last executing test programs: 2m22.084708631s ago: executing program 0 (id=5569): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r0}, 0xc) 2m21.80955347s ago: executing program 0 (id=5572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffd9, 0xfffffffa, 0x20000001, 0x22, 0x4}, @empty, @loopback, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[], 0x34) 2m20.592144976s ago: executing program 0 (id=5578): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x80000000000004, 0xffffffffffffffff, 0x800000000000004, 0x1, 0x2b5, 0x282f, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfdef) 2m19.322669837s ago: executing program 0 (id=5590): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1005848, 0x0) 2m19.161510844s ago: executing program 0 (id=5591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) 2m18.866428794s ago: executing program 0 (id=5593): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="3300000008000102030405060101", 0xe) write(r0, &(0x7f0000000580)='4\x00\x00\x00\a\x00\x00', 0x7) 2m18.395592273s ago: executing program 32 (id=5593): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="3300000008000102030405060101", 0xe) write(r0, &(0x7f0000000580)='4\x00\x00\x00\a\x00\x00', 0x7) 5.673175214s ago: executing program 1 (id=6335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES16=r0], 0xfdef) 5.142167158s ago: executing program 1 (id=6343): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aa"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[], 0x20) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c00070000000000000000000800090000000000080008000000000008000600736970002c0700bfe7ba89aac45668a2ce91cd06e8e08c13212d6a3947b4bc5f7869fce7f99f021ea8a0f00be4a06142b6a3a1808afaf41deeebcc65b20cce92ad4b6988d763e1d6177c6b0eb1828a6b513a0b231e463abf683ed9b23301162e2265cfbbd40c607b462dde50b046fe602964c383ad745d"], 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/139, &(0x7f00000002c0)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="2f00000000000000a689bb38f33fa40455491330cd62013f58dc4cba5ae95d1d", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x144}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000070800000800000022"], 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001ac0)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r5 = socket$kcm(0x23, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001c00)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001c40)=0x9, 0x4) listen(r5, 0x800) accept4(r5, 0x0, 0x0, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0xfffc, 0xc}, 0x8) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000001d40)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000001d80)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001dc0)={&(0x7f0000001e00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 4.044089462s ago: executing program 1 (id=6360): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000005c0)='p:_est/_vent1 ./file0:0', 0x17) 3.889233608s ago: executing program 1 (id=6362): r0 = gettid() ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 2.377631984s ago: executing program 3 (id=6368): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[], 0x20) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c00070000000000000000000800090000000000080008000000000008000600736970002c0700bfe7ba89aac45668a2ce91cd06e8e08c13212d6a3947b4bc5f7869fce7f99f021ea8a0f00be4a06142b6a3a1808afaf41deeebcc65b20cce92ad4b6988d763e1d6177c6b0eb1828a6b513a0b231e463abf683ed9b23301162e2265cfbbd40c607b462dde50b046fe602964c383ad745d"], 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/139, &(0x7f00000002c0)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="2f00000000000000a689bb38f33fa40455491330cd62013f58dc4cba5ae95d1d", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x144}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000070800000800000022"], 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001ac0)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r5 = socket$kcm(0x23, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001c00)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001c40)=0x9, 0x4) listen(r5, 0x800) accept4(r5, 0x0, 0x0, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000001d00)={0xfffc, 0xc}, 0x8) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000001d40)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000001d80)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001dc0)={&(0x7f0000001e00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.958098767s ago: executing program 4 (id=6370): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000000)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0xffff, r0, 0x1, {0x1, 0x7}, 0x1}, 0x1) 1.855196548s ago: executing program 4 (id=6371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000580)="05", 0x1, 0x20000005, &(0x7f00000005c0)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1.663235428s ago: executing program 4 (id=6372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1", @ANYRES16=r2, @ANYRES16=r0], 0xfdef) 1.565784728s ago: executing program 2 (id=6373): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 1.511364874s ago: executing program 2 (id=6374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb, 0x7fff, 0x16, "b0bf44bb48de49ac000000000300e217bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) 1.492115495s ago: executing program 4 (id=6375): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000180)) 1.401565235s ago: executing program 3 (id=6376): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@usrjquota}, {@oldalloc}, {@init_itable}, {@i_version}]}, 0xff, 0x523, &(0x7f0000006400)="$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") unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) 1.378325077s ago: executing program 4 (id=6377): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x3}, 0x18) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x3, 0xff, 0x2}}, 0x18) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="3874517c2edc", 0xfdef}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000002c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)='.', 0x1a000}}, 0xfe) 1.045094312s ago: executing program 3 (id=6378): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000340)='27', 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1ea0, 0x42ec, 0x14, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 942.176422ms ago: executing program 2 (id=6379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f0000001100)={'bond0\x00', @random="d89021000008"}) 666.854871ms ago: executing program 3 (id=6380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000580)="05", 0x1, 0x20000005, &(0x7f00000005c0)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 613.656957ms ago: executing program 2 (id=6381): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000800)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x0) 613.550086ms ago: executing program 1 (id=6382): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000400)) 541.850304ms ago: executing program 2 (id=6383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200", @ANYRES16=r2, @ANYRES16=r0], 0xfdef) 525.980705ms ago: executing program 1 (id=6384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 357.608223ms ago: executing program 3 (id=6385): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 271.804132ms ago: executing program 2 (id=6386): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000000c80)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r0 = openat(0xffffffffffffff9c, &(0x7f00000224c0)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f0000022500)=[{&(0x7f0000022540)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) creat(&(0x7f00000225c0)='./bus\x00', 0x0) mount(&(0x7f0000022600)=@loop={'/dev/loop', 0x0}, &(0x7f0000022640)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000022680)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000226c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]}) 117.695237ms ago: executing program 3 (id=6387): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb, 0x7fff, 0x16, "b0bf44bb48de49ac000000000300e217bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) 0s ago: executing program 4 (id=6388): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0xd, 0x12) kernel console output (not intermixed with test programs): oop1): orphan cleanup on readonly fs [ 669.668493][T20410] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.5268: bad orphan inode 267 [ 669.700875][T20410] EXT4-fs (loop1): Remounting filesystem read-only [ 669.718315][T20410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 669.805041][T20410] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.5268: dx entry: limit 0 != root limit 125 [ 669.835587][T20410] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5268: Corrupt directory, running e2fsck is recommended [ 672.310092][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 672.388393][T20420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5273'. [ 672.768127][T20436] loop0: detected capacity change from 0 to 8192 [ 673.582484][T20459] loop2: detected capacity change from 0 to 2048 [ 673.647283][T20459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.401304][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.326422][T20551] capability: warning: `syz.2.5321' uses deprecated v2 capabilities in a way that may be insecure [ 677.626396][T20576] FAULT_INJECTION: forcing a failure. [ 677.626396][T20576] name failslab, interval 1, probability 0, space 0, times 0 [ 677.640960][T20576] CPU: 1 PID: 20576 Comm: syz.1.5331 Not tainted syzkaller #0 [ 677.648482][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 677.658639][T20576] Call Trace: [ 677.662027][T20576] [ 677.665044][T20576] dump_stack_lvl+0x18c/0x250 [ 677.669900][T20576] ? show_regs_print_info+0x20/0x20 [ 677.675204][T20576] ? load_image+0x420/0x420 [ 677.679799][T20576] ? __might_sleep+0xe0/0xe0 [ 677.684484][T20576] ? __lock_acquire+0x7eb0/0x7eb0 [ 677.689584][T20576] should_fail_ex+0x394/0x4c0 [ 677.694356][T20576] should_failslab+0x9/0x20 [ 677.698925][T20576] slab_pre_alloc_hook+0x59/0x300 [ 677.704023][T20576] ? simp_init_net+0x65/0x190 [ 677.708830][T20576] __kmem_cache_alloc_node+0x53/0x260 [ 677.714247][T20576] ? simp_init_net+0x65/0x190 [ 677.718978][T20576] kmalloc_trace+0x2a/0xe0 [ 677.723460][T20576] simp_init_net+0x65/0x190 [ 677.728030][T20576] ops_init+0x391/0x640 [ 677.732296][T20576] setup_net+0x3b6/0xa20 [ 677.736586][T20576] ? copy_net_ns+0x530/0x530 [ 677.741216][T20576] ? copy_net_ns+0x347/0x530 [ 677.745854][T20576] ? down_read_killable+0x1d0/0x340 [ 677.751183][T20576] copy_net_ns+0x361/0x530 [ 677.755657][T20576] create_new_namespaces+0x3ce/0x700 [ 677.761011][T20576] unshare_nsproxy_namespaces+0x11a/0x160 [ 677.766776][T20576] ksys_unshare+0x4fa/0x8f0 [ 677.771399][T20576] ? sighand_ctor+0x50/0x50 [ 677.775966][T20576] ? lock_chain_count+0x20/0x20 [ 677.780856][T20576] ? syscall_enter_from_user_mode+0x25/0x80 [ 677.786826][T20576] __x64_sys_unshare+0x38/0x40 [ 677.791630][T20576] do_syscall_64+0x55/0xb0 [ 677.796081][T20576] ? clear_bhb_loop+0x40/0x90 [ 677.800876][T20576] ? clear_bhb_loop+0x40/0x90 [ 677.805606][T20576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.811538][T20576] RIP: 0033:0x7f7cb059f559 [ 677.816036][T20576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.835714][T20576] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 677.844171][T20576] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 677.852172][T20576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 677.860167][T20576] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 677.868163][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.876168][T20576] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 677.884174][T20576] [ 678.788081][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5344'. [ 679.302364][T20633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5354'. [ 679.800998][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5366'. [ 680.022302][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.340227][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5378'. [ 681.530101][T20724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5393'. [ 681.980998][T11202] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 682.210788][T11202] usb 1-1: Using ep0 maxpacket: 8 [ 682.224624][T11202] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.234033][T11202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 682.242297][T11202] usb 1-1: SerialNumber: syz [ 682.426003][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5406'. [ 682.576625][T20759] loop2: detected capacity change from 0 to 1764 [ 682.624351][T20759] xt_hashlimit: size too large, truncated to 1048576 [ 682.755272][T20731] loop0: detected capacity change from 0 to 4096 [ 682.872154][T20731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.226263][T11202] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 683.291907][T20773] loop1: detected capacity change from 0 to 512 [ 683.364288][ T28] audit: type=1800 audit(1793941488.581:12): pid=20773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5413" name="file2" dev="loop1" ino=1048718 res=0 errno=0 [ 683.403810][T20773] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 683.431235][T20773] FAT-fs (loop1): Filesystem has been set read-only [ 683.453095][T20773] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 683.477820][T20773] syz.1.5413: attempt to access beyond end of device [ 683.477820][T20773] loop1: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 683.590500][T11202] usb 1-1: USB disconnect, device number 48 [ 683.598378][T11202] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 684.137612][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c5f3800: rx timeout, send abort [ 684.149008][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5f3800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 684.281520][T20792] ip_tables: iptables: counters copy to user failed while replacing table [ 684.336903][T19851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.255790][T20815] syzkaller0: entered promiscuous mode [ 685.271534][T20815] syzkaller0: entered allmulticast mode [ 686.351332][T20832] ip_tables: iptables: counters copy to user failed while replacing table [ 686.448728][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.455440][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.491707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7c0c00: rx timeout, send abort [ 687.500299][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f7c0c00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 687.681982][T20877] file system registered [ 687.798703][T20882] loop1: detected capacity change from 0 to 1024 [ 687.899806][T20882] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 687.912630][T20882] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 687.922813][T20882] EXT4-fs error (device loop1): ext4_acquire_dquot:6958: comm syz.1.5444: Failed to acquire dquot type 0 [ 687.970331][T20882] EXT4-fs (loop1): 1 truncate cleaned up [ 687.979054][T20882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.038967][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.311504][T20900] IPv4: Oversized IP packet from 127.202.26.0 [ 689.220071][T20919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5459'. [ 689.488678][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792a0c00: rx timeout, send abort [ 689.497430][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880792a0c00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 689.948605][T20949] syzkaller0: entered promiscuous mode [ 689.954360][T20949] syzkaller0: