last executing test programs: 21.768957849s ago: executing program 0 (id=634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) r2 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) 21.66570594s ago: executing program 0 (id=636): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d1) 20.291135109s ago: executing program 0 (id=647): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1fd) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_io_uring_setup(0x4b6, 0x0, &(0x7f0000001180), &(0x7f00000011c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0x1c, &(0x7f00000012c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.420482477s ago: executing program 0 (id=660): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4f23, 0x200000e, @loopback={0xe0}, 0x40000008}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x900007c3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 19.036903107s ago: executing program 0 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 18.966470743s ago: executing program 0 (id=666): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04"], 0x10) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) listen(r4, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f0000000840)=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 13.898796469s ago: executing program 2 (id=717): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4f23, 0x200000e, @loopback={0xe0}, 0x40000008}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x900007c3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 3.676862657s ago: executing program 32 (id=666): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04"], 0x10) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) listen(r4, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f0000000840)=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.673044737s ago: executing program 2 (id=726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f00000004c0)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x4178, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0) 2.813396915s ago: executing program 2 (id=728): socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x5}, 0x1000, 0x3, 0x80000000, 0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000540)=0xce, 0x4) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000005c0)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000c80)={0x0, 0x14, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=' ', 0x100120}], 0x1}, 0x0) 2.501007836s ago: executing program 1 (id=733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c00)=ANY=[], 0x18) sendmsg$nl_route(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110cc661668000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = gettid() timer_create(0x0, &(0x7f0000000d00)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000d40)) timer_settime(0x0, 0x0, &(0x7f0000000d80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000e00)=ANY=[], 0xfffffdcf) 2.212167885s ago: executing program 1 (id=736): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) write(r1, &(0x7f0000000780)="5281e68ae0cd0258ba9ee9ab17c58e0ead4866", 0x13) sendmsg$nl_route(r0, 0x0, 0x4000800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000010) 2.112524656s ago: executing program 1 (id=737): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) close_range(r1, r1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x300001a, &(0x7f0000000240)=ANY=[], 0x0, 0x2c7, &(0x7f0000000a40)="$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") r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000800"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r2, 0x23, &(0x7f0000000a00)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) 2.056833601s ago: executing program 5 (id=724): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001bc0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) msgget$private(0x0, 0x0) r1 = perf_event_open(&(0x7f0000002140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x4000, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000021c0)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000002200)=[{{0x0, 0xa9cc7003, &(0x7f0000002240)=[{&(0x7f0000002280)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.920742865s ago: executing program 1 (id=740): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e008d2a", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.895222058s ago: executing program 5 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x56202329, @loopback, 0x4000005}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f6}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) 1.77594658s ago: executing program 5 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x41}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048080) 1.739546874s ago: executing program 1 (id=743): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1003ffffffc]}, 0x8, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x1}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000300)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) fcntl$setown(r2, 0x8, r5) truncate(&(0x7f0000000380)='./file0\x00', 0x1) 1.699786188s ago: executing program 2 (id=744): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) fcntl$setpipe(r0, 0x407, 0x5) 1.643206854s ago: executing program 2 (id=745): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.551119513s ago: executing program 2 (id=746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 857.410223ms ago: executing program 1 (id=751): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 803.579429ms ago: executing program 5 (id=753): epoll_create1(0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 736.945875ms ago: executing program 3 (id=754): setns(0xc9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000540)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) kexec_load(0x9, 0x0, 0x0, 0x2a0000) 629.158626ms ago: executing program 4 (id=755): syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/ip6_tables_matches\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2000094, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2d3, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000e40), 0xffffff6a) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) munmap$IORING_OFF_SQ_RING(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4c27e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) 541.549035ms ago: executing program 3 (id=756): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x200008, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000600)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x44041, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x39b3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000140), &(0x7f0000000180)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f00000003c0)=0x1, 0x4) io_setup(0x20fe, &(0x7f0000002240)=0x0) io_submit(r4, 0x1, &(0x7f0000002280)=[&(0x7f00000022c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x600}]) 428.016127ms ago: executing program 4 (id=757): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 377.135362ms ago: executing program 3 (id=758): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) socket$inet6(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f00000004c0)={'dummy0\x00', @broadcast}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./tracing\x00', &(0x7f0000000780)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431202d", 0x1e) 340.245716ms ago: executing program 3 (id=759): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xffff5a7b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000380)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000001540)) 248.754835ms ago: executing program 3 (id=760): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x800, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000005fc0)='./file1\x00', 0x0, 0x0) 162.940204ms ago: executing program 4 (id=761): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x2e, 0x2e, 0x5f, 0x30, 0x30, 0x30]}}, &(0x7f0000000900)=""/76, 0x21, 0x4c, 0x1, 0x8000}, 0x28) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}, 0xfa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r1, 0x0) syz_clone(0x58048400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000240)={'wlan1\x00', @random="0000230c1100"}) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) 106.39085ms ago: executing program 4 (id=762): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="040025bd702000e13604cbd8e0d3000380060007004e000006"], 0x30}}, 0x48040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 81.733142ms ago: executing program 4 (id=763): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xb) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x101000, 0x0) dup(r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) 71.401513ms ago: executing program 3 (id=764): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2021092, &(0x7f0000000080)=ANY=[@ANYBLOB="6d61703d61636f726e2c73657373696f6e3d3078303030303030303030303030303032612c6e6f6a6f6c6965742c6e6f726f636b2c636865636b3d7374726963742c636865636b3d72656c617865642c6e6f726f636b2c6e6f6a6f6c6965742c00bfa12bf2efeeb0a0274d637a080eae8632e084d151db0c14e4d46b8ed73372eaa5546248940c6203fffccbc31567c60b9f28d689beb2a6d020f3916b8f2166639f6219bf645f152ec6b45fad1776d902e444fa1f47049fae8724523f528f5121896013fed9219340009d5b98f7"], 0x2, 