+0xfe/0x140 [ 61.343231][ T5260] get_signal+0xe07/0xf10 [ 61.343261][ T5260] arch_do_signal_or_restart+0x96/0x480 [ 61.343291][ T5260] irqentry_exit+0x14d/0x610 [ 61.343312][ T5260] exc_general_protection+0x155/0x1e0 [ 61.343342][ T5260] asm_exc_general_protection+0x26/0x30 [ 61.343363][ T5260] [ 61.343368][ T5260] read to 0xffffea0004b5b398 of 8 bytes by task 5260 on cpu 0: [ 61.343385][ T5260] folio_mapping+0xa1/0xe0 [ 61.343406][ T5260] move_folios_to_lru+0x227/0x810 [ 61.343427][ T5260] evict_folios+0x245c/0x2830 [ 61.343446][ T5260] try_to_shrink_lruvec+0x8fd/0xb30 [ 61.343483][ T5260] shrink_lruvec+0x252/0x1d40 [ 61.343512][ T5260] shrink_node+0x67c/0x2000 [ 61.343531][ T5260] do_try_to_free_pages+0x408/0xca0 [ 61.343560][ T5260] try_to_free_mem_cgroup_pages+0x201/0x420 [ 61.343591][ T5260] mem_cgroup_resize_max+0x13d/0x290 [ 61.343617][ T5260] mem_cgroup_write+0x1ad/0x250 [ 61.343638][ T5260] cgroup_file_write+0x197/0x350 [ 61.343666][ T5260] kernfs_fop_write_iter+0x1d2/0x2e0 [ 61.343688][ T5260] vfs_write+0x57f/0x9a0 [ 61.343711][ T5260] ksys_write+0xdc/0x1a0 [ 61.343735][ T5260] __x64_sys_write+0x40/0x50 [ 61.343765][ T5260] x64_sys_call+0x154e/0x2550 [ 61.343790][ T5260] do_syscall_64+0x112/0x360 [ 61.343814][ T5260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.343835][ T5260] [ 61.343839][ T5260] value changed: 0xffff888104a06ab0 -> 0x0000000000000000 [ 61.343851][ T5260] [ 61.343854][ T5260] Reported by Kernel Concurrency Sanitizer on: [ 61.343865][ T5260] CPU: 0 UID: 0 PID: 5260 Comm: syz.1.591 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.343890][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.343903][ T5260] ================================================================== [ 61.576058][ T313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.627493][ T313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.671275][ T5296] syz_tun (unregistering): left allmulticast mode [ 61.687479][ T5271] bond1: (slave syz_tun): Removing an active aggregator [ 61.687624][ T5271] bond1: (slave syz_tun): Releasing backup interface [ 61.739678][ T313] bridge_slave_1: left allmulticast mode [ 61.739700][ T313] bridge_slave_1: left promiscuous mode [ 61.739859][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.758871][ T313] bridge_slave_0: left allmulticast mode [ 61.758893][ T313] bridge_slave_0: left promiscuous mode [ 61.758983][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.767903][ T5271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.815885][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.826603][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.836344][ T313] bond0 (unregistering): Released all slaves [ 61.917804][ T313] hsr_slave_0: left promiscuous mode [ 61.923579][ T313] hsr_slave_1: left promiscuous mode [ 61.924147][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.924171][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.944784][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.944805][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.962970][ T313] veth1_macvtap: left promiscuous mode [ 61.962998][ T313] veth0_macvtap: left promiscuous mode [ 61.963088][ T313] veth1_vlan: left promiscuous mode [ 61.963136][ T313] veth0_vlan: left promiscuous mode [ 62.030452][ T313] team0 (unregistering): Port device team_slave_1 removed [ 62.039345][ T313] team0 (unregistering): Port device team_slave_0 removed [ 62.065010][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.215090][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.296835][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.324608][ T313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.377409][ T313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.414992][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.441957][ T313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.497124][ T313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.601456][ T313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.658192][ T313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.697165][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 62.712644][ T313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.756110][ T313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.803366][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 62.848955][ T313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.919031][ T313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.973991][ T313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.986382][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 63.027244][ T313] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 63.040356][ T313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.096944][ T313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.108342][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 63.137281][ T313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.189367][ T313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.217764][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 63.245006][ T313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.312386][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 63.329439][ T313] bridge_slave_1: left allmulticast mode [ 63.329546][ T313] bridge_slave_1: left promiscuous mode [ 63.329735][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.341028][ T313] bridge_slave_0: left allmulticast mode [ 63.341097][ T313] bridge_slave_0: left promiscuous mode [ 63.341177][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.349672][ T313] pimreg: left allmulticast mode [ 63.355781][ T313] bridge_slave_1: left allmulticast mode [ 63.355804][ T313] bridge_slave_1: left promiscuous mode [ 63.355885][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.392390][ T313] bridge_slave_0: left allmulticast mode [ 63.392414][ T313] bridge_slave_0: left promiscuous mode [ 63.392526][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.410912][ T313] bridge_slave_1: left allmulticast mode [ 63.410932][ T313] bridge_slave_1: left promiscuous mode [ 63.411060][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.422429][ T313] bridge_slave_0: left allmulticast mode [ 63.422449][ T313] bridge_slave_0: left promiscuous mode [ 63.422610][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.447744][ T313] bridge_slave_1: left allmulticast mode [ 63.447764][ T313] bridge_slave_1: left promiscuous mode [ 63.447859][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.459226][ T313] bridge_slave_0: left allmulticast mode [ 63.459244][ T313] bridge_slave_0: left promiscuous mode [ 63.459388][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.585009][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.594657][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.603807][ T313] bond0 (unregistering): Released all slaves [ 63.624712][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.633399][ T313] bond_slave_0: left promiscuous mode [ 63.639876][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.649292][ T313] bond_slave_1: left promiscuous mode [ 63.650143][ T313] bond0 (unregistering): Released all slaves [ 63.661152][ T313] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 63.669563][ T313] dummy0: left promiscuous mode [ 63.669644][ T313] dummy0: left allmulticast mode [ 63.670308][ T313] bond1 (unregistering): Released all slaves [ 63.691432][ T313] bond1 (unregistering): (slave bridge1): Releasing active interface [ 63.691519][ T313] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 76:88:b3:8d:5f:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 63.719427][ T313] bond1 (unregistering): (slave bridge2): Releasing active interface [ 63.729694][ T313] bond1 (unregistering): (slave bridge3): Releasing active interface [ 63.740708][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.750524][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.759717][ T313] bond0 (unregistering): Released all slaves [ 63.771020][ T313] bond1 (unregistering): Released all slaves [ 63.792579][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.802252][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.811595][ T313] bond0 (unregistering): Released all slaves [ 63.813203][ T313] bond1 (unregistering): Released all slaves [ 63.816336][ T313] bond2 (unregistering): Released all slaves [ 63.836712][ T3081] wg1 speed is unknown, defaulting to 1000 [ 63.836750][ T3081] syz2: Port: 1 Link DOWN [ 63.871375][ T313] hsr_slave_0: left promiscuous mode [ 63.876932][ T313] hsr_slave_1: left promiscuous mode [ 63.877348][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.877365][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.897945][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.897969][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.915960][ T313] hsr_slave_0: left promiscuous mode [ 63.916497][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.916570][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.937291][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.937311][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.953793][ T313] hsr_slave_0: left promiscuous mode [ 63.959366][ T313] hsr_slave_1: left promiscuous mode [ 63.959839][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.959851][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.967010][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.967026][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.995381][ T313] hsr_slave_0: left promiscuous mode [ 64.000779][ T313] hsr_slave_1: left promiscuous mode [ 64.001237][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.001278][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.006362][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.006376][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.028506][ T313] veth1_macvtap: left promiscuous mode [ 64.028532][ T313] veth0_macvtap: left promiscuous mode [ 64.028574][ T313] veth1_vlan: left promiscuous mode [ 64.028640][ T313] veth0_vlan: left promiscuous mode [ 64.056773][ T313] veth1_macvtap: left promiscuous mode [ 64.056799][ T313] veth0_macvtap: left promiscuous mode [ 64.056889][ T313] veth1_vlan: left promiscuous mode [ 64.056944][ T313] veth0_vlan: left promiscuous mode [ 64.078320][ T313] veth1_macvtap: left promiscuous mode [ 64.078346][ T313] veth0_macvtap: left promiscuous mode [ 64.078471][ T313] veth1_vlan: left promiscuous mode [ 64.078537][ T313] veth0_vlan: left promiscuous mode [ 64.099863][ T313] veth1_macvtap: left promiscuous mode [ 64.099933][ T313] veth0_macvtap: left promiscuous mode [ 64.099974][ T313] veth1_vlan: left promiscuous mode [ 64.100067][ T313] veth0_vlan: left promiscuous mode [ 64.246272][ T313] team0 (unregistering): Port device team_slave_1 removed [ 64.253595][ T313] team0 (unregistering): Port device team_slave_0 removed [ 64.295914][ T313] team0 (unregistering): Port device team_slave_1 removed [ 64.304147][ T313] team0 (unregistering): Port device team_slave_0 removed [ 64.348621][ T313] team0 (unregistering): Port device team_slave_1 removed [ 64.356025][ T313] team0 (unregistering): Port device team_slave_0 removed [ 64.400984][ T313] team0 (unregistering): Port device team_slave_1 removed [ 64.408478][ T313] team0 (unregistering): Port device team_slave_0 removed [ 64.433231][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 64.536719][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 64.623401][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 64.705576][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 64.797246][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 64.882978][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 64.965376][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 65.053906][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 65.135575][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 65.227479][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 65.363012][ T313] IPVS: stop unused estimator thread 0... [ 65.517272][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 65.517316][ T29] audit: type=1400 audit(1788381766.457:1365): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.546553][ T29] audit: type=1400 audit(1788381766.457:1366): avc: denied { write } for pid=5683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.597306][ T29] audit: type=1400 audit(1788381766.530:1367): avc: denied { write } for pid=5685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.633581][ T29] audit: type=1400 audit(1788381766.558:1368): avc: denied { write } for pid=5696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.705860][ T29] audit: type=1400 audit(1788381766.632:1369): avc: denied { write } for pid=5698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.728946][ T29] audit: type=1400 audit(1788381766.632:1370): avc: denied { write } for pid=5709 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.783881][ T29] audit: type=1400 audit(1788381766.696:1371): avc: denied { write } for pid=5711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.807015][ T29] audit: type=1400 audit(1788381766.696:1372): avc: denied { write } for pid=5722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.861687][ T29] audit: type=1400 audit(1788381766.770:1373): avc: denied { write } for pid=5724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.884934][ T29] audit: type=1400 audit(1788381766.789:1374): avc: denied { write } for pid=5735 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1