entered allmulticast mode [ 690.848330][T20974] syzkaller0: entered promiscuous mode [ 690.855944][T20974] syzkaller0: entered allmulticast mode [ 691.321914][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026407800: rx timeout, send abort [ 691.330315][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026407800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 691.516553][T20993] loop5: detected capacity change from 0 to 7 [ 691.571995][T20993] Dev loop5: unable to read RDB block 7 [ 691.598974][T20993] loop5: unable to read partition table [ 691.621036][T20993] loop5: partition table beyond EOD, truncated [ 691.627291][T20993] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 691.918780][T20999] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5491'. [ 692.582676][T21001] loop3: detected capacity change from 0 to 512 [ 692.636464][T21001] EXT4-fs: Ignoring removed orlov option [ 692.734558][T21001] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.5495: inode has both inline data and extents flags [ 692.759258][T21001] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.5495: couldn't read orphan inode 15 (err -117) [ 692.775313][T21001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.959389][T21001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.239200][T21020] hub 5-0:1.0: USB hub found [ 693.246899][T21020] hub 5-0:1.0: 1 port detected [ 693.398493][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'. [ 694.245104][T21035] loop1: detected capacity change from 0 to 128 [ 694.308728][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5507'. [ 694.317923][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5507'. [ 695.867821][T21062] loop1: detected capacity change from 0 to 2048 [ 698.950360][T21129] FAULT_INJECTION: forcing a failure. [ 698.950360][T21129] name failslab, interval 1, probability 0, space 0, times 0 [ 698.963437][T21129] CPU: 0 PID: 21129 Comm: syz.3.5539 Not tainted syzkaller #0 [ 698.971007][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 698.981106][T21129] Call Trace: [ 698.984457][T21129] [ 698.987456][T21129] dump_stack_lvl+0x18c/0x250 [ 698.992225][T21129] ? show_regs_print_info+0x20/0x20 [ 698.997485][T21129] ? load_image+0x420/0x420 [ 699.002034][T21129] ? __might_sleep+0xe0/0xe0 [ 699.006669][T21129] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.011773][T21129] should_fail_ex+0x394/0x4c0 [ 699.016505][T21129] should_failslab+0x9/0x20 [ 699.021047][T21129] slab_pre_alloc_hook+0x59/0x300 [ 699.026122][T21129] kmem_cache_alloc+0x5a/0x2d0 [ 699.030922][T21129] ? security_file_alloc+0x34/0x120 [ 699.036217][T21129] security_file_alloc+0x34/0x120 [ 699.041331][T21129] init_file+0x94/0x1f0 [ 699.045556][T21129] alloc_empty_file+0xb7/0x1d0 [ 699.050368][T21129] alloc_file+0x5b/0x600 [ 699.054687][T21129] alloc_file_pseudo+0x184/0x210 [ 699.059709][T21129] ? fput+0x1a0/0x1a0 [ 699.063749][T21129] ? alloc_fd+0x590/0x640 [ 699.068158][T21129] sock_alloc_file+0xb7/0x280 [ 699.072980][T21129] __sys_socket+0x140/0x1b0 [ 699.077538][T21129] __x64_sys_socket+0x7a/0x90 [ 699.082275][T21129] do_syscall_64+0x55/0xb0 [ 699.086746][T21129] ? clear_bhb_loop+0x40/0x90 [ 699.091486][T21129] ? clear_bhb_loop+0x40/0x90 [ 699.096218][T21129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.102173][T21129] RIP: 0033:0x7f860639f559 [ 699.106656][T21129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.126334][T21129] RSP: 002b:00007f8607239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 699.134838][T21129] RAX: ffffffffffffffda RBX: 00007f8606625fa0 RCX: 00007f860639f559 [ 699.142871][T21129] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 699.150899][T21129] RBP: 00007f8606436b20 R08: 0000000000000000 R09: 0000000000000000 [ 699.158916][T21129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.167014][T21129] R13: 00007f8606626038 R14: 00007f8606625fa0 R15: 00007ffd9629daf8 [ 699.175050][T21129] [ 700.342758][T21151] loop3: detected capacity change from 0 to 2048 [ 700.405890][T21151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.511985][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.486491][T21202] loop0: detected capacity change from 0 to 512 [ 702.510102][T21202] EXT4-fs: Ignoring removed i_version option [ 702.532226][T21202] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 702.564080][T21202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 702.614466][T21202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.643054][T21202] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.821242][T19851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.144046][T21216] Cannot find add_set index 0 as target [ 704.150826][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5568'. [ 704.167257][T21216] serial 00:03: in use; can't configure [ 706.509764][T21269] loop3: detected capacity change from 0 to 512 [ 706.644401][T21269] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 706.663571][T21269] FAT-fs (loop3): Filesystem has been set read-only [ 706.690015][T21269] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 706.711379][T21273] loop1: detected capacity change from 0 to 512 [ 706.718187][T21269] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 706.743208][T21273] EXT4-fs: Ignoring removed i_version option [ 706.782408][T21273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 706.843451][T21273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 706.939530][T21273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.972588][T21273] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.389099][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.707389][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.405928][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880278edc00: rx timeout, send abort [ 708.414537][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880278edc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 709.456506][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 709.470488][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 709.479572][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 709.498950][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.523238][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 709.530869][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 709.575438][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 709.588287][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 709.597169][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 709.605130][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.612914][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 709.636807][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.247655][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.445137][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.494690][T21323] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.635379][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.720416][T21344] syzkaller0: entered promiscuous mode [ 711.731134][ T52] Bluetooth: hci2: command tx timeout [ 711.741278][T21344] syzkaller0: entered allmulticast mode [ 711.898488][T21348] loop2: detected capacity change from 0 to 512 [ 711.920911][T21348] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 711.936534][T21348] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 711.958229][T21348] EXT4-fs (loop2): 1 truncate cleaned up [ 711.967879][T21348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.213887][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.021383][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032ca7c00: rx timeout, send abort [ 713.029960][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ca7c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 713.177593][T21378] loop3: detected capacity change from 0 to 512 [ 713.304571][T21378] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 713.314009][T21378] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 713.332775][T21378] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.5609: iget: bad i_size value: 12154757448730 [ 713.361205][T21378] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.5609: couldn't read orphan inode 13 (err -117) [ 713.381241][T21378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.417082][T21378] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 713.456898][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.810932][ T52] Bluetooth: hci2: command tx timeout [ 715.565718][T21323] chnl_net:caif_netlink_parms(): no params data found [ 715.901216][ T52] Bluetooth: hci2: command tx timeout [ 716.551560][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880792a2400: rx timeout, send abort [ 716.560023][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880792a2400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 717.973702][ T52] Bluetooth: hci2: command tx timeout [ 719.110499][T21323] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.131949][T21323] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.139220][T21323] bridge_slave_0: entered allmulticast mode [ 719.167852][T21323] bridge_slave_0: entered promiscuous mode [ 719.231033][T21323] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.238290][T21323] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.248335][T21323] bridge_slave_1: entered allmulticast mode [ 719.256430][T21323] bridge_slave_1: entered promiscuous mode [ 719.316303][T21323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.400586][T21323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.568392][T21323] team0: Port device team_slave_0 added [ 719.626498][T21323] team0: Port device team_slave_1 added [ 719.758395][T21323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.786321][T21323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.873540][T21323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.895180][T21323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.908036][T21323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.941962][T21323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.266000][T21323] hsr_slave_0: entered promiscuous mode [ 720.295114][T21323] hsr_slave_1: entered promiscuous mode [ 720.307229][T21323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.328421][T21323] Cannot create hsr debugfs directory [ 720.802934][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c6d8000: rx timeout, send abort [ 720.815144][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c6d8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 722.607033][ T1143] hsr_slave_0: left promiscuous mode [ 722.613105][ T1143] hsr_slave_1: left promiscuous mode [ 722.619022][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.626942][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.639548][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.647189][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.655414][ T1143] bridge_slave_1: left allmulticast mode [ 722.669595][ T1143] bridge_slave_1: left promiscuous mode [ 722.679932][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.695487][ T1143] bridge_slave_0: left allmulticast mode [ 722.701607][ T1143] bridge_slave_0: left promiscuous mode [ 722.707480][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.773650][ T1143] veth1_macvtap: left promiscuous mode [ 722.786485][ T1143] veth0_macvtap: left promiscuous mode [ 722.793626][ T1143] veth1_vlan: left promiscuous mode [ 722.799013][ T1143] veth0_vlan: left promiscuous mode [ 723.597411][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 723.649274][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 723.709811][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.765380][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.188276][ T1143] bond0 (unregistering): Released all slaves [ 724.338720][T21507] syzkaller0: entered promiscuous mode [ 724.344779][T21507] syzkaller0: entered allmulticast mode [ 725.320509][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880691f6400: rx timeout, send abort [ 725.328973][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880691f6400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.728445][T21552] FAULT_INJECTION: forcing a failure. [ 726.728445][T21552] name failslab, interval 1, probability 0, space 0, times 0 [ 726.756368][T21552] CPU: 0 PID: 21552 Comm: syz.1.5647 Not tainted syzkaller #0 [ 726.763906][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 726.774001][T21552] Call Trace: [ 726.777324][T21552] [ 726.780291][T21552] dump_stack_lvl+0x18c/0x250 [ 726.785027][T21552] ? sctp_sendmsg+0x1519/0x27b0 [ 726.790058][T21552] ? ___sys_sendmsg+0x2a6/0x360 [ 726.794973][T21552] ? show_regs_print_info+0x20/0x20 [ 726.800229][T21552] ? load_image+0x420/0x420 [ 726.804812][T21552] should_fail_ex+0x394/0x4c0 [ 726.809560][T21552] should_failslab+0x9/0x20 [ 726.814120][T21552] slab_pre_alloc_hook+0x59/0x300 [ 726.819194][T21552] ? sctp_add_bind_addr+0x8c/0x360 [ 726.824357][T21552] __kmem_cache_alloc_node+0x53/0x260 [ 726.829776][T21552] ? sctp_add_bind_addr+0x8c/0x360 [ 726.834948][T21552] kmalloc_trace+0x2a/0xe0 [ 726.839444][T21552] sctp_add_bind_addr+0x8c/0x360 [ 726.844447][T21552] sctp_copy_local_addr_list+0x31b/0x4e0 [ 726.850133][T21552] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 726.855913][T21552] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 726.862035][T21552] ? sctp_v4_is_any+0x35/0x60 [ 726.866775][T21552] ? sctp_copy_one_addr+0x8c/0x350 [ 726.871940][T21552] sctp_bind_addr_copy+0x189/0x3c0 [ 726.877111][T21552] sctp_connect_new_asoc+0x2f9/0x6a0 [ 726.882492][T21552] ? __sctp_connect+0xd80/0xd80 [ 726.887394][T21552] ? __local_bh_enable_ip+0x13a/0x1c0 [ 726.892845][T21552] ? _local_bh_enable+0xa0/0xa0 [ 726.897737][T21552] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 726.903592][T21552] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 726.909498][T21552] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 726.915136][T21552] ? security_sctp_bind_connect+0x89/0xb0 [ 726.920944][T21552] sctp_sendmsg+0x1519/0x27b0 [ 726.925680][T21552] ? sctp_getsockopt+0xb60/0xb60 [ 726.930685][T21552] ? aa_sk_perm+0x7bb/0x8e0 [ 726.935339][T21552] ? aa_af_perm+0x330/0x330 [ 726.939899][T21552] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 726.946375][T21552] ? sock_rps_record_flow+0x19/0x3f0 [ 726.951772][T21552] ? inet_sendmsg+0x7e/0x2a0 [ 726.956419][T21552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 726.961759][T21552] ? inet_send_prepare+0x250/0x250 [ 726.966930][T21552] ____sys_sendmsg+0x61b/0x980 [ 726.971769][T21552] ? __asan_memset+0x22/0x40 [ 726.976420][T21552] ? __sys_sendmsg_sock+0x30/0x30 [ 726.981489][T21552] ? __import_iovec+0x5f2/0x850 [ 726.986454][T21552] ? import_iovec+0x73/0xa0 [ 726.991012][T21552] ___sys_sendmsg+0x2a6/0x360 [ 726.995742][T21552] ? __sys_sendmsg+0x2b0/0x2b0 [ 727.000610][T21552] ? __might_fault+0xc6/0x120 [ 727.005341][T21552] ? __might_fault+0xaa/0x120 [ 727.010072][T21552] __sys_sendmmsg+0x2ca/0x510 [ 727.014821][T21552] ? __ia32_sys_sendmsg+0x90/0x90 [ 727.019917][T21552] ? __ia32_sys_get_robust_list+0x110/0x110 [ 727.025898][T21552] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.031927][T21552] ? lock_chain_count+0x20/0x20 [ 727.036856][T21552] __x64_sys_sendmmsg+0xa0/0xb0 [ 727.041757][T21552] do_syscall_64+0x55/0xb0 [ 727.046226][T21552] ? clear_bhb_loop+0x40/0x90 [ 727.050957][T21552] ? clear_bhb_loop+0x40/0x90 [ 727.055699][T21552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.061657][T21552] RIP: 0033:0x7f7cb059f559 [ 727.066117][T21552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.085777][T21552] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 727.094234][T21552] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 