0x564, &(0x7f0000000180)="$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") socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800)}, 0x10c100, 0xe81, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000700)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=765): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, 0x0, 0x40080, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb081, 0x40013}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x80000001}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000c40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): m_r:sysadm_t tclass=rds_socket permissive=1 [ 57.219233][ T29] audit: type=1400 audit(1793489696.373:498): avc: denied { read write } for pid=4139 comm="syz.3.192" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.219272][ T29] audit: type=1400 audit(1793489696.373:499): avc: denied { open } for pid=4139 comm="syz.3.192" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.324828][ T29] audit: type=1400 audit(1793489696.474:500): avc: denied { write } for pid=4151 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.355460][ T4150] loop0: detected capacity change from 0 to 128 [ 57.359228][ T4150] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.564362][ T29] audit: type=1400 audit(1793489696.626:501): avc: denied { setopt } for pid=4153 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.581362][ T4150] loop0: detected capacity change from 0 to 512 [ 57.646478][ T29] audit: type=1400 audit(1793489696.798:502): avc: denied { map } for pid=4146 comm="syz.4.195" path="socket:[7331]" dev="sockfs" ino=7331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.685343][ T4160] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 57.706239][ T4160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.737166][ T4160] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 58.057500][ T4168] loop3: detected capacity change from 0 to 512 [ 58.058013][ T4168] EXT4-fs: inline encryption not supported [ 58.059769][ T4168] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 58.059785][ T4168] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.059802][ T4168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.114765][ T4168] EXT4-fs (loop3): 1 truncate cleaned up [ 58.115170][ T4168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.259285][ T4174] FAULT_INJECTION: forcing a failure. [ 58.259285][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 58.259344][ T4174] CPU: 0 UID: 0 PID: 4174 Comm: syz.0.204 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 58.259519][ T4174] Tainted: [W]=WARN [ 58.259532][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.259550][ T4174] Call Trace: [ 58.259560][ T4174] [ 58.259571][ T4174] __dump_stack+0x1d/0x30 [ 58.259605][ T4174] dump_stack_lvl+0x95/0xd0 [ 58.259713][ T4174] dump_stack+0x15/0x1b [ 58.259797][ T4174] should_fail_ex+0x259/0x270 [ 58.259860][ T4174] ? mpi_resize+0x58/0x130 [ 58.259893][ T4174] should_failslab+0x8c/0xb0 [ 58.259933][ T4174] __kmalloc_noprof+0xb6/0x4b0 [ 58.260020][ T4174] ? mpi_resize+0x58/0x130 [ 58.260056][ T4174] mpi_resize+0x58/0x130 [ 58.260090][ T4174] mpi_sub_ui+0x4d/0x7a0 [ 58.260120][ T4174] rsa_enc+0xff/0x290 [ 58.260151][ T4174] crypto_akcipher_sync_encrypt+0xf2/0x130 [ 58.260219][ T4174] software_key_eds_op+0x4d7/0x5f0 [ 58.260285][ T4174] ? __kmalloc_noprof+0x1d7/0x4b0 [ 58.260328][ T4174] ? __pfx_software_key_eds_op+0x10/0x10 [ 58.260387][ T4174] asymmetric_key_eds_op+0xb5/0xe0 [ 58.260430][ T4174] keyctl_pkey_e_d_s+0x186/0x260 [ 58.260501][ T4174] __se_sys_keyctl+0x5fb/0xb70 [ 58.260537][ T4174] ? xfd_validate_state+0x45/0xf0 [ 58.260579][ T4174] ? restore_fpregs_from_fpstate+0x61/0x110 [ 58.260615][ T4174] __x64_sys_keyctl+0x67/0x80 [ 58.260673][ T4174] x64_sys_call+0x1fe0/0x2550 [ 58.260719][ T4174] do_syscall_64+0x112/0x360 [ 58.260760][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.260792][ T4174] RIP: 0033:0x7f0fb47cf559 [ 58.260816][ T4174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.260841][ T4174] RSP: 002b:00007f0fb321f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 58.260870][ T4174] RAX: ffffffffffffffda RBX: 00007f0fb4a55fa0 RCX: 00007f0fb47cf559 [ 58.260890][ T4174] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000019 [ 58.260950][ T4174] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 58.261049][ T4174] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 58.261068][ T4174] R13: 00007f0fb4a56038 R14: 00007f0fb4a55fa0 R15: 00007ffd602d27a8 [ 58.261096][ T4174] [ 58.279078][ T4166] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 58.279140][ T4166] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.202'. [ 58.494052][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.563601][ T4178] loop1: detected capacity change from 0 to 512 [ 58.577756][ T4178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.580432][ T4178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 58.580497][ T4178] System zones: 0-2, 18-18, 34-34 [ 58.580981][ T4178] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.586784][ T4178] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.206: bg 0: block 248: padding at end of block bitmap is not set [ 58.586849][ T4178] loop1: lost filesystem error report for type 5 error -117 [ 58.603649][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.603671][ C1] EXT4-fs (loop1): last error at time 1793489697: ext4_validate_block_bitmap:445 [ 58.604157][ T4178] Quota error (device loop1): write_blk: dquota write failed [ 58.604189][ T4178] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 58.604237][ T4178] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.206: Failed to acquire dquot type 1 [ 58.604273][ T4178] loop1: lost filesystem error report for type 5 error -117 [ 58.697384][ T4178] EXT4-fs (loop1): 1 truncate cleaned up [ 58.698713][ T4178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.742085][ T4147] syz.4.195 (4147) used greatest stack depth: 9544 bytes left [ 58.765812][ T29] audit: type=1400 audit(1793489697.941:503): avc: denied { relabelfrom } for pid=4176 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.765918][ T29] audit: type=1400 audit(1793489697.941:504): avc: denied { relabelto } for pid=4176 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.966075][ T4195] loop0: detected capacity change from 0 to 512 [ 58.966650][ T4195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.983938][ T4195] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.988094][ T4195] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.212: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 58.988121][ T4195] loop0: lost filesystem error report for type 5 error -117 [ 58.988375][ T4195] EXT4-fs (loop0): Remounting filesystem read-only [ 58.988473][ T4195] EXT4-fs (loop0): 1 orphan inode deleted [ 58.988816][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.049555][ T4193] loop2: detected capacity change from 0 to 1024 [ 59.083528][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.089371][ T4193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.089950][ T4193] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.095916][ T4193] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 59.099282][ T4193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.100011][ T4193] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.211: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.100180][ T4193] loop2: lost filesystem error report for type 5 error -117 [ 59.101396][ T4193] EXT4-fs (loop2): 1 orphan inode deleted [ 59.108420][ T4193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.139806][ T4193] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 59.139806][ T4193] program syz.2.211 not setting count and/or reply_len properly [ 59.161072][ T4193] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz.2.211: path /35/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 59.328633][ T4210] netlink: 'syz.3.217': attribute type 4 has an invalid length. [ 59.333789][ T4210] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.217'. [ 59.459086][ T4178] syz.1.206 (4178) used greatest stack depth: 9352 bytes left [ 59.473797][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.598834][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.899624][ T4244] loop2: detected capacity change from 0 to 128 [ 60.012434][ T4246] FAULT_INJECTION: forcing a failure. [ 60.012434][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 60.012476][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.0.232 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 60.012558][ T4246] Tainted: [W]=WARN [ 60.012569][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.012589][ T4246] Call Trace: [ 60.012598][ T4246] [ 60.012670][ T4246] __dump_stack+0x1d/0x30 [ 60.012706][ T4246] dump_stack_lvl+0x95/0xd0 [ 60.012814][ T4246] dump_stack+0x15/0x1b [ 60.012847][ T4246] should_fail_ex+0x259/0x270 [ 60.012891][ T4246] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 60.012946][ T4246] should_failslab+0x8c/0xb0 [ 60.012995][ T4246] __kmalloc_cache_noprof+0x5d/0x3e0 [ 60.013084][ T4246] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 60.013125][ T4246] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 60.013192][ T4246] selinux_netlbl_sock_genattr+0x88/0x260 [ 60.013245][ T4246] selinux_netlbl_socket_post_create+0x66/0x100 [ 60.013372][ T4246] selinux_socket_post_create+0x219/0x290 [ 60.013422][ T4246] security_socket_post_create+0x59/0xa0 [ 60.013537][ T4246] __sock_create+0x356/0x580 [ 60.013584][ T4246] __sys_socket+0xaf/0x180 [ 60.013647][ T4246] __x64_sys_socket+0x3f/0x50 [ 60.013740][ T4246] x64_sys_call+0x246e/0x2550 [ 60.013779][ T4246] do_syscall_64+0x112/0x360 [ 60.013850][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.013883][ T4246] RIP: 0033:0x7f0fb47cf559 [ 60.013908][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.013932][ T4246] RSP: 002b:00007f0fb321f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 60.013954][ T4246] RAX: ffffffffffffffda RBX: 00007f0fb4a55fa0 RCX: 00007f0fb47cf559 [ 60.013970][ T4246] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 60.014025][ T4246] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 60.014045][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.014064][ T4246] R13: 00007f0fb4a56038 R14: 00007f0fb4a55fa0 R15: 00007ffd602d27a8 [ 60.014095][ T4246] [ 60.047065][ T4237] loop3: detected capacity change from 0 to 512 [ 60.155376][ T4239] bond0: entered promiscuous mode [ 60.155446][ T4239] bond_slave_0: entered promiscuous mode [ 60.159328][ T4239] bond_slave_1: entered promiscuous mode [ 60.196141][ T4239] batadv0: entered promiscuous mode [ 60.204756][ T4239] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 60.241021][ T4239] bond0: left promiscuous mode [ 60.241088][ T4239] bond_slave_0: left promiscuous mode [ 60.241298][ T4239] bond_slave_1: left promiscuous mode [ 60.250282][ T4239] batadv0: left promiscuous mode [ 60.350734][ T4253] loop1: detected capacity change from 0 to 736 [ 60.380534][ T4253] rock: directory entry would overflow storage [ 60.380546][ T4253] rock: sig=0x3b10, size=4, remaining=3 [ 60.560392][ T4263] gtp0: entered promiscuous mode [ 60.560697][ T4263] gtp0: entered allmulticast mode [ 60.561854][ T4263] team0: Device gtp0 is of different type [ 60.768560][ T4278] netlink: 76 bytes leftover after parsing attributes in process `syz.2.243'. [ 60.816234][ T4270] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 60.967045][ T4270] syzkaller0: entered promiscuous mode [ 60.967066][ T4270] syzkaller0: entered allmulticast mode [ 61.003186][ T4277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 61.003993][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 61.438293][ T4301] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.913695][ T4315] syzkaller0: entered promiscuous mode [ 61.913754][ T4315] syzkaller0: entered allmulticast mode [ 62.043041][ T4321] syzkaller0: entered promiscuous mode [ 62.043138][ T4321] syzkaller0: entered allmulticast mode [ 62.158697][ T4328] loop0: detected capacity change from 0 to 512 [ 62.167093][ T4328] FAT-fs (loop0): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 62.317390][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 62.317409][ T29] audit: type=1400 audit(1793489701.516:899): avc: denied { ioctl } for pid=4338 comm="syz.1.267" path="socket:[6793]" dev="sockfs" ino=6793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.379005][ T4342] xt_hashlimit: size too large, truncated to 1048576 [ 62.432066][ T4343] xt_hashlimit: size too large, truncated to 1048576 [ 62.518350][ T4343] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.605406][ T29] audit: type=1400 audit(1793489701.808:900): avc: denied { read write } for pid=4347 comm="syz.2.270" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 62.605486][ T29] audit: type=1400 audit(1793489701.808:901): avc: denied { open } for pid=4347 comm="syz.2.270" path="/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 62.606422][ T29] audit: type=1400 audit(1793489701.808:902): avc: denied { ioctl } for pid=4347 comm="syz.2.270" path="/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.037112][ T4362] syz.1.274 uses obsolete (PF_INET,SOCK_PACKET) [ 63.228991][ T29] audit: type=1326 audit(1793489702.433:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 63.229254][ T29] audit: type=1326 audit(1793489702.433:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 63.229292][ T29] audit: type=1326 audit(1793489702.433:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 63.230858][ T29] audit: type=1326 audit(1793489702.433:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 63.284355][ T29] audit: type=1326 audit(1793489702.504:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8034e1fd8e code=0x7ffc0000 [ 63.309464][ T29] audit: type=1326 audit(1793489702.524:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8034e1fd8e code=0x7ffc0000 [ 63.468140][ T4388] syzkaller0: entered promiscuous mode [ 63.468167][ T4388] syzkaller0: entered allmulticast mode [ 63.498094][ T4382] loop2: detected capacity change from 0 to 128 [ 63.520632][ T4382] EXT4-fs: quotafile must be on filesystem root [ 63.736491][ T4406] syz_tun: entered allmulticast mode [ 63.749708][ T4406] pimreg: entered allmulticast mode [ 63.754486][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 63.787031][ T53] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.787078][ T53] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.787169][ T53] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.787263][ T53] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.792416][ T4405] syz_tun: left allmulticast mode [ 63.792451][ T4405] pimreg: left allmulticast mode [ 63.826074][ T4402] loop1: detected capacity change from 0 to 512 [ 64.058289][ T4436] FAULT_INJECTION: forcing a failure. [ 64.058289][ T4436] name failslab, interval 1, probability 0, space 0, times 0 [ 64.058329][ T4436] CPU: 1 UID: 0 PID: 4436 Comm: syz.2.294 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 64.058429][ T4436] Tainted: [W]=WARN [ 64.058438][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.058455][ T4436] Call Trace: [ 64.058462][ T4436] [ 64.058469][ T4436] __dump_stack+0x1d/0x30 [ 64.058494][ T4436] dump_stack_lvl+0x95/0xd0 [ 64.058519][ T4436] dump_stack+0x15/0x1b [ 64.058649][ T4436] should_fail_ex+0x259/0x270 [ 64.058686][ T4436] should_failslab+0x8c/0xb0 [ 64.058731][ T4436] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 64.058764][ T4436] ? sock_alloc_inode+0x36/0xf0 [ 64.058797][ T4436] ? sock_alloc_inode+0x36/0xf0 [ 64.058833][ T4436] ? selinux_socket_create+0x86/0x180 [ 64.058885][ T4436] ? __pfx_sock_alloc_inode+0x10/0x10 [ 64.059007][ T4436] sock_alloc_inode+0x36/0xf0 [ 64.059042][ T4436] alloc_inode+0x40/0x170 [ 64.059064][ T4436] __sock_create+0x121/0x580 [ 64.059097][ T4436] ? _raw_write_lock_bh+0x57/0xb0 [ 64.059158][ T4436] sock_create_kern+0x38/0x50 [ 64.059196][ T4436] smc_create+0x3ea/0x480 [ 64.059299][ T4436] __sock_create+0x2e5/0x580 [ 64.059329][ T4436] __sys_socket+0xaf/0x180 [ 64.059367][ T4436] __x64_sys_socket+0x3f/0x50 [ 64.059457][ T4436] x64_sys_call+0x246e/0x2550 [ 64.059494][ T4436] do_syscall_64+0x112/0x360 [ 64.059532][ T4436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.059555][ T4436] RIP: 0033:0x7fc6999bf559 [ 64.059648][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.059672][ T4436] RSP: 002b:00007fc698417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 64.059693][ T4436] RAX: ffffffffffffffda RBX: 00007fc699c45fa0 RCX: 00007fc6999bf559 [ 64.059713][ T4436] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 64.059730][ T4436] RBP: 00007fc699a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 64.059755][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.059767][ T4436] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 64.059789][ T4436] [ 64.061063][ T4436] socket: no more sockets [ 65.209806][ T4464] loop1: detected capacity change from 0 to 512 [ 65.603363][ T4464] EXT4-fs (loop1): 1 truncate cleaned up [ 65.614511][ T4464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.733385][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.775285][ T4486] bridge0: port 3(vlan2) entered blocking state [ 65.775325][ T4486] bridge0: port 3(vlan2) entered disabled state [ 65.775462][ T4486] vlan2: entered allmulticast mode [ 65.776118][ T4486] vlan2: entered promiscuous mode [ 65.852781][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.867898][ T4486] bridge_slave_1: left allmulticast mode [ 65.867923][ T4486] bridge_slave_1: left promiscuous mode [ 65.868004][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.887816][ T4486] bond0: (slave bond_slave_0): Releasing backup interface [ 65.947671][ T4486] bond0: (slave bond_slave_1): Releasing backup interface [ 65.977308][ T4486] team0: Port device team_slave_0 removed [ 65.980170][ T4486] team0: Port device team_slave_1 removed [ 65.987243][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.987724][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.004978][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.005032][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.023884][ T4486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.025061][ T4498] loop4: detected capacity change from 0 to 128 [ 66.033873][ T4497] FAULT_INJECTION: forcing a failure. [ 66.033873][ T4497] name fail_futex, interval 1, probability 0, space 0, times 1 [ 66.033977][ T4497] CPU: 0 UID: 0 PID: 4497 Comm: syz.3.317 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 66.034137][ T4497] Tainted: [W]=WARN [ 66.034160][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.034216][ T4497] Call Trace: [ 