727.102313][T21552] RDX: 0000000000000002 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 727.110363][T21552] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 727.118376][T21552] R10: 0000000000048000 R11: 0000000000000246 R12: 0000000000000000 [ 727.126417][T21552] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 727.134466][T21552] [ 727.371429][T21323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.398029][T21323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.435303][T21323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.485555][T21323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.727656][T21323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.758237][T21323] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.776326][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.783664][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.822884][T21578] loop1: detected capacity change from 0 to 512 [ 727.828521][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.836387][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.851754][T21578] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 727.902958][T21578] EXT4-fs (loop1): group descriptors corrupted! [ 728.134985][T21583] syzkaller0: entered promiscuous mode [ 728.156950][T21583] syzkaller0: entered allmulticast mode [ 728.735925][T21323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.785527][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032380000: rx timeout, send abort [ 728.794283][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032380000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 729.517191][T21636] loop2: detected capacity change from 0 to 512 [ 729.547517][T21323] veth0_vlan: entered promiscuous mode [ 729.573075][T21635] syzkaller0: entered promiscuous mode [ 729.578624][T21635] syzkaller0: entered allmulticast mode [ 729.610320][T21636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.634037][T21636] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.647930][T21323] veth1_vlan: entered promiscuous mode [ 729.829575][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.210193][T21323] veth0_macvtap: entered promiscuous mode [ 730.260013][T21323] veth1_macvtap: entered promiscuous mode [ 730.288122][T21652] syzkaller0: entered promiscuous mode [ 730.316264][T21652] syzkaller0: entered allmulticast mode [ 730.323283][T21656] FAULT_INJECTION: forcing a failure. [ 730.323283][T21656] name failslab, interval 1, probability 0, space 0, times 0 [ 730.346519][T21656] CPU: 1 PID: 21656 Comm: syz.2.5673 Not tainted syzkaller #0 [ 730.354131][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 730.364242][T21656] Call Trace: [ 730.367566][T21656] [ 730.370536][T21656] dump_stack_lvl+0x18c/0x250 [ 730.375286][T21656] ? show_regs_print_info+0x20/0x20 [ 730.380550][T21656] ? load_image+0x420/0x420 [ 730.385107][T21656] ? __might_sleep+0xe0/0xe0 [ 730.389752][T21656] ? __lock_acquire+0x7eb0/0x7eb0 [ 730.394840][T21656] should_fail_ex+0x394/0x4c0 [ 730.399579][T21656] should_failslab+0x9/0x20 [ 730.404124][T21656] slab_pre_alloc_hook+0x59/0x300 [ 730.409173][T21656] ? security_cred_alloc_blank+0x46/0x130 [ 730.414921][T21656] ? security_cred_alloc_blank+0x46/0x130 [ 730.420692][T21656] __kmem_cache_alloc_node+0x53/0x260 [ 730.426094][T21656] ? security_cred_alloc_blank+0x46/0x130 [ 730.431844][T21656] __kmalloc+0xa7/0x240 [ 730.436045][T21656] security_cred_alloc_blank+0x46/0x130 [ 730.441625][T21656] cred_alloc_blank+0x69/0x110 [ 730.446424][T21656] keyctl_session_to_parent+0x42/0x9d0 [ 730.451926][T21656] __se_sys_keyctl+0x812/0xb50 [ 730.456726][T21656] ? __x64_sys_keyctl+0xc0/0xc0 [ 730.461614][T21656] ? do_futex+0x35d/0x3e0 [ 730.465967][T21656] ? __lock_acquire+0x7eb0/0x7eb0 [ 730.471018][T21656] ? __ia32_sys_get_robust_list+0x110/0x110 [ 730.476931][T21656] ? key_fsgid_changed+0xb3/0xf0 [ 730.481901][T21656] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 730.487910][T21656] ? lock_chain_count+0x20/0x20 [ 730.492794][T21656] ? lockdep_hardirqs_on+0x98/0x150 [ 730.498021][T21656] ? __x64_sys_keyctl+0x20/0xc0 [ 730.504458][T21656] do_syscall_64+0x55/0xb0 [ 730.508936][T21656] ? clear_bhb_loop+0x40/0x90 [ 730.513656][T21656] ? clear_bhb_loop+0x40/0x90 [ 730.518391][T21656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.524344][T21656] RIP: 0033:0x7fb33d79f559 [ 730.528789][T21656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.548417][T21656] RSP: 002b:00007fb33e62f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 730.556973][T21656] RAX: ffffffffffffffda RBX: 00007fb33da25fa0 RCX: 00007fb33d79f559 [ 730.564974][T21656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 730.572969][T21656] RBP: 00007fb33d836b20 R08: 0000000000000000 R09: 0000000000000000 [ 730.580964][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.588961][T21656] R13: 00007fb33da26038 R14: 00007fb33da25fa0 R15: 00007ffe2fcd8628 [ 730.596972][T21656] [ 730.633382][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.654322][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.674552][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.689985][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.720373][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.745750][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.782758][T21323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.089382][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.112558][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.140957][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.161024][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.180697][T21323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.206765][T21323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.233646][T21323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.277474][T21323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.316478][T21323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.346113][T21323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.360222][T21323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.541251][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 731.550199][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5681'. [ 731.570377][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.596977][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.614079][T21682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5681'. [ 731.775659][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.831675][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.879821][T21698] syzkaller0: entered promiscuous mode [ 732.886975][T21698] syzkaller0: entered allmulticast mode [ 733.311827][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'. [ 733.327364][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5690'. [ 733.336977][T21721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5690'. [ 733.565025][T21730] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5693'. [ 733.578967][T21730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5693'. [ 733.931179][T21742] syzkaller0: entered promiscuous mode [ 733.950819][T21742] syzkaller0: entered allmulticast mode [ 734.255810][T21757] syzkaller0: entered promiscuous mode [ 734.263592][T21757] syzkaller0: entered allmulticast mode [ 734.374698][T21762] loop2: detected capacity change from 0 to 164 [ 734.422078][T21762] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 734.481812][T21762] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 734.523328][T21762] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 734.841392][T21760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5703'. [ 735.018763][T21760] veth0_to_bond: entered promiscuous mode [ 735.040831][T21760] veth0_to_bond: entered allmulticast mode [ 735.294278][T21786] syzkaller0: entered promiscuous mode [ 735.306092][T21786] syzkaller0: entered allmulticast mode [ 735.372509][T21792] FAULT_INJECTION: forcing a failure. [ 735.372509][T21792] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 735.390041][T21792] CPU: 1 PID: 21792 Comm: syz.1.5711 Not tainted syzkaller #0 [ 735.397562][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 735.407674][T21792] Call Trace: [ 735.411052][T21792] [ 735.414017][T21792] dump_stack_lvl+0x18c/0x250 [ 735.418746][T21792] ? show_regs_print_info+0x20/0x20 [ 735.424024][T21792] ? load_image+0x420/0x420 [ 735.428582][T21792] ? __might_fault+0xaa/0x120 [ 735.433317][T21792] ? __lock_acquire+0x7eb0/0x7eb0 [ 735.438396][T21792] should_fail_ex+0x394/0x4c0 [ 735.443121][T21792] _copy_from_user+0x2f/0xe0 [ 735.447738][T21792] __se_sys_prlimit64+0x12f/0xbf0 [ 735.452821][T21792] ? __x64_sys_prlimit64+0xb0/0xb0 [ 735.457978][T21792] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 735.464023][T21792] ? lock_chain_count+0x20/0x20 [ 735.468928][T21792] ? lockdep_hardirqs_on+0x98/0x150 [ 735.474172][T21792] do_syscall_64+0x55/0xb0 [ 735.478637][T21792] ? clear_bhb_loop+0x40/0x90 [ 735.483364][T21792] ? clear_bhb_loop+0x40/0x90 [ 735.488094][T21792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.494038][T21792] RIP: 0033:0x7f7cb059f559 [ 735.498487][T21792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.518131][T21792] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 735.526599][T21792] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 735.534612][T21792] RDX: 0000200000000040 RSI: 000000000000000e RDI: 0000000000000000 [ 735.542641][T21792] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 735.550677][T21792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.558697][T21792] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 735.566727][T21792] [ 735.850450][T21806] FAULT_INJECTION: forcing a failure. [ 735.850450][T21806] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 735.871324][T21806] CPU: 1 PID: 21806 Comm: syz.4.5716 Not tainted syzkaller #0 [ 735.878852][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 735.888948][T21806] Call Trace: [ 735.892266][T21806] [ 735.895249][T21806] dump_stack_lvl+0x18c/0x250 [ 735.899985][T21806] ? show_regs_print_info+0x20/0x20 [ 735.905242][T21806] ? load_image+0x420/0x420 [ 735.909797][T21806] ? __lock_acquire+0x7eb0/0x7eb0 [ 735.914875][T21806] should_fail_ex+0x394/0x4c0 [ 735.919605][T21806] prepare_alloc_pages+0x1e1/0x5b0 [ 735.924778][T21806] __alloc_pages+0x134/0x460 [ 735.929424][T21806] ? zone_statistics+0x170/0x170 [ 735.934425][T21806] ? rcu_is_watching+0x15/0xb0 [ 735.939256][T21806] ? __alloc_pages+0x276/0x460 [ 735.944057][T21806] __alloc_pages_bulk+0x49b/0x900 [ 735.949111][T21806] ? alloc_pages+0x4e1/0x740 [ 735.953819][T21806] kasan_populate_vmalloc+0xcd/0x280 [ 735.959143][T21806] ? do_raw_spin_unlock+0x121/0x230 [ 735.964405][T21806] alloc_vmap_area+0x1d2d/0x1e50 [ 735.969383][T21806] ? vm_map_ram+0xcf0/0xcf0 [ 735.973939][T21806] ? rcu_is_watching+0x15/0xb0 [ 735.978756][T21806] __get_vm_area_node+0x162/0x370 [ 735.983840][T21806] __vmalloc_node_range+0x36f/0x1320 [ 735.989161][T21806] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 735.994730][T21806] ? __stack_depot_save+0x1f/0x660 [ 735.999885][T21806] ? kasan_set_track+0x5f/0x70 [ 736.004681][T21806] ? do_syscall_64+0x55/0xb0 [ 736.009318][T21806] ? free_vm_area+0x50/0x50 [ 736.013858][T21806] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 736.019429][T21806] __vmalloc+0x7a/0x90 [ 736.023579][T21806] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 736.029168][T21806] bpf_prog_alloc_no_stats+0x46/0x460 [ 736.034562][T21806] bpf_prog_alloc+0x3d/0x1a0 [ 736.039172][T21806] ? bpf_prog_create_from_user+0x31/0x420 [ 736.045023][T21806] bpf_prog_create_from_user+0xa6/0x420 [ 736.050638][T21806] ? seccomp_notify_detach+0x220/0x220 [ 736.056197][T21806] do_seccomp+0x794/0xdc0 [ 736.060693][T21806] ? prctl_set_seccomp+0x60/0x60 [ 736.065670][T21806] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 736.071698][T21806] ? lockdep_hardirqs_on+0x98/0x150 [ 736.076929][T21806] do_syscall_64+0x55/0xb0 [ 736.081371][T21806] ? clear_bhb_loop+0x40/0x90 [ 736.086077][T21806] ? clear_bhb_loop+0x40/0x90 [ 736.090777][T21806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.096703][T21806] RIP: 0033:0x7f3c8cd9f559 [ 736.101157][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.120788][T21806] RSP: 002b:00007f3c8dc3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 736.129277][T21806] RAX: ffffffffffffffda RBX: 00007f3c8d025fa0 RCX: 00007f3c8cd9f559 [ 736.137285][T21806] RDX: 0000200000000140 RSI: 0000000000000008 RDI: 0000000000000001 [ 736.145474][T21806] RBP: 00007f3c8ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 736.153479][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.161487][T21806] R13: 00007f3c8d026038 R14: 00007f3c8d025fa0 R15: 00007ffe7a5c36a8 [ 736.169539][T21806] [ 736.221311][T21806] syz.4.5716: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 736.268685][T21806] CPU: 0 PID: 21806 Comm: syz.4.5716 Not tainted syzkaller #0 [ 736.276216][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 736.286314][T21806] Call Trace: [ 736.289628][T21806] [ 736.292599][T21806] dump_stack_lvl+0x18c/0x250 [ 736.297334][T21806] ? show_regs_print_info+0x20/0x20 [ 736.302584][T21806] ? load_image+0x420/0x420 [ 736.307136][T21806] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 736.313609][T21806] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 736.320165][T21806] warn_alloc+0x246/0x340 [ 736.324544][T21806] ? slab_free_freelist_hook+0x154/0x240 [ 736.330261][T21806] ? zone_watermark_ok_safe+0x230/0x230 [ 736.335863][T21806] ? __get_vm_area_node+0x17b/0x370 [ 736.341130][T21806] ? __get_vm_area_node+0x17b/0x370 [ 736.346389][T21806] __vmalloc_node_range+0x394/0x1320 [ 736.351733][T21806] ? __stack_depot_save+0x1f/0x660 [ 736.356906][T21806] ? kasan_set_track+0x5f/0x70 [ 736.361713][T21806] ? do_syscall_64+0x55/0xb0 [ 736.366366][T21806] ? free_vm_area+0x50/0x50 [ 736.370926][T21806] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 736.376517][T21806] __vmalloc+0x7a/0x90 [ 736.380659][T21806] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 736.386260][T21806] bpf_prog_alloc_no_stats+0x46/0x460 [ 736.391707][T21806] bpf_prog_alloc+0x3d/0x1a0 [ 736.396374][T21806] ? bpf_prog_create_from_user+0x31/0x420 [ 736.402140][T21806] bpf_prog_create_from_user+0xa6/0x420 [ 736.407768][T21806] ? seccomp_notify_detach+0x220/0x220 [ 736.413285][T21806] do_seccomp+0x794/0xdc0 [ 736.417675][T21806] ? prctl_set_seccomp+0x60/0x60 [ 736.422671][T21806] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 736.428708][T21806] ? lockdep_hardirqs_on+0x98/0x150 [ 736.433945][T21806] do_syscall_64+0x55/0xb0 [ 736.438402][T21806] ? clear_bhb_loop+0x40/0x90 [ 736.443131][T21806] ? clear_bhb_loop+0x40/0x90 [ 736.447851][T21806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.453790][T21806] RIP: 0033:0x7f3c8cd9f559 [ 736.458252][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.477985][T21806] RSP: 002b:00007f3c8dc3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 736.486618][T21806] RAX: ffffffffffffffda RBX: 00007f3c8d025fa0 RCX: 00007f3c8cd9f559 [ 736.494630][T21806] RDX: 0000200000000140 RSI: 0000000000000008 RDI: 0000000000000001 [ 736.502641][T21806] RBP: 00007f3c8ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 736.510709][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.518721][T21806] R13: 00007f3c8d026038 R14: 00007f3c8d025fa0 R15: 00007ffe7a5c36a8 [ 736.526758][T21806] [ 736.576555][T21806] Mem-Info: [ 736.579806][T21806] active_anon:8675 inactive_anon:1 isolated_anon:0 [ 736.579806][T21806] active_file:17617 inactive_file:40255 isolated_file:0 [ 736.579806][T21806] unevictable:768 dirty:145 writeback:0 [ 736.579806][T21806] slab_reclaimable:10962 slab_unreclaimable:106281 [ 736.579806][T21806] mapped:27918 