66.034238][ T4497] [ 66.034318][ T4497] __dump_stack+0x1d/0x30 [ 66.034464][ T4497] dump_stack_lvl+0x95/0xd0 [ 66.034548][ T4497] dump_stack+0x15/0x1b [ 66.034622][ T4497] should_fail_ex+0x259/0x270 [ 66.034717][ T4497] should_fail+0xb/0x20 [ 66.034779][ T4497] get_futex_key+0x12c/0xc40 [ 66.034897][ T4497] ? hrtimer_start_range_ns_common+0x4ee/0x7d0 [ 66.035066][ T4497] futex_wake+0x89/0x400 [ 66.035250][ T4497] do_futex+0x3f8/0x460 [ 66.035334][ T4497] __se_sys_futex+0x2f6/0x370 [ 66.035471][ T4497] ? xfd_validate_state+0x45/0xf0 [ 66.035618][ T4497] __x64_sys_futex+0x78/0x90 [ 66.035702][ T4497] x64_sys_call+0x22e2/0x2550 [ 66.035862][ T4497] do_syscall_64+0x112/0x360 [ 66.035977][ T4497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.036044][ T4497] RIP: 0033:0x7f8034e5f559 [ 66.036128][ T4497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.036190][ T4497] RSP: 002b:00007f803388e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 66.036255][ T4497] RAX: ffffffffffffffda RBX: 00007f80350e6098 RCX: 00007f8034e5f559 [ 66.036305][ T4497] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80350e609c [ 66.036347][ T4497] RBP: 00007f80350e6090 R08: 3fffffffffffffff R09: 0000000000000000 [ 66.036473][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.036524][ T4497] R13: 00007f80350e6128 R14: 00007fff797073a0 R15: 00007fff79707488 [ 66.036596][ T4497] [ 66.055021][ T4494] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 66.644662][ T4496] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.689597][ T4508] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 66.689950][ T4508] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.322'. [ 66.959153][ T4514] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 67.164729][ T4522] loop3: detected capacity change from 0 to 128 [ 67.209196][ T4522] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.210292][ T4522] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.314118][ T3293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.885472][ T4538] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 67.949959][ T4543] ip_tables: iptables: counters copy to user failed while replacing table [ 68.010577][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 68.010597][ T29] audit: type=1400 audit(1793489707.258:974): avc: denied { read write } for pid=4544 comm="syz.4.336" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.010636][ T29] audit: type=1400 audit(1793489707.258:975): avc: denied { open } for pid=4544 comm="syz.4.336" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.017388][ T29] audit: type=1400 audit(1793489707.258:976): avc: denied { ioctl } for pid=4544 comm="syz.4.336" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.018727][ T4545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.040112][ T4545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.108819][ T4538] syzkaller0: entered promiscuous mode [ 68.108845][ T4538] syzkaller0: entered allmulticast mode [ 68.186043][ T29] audit: type=1400 audit(1793489707.429:977): avc: denied { cmd } for pid=4544 comm="syz.4.336" path="socket:[7782]" dev="sockfs" ino=7782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.508441][ T29] audit: type=1400 audit(1793489707.761:978): avc: denied { read } for pid=4555 comm="syz.0.341" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.663699][ T4561] netlink: 324 bytes leftover after parsing attributes in process `syz.0.342'. [ 68.670143][ T29] audit: type=1326 audit(1793489707.921:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 68.670305][ T29] audit: type=1326 audit(1793489707.921:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 68.670484][ T29] audit: type=1326 audit(1793489707.921:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 68.671967][ T29] audit: type=1326 audit(1793489707.921:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 68.721390][ T29] audit: type=1326 audit(1793489707.972:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8034e1fd8e code=0x7ffc0000 [ 68.888924][ T4577] loop4: detected capacity change from 0 to 512 [ 68.901982][ T4577] EXT4-fs (loop4): 1 truncate cleaned up [ 68.908466][ T4577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.946950][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.993264][ T4584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.016469][ T4581] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.229565][ T4596] syzkaller0: entered promiscuous mode [ 69.229590][ T4596] syzkaller0: entered allmulticast mode [ 69.374433][ T4598] loop2: detected capacity change from 0 to 128 [ 69.401226][ T3285] udevd[3285]: incorrect ext4 checksum on /dev/loop2 [ 69.412145][ T3285] udevd[3285]: incorrect ext4 checksum on /dev/loop2 [ 69.418185][ T4598] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.729371][ T4624] mmap: syz.3.357 (4624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.741111][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.360'. [ 69.763473][ T4598] loop2: detected capacity change from 0 to 512 [ 69.912301][ T4640] TC_ACT_REPEAT abuse ? [ 70.368072][ T4668] FAULT_INJECTION: forcing a failure. [ 70.368072][ T4668] name failslab, interval 1, probability 0, space 0, times 0 [ 70.368114][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: syz.0.365 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 70.368216][ T4668] Tainted: [W]=WARN [ 70.368223][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.368236][ T4668] Call Trace: [ 70.368244][ T4668] [ 70.368252][ T4668] __dump_stack+0x1d/0x30 [ 70.368312][ T4668] dump_stack_lvl+0x95/0xd0 [ 70.368343][ T4668] dump_stack+0x15/0x1b [ 70.368372][ T4668] should_fail_ex+0x259/0x270 [ 70.368423][ T4668] ? posix_lock_inode+0x218/0x2360 [ 70.368457][ T4668] should_failslab+0x8c/0xb0 [ 70.368566][ T4668] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 70.368606][ T4668] ? _raw_spin_lock+0x53/0xa0 [ 70.368631][ T4668] ? posix_lock_inode+0x218/0x2360 [ 70.368740][ T4668] posix_lock_inode+0x218/0x2360 [ 70.368782][ T4668] ? __file_has_perm+0x3d9/0x430 [ 70.368817][ T4668] fcntl_setlk+0x60f/0x910 [ 70.368860][ T4668] do_fcntl+0x6b9/0xfa0 [ 70.368943][ T4668] __se_sys_fcntl+0xb1/0x120 [ 70.368994][ T4668] __x64_sys_fcntl+0x43/0x50 [ 70.369033][ T4668] x64_sys_call+0x1a43/0x2550 [ 70.369220][ T4668] do_syscall_64+0x112/0x360 [ 70.369254][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.369277][ T4668] RIP: 0033:0x7f0fb47cf559 [ 70.369300][ T4668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.369325][ T4668] RSP: 002b:00007f0fb31fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 70.369394][ T4668] RAX: ffffffffffffffda RBX: 00007f0fb4a56090 RCX: 00007f0fb47cf559 [ 70.369470][ T4668] RDX: 00002000000003c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 70.369485][ T4668] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 70.369499][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.369513][ T4668] R13: 00007f0fb4a56128 R14: 00007f0fb4a56090 R15: 00007ffd602d27a8 [ 70.369541][ T4668] [ 70.901416][ T4663] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.213475][ T4691] FAULT_INJECTION: forcing a failure. [ 71.213475][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 71.213560][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.2.368 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 71.213658][ T4691] Tainted: [W]=WARN [ 71.213666][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.213680][ T4691] Call Trace: [ 71.213699][ T4691] [ 71.213707][ T4691] __dump_stack+0x1d/0x30 [ 71.213737][ T4691] dump_stack_lvl+0x95/0xd0 [ 71.213763][ T4691] dump_stack+0x15/0x1b [ 71.213787][ T4691] should_fail_ex+0x259/0x270 [ 71.213897][ T4691] ? crypto_akcipher_sync_prep+0x7e/0x220 [ 71.213921][ T4691] should_failslab+0x8c/0xb0 [ 71.214007][ T4691] __kmalloc_noprof+0xb6/0x4b0 [ 71.214041][ T4691] ? crypto_akcipher_sync_prep+0x7e/0x220 [ 71.214160][ T4691] crypto_akcipher_sync_prep+0x7e/0x220 [ 71.214185][ T4691] crypto_akcipher_sync_encrypt+0x9a/0x130 [ 71.214214][ T4691] software_key_eds_op+0x4d7/0x5f0 [ 71.214268][ T4691] ? __kmalloc_noprof+0x1d7/0x4b0 [ 71.214318][ T4691] ? __pfx_software_key_eds_op+0x10/0x10 [ 71.214368][ T4691] asymmetric_key_eds_op+0xb5/0xe0 [ 71.214496][ T4691] keyctl_pkey_e_d_s+0x186/0x260 [ 71.214560][ T4691] __se_sys_keyctl+0x5fb/0xb70 [ 71.214652][ T4691] ? __se_sys_futex+0x2f6/0x370 [ 71.214684][ T4691] ? xfd_validate_state+0x45/0xf0 [ 71.214716][ T4691] ? restore_fpregs_from_fpstate+0x61/0x110 [ 71.214745][ T4691] __x64_sys_keyctl+0x67/0x80 [ 71.214852][ T4691] x64_sys_call+0x1fe0/0x2550 [ 71.214894][ T4691] do_syscall_64+0x112/0x360 [ 71.214941][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.215038][ T4691] RIP: 0033:0x7fc6999bf559 [ 71.215058][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.215142][ T4691] RSP: 002b:00007fc698417028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 71.215176][ T4691] RAX: ffffffffffffffda RBX: 00007fc699c45fa0 RCX: 00007fc6999bf559 [ 71.215195][ T4691] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000019 [ 71.215213][ T4691] RBP: 00007fc699a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 71.215231][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.215295][ T4691] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 71.215322][ T4691] [ 71.348891][ T4694] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 71.497415][ T4694] syzkaller0: entered promiscuous mode [ 71.497535][ T4694] syzkaller0: entered allmulticast mode [ 71.859057][ T4705] loop2: detected capacity change from 0 to 1024 [ 71.938175][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.941177][ T4705] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.052736][ T4705] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 3: comm syz.2.384: lblock 3 mapped to illegal pblock 3 (length 3) [ 72.054853][ T4705] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 72.055039][ T4705] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.055039][ T4705] [ 72.345507][ T38] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 72.345842][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 72.345942][ T38] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.345942][ T38] [ 72.347406][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.445481][ T4720] loop0: detected capacity change from 0 to 512 [ 72.470854][ T4720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.470927][ T4720] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.546598][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.562726][ T4727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 72.562843][ T4727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.567614][ T4727] vhci_hcd vhci_hcd.0: Device attached [ 72.584611][ T4727] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 72.584644][ T4727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.585486][ T4727] vhci_hcd vhci_hcd.0: Device attached [ 72.620057][ T4739] loop4: detected capacity change from 0 to 512 [ 72.640722][ T4739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.640875][ T4739] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.655065][ T4739] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.802463][ T1047] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 73.286138][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 73.286157][ T29] audit: type=1326 audit(1793489712.555:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.286272][ T29] audit: type=1326 audit(1793489712.555:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.287995][ T29] audit: type=1326 audit(1793489712.555:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.288111][ T29] audit: type=1326 audit(1793489712.555:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.289562][ T29] audit: type=1326 audit(1793489712.555:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.289613][ T29] audit: type=1326 audit(1793489712.555:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.289724][ T29] audit: type=1326 audit(1793489712.555:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.371692][ T4733] vhci_hcd: connection reset by peer [ 73.380006][ T53] vhci_hcd vhci_hcd.3: stop threads [ 73.380069][ T53] vhci_hcd vhci_hcd.3: release socket [ 73.380188][ T53] vhci_hcd vhci_hcd.3: disconnect device [ 73.380290][ T4735] vhci_hcd: connection closed [ 73.380844][ T53] vhci_hcd vhci_hcd.3: stop threads [ 73.380889][ T53] vhci_hcd vhci_hcd.3: release socket [ 73.380943][ T53] vhci_hcd vhci_hcd.3: disconnect device [ 73.499808][ T29] audit: type=1326 audit(1793489712.776:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.503707][ T29] audit: type=1326 audit(1793489712.776:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.507145][ T29] audit: type=1326 audit(1793489712.776:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.1.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 73.685236][ T4764] FAULT_INJECTION: forcing a failure. [ 73.685236][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 73.685319][ T4764] CPU: 1 UID: 0 PID: 4764 Comm: syz.1.391 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 73.685451][ T4764] Tainted: [W]=WARN [ 73.685461][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.685478][ T4764] Call Trace: [ 73.685524][ T4764] [ 73.685535][ T4764] __dump_stack+0x1d/0x30 [ 73.685570][ T4764] dump_stack_lvl+0x95/0xd0 [ 73.685601][ T4764] dump_stack+0x15/0x1b [ 73.685639][ T4764] should_fail_ex+0x259/0x270 [ 73.685678][ T4764] should_failslab+0x8c/0xb0 [ 73.685721][ T4764] __kvmalloc_node_noprof+0x14f/0x5b0 [ 73.685801][ T4764] ? dm_create+0xa3/0x850 [ 73.685829][ T4764] ? dm_create+0xa3/0x850 [ 73.685859][ T4764] dm_create+0xa3/0x850 [ 73.685906][ T4764] dev_create+0x141/0x290 [ 73.685980][ T4764] dm_ctl_ioctl+0x80b/0xad0 [ 73.686073][ T4764] ? __pfx_dev_create+0x10/0x10 [ 73.686130][ T4764] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 73.686165][ T4764] __se_sys_ioctl+0xce/0x140 [ 73.686226][ T4764] __x64_sys_ioctl+0x43/0x50 [ 73.686312][ T4764] x64_sys_call+0x239d/0x2550 [ 73.686346][ T4764] do_syscall_64+0x112/0x360 [ 73.686386][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.686412][ T4764] RIP: 0033:0x7f6c92faf559 [ 73.686433][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.686523][ T4764] RSP: 002b:00007f6c91a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.686582][ T4764] RAX: ffffffffffffffda RBX: 00007f6c93235fa0 RCX: 00007f6c92faf559 [ 73.686602][ T4764] RDX: 0000200000000380 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 73.686620][ T4764] RBP: 00007f6c93046b50 R08: 0000000000000000 R09: 0000000000000000 [ 73.686712][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.686725][ T4764] R13: 00007f6c93236038 R14: 00007f6c93235fa0 R15: 00007ffda70da268 [ 73.686793][ T4764] [ 73.706138][ T4764] device-mapper: core: unable to allocate device, out of memory. [ 74.655268][ T4793] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 74.655295][ T4793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.656134][ T4793] vhci_hcd vhci_hcd.0: Device attached [ 74.702472][ T4793] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 74.702505][ T4793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.702879][ T4793] vhci_hcd vhci_hcd.0: Device attached [ 74.745353][ T4801] loop3: detected capacity change from 0 to 128 [ 74.750463][ T4801] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.750731][ T4801] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.799537][ T4806] loop0: detected capacity change from 0 to 1024 [ 74.800085][ T4806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.817969][ T4794] vhci_hcd: connection closed [ 74.818135][ T4798] vhci_hcd: connection closed [ 74.823582][ T38] vhci_hcd vhci_hcd.4: stop threads [ 74.823608][ T38] vhci_hcd vhci_hcd.4: release socket [ 74.823633][ T38] vhci_hcd vhci_hcd.4: disconnect device [ 74.823758][ T38] vhci_hcd vhci_hcd.4: stop threads [ 74.823771][ T38] vhci_hcd vhci_hcd.4: release socket [ 74.823789][ T38] vhci_hcd vhci_hcd.4: disconnect device [ 74.834644][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.845949][ T4801] netlink: 136 bytes leftover after parsing attributes in process `syz.3.406'. [ 74.845995][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 74.846103][ T288] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 74.883409][ T4786] loop1: detected capacity change from 0 to 1024 [ 74.915357][ T3293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.948485][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.071977][ T4786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.094357][ T4786] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.187436][ T4786] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 3) [ 75.187998][ T4786] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 75.188253][ T4786] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.188253][ T4786] [ 75.209405][ T4822] loop0: detected capacity change from 0 to 512 [ 75.281396][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.285661][ T4822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.286088][ T4822] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.363724][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.552557][ T4840] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 75.649157][ T4852] FAULT_INJECTION: forcing a failure. [ 75.649157][ T4852] name failslab, interval 1, probability 0, space 0, times 0 [ 75.649187][ T4852] CPU: 0 UID: 0 PID: 4852 Comm: syz.0.421 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 75.649215][ T4852] Tainted: [W]=WARN [ 75.649221][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.649236][ T4852] Call Trace: [ 75.649293][ T4852] [ 75.649301][ T4852] __dump_stack+0x1d/0x30 [ 75.649418][ T4852] dump_stack_lvl+0x95/0xd0 [ 75.649449][ T4852] dump_stack+0x15/0x1b [ 75.649490][ T4852] should_fail_ex+0x259/0x270 [ 75.649517][ T4852] ? locks_get_lock_context+0x7d/0x2c0 [ 75.649550][ T4852] should_failslab+0x8c/0xb0 [ 75.649608][ T4852] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 75.649636][ T4852] ? locks_get_lock_context+0x7d/0x2c0 [ 75.649725][ T4852] locks_get_lock_context+0x7d/0x2c0 [ 75.649758][ T4852] posix_lock_inode+0x75/0x2360 [ 75.649805][ T4852] ? __file_has_perm+0x3d9/0x430 [ 75.649829][ T4852] fcntl_setlk+0x60f/0x910 [ 75.649919][ T4852] do_fcntl+0x6b9/0xfa0 [ 75.649949][ T4852] __se_sys_fcntl+0xb1/0x120 [ 75.650026][ T4852] __x64_sys_fcntl+0x43/0x50 [ 75.650053][ T4852] x64_sys_call+0x1a43/0x2550 [ 75.650084][ T4852] do_syscall_64+0x112/0x360 [ 75.650150][ T4852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.650171][ T4852] RIP: 0033:0x7f0fb47cf559 [ 75.650185][ T4852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.650256][ T4852] RSP: 002b:00007f0fb321f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 