shmem:3822 pagetables:637 [ 736.579806][T21806] sec_pagetables:0 bounce:0 [ 736.579806][T21806] kernel_misc_reclaimable:0 [ 736.579806][T21806] free:1317599 free_pcp:10269 free_cma:0 [ 736.659700][T21806] Node 0 active_anon:37000kB inactive_anon:4kB active_file:70468kB inactive_file:160816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114072kB dirty:576kB writeback:0kB shmem:16152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11628kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 736.730744][T21806] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 736.826541][T21806] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.887487][T21806] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 736.916865][T21806] Node 0 DMA32 free:1341968kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:45460kB inactive_anon:4kB active_file:70468kB inactive_file:159996kB unevictable:1536kB writepending:576kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:17140kB local_pcp:8184kB free_cma:0kB [ 736.967792][T21806] lowmem_reserve[]: 0 0 0 0 0 [ 736.972879][T21806] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 737.030393][T21806] lowmem_reserve[]: 0 0 0 0 0 [ 737.039906][T21806] Node 1 Normal free:3910552kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:6720kB free_cma:0kB [ 737.130456][T21806] lowmem_reserve[]: 0 0 0 0 0 [ 737.140573][T21806] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 737.177827][T21806] Node 0 DMA32: 8*4kB (E) 327*8kB (ME) 698*16kB (UM) 690*32kB (UME) 86*64kB (UME) 67*128kB (UME) 55*256kB (UME) 33*512kB (UM) 21*1024kB (M) 18*2048kB (M) 293*4096kB (UM) = 1339448kB [ 737.202393][T21806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 737.224710][T21806] Node 1 Normal: 206*4kB (UME) 46*8kB (UME) 45*16kB (UME) 213*32kB (UME) 68*64kB (UME) 15*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 2*2048kB (UE) 950*4096kB (M) = 3910552kB [ 737.264592][T21806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.290545][T21806] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 737.323459][T21806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.353120][T21806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.395834][T21806] 62145 total pagecache pages [ 737.406042][T21806] 1 pages in swap cache [ 737.410246][T21806] Free swap = 124624kB [ 737.421633][T21806] Total swap = 124996kB [ 737.425882][T21806] 2097051 pages RAM [ 737.429720][T21806] 0 pages HighMem/MovableOnly [ 737.452469][T21806] 421729 pages reserved [ 737.456713][T21806] 0 pages cma reserved [ 737.679081][T21830] loop1: detected capacity change from 0 to 8192 [ 737.864148][T21842] syzkaller0: entered promiscuous mode [ 737.873359][T21842] syzkaller0: entered allmulticast mode [ 738.059686][T21849] loop2: detected capacity change from 0 to 512 [ 738.112293][T21849] EXT4-fs: Ignoring removed i_version option [ 738.146596][T21849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 738.177065][T21849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.220483][T21849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.267113][T17245] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 738.291333][T21849] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.325349][T17245] FAT-fs (loop1): Filesystem has been set read-only [ 738.394459][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.267331][T21884] ip_tables: iptables: counters copy to user failed while replacing table [ 740.145847][T21886] syzkaller0: entered promiscuous mode [ 740.166337][T21886] syzkaller0: entered allmulticast mode [ 740.185945][T21892] loop1: detected capacity change from 0 to 512 [ 740.203628][T21892] EXT4-fs: Ignoring removed i_version option [ 740.244101][T21892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 740.270309][T21892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.319355][T21892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.367159][T21892] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.491966][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.609366][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 740.809059][T21915] FAULT_INJECTION: forcing a failure. [ 740.809059][T21915] name fail_futex, interval 1, probability 0, space 0, times 1 [ 740.842168][T21915] CPU: 0 PID: 21915 Comm: syz.3.5742 Not tainted syzkaller #0 [ 740.849707][T21915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 740.859820][T21915] Call Trace: [ 740.863139][T21915] [ 740.866134][T21915] dump_stack_lvl+0x18c/0x250 [ 740.870990][T21915] ? show_regs_print_info+0x20/0x20 [ 740.876255][T21915] ? load_image+0x420/0x420 [ 740.880829][T21915] ? stack_trace_save+0xaa/0x100 [ 740.885887][T21915] ? stack_trace_snprint+0xf0/0xf0 [ 740.891047][T21915] ? __stack_depot_save+0x1f/0x660 [ 740.896221][T21915] should_fail_ex+0x394/0x4c0 [ 740.900945][T21915] get_futex_key+0x134/0xf40 [ 740.905582][T21915] ? futex_setup_timer+0xc0/0xc0 [ 740.910569][T21915] futex_wait_setup+0xbc/0x270 [ 740.915386][T21915] ? futex_wait_multiple+0x970/0x970 [ 740.920739][T21915] futex_wait+0x1cf/0x640 [ 740.925116][T21915] ? futex_wait_setup+0x270/0x270 [ 740.930192][T21915] ? __se_sys_keyctl+0x812/0xb50 [ 740.935166][T21915] do_futex+0x2ff/0x3e0 [ 740.939356][T21915] ? __ia32_sys_get_robust_list+0x110/0x110 [ 740.945369][T21915] __se_sys_futex+0x3a9/0x440 [ 740.950072][T21915] ? __x64_sys_futex+0xf0/0xf0 [ 740.954869][T21915] ? __x64_sys_futex+0x21/0xf0 [ 740.959670][T21915] do_syscall_64+0x55/0xb0 [ 740.964154][T21915] ? clear_bhb_loop+0x40/0x90 [ 740.968864][T21915] ? clear_bhb_loop+0x40/0x90 [ 740.973584][T21915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.979513][T21915] RIP: 0033:0x7f860639f559 [ 740.983955][T21915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.003599][T21915] RSP: 002b:00007f86072390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 741.012047][T21915] RAX: ffffffffffffffda RBX: 00007f8606625fa8 RCX: 00007f860639f559 [ 741.020049][T21915] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8606625fa8 [ 741.028044][T21915] RBP: 00007f8606625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 741.036049][T21915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.044042][T21915] R13: 00007f8606626038 R14: 00007ffd9629da10 R15: 00007ffd9629daf8 [ 741.052055][T21915] [ 741.273527][T21929] loop1: detected capacity change from 0 to 512 [ 741.291590][T21929] EXT4-fs: Ignoring removed i_version option [ 741.308929][T21929] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 741.331934][T21929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.430316][T21929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.476143][T21929] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.486929][T21937] FAULT_INJECTION: forcing a failure. [ 741.486929][T21937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 741.486960][T21937] CPU: 0 PID: 21937 Comm: syz.4.5748 Not tainted syzkaller #0 [ 741.486982][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 741.486995][T21937] Call Trace: [ 741.487004][T21937] [ 741.487013][T21937] dump_stack_lvl+0x18c/0x250 [ 741.487053][T21937] ? show_regs_print_info+0x20/0x20 [ 741.487083][T21937] ? load_image+0x420/0x420 [ 741.487122][T21937] should_fail_ex+0x394/0x4c0 [ 741.487154][T21937] get_futex_key+0x134/0xf40 [ 741.487180][T21937] ? try_to_wake_up+0x6f5/0x10e0 [ 741.487203][T21937] ? futex_setup_timer+0xc0/0xc0 [ 741.487234][T21937] futex_wake+0x127/0x4f0 [ 741.487265][T21937] ? futex_wake_mark+0x150/0x150 [ 741.487291][T21937] ? do_prlimit+0x2f0/0x3f0 [ 741.487312][T21937] ? __lock_acquire+0x7eb0/0x7eb0 [ 741.487339][T21937] ? apparmor_task_setrlimit+0x17a/0x1d0 [ 741.487376][T21937] do_futex+0x35d/0x3e0 [ 741.487405][T21937] ? __ia32_sys_get_robust_list+0x110/0x110 [ 741.487440][T21937] __se_sys_futex+0x3a9/0x440 [ 741.487476][T21937] ? __x64_sys_futex+0xf0/0xf0 [ 741.487506][T21937] ? __x64_sys_futex+0x21/0xf0 [ 741.487531][T21937] do_syscall_64+0x55/0xb0 [ 741.487557][T21937] ? clear_bhb_loop+0x40/0x90 [ 741.487587][T21937] ? clear_bhb_loop+0x40/0x90 [ 741.487631][T21937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.487659][T21937] RIP: 0033:0x7f3c8cd9f559 [ 741.487679][T21937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.487697][T21937] RSP: 002b:00007f3c8dc3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 741.659214][T21937] RAX: ffffffffffffffda RBX: 00007f3c8d025fa8 RCX: 00007f3c8cd9f559 [ 741.667232][T21937] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c8d025fac [ 741.675251][T21937] RBP: 00007f3c8d025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 741.683276][T21937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.691304][T21937] R13: 00007f3c8d026038 R14: 00007ffe7a5c35c0 R15: 00007ffe7a5c36a8 [ 741.699346][T21937] [ 741.723221][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.185156][T21952] syzkaller0: entered promiscuous mode [ 742.191254][T21952] syzkaller0: entered allmulticast mode [ 743.233561][T21970] loop1: detected capacity change from 0 to 512 [ 743.254867][T21970] EXT4-fs: Ignoring removed i_version option [ 743.274208][T21970] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 743.290789][T21970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 743.333167][T21970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.353563][T21970] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.429132][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.953787][T22006] loop3: detected capacity change from 0 to 512 [ 744.964200][T22006] EXT4-fs: Ignoring removed i_version option [ 745.011140][T22006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 745.123351][T22006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 745.248330][T22006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.308705][T22010] syzkaller0: entered promiscuous mode [ 745.315378][T22006] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.315900][T22010] syzkaller0: entered allmulticast mode [ 745.521962][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.254500][T22050] loop4: detected capacity change from 0 to 512 [ 746.283602][T22050] EXT4-fs: Ignoring removed i_version option [ 746.325642][T22050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 746.350917][T22050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 746.431818][T22056] syzkaller0: entered promiscuous mode [ 746.437471][T22056] syzkaller0: entered allmulticast mode [ 746.458107][T22050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.541818][T22050] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.449434][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.897393][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.903874][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.218810][T22084] loop2: detected capacity change from 0 to 512 [ 748.262184][T22084] EXT4-fs: Ignoring removed orlov option [ 748.445697][T22084] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.5789: inode has both inline data and extents flags [ 748.501138][T22084] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.5789: couldn't read orphan inode 15 (err -117) [ 748.592666][T22084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.848504][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.862083][T22094] loop4: detected capacity change from 0 to 512 [ 748.869663][T22094] EXT4-fs: Ignoring removed i_version option [ 748.890818][T22094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 748.911442][T22094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 748.968289][T22094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.982030][T22096] syzkaller0: entered promiscuous mode [ 748.987554][T22096] syzkaller0: entered allmulticast mode [ 748.995298][T22094] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.223394][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.697845][T22126] loop1: detected capacity change from 0 to 512 [ 749.721841][T22126] EXT4-fs: Ignoring removed orlov option [ 749.755998][T22126] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.5803: inode has both inline data and extents flags [ 749.807785][T22126] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.5803: couldn't read orphan inode 15 (err -117) [ 749.874014][T22135] loop4: detected capacity change from 0 to 512 [ 749.923259][T22135] EXT4-fs: Ignoring removed i_version option [ 749.962481][T22126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.014428][T22135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 750.081384][T22135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 750.102992][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.166684][T22135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.204216][T22135] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.262153][T22145] syzkaller0: entered promiscuous mode [ 750.267701][T22145] syzkaller0: entered allmulticast mode [ 750.314076][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.331372][T22149] loop1: detected capacity change from 0 to 1024 [ 750.341564][T22149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 750.361367][T22149] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 750.408460][T22149] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 750.431785][T22149] EXT4-fs (loop1): orphan cleanup on readonly fs [ 750.439962][T22149] EXT4-fs error (device loop1): ext4_free_blocks:6699: comm syz.1.5809: Freeing blocks not in datazone - block = 0, count = 4096 [ 750.574195][T22149] EXT4-fs (loop1): 1 orphan inode deleted [ 750.595493][T22149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 750.657686][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.5809: path /410/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 750.710955][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.754836][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 18: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.782705][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5812'. [ 750.806472][T22160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5812'. [ 750.817200][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.847912][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.878450][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 21: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.905466][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 750.934725][T22149] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 23: comm syz.1.5809: path /410/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 751.355427][T22176] loop3: detected capacity change from 0 to 512 [ 751.369384][T22176] EXT4-fs: Ignoring removed orlov option [ 751.670676][T22176] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.5817: inode has both inline data and extents flags [ 752.061386][T22176] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.5817: couldn't read orphan inode 15 (err -117) [ 752.075538][T22176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.116251][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.164446][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.824848][T22224] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5828'. [ 754.870844][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5828'. [ 756.355309][T22259] netlink: 'syz.4.5837': attribute type 4 has an invalid length. [ 756.371602][T22259] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5837'. [ 756.747991][T22278] FAULT_INJECTION: forcing a failure. [ 756.747991][T22278] name failslab, interval 1, probability 0, space 0, times 0 [ 756.762196][T22278] CPU: 0 PID: 22278 Comm: syz.4.5841 Not tainted syzkaller #0 [ 756.769712][T22278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 756.779813][T22278] Call Trace: [ 756.783133][T22278] [ 756.786102][T22278] dump_stack_lvl+0x18c/0x250 [ 756.790834][T22278] ? show_regs_print_info+0x20/0x20 [ 756.796084][T22278] ? load_image+0x420/0x420 [ 756.800657][T22278] ? __might_sleep+0xe0/0xe0 [ 756.805313][T22278] ? __lock_acquire+0x7eb0/0x7eb0 [ 756.810380][T22278] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 756.816416][T22278] should_fail_ex+0x394/0x4c0 [ 756.821142][T22278] should_failslab+0x9/0x20 [ 756.825683][T22278] slab_pre_alloc_hook+0x59/0x300 [ 756.830730][T22278] ? lockdep_hardirqs_on+0x98/0x150 [ 756.835955][T22278] kmem_cache_alloc+0x5a/0x2d0 [ 756.840740][T22278] ? taskstats_exit+0x14d/0xce0 [ 756.845622][T22278] taskstats_exit+0x14d/0xce0 [ 756.850325][T22278] ? sysctl_delayacct+0x220/0x220 [ 756.855367][T22278] ? rcu_read_lock_any_held+0xb4/0x140 [ 756.860848][T22278] ? rcu_read_lock_bh_held+0x100/0x100 [ 756.866381][T22278] do_exit+0x8fc/0x2530 [ 756.870583][T22278] ? put_task_struct+0xc0/0xc0 [ 756.875408][T22278] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 756.881418][T22278] ? get_signal+0x100e/0x1390 [ 756.886116][T22278] ? lock_chain_count+0x20/0x20 [ 756.890992][T22278] ? _raw_spin_lock_irq+0xbb/0xf0 [ 756.896039][T22278] do_group_exit+0x22d/0x2f0 [ 756.900652][T22278] ? lockdep_hardirqs_on+0x98/0x150 [ 756.905907][T22278] get_signal+0x12a6/0x1390 [ 756.910448][T22278] arch_do_signal_or_restart+0xc2/0x7b0 [ 756.916066][T22278] ? __ia32_sys_get_robust_list+0x110/0x110 [ 756.921995][T22278] ? get_sigframe_size+0x20/0x20 [ 756.926959][T22278] ? do_sock_getsockopt+0x379/0x450 [ 756.932188][T22278] ? exit_to_user_mode_loop+0x3b/0x110 [ 756.937688][T22278] exit_to_user_mode_loop+0x70/0x110 [ 756.943021][T22278] exit_to_user_mode_prepare+0xee/0x180 [ 756.948620][T22278] syscall_exit_to_user_mode+0x1a/0x50 [ 756.954191][T22278] do_syscall_64+0x61/0xb0 [ 756.958641][T22278] ? clear_bhb_loop+0x40/0x90 [ 756.963349][T22278] ? clear_bhb_loop+0x40/0x90 [ 756.968065][T22278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.973997][T22278] RIP: 0033:0x7f3c8cd9f559 [ 756.978432][T22278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.998063][T22278] RSP: 002b:00007f3c8dc3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.006502][T22278] RAX: fffffffffffffe00 RBX: 00007f3c8d025fa8 RCX: 00007f3c8cd9f559 [ 757.014509][T22278] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c8d025fa8 [ 757.022503][T22278] RBP: 00007f3c8d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 757.030512][T22278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.038526][T22278] R13: 00007f3c8d026038 R14: 00007ffe7a5c35c0 R15: 00007ffe7a5c36a8 [ 757.046545][T22278] [ 757.346169][T22291] loop4: detected capacity change from 0 to 128 [ 757.627470][T22301] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5849'. [ 757.850915][T22300] loop1: detected capacity change from 0 to 1024 [ 758.735421][T22329] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5858'. [ 759.108906][T22339] FAULT_INJECTION: forcing a failure. [ 759.108906][T22339] name failslab, interval 1, probability 0, space 0, times 0 [ 759.129324][T22339] CPU: 1 PID: 22339 Comm: syz.1.5863 Not tainted syzkaller #0 [ 759.136852][T22339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 759.146953][T22339] Call Trace: [ 759.150277][T22339] [ 759.153256][T22339] dump_stack_lvl+0x18c/0x250 [ 759.158000][T22339] ? show_regs_print_info+0x20/0x20 [ 759.163258][T22339] ? load_image+0x420/0x420 [ 759.167828][T22339] ? __might_sleep+0xe0/0xe0 [ 759.172514][T22339] ? __lock_acquire+0x7eb0/0x7eb0 [ 759.177610][T22339] should_fail_ex+0x394/0x4c0 [ 759.182352][T22339] should_failslab+0x9/0x20 [ 759.186900][T22339] slab_pre_alloc_hook+0x59/0x300 [ 759.191976][T22339] kmem_cache_alloc+0x5a/0x2d0 [ 759.196782][T22339] ? posix_lock_inode+0x369/0x3270 [ 759.201954][T22339] posix_lock_inode+0x369/0x3270 [ 759.206962][T22339] ? aa_path_link+0xf80/0xf80 [ 759.211688][T22339] ? lockdep_softirqs_off+0x440/0x440 [ 759.217112][T22339] ? slab_post_alloc_hook+0x86/0x4d0 [ 759.222442][T22339] ? end_current_label_crit_section+0x149/0x170 [ 759.228735][T22339] ? posix_lock_file+0x50/0x50 [ 759.233559][T22339] ? bpf_lsm_file_lock+0x9/0x10 [ 759.238467][T22339] fcntl_setlk+0x9c0/0x1070 [ 759.243094][T22339] ? vfs_lock_file+0x110/0x110 [ 759.247925][T22339] ? __might_fault+0xaa/0x120 [ 759.252655][T22339] ? __might_fault+0xc6/0x120 [ 759.257378][T22339] ? __might_fault+0xaa/0x120 [ 759.262108][T22339] do_fcntl+0x8c1/0x1500 [ 759.266441][T22339] ? kill_fasync+0x4b0/0x4b0 [ 759.271094][T22339] ? __fget_files+0x28/0x460 [ 759.275737][T22339] ? __fget_files+0x3fc/0x460 [ 759.280470][T22339] ? tomoyo_file_fcntl+0x7b/0x220 [ 759.285551][T22339] ? bpf_lsm_file_fcntl+0x9/0x10 [ 759.290541][T22339] ? security_file_fcntl+0x80/0xa0 [ 759.295733][T22339] __se_sys_fcntl+0xc9/0x1a0 [ 759.300478][T22339] do_syscall_64+0x55/0xb0 [ 759.304963][T22339] ? clear_bhb_loop+0x40/0x90 [ 759.309703][T22339] ? clear_bhb_loop+0x40/0x90 [ 759.314446][T22339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.320424][T22339] RIP: 0033:0x7f7cb059f559 [ 759.324971][T22339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.344647][T22339] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 759.353093][T22339] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 759.361111][T22339] RDX: 0000200000000d80 RSI: 0000000000000026 RDI: 0000000000000004 [ 759.369123][T22339] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 759.377157][T22339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.385161][T22339] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 759.393169][T22339] [ 759.655564][T22348] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5867'. [ 762.011925][T22393] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5877'. [ 762.048208][T22393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5877'. [ 762.506161][T22411] IPVS: Scheduler module ip_vs_sip not found [ 764.376083][T22447] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5889'. [ 764.385479][T22447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5889'. [ 765.473274][T22464] loop2: detected capacity change from 0 to 512 [ 765.531593][T22464] EXT4-fs: Ignoring removed bh option [ 765.563519][T22464] EXT4-fs: old and new quota format mixing [ 766.605468][T22488] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5898'. [ 766.615900][T22488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5898'. [ 767.089893][T22501] IPVS: Scheduler module ip_vs_sip not found [ 768.376617][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.205491][T22534] syzkaller0: entered promiscuous mode [ 770.228075][T22534] syzkaller0: entered allmulticast mode [ 770.946008][T22557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5912'. [ 771.196783][T22561] IPVS: Scheduler module ip_vs_sip not found [ 773.641881][T22600] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5920'. [ 773.660115][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 774.023425][T22623] FAULT_INJECTION: forcing a failure. [ 774.023425][T22623] name failslab, interval 1, probability 0, space 0, times 0 [ 774.062188][T22623] CPU: 0 PID: 22623 Comm: syz.2.5926 Not tainted syzkaller #0 [ 774.069720][T22623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 774.079815][T22623] Call Trace: [ 774.083136][T22623] [ 774.086127][T22623] dump_stack_lvl+0x18c/0x250 [ 774.090843][T22623] ? show_regs_print_info+0x20/0x20 [ 774.096060][T22623] ? load_image+0x420/0x420 [ 774.100585][T22623] ? __might_sleep+0xe0/0xe0 [ 774.105227][T22623] ? __lock_acquire+0x7eb0/0x7eb0 [ 774.110286][T22623] should_fail_ex+0x394/0x4c0 [ 774.114996][T22623] should_failslab+0x9/0x20 [ 774.119512][T22623] slab_pre_alloc_hook+0x59/0x300 [ 774.124562][T22623] ? ctinfo_init_net+0x65/0x190 [ 774.129531][T22623] __kmem_cache_alloc_node+0x53/0x260 [ 774.134933][T22623] ? ctinfo_init_net+0x65/0x190 [ 774.139805][T22623] kmalloc_trace+0x2a/0xe0 [ 774.144269][T22623] ctinfo_init_net+0x65/0x190 [ 774.148968][T22623] ops_init+0x391/0x640 [ 774.153142][T22623] setup_net+0x3b6/0xa20 [ 774.157415][T22623] ? copy_net_ns+0x530/0x530 [ 774.162016][T22623] ? copy_net_ns+0x347/0x530 [ 774.166627][T22623] ? down_read_killable+0x1d0/0x340 [ 774.171851][T22623] copy_net_ns+0x361/0x530 [ 774.176308][T22623] create_new_namespaces+0x3ce/0x700 [ 774.181642][T22623] unshare_nsproxy_namespaces+0x11a/0x160 [ 774.187400][T22623] ksys_unshare+0x4fa/0x8f0 [ 774.191942][T22623] ? sighand_ctor+0x50/0x50 [ 774.196466][T22623] ? lock_chain_count+0x20/0x20 [ 774.201336][T22623] ? syscall_enter_from_user_mode+0x25/0x80 [ 774.207266][T22623] __x64_sys_unshare+0x38/0x40 [ 774.212049][T22623] do_syscall_64+0x55/0xb0 [ 774.216495][T22623] ? clear_bhb_loop+0x40/0x90 [ 774.221202][T22623] ? clear_bhb_loop+0x40/0x90 [ 774.225912][T22623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.231833][T22623] RIP: 0033:0x7fb33d79f559 [ 774.236267][T22623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.255996][T22623] RSP: 002b:00007fb33e62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 774.264433][T22623] RAX: ffffffffffffffda RBX: 00007fb33da25fa0 RCX: 00007fb33d79f559 [ 774.272440][T22623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 774.280447][T22623] RBP: 00007fb33d836b20 R08: 0000000000000000 R09: 0000000000000000 [ 774.288445][T22623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.296440][T22623] R13: 00007fb33da26038 R14: 00007fb33da25fa0 R15: 00007ffe2fcd8628 [ 774.304450][T22623] [ 774.631401][T22638] syzkaller0: entered promiscuous mode [ 774.636995][T22638] syzkaller0: entered allmulticast mode [ 774.870430][T22649] loop3: detected capacity change from 0 to 512 [ 774.943396][T22649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 774.991600][T22649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.037185][T22649] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.264116][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.351926][T22660] FAULT_INJECTION: forcing a failure. [ 775.351926][T22660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.400711][T22660] CPU: 1 PID: 22660 Comm: syz.1.5933 Not tainted syzkaller #0 [ 775.408257][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 775.418378][T22660] Call Trace: [ 775.421699][T22660] [ 775.424693][T22660] dump_stack_lvl+0x18c/0x250 [ 775.429436][T22660] ? show_regs_print_info+0x20/0x20 [ 775.434696][T22660] ? load_image+0x420/0x420 [ 775.439256][T22660] ? __might_fault+0xaa/0x120 [ 775.443977][T22660] ? __lock_acquire+0x7eb0/0x7eb0 [ 775.449054][T22660] should_fail_ex+0x394/0x4c0 [ 775.453794][T22660] _copy_from_user+0x2f/0xe0 [ 775.458438][T22660] __x64_sys_signalfd4+0x118/0x1a0 [ 775.463605][T22660] ? lock_chain_count+0x20/0x20 [ 775.468526][T22660] ? signalfd_cleanup+0x60/0x60 [ 775.473464][T22660] ? lockdep_hardirqs_on+0x98/0x150 [ 775.478732][T22660] do_syscall_64+0x55/0xb0 [ 775.483190][T22660] ? clear_bhb_loop+0x40/0x90 [ 775.487925][T22660] ? clear_bhb_loop+0x40/0x90 [ 775.492659][T22660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.498596][T22660] RIP: 0033:0x7f7cb059f559 [ 775.503061][T22660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.522713][T22660] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 775.531174][T22660] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 775.539197][T22660] RDX: 0000000000000008 RSI: 0000200000000240 RDI: ffffffffffffffff [ 775.547227][T22660] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 775.555241][T22660] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 775.563345][T22660] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 775.571375][T22660] [ 775.948856][T22679] FAULT_INJECTION: forcing a failure. [ 775.948856][T22679] name failslab, interval 1, probability 0, space 0, times 0 [ 775.990385][T22679] CPU: 1 PID: 22679 Comm: syz.3.5939 Not tainted syzkaller #0 [ 775.997920][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 776.008030][T22679] Call Trace: [ 776.011351][T22679] [ 776.014495][T22679] dump_stack_lvl+0x18c/0x250 [ 776.019230][T22679] ? show_regs_print_info+0x20/0x20 [ 776.024479][T22679] ? load_image+0x420/0x420 [ 776.029039][T22679] ? __might_sleep+0xe0/0xe0 [ 776.033674][T22679] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.038765][T22679] should_fail_ex+0x394/0x4c0 [ 776.043505][T22679] should_failslab+0x9/0x20 [ 776.048064][T22679] slab_pre_alloc_hook+0x59/0x300 [ 776.053165][T22679] ? ops_init+0x8b/0x640 [ 776.057451][T22679] ? ops_init+0x8b/0x640 [ 776.061741][T22679] __kmem_cache_alloc_node+0x53/0x260 [ 776.067192][T22679] ? ops_init+0x8b/0x640 [ 776.071545][T22679] __kmalloc+0xa7/0x240 [ 776.075760][T22679] ? vlan_init_net+0x15a/0x190 [ 776.080584][T22679] ops_init+0x8b/0x640 [ 776.084719][T22679] setup_net+0x3b6/0xa20 [ 776.089052][T22679] ? copy_net_ns+0x530/0x530 [ 776.093685][T22679] ? copy_net_ns+0x347/0x530 [ 776.098320][T22679] ? down_read_killable+0x1d0/0x340 [ 776.103570][T22679] copy_net_ns+0x361/0x530 [ 776.108049][T22679] create_new_namespaces+0x3ce/0x700 [ 776.113397][T22679] unshare_nsproxy_namespaces+0x11a/0x160 [ 776.119187][T22679] ksys_unshare+0x4fa/0x8f0 [ 776.123771][T22679] ? sighand_ctor+0x50/0x50 [ 776.128332][T22679] ? lock_chain_count+0x20/0x20 [ 776.133236][T22679] ? syscall_enter_from_user_mode+0x25/0x80 [ 776.139177][T22679] __x64_sys_unshare+0x38/0x40 [ 776.143982][T22679] do_syscall_64+0x55/0xb0 [ 776.148450][T22679] ? clear_bhb_loop+0x40/0x90 [ 776.153208][T22679] ? clear_bhb_loop+0x40/0x90 [ 776.157947][T22679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.163903][T22679] RIP: 0033:0x7f860639f559 [ 776.168453][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.188109][T22679] RSP: 002b:00007f8607239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.196575][T22679] RAX: ffffffffffffffda RBX: 00007f8606625fa0 RCX: 00007f860639f559 [ 776.204587][T22679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 776.212613][T22679] RBP: 00007f8606436b20 R08: 0000000000000000 R09: 0000000000000000 [ 776.220644][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.228681][T22679] R13: 00007f8606626038 R14: 00007f8606625fa0 R15: 00007ffd9629daf8 [ 776.236705][T22679] [ 776.493541][T22697] loop4: detected capacity change from 0 to 512 [ 776.543103][T22697] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 776.684977][T22697] FAULT_INJECTION: forcing a failure. [ 776.684977][T22697] name failslab, interval 1, probability 0, space 0, times 0 [ 776.742158][T22697] CPU: 1 PID: 22697 Comm: syz.4.5942 Not tainted syzkaller #0 [ 776.749779][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 776.759918][T22697] Call Trace: [ 776.763248][T22697] [ 776.766219][T22697] dump_stack_lvl+0x18c/0x250 [ 776.770964][T22697] ? show_regs_print_info+0x20/0x20 [ 776.776218][T22697] ? load_image+0x420/0x420 [ 776.780763][T22697] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.785824][T22697] should_fail_ex+0x394/0x4c0 [ 776.790540][T22697] should_failslab+0x9/0x20 [ 776.795094][T22697] slab_pre_alloc_hook+0x59/0x300 [ 776.800232][T22697] ? __kmem_cache_alloc_node+0x197/0x260 [ 776.805974][T22697] ? cache_create_net+0x92/0x260 [ 776.811032][T22697] ? cache_create_net+0x92/0x260 [ 776.816022][T22697] __kmem_cache_alloc_node+0x53/0x260 [ 776.821421][T22697] ? rcu_is_watching+0x15/0xb0 [ 776.826225][T22697] ? cache_create_net+0x92/0x260 [ 776.831185][T22697] __kmalloc+0xa7/0x240 [ 776.835370][T22697] cache_create_net+0x92/0x260 [ 776.840180][T22697] unix_gid_cache_create+0x56/0xf0 [ 776.845348][T22697] sunrpc_init_net+0x67/0x170 [ 776.850063][T22697] ops_init+0x391/0x640 [ 776.854253][T22697] setup_net+0x3b6/0xa20 [ 776.858541][T22697] ? copy_net_ns+0x530/0x530 [ 776.863164][T22697] ? copy_net_ns+0x347/0x530 [ 776.867783][T22697] ? down_read_killable+0x1d0/0x340 [ 776.873033][T22697] copy_net_ns+0x361/0x530 [ 776.877484][T22697] create_new_namespaces+0x3ce/0x700 [ 776.882814][T22697] unshare_nsproxy_namespaces+0x11a/0x160 [ 776.888650][T22697] ksys_unshare+0x4fa/0x8f0 [ 776.893193][T22697] ? sighand_ctor+0x50/0x50 [ 776.897724][T22697] ? lock_chain_count+0x20/0x20 [ 776.902605][T22697] ? syscall_enter_from_user_mode+0x25/0x80 [ 776.908539][T22697] __x64_sys_unshare+0x38/0x40 [ 776.913334][T22697] do_syscall_64+0x55/0xb0 [ 776.917777][T22697] ? clear_bhb_loop+0x40/0x90 [ 776.922475][T22697] ? clear_bhb_loop+0x40/0x90 [ 776.927178][T22697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.933110][T22697] RIP: 0033:0x7f3c8cd9f559 [ 776.937562][T22697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.957206][T22697] RSP: 002b:00007f3c8dc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.965648][T22697] RAX: ffffffffffffffda RBX: 00007f3c8d025fa0 RCX: 00007f3c8cd9f559 [ 776.973641][T22697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 776.981638][T22697] RBP: 00007f3c8ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 776.989724][T22697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.997721][T22697] R13: 00007f3c8d026038 R14: 00007f3c8d025fa0 R15: 00007ffe7a5c36a8 [ 777.005760][T22697] [ 777.172806][T22711] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5945'. [ 777.470444][T22723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5952'. [ 778.788316][T22749] FAULT_INJECTION: forcing a failure. [ 778.788316][T22749] name fail_futex, interval 1, probability 0, space 0, times 0 [ 778.825473][T22749] CPU: 0 PID: 22749 Comm: syz.2.5957 Not tainted syzkaller #0 [ 778.833050][T22749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 778.843119][T22749] Call Trace: [ 778.846418][T22749] [ 778.849397][T22749] dump_stack_lvl+0x18c/0x250 [ 778.854134][T22749] ? show_regs_print_info+0x20/0x20 [ 778.859381][T22749] ? load_image+0x420/0x420 [ 778.863951][T22749] ? __lock_acquire+0x1431/0x7eb0 [ 778.869029][T22749] should_fail_ex+0x394/0x4c0 [ 778.873757][T22749] get_futex_key+0x16a/0xf40 [ 778.878441][T22749] ? futex_setup_timer+0xc0/0xc0 [ 778.883452][T22749] futex_wake+0x127/0x4f0 [ 778.887842][T22749] ? futex_wake_mark+0x150/0x150 [ 778.892823][T22749] do_futex+0x35d/0x3e0 [ 778.896998][T22749] ? __might_fault+0xaa/0x120 [ 778.901701][T22749] ? __ia32_sys_get_robust_list+0x110/0x110 [ 778.907624][T22749] ? __might_fault+0xc6/0x120 [ 778.912330][T22749] mm_release+0x184/0x3a0 [ 778.916703][T22749] ? exit_mm_release+0x30/0x30 [ 778.921503][T22749] ? lockdep_hardirqs_on+0x98/0x150 [ 778.926748][T22749] exit_mm+0xa4/0x340 [ 778.930764][T22749] ? sysctl_delayacct+0x220/0x220 [ 778.935818][T22749] ? do_exit+0x2530/0x2530 [ 778.940280][T22749] do_exit+0x909/0x2530 [ 778.944482][T22749] ? put_task_struct+0xc0/0xc0 [ 778.949291][T22749] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 778.955303][T22749] ? get_signal+0x100e/0x1390 [ 778.960007][T22749] ? lock_chain_count+0x20/0x20 [ 778.964890][T22749] ? _raw_spin_lock_irq+0xbb/0xf0 [ 778.969936][T22749] do_group_exit+0x22d/0x2f0 [ 778.974636][T22749] ? lockdep_hardirqs_on+0x98/0x150 [ 778.979869][T22749] get_signal+0x12a6/0x1390 [ 778.984408][T22749] arch_do_signal_or_restart+0xc2/0x7b0 [ 778.989985][T22749] ? __ia32_sys_get_robust_list+0x110/0x110 [ 778.995985][T22749] ? get_sigframe_size+0x20/0x20 [ 779.000969][T22749] ? exit_to_user_mode_loop+0x3b/0x110 [ 779.006455][T22749] exit_to_user_mode_loop+0x70/0x110 [ 779.011771][T22749] exit_to_user_mode_prepare+0xee/0x180 [ 779.017337][T22749] syscall_exit_to_user_mode+0x1a/0x50 [ 779.022809][T22749] do_syscall_64+0x61/0xb0 [ 779.027254][T22749] ? clear_bhb_loop+0x40/0x90 [ 779.031964][T22749] ? clear_bhb_loop+0x40/0x90 [ 779.036678][T22749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.042590][T22749] RIP: 0033:0x7fb33d79f559 [ 779.047019][T22749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.066651][T22749] RSP: 002b:00007fb33e62f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 779.075089][T22749] RAX: fffffffffffffe00 RBX: 00007fb33da25fa8 RCX: 00007fb33d79f559 [ 779.083084][T22749] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb33da25fa8 [ 779.091085][T22749] RBP: 00007fb33da25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 779.099090][T22749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.107079][T22749] R13: 00007fb33da26038 R14: 00007ffe2fcd8540 R15: 00007ffe2fcd8628 [ 779.115114][T22749] [ 779.587015][T22762] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5960'. [ 780.800403][T22797] FAULT_INJECTION: forcing a failure. [ 780.800403][T22797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 780.838736][T22797] CPU: 1 PID: 22797 Comm: syz.1.5970 Not tainted syzkaller #0 [ 780.846264][T22797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 780.856360][T22797] Call Trace: [ 780.859690][T22797] [ 780.862661][T22797] dump_stack_lvl+0x18c/0x250 [ 780.867401][T22797] ? show_regs_print_info+0x20/0x20 [ 780.872660][T22797] ? load_image+0x420/0x420 [ 780.877305][T22797] ? get_user_pages_fast_only+0xa0/0xa0 [ 780.882922][T22797] should_fail_ex+0x394/0x4c0 [ 780.887663][T22797] get_futex_key+0x858/0xf40 [ 780.892306][T22797] ? futex_setup_timer+0xc0/0xc0 [ 780.897330][T22797] futex_wake+0x127/0x4f0 [ 780.901738][T22797] ? futex_wake_mark+0x150/0x150 [ 780.906734][T22797] do_futex+0x35d/0x3e0 [ 780.910959][T22797] ? __might_fault+0xaa/0x120 [ 780.915697][T22797] ? __ia32_sys_get_robust_list+0x110/0x110 [ 780.921651][T22797] ? __might_fault+0xc6/0x120 [ 780.926394][T22797] mm_release+0x184/0x3a0 [ 780.930780][T22797] ? exit_mm_release+0x30/0x30 [ 780.935630][T22797] ? lockdep_hardirqs_on+0x98/0x150 [ 780.940888][T22797] exit_mm+0xa4/0x340 [ 780.944924][T22797] ? sysctl_delayacct+0x220/0x220 [ 780.950010][T22797] ? do_exit+0x2530/0x2530 [ 780.954493][T22797] do_exit+0x909/0x2530 [ 780.958721][T22797] ? put_task_struct+0xc0/0xc0 [ 780.963545][T22797] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 780.969577][T22797] ? get_signal+0x100e/0x1390 [ 780.974347][T22797] ? lock_chain_count+0x20/0x20 [ 780.979269][T22797] ? _raw_spin_lock_irq+0xbb/0xf0 [ 780.984342][T22797] do_group_exit+0x22d/0x2f0 [ 780.989005][T22797] ? lockdep_hardirqs_on+0x98/0x150 [ 780.994290][T22797] get_signal+0x12a6/0x1390 [ 780.998842][T22797] ? fd_install+0x60/0x4e0 [ 781.003313][T22797] arch_do_signal_or_restart+0xc2/0x7b0 [ 781.009005][T22797] ? __ia32_sys_get_robust_list+0x110/0x110 [ 781.014958][T22797] ? get_sigframe_size+0x20/0x20 [ 781.019984][T22797] ? exit_to_user_mode_loop+0x3b/0x110 [ 781.025497][T22797] exit_to_user_mode_loop+0x70/0x110 [ 781.030825][T22797] exit_to_user_mode_prepare+0xee/0x180 [ 781.036414][T22797] syscall_exit_to_user_mode+0x1a/0x50 [ 781.041908][T22797] do_syscall_64+0x61/0xb0 [ 781.046403][T22797] ? clear_bhb_loop+0x40/0x90 [ 781.051135][T22797] ? clear_bhb_loop+0x40/0x90 [ 781.055866][T22797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.061804][T22797] RIP: 0033:0x7f7cb059f559 [ 781.066267][T22797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.085913][T22797] RSP: 002b:00007f7cb13cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.094365][T22797] RAX: fffffffffffffe00 RBX: 00007f7cb0825fa8 RCX: 00007f7cb059f559 [ 781.102400][T22797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7cb0825fa8 [ 781.110413][T22797] RBP: 00007f7cb0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 781.118443][T22797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.126452][T22797] R13: 00007f7cb0826038 R14: 00007ffce39f71b0 R15: 00007ffce39f7298 [ 781.134491][T22797] [ 781.202442][T22805] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5971'. [ 786.350335][T22893] FAULT_INJECTION: forcing a failure. [ 786.350335][T22893] name failslab, interval 1, probability 0, space 0, times 0 [ 786.403758][T22893] CPU: 0 PID: 22893 Comm: syz.1.5991 Not tainted syzkaller #0 [ 786.411295][T22893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 786.421384][T22893] Call Trace: [ 786.424699][T22893] [ 786.427683][T22893] dump_stack_lvl+0x18c/0x250 [ 786.432421][T22893] ? show_regs_print_info+0x20/0x20 [ 786.437681][T22893] ? load_image+0x420/0x420 [ 786.442237][T22893] ? __might_sleep+0xe0/0xe0 [ 786.446883][T22893] ? __lock_acquire+0x7eb0/0x7eb0 [ 786.452012][T22893] should_fail_ex+0x394/0x4c0 [ 786.456753][T22893] should_failslab+0x9/0x20 [ 786.461296][T22893] slab_pre_alloc_hook+0x59/0x300 [ 786.466374][T22893] kmem_cache_alloc+0x5a/0x2d0 [ 786.471181][T22893] ? security_file_alloc+0x34/0x120 [ 786.476430][T22893] security_file_alloc+0x34/0x120 [ 786.481502][T22893] init_file+0x94/0x1f0 [ 786.485703][T22893] alloc_empty_file+0xb7/0x1d0 [ 786.490510][T22893] alloc_file+0x5b/0x600 [ 786.494878][T22893] alloc_file_pseudo+0x184/0x210 [ 786.499884][T22893] ? fput+0x1a0/0x1a0 [ 786.503926][T22893] ? alloc_fd+0x590/0x640 [ 786.508318][T22893] sock_alloc_file+0xb7/0x280 [ 786.513046][T22893] __sys_socket+0x140/0x1b0 [ 786.517594][T22893] __x64_sys_socket+0x7a/0x90 [ 786.522329][T22893] do_syscall_64+0x55/0xb0 [ 786.526779][T22893] ? clear_bhb_loop+0x40/0x90 [ 786.531493][T22893] ? clear_bhb_loop+0x40/0x90 [ 786.536200][T22893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.542113][T22893] RIP: 0033:0x7f7cb059f559 [ 786.546562][T22893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.566191][T22893] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 786.574628][T22893] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 786.582617][T22893] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 786.590609][T22893] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 786.598704][T22893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.606701][T22893] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 786.614797][T22893] [ 787.374834][T22940] FAULT_INJECTION: forcing a failure. [ 787.374834][T22940] name failslab, interval 1, probability 0, space 0, times 0 [ 787.401125][T22940] CPU: 0 PID: 22940 Comm: syz.2.6004 Not tainted syzkaller #0 [ 787.408635][T22940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 787.418725][T22940] Call Trace: [ 787.422036][T22940] [ 787.424997][T22940] dump_stack_lvl+0x18c/0x250 [ 787.429728][T22940] ? show_regs_print_info+0x20/0x20 [ 787.434974][T22940] ? load_image+0x420/0x420 [ 787.439540][T22940] ? __might_sleep+0xe0/0xe0 [ 787.444182][T22940] ? __lock_acquire+0x7eb0/0x7eb0 [ 787.449259][T22940] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 787.455299][T22940] should_fail_ex+0x394/0x4c0 [ 787.460040][T22940] should_failslab+0x9/0x20 [ 787.464587][T22940] slab_pre_alloc_hook+0x59/0x300 [ 787.469655][T22940] ? lockdep_hardirqs_on+0x98/0x150 [ 787.474990][T22940] kmem_cache_alloc+0x5a/0x2d0 [ 787.479797][T22940] ? taskstats_exit+0x14d/0xce0 [ 787.484707][T22940] taskstats_exit+0x14d/0xce0 [ 787.489429][T22940] ? sysctl_delayacct+0x220/0x220 [ 787.494532][T22940] ? rcu_read_lock_any_held+0xb4/0x140 [ 787.500041][T22940] ? rcu_read_lock_bh_held+0x100/0x100 [ 787.505578][T22940] do_exit+0x8fc/0x2530 [ 787.509800][T22940] ? put_task_struct+0xc0/0xc0 [ 787.514624][T22940] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 787.520644][T22940] ? get_signal+0x100e/0x1390 [ 787.525375][T22940] ? lock_chain_count+0x20/0x20 [ 787.530287][T22940] ? _raw_spin_lock_irq+0xbb/0xf0 [ 787.535363][T22940] do_group_exit+0x22d/0x2f0 [ 787.540002][T22940] ? lockdep_hardirqs_on+0x98/0x150 [ 787.545250][T22940] get_signal+0x12a6/0x1390 [ 787.549815][T22940] ? fd_install+0x60/0x4e0 [ 787.554297][T22940] arch_do_signal_or_restart+0xc2/0x7b0 [ 787.559903][T22940] ? __ia32_sys_get_robust_list+0x110/0x110 [ 787.565848][T22940] ? get_sigframe_size+0x20/0x20 [ 787.570857][T22940] ? exit_to_user_mode_loop+0x3b/0x110 [ 787.576363][T22940] exit_to_user_mode_loop+0x70/0x110 [ 787.581684][T22940] exit_to_user_mode_prepare+0xee/0x180 [ 787.587293][T22940] syscall_exit_to_user_mode+0x1a/0x50 [ 787.592803][T22940] do_syscall_64+0x61/0xb0 [ 787.597259][T22940] ? clear_bhb_loop+0x40/0x90 [ 787.601980][T22940] ? clear_bhb_loop+0x40/0x90 [ 787.606726][T22940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.612698][T22940] RIP: 0033:0x7fb33d79f559 [ 787.617159][T22940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.636817][T22940] RSP: 002b:00007fb33e62f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 787.645279][T22940] RAX: fffffffffffffe00 RBX: 00007fb33da25fa8 RCX: 00007fb33d79f559 [ 787.653318][T22940] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb33da25fa8 [ 787.661376][T22940] RBP: 00007fb33da25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 787.669431][T22940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.677458][T22940] R13: 00007fb33da26038 R14: 00007ffe2fcd8540 R15: 00007ffe2fcd8628 [ 787.685481][T22940] [ 788.529066][T22973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6013'. [ 790.085115][T22975] netlink: 'syz.4.6014': attribute type 10 has an invalid length. [ 790.166562][T22975] team0 (unregistering): Port device team_slave_0 removed [ 790.236577][T22975] team0 (unregistering): Port device team_slave_1 removed [ 790.596109][T22991] loop3: detected capacity change from 0 to 2048 [ 792.604756][T23034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6040'. [ 792.873892][T23042] ptp ptp0: new virtual clock ptp1 [ 792.880178][T23042] ptp ptp0: guarantee physical clock free running [ 793.298082][T23059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6051'. [ 793.460246][T23061] loop4: detected capacity change from 0 to 512 [ 793.524390][T23061] EXT4-fs (loop4): 1 truncate cleaned up [ 793.532004][T23061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.674592][ T28] audit: type=1800 audit(1793941598.891:13): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6052" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 793.757197][T23066] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.6052: bg 0: block 465: padding at end of block bitmap is not set [ 793.835410][T23066] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 793.848682][T23066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 793.848682][T23066] [ 793.868902][T23066] EXT4-fs (loop4): Total free blocks count 0 [ 793.875413][T23066] EXT4-fs (loop4): Free/Dirty block details [ 793.882225][T23066] EXT4-fs (loop4): free_blocks=0 [ 793.887354][T23066] EXT4-fs (loop4): dirty_blocks=2 [ 793.926615][T23066] EXT4-fs (loop4): Block reservation details [ 793.948413][T23066] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 793.985061][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c7cec00: rx timeout, send abort [ 793.993651][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c7cec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 794.421874][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.609493][T23075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6056'. [ 794.876679][T23081] loop4: detected capacity change from 0 to 512 [ 794.885149][T23081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 794.941023][T23081] EXT4-fs (loop4): 1 truncate cleaned up [ 794.967857][T23081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.154545][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.579370][T23087] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6060'. [ 796.556047][T23088] rxe_eth0 speed is unknown, defaulting to 1000 [ 797.389002][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020667400: rx timeout, send abort [ 797.400855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020667400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 797.544014][T23109] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6066'. [ 797.868532][T23115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6069'. [ 798.994332][T23137] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6075'. [ 799.065469][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6076'. [ 799.984116][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032cc1800: rx timeout, send