75.650275][ T4852] RAX: ffffffffffffffda RBX: 00007f0fb4a55fa0 RCX: 00007f0fb47cf559 [ 75.650288][ T4852] RDX: 0000200000001a80 RSI: 0000000000000026 RDI: 0000000000000003 [ 75.650327][ T4852] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 75.650339][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.650360][ T4852] R13: 00007f0fb4a56038 R14: 00007f0fb4a55fa0 R15: 00007ffd602d27a8 [ 75.650378][ T4852] [ 75.982754][ T4840] syzkaller0: entered promiscuous mode [ 75.983124][ T4840] syzkaller0: entered allmulticast mode [ 76.132884][ T4848] loop3: detected capacity change from 0 to 512 [ 76.179047][ T4848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003] [ 76.179090][ T4848] System zones: 1-12 [ 76.187835][ T4848] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.188091][ T4848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.420: ea_inode with extended attributes [ 76.188125][ T4848] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.189183][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 76.189532][ C1] EXT4-fs (loop3): initial error at time 1793489715: ext4_xattr_inode_iget:437: inode 11 [ 76.190104][ C1] EXT4-fs (loop3): last error at time 1793489715: ext4_xattr_inode_iget:437: inode 11 [ 76.264087][ T4848] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.420: error while reading EA inode 11 err=-117 [ 76.264666][ T4848] loop3: lost filesystem error report for type 5 error -117 [ 76.291990][ T4848] EXT4-fs (loop3): 1 orphan inode deleted [ 76.399309][ T4864] syzkaller0: entered promiscuous mode [ 76.399335][ T4864] syzkaller0: entered allmulticast mode [ 76.442828][ T4848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.542719][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.633564][ T4872] loop2: detected capacity change from 0 to 512 [ 76.694673][ T4872] EXT4-fs (loop2): 1 truncate cleaned up [ 76.706582][ T4872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.732527][ T4888] loop3: detected capacity change from 0 to 512 [ 76.733166][ T4888] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.748751][ T4888] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.753088][ T4888] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.753263][ T4888] EXT4-fs (loop3): too many log groups per flexible block group [ 76.753317][ T4888] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 76.753359][ T4888] EXT4-fs (loop3): mount failed [ 76.766384][ T4881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 76.904702][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.134297][ T4881] loop3: detected capacity change from 0 to 1024 [ 77.238893][ T4881] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 77.260558][ T4881] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 77.270417][ T4881] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.312359][ T4881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.327797][ T4881] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.427: Inode bitmap for bg 0 marked uninitialized [ 77.329022][ T4881] loop3: lost filesystem error report for type 5 error -117 [ 77.334767][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 77.334808][ C0] EXT4-fs (loop3): initial error at time 1793489716: ext4_read_inode_bitmap:169 [ 77.334839][ C0] EXT4-fs (loop3): last error at time 1793489716: ext4_read_inode_bitmap:169 [ 77.339836][ T4881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.399462][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.824131][ T4923] loop1: detected capacity change from 0 to 128 [ 77.837950][ T4923] vfat: Unknown parameter 'ÿTô‰Û\i‡»‰”N<è©×J¥W¾ë¿{ô¡›ì•kqŸ4uW{zÛ1Û° [ 77.837950][ T4923] aJ€þ”õõÂÝqÄÕ¦ Äžÿ“+ 0å¬0xffffffffffffffff' [ 77.917538][ T4923] loop1: detected capacity change from 0 to 164 [ 77.925267][ T1047] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 77.956741][ T4923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.121970][ T4943] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.190940][ T4943] syzkaller0: entered promiscuous mode [ 78.191142][ T4943] syzkaller0: entered allmulticast mode [ 78.208139][ T4959] syzkaller0: Caught tx_queue_len zero misconfig [ 78.324848][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 78.337308][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 78.369637][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 78.369735][ T29] audit: type=1326 audit(1793489717.654:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.369777][ T29] audit: type=1326 audit(1793489717.654:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.369867][ T29] audit: type=1326 audit(1793489717.654:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.369902][ T29] audit: type=1326 audit(1793489717.654:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.369935][ T29] audit: type=1326 audit(1793489717.654:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.377857][ T29] audit: type=1326 audit(1793489717.654:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.377893][ T29] audit: type=1326 audit(1793489717.664:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.377930][ T29] audit: type=1326 audit(1793489717.664:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.378065][ T29] audit: type=1326 audit(1793489717.664:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.378093][ T29] audit: type=1326 audit(1793489717.664:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 78.448012][ T4969] FAULT_INJECTION: forcing a failure. [ 78.448012][ T4969] name failslab, interval 1, probability 0, space 0, times 0 [ 78.448123][ T4969] CPU: 0 UID: 0 PID: 4969 Comm: syz.2.456 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 78.448183][ T4969] Tainted: [W]=WARN [ 78.448191][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.448215][ T4969] Call Trace: [ 78.448222][ T4969] [ 78.448230][ T4969] __dump_stack+0x1d/0x30 [ 78.448304][ T4969] dump_stack_lvl+0x95/0xd0 [ 78.448458][ T4969] dump_stack+0x15/0x1b [ 78.448533][ T4969] should_fail_ex+0x259/0x270 [ 78.448632][ T4969] ? audit_log_start+0x34c/0x730 [ 78.448738][ T4969] should_failslab+0x8c/0xb0 [ 78.448928][ T4969] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 78.449138][ T4969] ? audit_log_start+0x34c/0x730 [ 78.449252][ T4969] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 78.449346][ T4969] audit_log_start+0x34c/0x730 [ 78.449462][ T4969] audit_seccomp+0x49/0x110 [ 78.449610][ T4969] ? _raw_spin_unlock_irq+0x9/0x30 [ 78.449695][ T4969] __seccomp_filter+0x8f8/0x13d0 [ 78.449805][ T4969] __seccomp_permit_syscall+0x7d/0x150 [ 78.449907][ T4969] do_syscall_64+0xca/0x360 [ 78.450032][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.450107][ T4969] RIP: 0033:0x7fc6999b92d7 [ 78.450171][ T4969] Code: 8d 3d 8c ac 0b 00 e8 58 1d fa ff e8 a3 87 00 00 0f 1f 00 b8 68 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 78.450260][ T4969] RSP: 002b:00007fc698416a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 78.450341][ T4969] RAX: ffffffffffffffda RBX: 00007fc698416bb0 RCX: 00007fc6999b92d7 [ 78.450395][ T4969] RDX: 00007fc698416a80 RSI: 00007fc698416bb0 RDI: 0000000000000021 [ 78.450520][ T4969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.450581][ T4969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 78.450624][ T4969] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 78.450729][ T4969] [ 78.458681][ T4967] lo speed is unknown, defaulting to 1000 [ 78.458795][ T4967] lo speed is unknown, defaulting to 1000 [ 78.474417][ T4967] lo speed is unknown, defaulting to 1000 [ 78.540279][ T4967] lo speed is unknown, defaulting to 1000 [ 78.549859][ T4967] lo speed is unknown, defaulting to 1000 [ 78.553328][ T4967] lo speed is unknown, defaulting to 1000 [ 78.554291][ T4967] lo speed is unknown, defaulting to 1000 [ 78.572661][ T4967] lo speed is unknown, defaulting to 1000 [ 78.912501][ T4977] Cannot find del_set index 4 as target [ 79.066576][ T4982] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 79.066717][ T4982] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.108094][ T4982] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.461: bg 0: block 4: invalid block bitmap [ 79.108902][ T4982] loop4: lost filesystem error report for type 5 error -117 [ 79.126988][ T4982] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 79.127171][ T4982] loop4: lost filesystem error report for type 5 error -117 [ 79.131727][ T4986] batadv_slave_0: entered promiscuous mode [ 79.132468][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 79.132806][ C1] EXT4-fs (loop4): initial error at time 1793489718: ext4_validate_block_bitmap:436 [ 79.132926][ C1] EXT4-fs (loop4): last error at time 1793489718: ext4_mb_clear_bb:6678 [ 79.137936][ T4985] batadv_slave_0: left promiscuous mode [ 79.194942][ T4982] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.461: invalid indirect mapped block 1 (level 1) [ 79.195063][ T4982] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.219081][ T4982] EXT4-fs (loop4): 1 truncate cleaned up [ 79.230834][ T4982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.323289][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.515150][ T5017] vfat: Unknown parameter 'ÿTô‰Û\i‡»‰”N<è©×J¥W¾ë¿{ô¡›ì•kqŸ4uW{zÛ1Û° [ 79.515150][ T5017] aJ€þ”õõÂÝqÄÕ¦ Äžÿ“+ 0å¬0xffffffffffffffff' [ 79.598323][ T5017] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 79.806537][ T5014] set_capacity_and_notify: 