abort [ 799.993487][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032cc1800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 800.940049][T23129] syzkaller0: entered promiscuous mode [ 800.947878][T23129] syzkaller0: entered allmulticast mode [ 803.104358][T23163] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6084'. [ 803.250352][T23168] hub 5-0:1.0: USB hub found [ 803.283796][T23168] hub 5-0:1.0: 1 port detected [ 804.817948][T23193] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 805.765794][T23198] syzkaller0: entered promiscuous mode [ 805.780946][T23198] syzkaller0: entered allmulticast mode [ 808.278794][T23226] loop1: detected capacity change from 0 to 512 [ 808.295951][T23226] FAT-fs (loop1): Unrecognized mount option ""h0xffffffffffffffff" or missing value [ 808.933007][T23245] loop2: detected capacity change from 0 to 512 [ 808.976501][T23245] EXT4-fs (loop2): 1 truncate cleaned up [ 809.016333][T23245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.119866][ T28] audit: type=1800 audit(1793941614.331:14): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6112" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 809.181225][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.329702][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.336122][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.417406][T23254] syzkaller0: entered promiscuous mode [ 809.424853][T23254] syzkaller0: entered allmulticast mode [ 811.881645][T23282] loop4: detected capacity change from 0 to 512 [ 811.956052][T23282] EXT4-fs (loop4): 1 truncate cleaned up [ 811.963206][T23282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.995075][ T28] audit: type=1800 audit(1793941617.211:15): pid=23282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6121" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 812.099201][T21323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.661245][T23307] loop1: detected capacity change from 0 to 512 [ 814.686831][T23307] EXT4-fs (loop1): 1 truncate cleaned up [ 814.703180][T23307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.886979][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.213016][T23313] hub 5-0:1.0: USB hub found [ 815.240807][T23313] hub 5-0:1.0: 1 port detected [ 815.378469][T23325] syzkaller0: entered promiscuous mode [ 815.385560][T23325] syzkaller0: entered allmulticast mode [ 815.759982][T23331] tmpfs: Bad value for 'mpol' [ 816.114599][T23341] loop3: detected capacity change from 0 to 512 [ 816.158779][T23341] EXT4-fs (loop3): 1 truncate cleaned up [ 816.166785][T23341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.243941][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.538890][T23370] loop2: detected capacity change from 0 to 512 [ 818.570512][T23370] EXT4-fs (loop2): 1 truncate cleaned up [ 818.602776][T23370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.809205][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.407939][T23390] syzkaller0: entered promiscuous mode [ 819.413922][T23390] syzkaller0: entered allmulticast mode [ 822.739032][T23417] loop1: detected capacity change from 0 to 2048 [ 822.792211][T23417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.862332][T23426] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6167'. [ 822.974514][T17245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.054764][T23431] loop3: detected capacity change from 0 to 1024 [ 823.105071][T23431] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 823.194726][T23431] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.6170: lblock 2 mapped to illegal pblock 2 (length 1) [ 823.210790][T23431] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 823.219044][T23431] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.6170: lblock 0 mapped to illegal pblock 48 (length 1) [ 823.251352][T23431] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 823.261172][T23431] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.6170: Failed to acquire dquot type 0 [ 823.284506][T23431] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 823.307384][T23431] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.6170: mark_inode_dirty error [ 823.347878][T23431] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 823.359141][T23431] EXT4-fs (loop3): 1 orphan inode deleted [ 823.366714][T23431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.502431][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.536456][ T12] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 823.572272][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 823.591640][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:1: Failed to release dquot type 0 [ 823.638302][T20188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 823.657767][T20188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 823.667981][T20188] EXT4-fs error (device loop3): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 823.764802][T23441] loop3: detected capacity change from 0 to 512 [ 823.781166][T23442] loop1: detected capacity change from 0 to 1024 [ 823.792440][T23441] EXT4-fs: inline encryption not supported [ 823.830828][T23441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 823.863572][T23441] EXT4-fs (loop3): 1 truncate cleaned up [ 823.889687][T23420] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 823.917410][T23441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.987271][T23441] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 824.154903][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.391028][T23481] loop2: detected capacity change from 0 to 512 [ 825.398479][T23481] EXT4-fs: inline encryption not supported [ 825.491385][T23481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 825.578307][T23481] EXT4-fs (loop2): 1 truncate cleaned up [ 825.639991][T23481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.821565][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.037293][T23579] FAULT_INJECTION: forcing a failure. [ 828.037293][T23579] name failslab, interval 1, probability 0, space 0, times 0 [ 828.050541][T23579] CPU: 1 PID: 23579 Comm: syz.3.6233 Not tainted syzkaller #0 [ 828.058062][T23579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 828.068161][T23579] Call Trace: [ 828.071508][T23579] [ 828.074477][T23579] dump_stack_lvl+0x18c/0x250 [ 828.079209][T23579] ? show_regs_print_info+0x20/0x20 [ 828.084454][T23579] ? load_image+0x420/0x420 [ 828.088992][T23579] ? __might_sleep+0xe0/0xe0 [ 828.093619][T23579] ? __lock_acquire+0x7eb0/0x7eb0 [ 828.098702][T23579] should_fail_ex+0x394/0x4c0 [ 828.103442][T23579] should_failslab+0x9/0x20 [ 828.108005][T23579] slab_pre_alloc_hook+0x59/0x300 [ 828.113091][T23579] ? legacy_init_fs_context+0x51/0xc0 [ 828.118528][T23579] __kmem_cache_alloc_node+0x53/0x260 [ 828.123948][T23579] ? legacy_init_fs_context+0x51/0xc0 [ 828.129383][T23579] kmalloc_trace+0x2a/0xe0 [ 828.133875][T23579] legacy_init_fs_context+0x51/0xc0 [ 828.139139][T23579] alloc_fs_context+0x618/0x7a0 [ 828.144064][T23579] do_new_mount+0x10e/0xa60 [ 828.148628][T23579] __se_sys_mount+0x2e7/0x3d0 [ 828.153353][T23579] ? __x64_sys_mount+0xc0/0xc0 [ 828.158153][T23579] ? lockdep_hardirqs_on+0x98/0x150 [ 828.163392][T23579] ? __x64_sys_mount+0x20/0xc0 [ 828.168198][T23579] do_syscall_64+0x55/0xb0 [ 828.172672][T23579] ? clear_bhb_loop+0x40/0x90 [ 828.177387][T23579] ? clear_bhb_loop+0x40/0x90 [ 828.182105][T23579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.188055][T23579] RIP: 0033:0x7f860639f559 [ 828.192515][T23579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.212144][T23579] RSP: 002b:00007f8607239028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 828.220598][T23579] RAX: ffffffffffffffda RBX: 00007f8606625fa0 RCX: 00007f860639f559 [ 828.228620][T23579] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 828.236619][T23579] RBP: 00007f8606436b20 R08: 0000000000000000 R09: 0000000000000000 [ 828.244613][T23579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.252615][T23579] R13: 00007f8606626038 R14: 00007f8606625fa0 R15: 00007ffd9629daf8 [ 828.260647][T23579] [ 829.287247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a77a400: rx timeout, send abort [ 829.295746][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a77a400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 829.767903][T23625] EXT4-fs (sda1): shut down requested (0) [ 831.277725][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062ecfc00: rx timeout, send abort [ 831.286371][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062ecfc00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 833.049219][T23696] IPVS: Scheduler module ip_vs_sip not found [ 833.318254][T23704] FAULT_INJECTION: forcing a failure. [ 833.318254][T23704] name failslab, interval 1, probability 0, space 0, times 0 [ 833.332855][T23704] CPU: 1 PID: 23704 Comm: syz.3.6284 Not tainted syzkaller #0 [ 833.340419][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 833.350547][T23704] Call Trace: [ 833.353870][T23704] [ 833.356827][T23704] dump_stack_lvl+0x18c/0x250 [ 833.361541][T23704] ? show_regs_print_info+0x20/0x20 [ 833.366794][T23704] ? load_image+0x420/0x420 [ 833.371344][T23704] ? __might_sleep+0xe0/0xe0 [ 833.375969][T23704] ? __lock_acquire+0x7eb0/0x7eb0 [ 833.381045][T23704] should_fail_ex+0x394/0x4c0 [ 833.385794][T23704] should_failslab+0x9/0x20 [ 833.390326][T23704] slab_pre_alloc_hook+0x59/0x300 [ 833.395384][T23704] kmem_cache_alloc+0x5a/0x2d0 [ 833.400179][T23704] ? posix_lock_inode+0x369/0x3270 [ 833.405362][T23704] posix_lock_inode+0x369/0x3270 [ 833.410346][T23704] ? aa_path_link+0xf80/0xf80 [ 833.415061][T23704] ? lockdep_softirqs_off+0x440/0x440 [ 833.420460][T23704] ? slab_post_alloc_hook+0x86/0x4d0 [ 833.425791][T23704] ? end_current_label_crit_section+0x149/0x170 [ 833.432086][T23704] ? posix_lock_file+0x50/0x50 [ 833.436883][T23704] ? bpf_lsm_file_lock+0x9/0x10 [ 833.441772][T23704] fcntl_setlk+0x9c0/0x1070 [ 833.446322][T23704] ? vfs_lock_file+0x110/0x110 [ 833.451122][T23704] ? __might_fault+0xaa/0x120 [ 833.455826][T23704] ? __might_fault+0xc6/0x120 [ 833.460531][T23704] ? __might_fault+0xaa/0x120 [ 833.465243][T23704] do_fcntl+0x8c1/0x1500 [ 833.469571][T23704] ? kill_fasync+0x4b0/0x4b0 [ 833.474210][T23704] ? __fget_files+0x28/0x460 [ 833.478841][T23704] ? __fget_files+0x3fc/0x460 [ 833.483579][T23704] ? tomoyo_file_fcntl+0x7b/0x220 [ 833.488650][T23704] ? bpf_lsm_file_fcntl+0x9/0x10 [ 833.493636][T23704] ? security_file_fcntl+0x80/0xa0 [ 833.498798][T23704] __se_sys_fcntl+0xc9/0x1a0 [ 833.503422][T23704] do_syscall_64+0x55/0xb0 [ 833.507866][T23704] ? clear_bhb_loop+0x40/0x90 [ 833.512575][T23704] ? clear_bhb_loop+0x40/0x90 [ 833.517292][T23704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.523224][T23704] RIP: 0033:0x7f860639f559 [ 833.527666][T23704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.547302][T23704] RSP: 002b:00007f8607239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 833.555771][T23704] RAX: ffffffffffffffda RBX: 00007f8606625fa0 RCX: 00007f860639f559 [ 833.563771][T23704] RDX: 0000200000000d80 RSI: 0000000000000026 RDI: 0000000000000003 [ 833.571790][T23704] RBP: 00007f8606436b20 R08: 0000000000000000 R09: 0000000000000000 [ 833.579786][T23704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.587777][T23704] R13: 00007f8606626038 R14: 00007f8606625fa0 R15: 00007ffd9629daf8 [ 833.596218][T23704] [ 835.871746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068435800: rx timeout, send abort [ 835.880198][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068435800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 836.341343][T23734] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 836.877397][T23746] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 836.886120][T23746] udc dummy_udc.0: failed to start g1: -19 [ 836.913791][T23746] UDC core: g1: couldn't find an available UDC or it's busy [ 836.967356][ T28] audit: type=1800 audit(1793941641.991:16): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6293" name="c_chmask" dev="configfs" ino=65130 res=0 errno=0 [ 837.296915][ T28] audit: type=1800 audit(1793941642.061:17): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6293" name="UDC" dev="configfs" ino=65132 res=0 errno=0 [ 837.478733][T23750] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.486045][T23750] FAULT_INJECTION: forcing a failure. [ 837.486045][T23750] name failslab, interval 1, probability 0, space 0, times 0 [ 837.499341][T23750] CPU: 0 PID: 23750 Comm: syz.1.6299 Not tainted syzkaller #0 [ 837.506851][T23750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 837.516948][T23750] Call Trace: [ 837.520270][T23750] [ 837.523274][T23750] dump_stack_lvl+0x18c/0x250 [ 837.528003][T23750] ? show_regs_print_info+0x20/0x20 [ 837.533342][T23750] ? load_image+0x420/0x420 [ 837.537907][T23750] should_fail_ex+0x394/0x4c0 [ 837.542667][T23750] should_failslab+0x9/0x20 [ 837.547219][T23750] slab_pre_alloc_hook+0x59/0x300 [ 837.552299][T23750] kmem_cache_alloc_node+0x5e/0x320 [ 837.557560][T23750] ? __alloc_skb+0x103/0x2c0 [ 837.562250][T23750] __alloc_skb+0x103/0x2c0 [ 837.566754][T23750] fdb_notify+0xa6/0x160 [ 837.571147][T23750] fdb_delete+0xdd6/0x1060 [ 837.575620][T23750] ? fdb_delete+0x33a/0x1060 [ 837.580273][T23750] ? fdb_notify+0x160/0x160 [ 837.584842][T23750] ? br_fdb_delete_by_port+0x3b/0x310 [ 837.590281][T23750] br_fdb_delete_by_port+0x15a/0x310 [ 837.595644][T23750] br_stp_disable_port+0x117/0x1c0 [ 837.600841][T23750] br_stp_disable_bridge+0x81/0x150 [ 837.606096][T23750] br_dev_stop+0x2d/0x180 [ 837.610504][T23750] ? br_dev_open+0x140/0x140 [ 837.615191][T23750] __dev_close_many+0x1d5/0x2b0 [ 837.620164][T23750] ? dev_close_many+0x410/0x410 [ 837.625065][T23750] ? br_dev_stop+0x180/0x180 [ 837.629707][T23750] __dev_change_flags+0x2cd/0x6a0 [ 837.634758][T23750] ? dev_load+0x21/0x1f0 [ 837.639087][T23750] ? __lock_acquire+0x7eb0/0x7eb0 [ 837.644163][T23750] ? dev_get_flags+0x1c0/0x1c0 [ 837.648963][T23750] dev_change_flags+0x7c/0x1a0 [ 837.653761][T23750] dev_ioctl+0x7b4/0x1140 [ 837.658130][T23750] sock_do_ioctl+0x239/0x310 [ 837.662751][T23750] ? sock_show_fdinfo+0xb0/0xb0 [ 837.667656][T23750] sock_ioctl+0x5be/0x7e0 [ 837.672015][T23750] ? sock_poll+0x460/0x460 [ 837.676472][T23750] ? bpf_lsm_file_ioctl+0x9/0x10 [ 837.681441][T23750] ? security_file_ioctl+0x80/0xa0 [ 837.686582][T23750] ? sock_poll+0x460/0x460 [ 837.691026][T23750] __se_sys_ioctl+0xfd/0x170 [ 837.695659][T23750] do_syscall_64+0x55/0xb0 [ 837.700109][T23750] ? clear_bhb_loop+0x40/0x90 [ 837.704818][T23750] ? clear_bhb_loop+0x40/0x90 [ 837.709571][T23750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.715492][T23750] RIP: 0033:0x7f7cb059f559 [ 837.719930][T23750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.739566][T23750] RSP: 002b:00007f7cb13cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.748010][T23750] RAX: ffffffffffffffda RBX: 00007f7cb0825fa0 RCX: 00007f7cb059f559 [ 837.756048][T23750] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 837.764041][T23750] RBP: 00007f7cb0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 837.772033][T23750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.780047][T23750] R13: 00007f7cb0826038 R14: 00007f7cb0825fa0 R15: 00007ffce39f7298 [ 837.788080][T23750] [ 837.791932][T23750] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.801688][T23750] bridge0: entered allmulticast mode [ 837.814000][T23751] IPVS: Scheduler module ip_vs_sip not found [ 837.945241][T23755] syzkaller0: entered promiscuous mode [ 837.970720][T23755] syzkaller0: entered allmulticast mode [ 838.038594][T23761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.703011][T23784] syzkaller0: entered promiscuous mode [ 838.708560][T23784] syzkaller0: entered