5 callbacks suppressed [ 79.806559][ T5014] loop4: detected capacity change from 0 to 512 [ 79.819886][ T28] wacom 0003:056A:0043.0001: unbalanced collection at end of report description [ 79.820093][ T28] wacom 0003:056A:0043.0001: parse failed [ 79.820231][ T28] wacom 0003:056A:0043.0001: probe with driver wacom failed with error -22 [ 79.955324][ T5014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003] [ 79.972376][ T5014] System zones: 1-12 [ 80.005024][ T5014] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.047797][ T5014] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.469: ea_inode with extended attributes [ 80.048124][ T5014] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.056032][ T5014] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.469: error while reading EA inode 11 err=-117 [ 80.056364][ T5014] loop4: lost filesystem error report for type 5 error -117 [ 80.069303][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 80.069329][ C0] EXT4-fs (loop4): initial error at time 1793489719: ext4_xattr_inode_iget:437: inode 11 [ 80.069377][ C0] EXT4-fs (loop4): last error at time 1793489719: ext4_xattr_inode_iget:437: inode 11 [ 80.134047][ T5014] EXT4-fs (loop4): 1 orphan inode deleted [ 80.139711][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.204301][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.390227][ T5071] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.415129][ T5073] loop1: detected capacity change from 0 to 512 [ 80.448198][ T5071] lo speed is unknown, defaulting to 1000 [ 80.455147][ T5073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.455247][ T5073] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.475464][ T5060] FAULT_INJECTION: forcing a failure. [ 80.475464][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 80.475915][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.2.477 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 80.476028][ T5060] Tainted: [W]=WARN [ 80.476051][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.476093][ T5060] Call Trace: [ 80.476122][ T5060] [ 80.476205][ T5060] __dump_stack+0x1d/0x30 [ 80.476294][ T5060] dump_stack_lvl+0x95/0xd0 [ 80.476377][ T5060] dump_stack+0x15/0x1b [ 80.476507][ T5060] should_fail_ex+0x259/0x270 [ 80.476601][ T5060] ? posix_lock_inode+0x218/0x2360 [ 80.476705][ T5060] should_failslab+0x8c/0xb0 [ 80.476825][ T5060] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 80.476923][ T5060] ? _raw_spin_lock+0x53/0xa0 [ 80.476952][ T5060] ? posix_lock_inode+0x218/0x2360 [ 80.476999][ T5060] posix_lock_inode+0x218/0x2360 [ 80.477120][ T5060] ? __file_has_perm+0x3d9/0x430 [ 80.477214][ T5060] fcntl_setlk+0x60f/0x910 [ 80.477412][ T5060] do_fcntl+0x6b9/0xfa0 [ 80.477520][ T5060] __se_sys_fcntl+0xb1/0x120 [ 80.477617][ T5060] __x64_sys_fcntl+0x43/0x50 [ 80.477719][ T5060] x64_sys_call+0x1a43/0x2550 [ 80.477875][ T5060] do_syscall_64+0x112/0x360 [ 80.478040][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.478122][ T5060] RIP: 0033:0x7fc6999bf559 [ 80.478176][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.478249][ T5060] RSP: 002b:00007fc698417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 80.478358][ T5060] RAX: ffffffffffffffda RBX: 00007fc699c45fa0 RCX: 00007fc6999bf559 [ 80.478402][ T5060] RDX: 00002000000003c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 80.478448][ T5060] RBP: 00007fc699a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 80.478490][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.478610][ T5060] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 80.478744][ T5060] [ 80.737810][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.152797][ T5097] TC_ACT_REPEAT abuse ? [ 81.160973][ T5099] loop2: detected capacity change from 0 to 2048 [ 81.193995][ T5099] EXT4-fs: Ignoring removed nobh option [ 81.228480][ T5099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.231228][ T5099] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 81.259078][ T5099] EXT4-fs (loop2): Remounting filesystem read-only [ 81.294009][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.352417][ T5111] loop4: detected capacity change from 0 to 512 [ 81.396041][ T5115] FAULT_INJECTION: forcing a failure. [ 81.396041][ T5115] name failslab, interval 1, probability 0, space 0, times 0 [ 81.396148][ T5115] CPU: 1 UID: 0 PID: 5115 Comm: syz.0.500 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 81.396209][ T5115] Tainted: [W]=WARN [ 81.396218][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.396231][ T5115] Call Trace: [ 81.396237][ T5115] [ 81.396245][ T5115] __dump_stack+0x1d/0x30 [ 81.396280][ T5115] dump_stack_lvl+0x95/0xd0 [ 81.396383][ T5115] dump_stack+0x15/0x1b [ 81.396413][ T5115] should_fail_ex+0x259/0x270 [ 81.396450][ T5115] ? sk_prot_alloc+0xa8/0x180 [ 81.396494][ T5115] should_failslab+0x8c/0xb0 [ 81.396560][ T5115] __kmalloc_noprof+0xb6/0x4b0 [ 81.396591][ T5115] ? sk_prot_alloc+0xa8/0x180 [ 81.396639][ T5115] sk_prot_alloc+0xa8/0x180 [ 81.396745][ T5115] sk_alloc+0x34/0x3e0 [ 81.396776][ T5115] __netlink_kernel_create+0xe9/0x550 [ 81.396845][ T5115] genl_pernet_init+0x4e/0xc0 [ 81.396912][ T5115] ? __pfx_genl_rcv+0x10/0x10 [ 81.396942][ T5115] ? __pfx_genl_bind+0x10/0x10 [ 81.396973][ T5115] ? __pfx_genl_unbind+0x10/0x10 [ 81.397078][ T5115] ? __pfx_genl_release+0x10/0x10 [ 81.397114][ T5115] ops_init+0x22a/0x2e0 [ 81.397144][ T5115] ? __sanitizer_cov_trace_pc+0x75/0x80 [ 81.397167][ T5115] setup_net+0x9f/0x230 [ 81.397344][ T5115] copy_net_ns+0x339/0x490 [ 81.397376][ T5115] create_new_namespaces+0x1f6/0x420 [ 81.397409][ T5115] unshare_nsproxy_namespaces+0x115/0x150 [ 81.397436][ T5115] ksys_unshare+0x3a3/0x690 [ 81.397507][ T5115] __x64_sys_unshare+0x1f/0x30 [ 81.397546][ T5115] x64_sys_call+0x1e33/0x2550 [ 81.397572][ T5115] do_syscall_64+0x112/0x360 [ 81.397668][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.397690][ T5115] RIP: 0033:0x7f0fb47cf559 [ 81.397707][ T5115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.397738][ T5115] RSP: 002b:00007f0fb321f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 81.397762][ T5115] RAX: ffffffffffffffda RBX: 00007f0fb4a55fa0 RCX: 00007f0fb47cf559 [ 81.397810][ T5115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 81.397828][ T5115] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 81.397845][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.397862][ T5115] R13: 00007f0fb4a56038 R14: 00007f0fb4a55fa0 R15: 00007ffd602d27a8 [ 81.397889][ T5115] [ 81.719938][ T5124] loop2: detected capacity change from 0 to 512 [ 81.755022][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.755158][ T5124] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.854843][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.076151][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 82.266395][ T5149] siw: device registration error -23 [ 82.276697][ T5149] siw: device registration error -23 [ 82.322965][ T5154] bridge0: entered allmulticast mode [ 82.325292][ T5154] bridge_slave_1: left allmulticast mode [ 82.325318][ T5154] bridge_slave_1: left promiscuous mode [ 82.325503][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.327923][ T5154] bridge_slave_0: left allmulticast mode [ 82.327947][ T5154] bridge_slave_0: left promiscuous mode [ 82.328093][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.864921][ T5169] loop4: detected capacity change from 0 to 512 [ 82.885723][ T5169] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 82.914110][ T5169] FAULT_INJECTION: forcing a failure. [ 82.914110][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 82.914142][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.4.522 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 82.914243][ T5169] Tainted: [W]=WARN [ 82.914250][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.914263][ T5169] Call Trace: [ 82.914269][ T5169] [ 82.914277][ T5169] __dump_stack+0x1d/0x30 [ 82.914303][ T5169] dump_stack_lvl+0x95/0xd0 [ 82.914366][ T5169] dump_stack+0x15/0x1b [ 82.914394][ T5169] should_fail_ex+0x259/0x270 [ 82.914427][ T5169] ? security_inode_alloc+0x37/0x100 [ 82.914593][ T5169] should_failslab+0x8c/0xb0 [ 82.914640][ T5169] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 82.914687][ T5169] ? security_inode_alloc+0x37/0x100 [ 82.914798][ T5169] security_inode_alloc+0x37/0x100 [ 82.914833][ T5169] inode_init_always_gfp+0x49b/0x4e0 [ 82.914866][ T5169] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.914918][ T5169] alloc_inode+0x58/0x170 [ 82.914947][ T5169] __sock_create+0x121/0x580 [ 82.914982][ T5169] ? _raw_spin_lock+0x53/0xa0 [ 82.915032][ T5169] sock_create_kern+0x38/0x50 [ 82.915069][ T5169] inet_ctl_sock_create+0x58/0x130 [ 82.915122][ T5169] igmp6_net_init+0xfc/0x260 [ 82.915152][ T5169] ops_init+0x22a/0x2e0 [ 82.915189][ T5169] setup_net+0x9f/0x230 [ 82.915244][ T5169] copy_net_ns+0x339/0x490 [ 82.915288][ T5169] create_new_namespaces+0x1f6/0x420 [ 82.915321][ T5169] unshare_nsproxy_namespaces+0x115/0x150 [ 82.915355][ T5169] ksys_unshare+0x3a3/0x690 [ 82.915439][ T5169] __x64_sys_unshare+0x1f/0x30 [ 82.915495][ T5169] x64_sys_call+0x1e33/0x2550 [ 82.915532][ T5169] do_syscall_64+0x112/0x360 [ 82.915575][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.915626][ T5169] RIP: 0033:0x7fc37da0f559 [ 82.915648][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.915682][ T5169] RSP: 