allmulticast mode [ 839.721835][T23794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.741287][T11202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.893166][T23804] IPVS: Scheduler module ip_vs_sip not found [ 840.020543][T23814] loop4: detected capacity change from 0 to 512 [ 840.031229][T23812] loop3: detected capacity change from 0 to 512 [ 840.063427][T23812] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.6324: inode has both inline data and extents flags [ 840.113750][T23812] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.6324: couldn't read orphan inode 15 (err -117) [ 840.164465][T23812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.253002][T23812] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.6324: inode has both inline data and extents flags [ 840.363641][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.633975][T23829] syzkaller0: entered promiscuous mode [ 840.642777][T23829] syzkaller0: entered allmulticast mode [ 840.669858][T23833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.963070][T23841] loop2: detected capacity change from 0 to 512 [ 841.005013][T23845] udevd[23845]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 841.017908][T23841] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.6337: inode has both inline data and extents flags [ 841.051473][T23841] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.6337: couldn't read orphan inode 15 (err -117) [ 841.067673][T23841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.110346][T23841] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.6337: inode has both inline data and extents flags [ 841.270225][T18387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.442155][T23854] IPVS: Scheduler module ip_vs_sip not found [ 841.508046][T23859] syzkaller0: entered promiscuous mode [ 841.513738][T23859] syzkaller0: entered allmulticast mode [ 841.916178][T23877] loop4: detected capacity change from 0 to 512 [ 842.455751][T23894] xt_hashlimit: size too large, truncated to 1048576 [ 842.493127][T23890] syzkaller0: entered promiscuous mode [ 842.498755][T23890] syzkaller0: entered allmulticast mode [ 844.067534][T23919] IPVS: Scheduler module ip_vs_sip not found [ 844.376134][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c89b800: rx timeout, send abort [ 844.384582][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c89b800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 844.619388][T23928] syzkaller0: entered promiscuous mode [ 844.640687][T23928] syzkaller0: entered allmulticast mode [ 844.888792][T23932] IPv6: NLM_F_REPLACE set, but no existing node found! [ 845.085410][T23939] loop3: detected capacity change from 0 to 512 [ 845.110076][T23939] EXT4-fs: Ignoring removed oldalloc option [ 845.132187][T23939] EXT4-fs: Ignoring removed i_version option [ 845.147103][T23939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 845.183784][T23939] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6376: invalid indirect mapped block 4294967295 (level 1) [ 845.225617][T23939] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6376: invalid indirect mapped block 4294967295 (level 1) [ 845.252099][T23939] EXT4-fs (loop3): 2 truncates cleaned up [ 845.265988][T23939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.296012][T23939] EXT4-fs error (device loop3): empty_inline_dir:1884: inode #12: block 7: comm syz.3.6376: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 845.326967][T23939] EXT4-fs warning (device loop3): empty_inline_dir:1891: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 845.403122][T20188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.514196][T23945] FAULT_INJECTION: forcing a failure. [ 845.514196][T23945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 845.527946][T23945] CPU: 1 PID: 23945 Comm: syz.3.6378 Not tainted syzkaller #0 [ 845.535465][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 845.545565][T23945] Call Trace: [ 845.548881][T23945] [ 845.551846][T23945] dump_stack_lvl+0x18c/0x250 [ 845.556572][T23945] ? show_regs_print_info+0x20/0x20 [ 845.561817][T23945] ? load_image+0x420/0x420 [ 845.566406][T23945] ? kasan_set_track+0x5f/0x70 [ 845.571230][T23945] ? kasan_set_track+0x4e/0x70 [ 845.576043][T23945] should_fail_ex+0x394/0x4c0 [ 845.580789][T23945] get_futex_key+0x134/0xf40 [ 845.585510][T23945] ? futex_setup_timer+0xc0/0xc0 [ 845.590480][T23945] futex_wake+0x127/0x4f0 [ 845.594850][T23945] ? futex_wake_mark+0x150/0x150 [ 845.599817][T23945] ? kasan_quarantine_put+0xd8/0x220 [ 845.605153][T23945] do_futex+0x35d/0x3e0 [ 845.609339][T23945] ? __ia32_sys_get_robust_list+0x110/0x110 [ 845.615265][T23945] __se_sys_futex+0x3a9/0x440 [ 845.619972][T23945] ? __x64_sys_futex+0xf0/0xf0 [ 845.624764][T23945] ? __x64_sys_futex+0x21/0xf0 [ 845.629550][T23945] do_syscall_64+0x55/0xb0 [ 845.634033][T23945] ? clear_bhb_loop+0x40/0x90 [ 845.638763][T23945] ? clear_bhb_loop+0x40/0x90 [ 845.643480][T23945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.649415][T23945] RIP: 0033:0x7f860639f559 [ 845.653888][T23945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.673620][T23945] RSP: 002b:00007f86072390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 845.682112][T23945] RAX: ffffffffffffffda RBX: 00007f8606625fa8 RCX: 00007f860639f559 [ 845.690101][T23945] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8606625fac [ 845.698103][T23945] RBP: 00007f8606625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 845.706216][T23945] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 845.714213][T23945] R13: 00007f8606626038 R14: 00007ffd9629da10 R15: 00007ffd9629daf8 [ 845.722221][T23945] [ 845.920333][T23950] syzkaller0: entered promiscuous mode [ 845.939329][T23950] syzkaller0: entered allmulticast mode [ 846.197809][T23960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 846.359932][T23963] loop2: detected capacity change from 0 to 8192 [ 846.370213][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f5a5c00: rx timeout, send abort [ 846.378800][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f5a5c00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 846.545104][T23969] loop2: detected capacity change from 8192 to 0 [ 846.569491][T23963] syz.2.6386: attempt to access beyond end of device [ 846.569491][T23963] loop2: rw=1, sector=1, nr_sectors = 1 limit=0 [ 846.603690][T23963] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 846.629882][T23963] ------------[ cut here ]------------ [ 846.635563][T23963] WARNING: CPU: 0 PID: 23963 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4d0 [ 846.644840][T23963] Modules linked in: [ 846.648800][T23963] CPU: 0 PID: 23963 Comm: syz.2.6386 Not tainted syzkaller #0 [ 846.656496][T23963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 846.666657][T23963] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0 [ 846.672605][T23963] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 ef 93 fc ff e8 2a b0 87 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 9a ef e7 ff e8 15 b0 87 ff <0f> 0b e9 84 fd ff ff e8 09 b0 87 ff 0f 0b e9 b0 fd ff ff e8 fd af [ 846.692378][T23963] RSP: 0018:ffffc90004c97198 EFLAGS: 00010287 [ 846.698504][T23963] RAX: ffffffff82002e8b RBX: ffff888059c9dcb0 RCX: 0000000000080000 [ 846.706654][T23963] RDX: ffffc9001aa01000 RSI: 0000000000017cce RDI: 0000000000017ccf [ 846.714726][T23963] RBP: ffff88802122f201 R08: ffff888059c9dcb7 R09: 1ffff1100b393b96 [ 846.722928][T23963] R10: dffffc0000000000 R11: ffffed100b393b97 R12: dffffc0000000000 [ 846.731448][T23963] R13: ffff88805d213c38 R14: ffffea0001cc7358 R15: 000000000fffffff [ 846.739568][T23963] FS: 00007fb33e62f6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 846.748603][T23963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.755302][T23963] CR2: 000000110c2dd014 CR3: 00000000549a9000 CR4: 00000000003506f0 [ 846.763387][T23963] Call Trace: [ 846.766723][T23963] [ 846.769706][T23963] mark_buffer_dirty_inode+0x86/0x2c0 [ 846.775230][T23963] ? fat_sync_bhs+0x1a6/0x1c0 [ 846.780026][T23963] fat_ent_write+0xb2/0x180 [ 846.784763][T23963] fat_chain_add+0x3e9/0x890 [ 846.789419][T23963] ? fat_clusters_flush+0x420/0x420 [ 846.794800][T23963] ? fat_bmap+0x487/0x590 [ 846.799191][T23963] fat_get_block+0x765/0xae0 [ 846.803921][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.809467][T23963] __block_write_begin_int+0x571/0x1b00 [ 846.815174][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.820798][T23963] ? folio_zero_new_buffers+0x560/0x560 [ 846.826416][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.832004][T23963] block_write_begin+0x9a/0x1e0 [ 846.836911][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.842542][T23963] cont_write_begin+0x5fd/0x800 [ 846.847490][T23963] ? generic_cont_expand_simple+0x200/0x200 [ 846.853533][T23963] fat_write_begin+0x97/0x160 [ 846.858291][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.863896][T23963] cont_write_begin+0x659/0x800 [ 846.868823][T23963] ? generic_cont_expand_simple+0x200/0x200 [ 846.874904][T23963] fat_write_begin+0x97/0x160 [ 846.879642][T23963] ? fat_block_truncate_page+0x50/0x50 [ 846.885270][T23963] generic_perform_write+0x2fe/0x5c0 [ 846.890696][T23963] ? generic_file_direct_write+0x3e0/0x3e0 [ 846.896563][T23963] ? __mnt_drop_write_file+0xc3/0x100 [ 846.902061][T23963] ? __generic_file_write_iter+0xf7/0x230 [ 846.907855][T23963] ? generic_file_write_iter+0x9b/0x2e0 [ 846.913570][T23963] generic_file_write_iter+0xaf/0x2e0 [ 846.919012][T23963] do_iter_write+0x747/0xc50 [ 846.923929][T23963] ? vfs_iter_write+0xa0/0xa0 [ 846.928696][T23963] ? rcu_read_lock_any_held+0xb4/0x140 [ 846.934491][T23963] do_pwritev+0x242/0x3a0 [ 846.938886][T23963] ? do_preadv+0x390/0x390 [ 846.943462][T23963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 846.949519][T23963] ? lock_chain_count+0x20/0x20 [ 846.954480][T23963] ? lockdep_hardirqs_on+0x98/0x150 [ 846.959727][T23963] ? __x64_sys_pwritev2+0xbe/0x100 [ 846.964981][T23963] do_syscall_64+0x55/0xb0 [ 846.969454][T23963] ? clear_bhb_loop+0x40/0x90 [ 846.974400][T23963] ? clear_bhb_loop+0x40/0x90 [ 846.979145][T23963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.985176][T23963] RIP: 0033:0x7fb33d79f559 [ 846.989646][T23963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.009453][T23963] RSP: 002b:00007fb33e62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 847.018008][T23963] RAX: ffffffffffffffda RBX: 00007fb33da25fa0 RCX: 00007fb33d79f559 [ 847.026101][T23963] RDX: 0000000000000001 RSI: 0000200000022500 RDI: 0000000000000004 [ 847.034287][T23963] RBP: 00007fb33d836b20 R08: 0000000000000000 R09: 0000000000000000 [ 847.042381][T23963] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 847.050397][T23963] R13: 00007fb33da26038 R14: 00007fb33da25fa0 R15: 00007ffe2fcd8628 [ 847.058480][T23963] [ 847.061678][T23963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 847.068997][T23963] CPU: 0 PID: 23963 Comm: syz.2.6386 Not tainted syzkaller #0 [ 847.076491][T23963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.086579][T23963] Call Trace: [ 847.089894][T23963] [ 847.092862][T23963] dump_stack_lvl+0x18c/0x250 [ 847.097593][T23963] ? show_regs_print_info+0x20/0x20 [ 847.102840][T23963] ? load_image+0x420/0x420 [ 847.107410][T23963] panic+0x2ca/0x720 [ 847.111361][T23963] ? bpf_jit_dump+0xd0/0xd0 [ 847.115910][T23963] __warn+0x2e0/0x470 [ 847.119923][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.125092][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.130248][T23963] report_bug+0x2be/0x4f0 [ 847.134713][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.139868][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.145044][T23963] ? mark_buffer_dirty+0x2bd/0x4d0 [ 847.150200][T23963] handle_bug+0xcf/0x120 [ 847.154498][T23963] exc_invalid_op+0x1a/0x50 [ 847.159061][T23963] asm_exc_invalid_op+0x1a/0x20 [ 847.163960][T23963] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0 [ 847.169736][T23963] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 ef 93 fc ff e8 2a b0 87 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 9a ef e7 ff e8 15 b0 87 ff <0f> 0b e9 84 fd ff ff e8 09 b0 87 ff 0f 0b e9 b0 fd ff ff e8 fd af [ 847.189384][T23963] RSP: 0018:ffffc90004c97198 EFLAGS: 00010287 [ 847.195495][T23963] RAX: ffffffff82002e8b RBX: ffff888059c9dcb0 RCX: 0000000000080000 [ 847.203504][T23963] RDX: ffffc9001aa01000 RSI: 0000000000017cce RDI: 0000000000017ccf [ 847.211518][T23963] RBP: ffff88802122f201 R08: ffff888059c9dcb7 R09: 1ffff1100b393b96 [ 847.219566][T23963] R10: dffffc0000000000 R11: ffffed100b393b97 R12: dffffc0000000000 [ 847.227587][T23963] R13: ffff88805d213c38 R14: ffffea0001cc7358 R15: 000000000fffffff [ 847.235613][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.240780][T23963] ? mark_buffer_dirty+0x2bb/0x4d0 [ 847.245932][T23963] mark_buffer_dirty_inode+0x86/0x2c0 [ 847.251345][T23963] ? fat_sync_bhs+0x1a6/0x1c0 [ 847.256064][T23963] fat_ent_write+0xb2/0x180 [ 847.260610][T23963] fat_chain_add+0x3e9/0x890 [ 847.265264][T23963] ? fat_clusters_flush+0x420/0x420 [ 847.270526][T23963] ? fat_bmap+0x487/0x590 [ 847.274912][T23963] fat_get_block+0x765/0xae0 [ 847.279575][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.285101][T23963] __block_write_begin_int+0x571/0x1b00 [ 847.290722][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.296236][T23963] ? folio_zero_new_buffers+0x560/0x560 [ 847.301833][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.307367][T23963] block_write_begin+0x9a/0x1e0 [ 847.312264][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.317776][T23963] cont_write_begin+0x5fd/0x800 [ 847.322679][T23963] ? generic_cont_expand_simple+0x200/0x200 [ 847.328646][T23963] fat_write_begin+0x97/0x160 [ 847.333371][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.338917][T23963] cont_write_begin+0x659/0x800 [ 847.343824][T23963] ? generic_cont_expand_simple+0x200/0x200 [ 847.349780][T23963] fat_write_begin+0x97/0x160 [ 847.354504][T23963] ? fat_block_truncate_page+0x50/0x50 [ 847.360014][T23963] generic_perform_write+0x2fe/0x5c0 [ 847.365365][T23963] ? generic_file_direct_write+0x3e0/0x3e0 [ 847.371227][T23963] ? __mnt_drop_write_file+0xc3/0x100 [ 847.376649][T23963] ? __generic_file_write_iter+0xf7/0x230 [ 847.382428][T23963] ? generic_file_write_iter+0x9b/0x2e0 [ 847.388032][T23963] generic_file_write_iter+0xaf/0x2e0 [ 847.393468][T23963] do_iter_write+0x747/0xc50 [ 847.398132][T23963] ? vfs_iter_write+0xa0/0xa0 [ 847.402860][T23963] ? rcu_read_lock_any_held+0xb4/0x140 [ 847.408378][T23963] do_pwritev+0x242/0x3a0 [ 847.412763][T23963] ? do_preadv+0x390/0x390 [ 847.417226][T23963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 847.423251][T23963] ? lock_chain_count+0x20/0x20 [ 847.428158][T23963] ? lockdep_hardirqs_on+0x98/0x150 [ 847.433389][T23963] ? __x64_sys_pwritev2+0xbe/0x100 [ 847.438547][T23963] do_syscall_64+0x55/0xb0 [ 847.443015][T23963] ? clear_bhb_loop+0x40/0x90 [ 847.447739][T23963] ? clear_bhb_loop+0x40/0x90 [ 847.452463][T23963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.458394][T23963] RIP: 0033:0x7fb33d79f559 [ 847.462846][T23963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.482489][T23963] RSP: 002b:00007fb33e62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 847.490943][T23963] RAX: ffffffffffffffda RBX: 00007fb33da25fa0 RCX: 00007fb33d79f559 [ 847.498963][T23963] RDX: 0000000000000001 RSI: 0000200000022500 RDI: 0000000000000004 [ 847.507061][T23963] RBP: 00007fb33d836b20 R08: 0000000000000000 R09: 0000000000000000 [ 847.515067][T23963] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 847.523069][T23963] R13: 00007fb33da26038 R14: 00007fb33da25fa0 R15: 00007ffe2fcd8628 [ 847.531081][T23963] [ 847.534252][T23963] Kernel Offset: disabled [ 847.538687][T23963] Rebooting in 86400 seconds..