002b:00007fc37c45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.915705][ T5169] RAX: ffffffffffffffda RBX: 00007fc37dc95fa0 RCX: 00007fc37da0f559 [ 82.915730][ T5169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 82.915786][ T5169] RBP: 00007fc37daa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 82.915800][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.915812][ T5169] R13: 00007fc37dc96038 R14: 00007fc37dc95fa0 R15: 00007ffed76dea08 [ 82.915831][ T5169] [ 82.915931][ T5169] socket: no more sockets [ 82.915939][ T5169] Failed to initialize the IGMP6 autojoin socket (err -23) [ 83.206767][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 83.260596][ T5177] ip_tables: iptables: counters copy to user failed while replacing table [ 83.476714][ T5194] loop0: detected capacity change from 0 to 512 [ 83.675392][ T5192] loop4: detected capacity change from 0 to 512 [ 83.729247][ T5187] loop2: detected capacity change from 0 to 512 [ 83.805956][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.808784][ T5192] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.829642][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.830066][ T5187] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.890989][ T29] kauditd_printk_skb: 1525 callbacks suppressed [ 83.891008][ T29] audit: type=1400 audit(1793489723.198:2620): avc: denied { write } for pid=5191 comm="syz.4.532" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.897250][ T29] audit: type=1400 audit(1793489723.198:2621): avc: denied { write } for pid=5191 comm="syz.4.532" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.957285][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.427956][ T5210] ip_tables: iptables: counters copy to user failed while replacing table [ 84.451575][ T29] audit: type=1400 audit(1793489723.759:2622): avc: denied { write } for pid=5211 comm="syz.2.540" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.855189][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.863037][ T5233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.546'. [ 84.925430][ T5234] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.031631][ T5234] lo speed is unknown, defaulting to 1000 [ 85.184025][ T5237] loop4: detected capacity change from 0 to 32768 [ 85.438985][ T5247] loop1: detected capacity change from 0 to 512 [ 86.230944][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 86.299792][ T29] audit: type=1400 audit(1793489725.603:2623): avc: denied { connect } for pid=5279 comm="syz.3.564" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.319419][ T5247] syz.1.551: attempt to access beyond end of device [ 86.319419][ T5247] loop1: rw=2049, sector=560, nr_sectors = 32 limit=512 [ 86.321883][ T5247] syz.1.551: attempt to access beyond end of device [ 86.321883][ T5247] loop1: rw=2049, sector=624, nr_sectors = 32 limit=512 [ 86.324919][ T5247] syz.1.551: attempt to access beyond end of device [ 86.324919][ T5247] loop1: rw=2049, sector=688, nr_sectors = 32 limit=512 [ 86.325117][ T5247] syz.1.551: attempt to access beyond end of device [ 86.325117][ T5247] loop1: rw=2049, sector=752, nr_sectors = 32 limit=512 [ 86.325348][ T5247] syz.1.551: attempt to access beyond end of device [ 86.325348][ T5247] loop1: rw=2049, sector=816, nr_sectors = 32 limit=512 [ 86.325648][ T5247] syz.1.551: attempt to access beyond end of device [ 86.325648][ T5247] loop1: rw=2049, sector=880, nr_sectors = 32 limit=512 [ 86.325809][ T5247] syz.1.551: attempt to access beyond end of device [ 86.325809][ T5247] loop1: rw=2049, sector=944, nr_sectors = 32 limit=512 [ 86.325995][ T5247] syz.1.551: attempt to access beyond end of device [ 86.325995][ T5247] loop1: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 86.327170][ T5247] syz.1.551: attempt to access beyond end of device [ 86.327170][ T5247] loop1: rw=2049, sector=1072, nr_sectors = 32 limit=512 [ 86.327371][ T5247] syz.1.551: attempt to access beyond end of device [ 86.327371][ T5247] loop1: rw=2049, sector=1136, nr_sectors = 32 limit=512 [ 86.574193][ T5285] loop3: detected capacity change from 0 to 512 [ 86.766585][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.768376][ T5285] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.830427][ T29] audit: type=1400 audit(1793489982.142:2624): avc: denied { write } for pid=5284 comm="syz.3.566" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.928000][ T29] audit: type=1326 audit(1793489982.242:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 86.928282][ T29] audit: type=1326 audit(1793489982.242:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 86.928414][ T29] audit: type=1326 audit(1793489982.242:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 86.929611][ T29] audit: type=1326 audit(1793489982.242:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6c92faf559 code=0x7ffc0000 [ 86.989443][ T29] audit: type=1326 audit(1793489982.302:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6c92f6fd8e code=0x7ffc0000 [ 86.994220][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.580331][ T5327] FAULT_INJECTION: forcing a failure. [ 87.580331][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 87.580386][ T5327] CPU: 1 UID: 0 PID: 5327 Comm: syz.4.583 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 87.580419][ T5327] Tainted: [W]=WARN [ 87.580429][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.580485][ T5327] Call Trace: [ 87.580491][ T5327] [ 87.580498][ T5327] __dump_stack+0x1d/0x30 [ 87.580532][ T5327] dump_stack_lvl+0x95/0xd0 [ 87.580563][ T5327] dump_stack+0x15/0x1b [ 87.580617][ T5327] should_fail_ex+0x259/0x270 [ 87.580728][ T5327] ? __proc_create+0x3f1/0x6b0 [ 87.580767][ T5327] should_failslab+0x8c/0xb0 [ 87.580852][ T5327] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 87.580894][ T5327] ? __proc_create+0x3f1/0x6b0 [ 87.580956][ T5327] __proc_create+0x3f1/0x6b0 [ 87.581027][ T5327] proc_create_reg+0x87/0xe0 [ 87.581066][ T5327] proc_create_net_data+0x59/0x100 [ 87.581100][ T5327] neigh_table_register+0x47a/0x8b0 [ 87.581205][ T5327] ndisc_net_init+0x45/0x250 [ 87.581235][ T5327] ops_init+0x22a/0x2e0 [ 87.581289][ T5327] setup_net+0x9f/0x230 [ 87.581317][ T5327] copy_net_ns+0x339/0x490 [ 87.581405][ T5327] create_new_namespaces+0x1f6/0x420 [ 87.581460][ T5327] unshare_nsproxy_namespaces+0x115/0x150 [ 87.581535][ T5327] ksys_unshare+0x3a3/0x690 [ 87.581642][ T5327] __x64_sys_unshare+0x1f/0x30 [ 87.581676][ T5327] x64_sys_call+0x1e33/0x2550 [ 87.581718][ T5327] do_syscall_64+0x112/0x360 [ 87.581844][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.581866][ T5327] RIP: 0033:0x7fc37da0f559 [ 87.581886][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.581977][ T5327] RSP: 002b:00007fc37c45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.582003][ T5327] RAX: ffffffffffffffda RBX: 00007fc37dc95fa0 RCX: 00007fc37da0f559 [ 87.582087][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 87.582100][ T5327] RBP: 00007fc37daa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 87.582115][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.582132][ T5327] R13: 00007fc37dc96038 R14: 00007fc37dc95fa0 R15: 00007ffed76dea08 [ 87.582232][ T5327] [ 88.633049][ T5339] loop4: detected capacity change from 0 to 128 [ 88.647871][ T38] IPVS: starting estimator thread 0... [ 88.762417][ T5342] IPVS: using max 1440 ests per chain, 72000 per kthread [ 89.582070][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 89.582093][ T29] audit: type=1400 audit(1793489984.842:2712): avc: denied { ioctl } for pid=5366 comm="syz.2.595" path="socket:[10225]" dev="sockfs" ino=10225 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.846787][ T5373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.597'. [ 89.917212][ T5350] loop4: detected capacity change from 0 to 512 [ 89.941749][ T5385] FAULT_INJECTION: forcing a failure. [ 89.941749][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 89.941790][ T5385] CPU: 0 UID: 0 PID: 5385 Comm: syz.0.603 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 89.941897][ T5385] Tainted: [W]=WARN [ 89.941907][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.941924][ T5385] Call Trace: [ 89.941933][ T5385] [ 89.941943][ T5385] __dump_stack+0x1d/0x30 [ 89.941979][ T5385] dump_stack_lvl+0x95/0xd0 [ 89.942010][ T5385] dump_stack+0x15/0x1b [ 89.942041][ T5385] should_fail_ex+0x259/0x270 [ 89.942078][ T5385] ? batadv_hash_new+0x37/0x190 [ 89.942215][ T5385] should_failslab+0x8c/0xb0 [ 89.942254][ T5385] __kmalloc_cache_noprof+0x5d/0x3e0 [ 89.942292][ T5385] ? batadv_hash_new+0x37/0x190 [ 89.942363][ T5385] batadv_hash_new+0x37/0x190 [ 89.942478][ T5385] batadv_tt_init+0x3c/0x1f0 [ 89.942510][ T5385] batadv_mesh_init+0x2b9/0x410 [ 89.942581][ T5385] batadv_meshif_init_late+0x3e1/0x460 [ 89.942627][ T5385] register_netdevice+0x234/0x13f0 [ 89.942676][ T5385] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 89.942779][ T5385] batadv_meshif_newlink+0x7d/0x90 [ 89.942820][ T5385] rtnl_newlink_create+0x1e4/0x4a0 [ 89.942898][ T5385] ? security_capable+0x7b/0x90 [ 89.942931][ T5385] ? netlink_ns_capable+0x86/0xa0 [ 89.942974][ T5385] rtnl_newlink+0x1255/0x1510 [ 89.943084][ T5385] ? __rcu_read_unlock+0x4e/0x70 [ 89.943181][ T5385] ? __memcg_slab_free_hook+0x154/0x340 [ 89.943246][ T5385] ? __rcu_read_unlock+0x4e/0x70 [ 89.943280][ T5385] ? avc_has_perm_noaudit+0xac/0x160 [ 89.943338][ T5385] ? cred_has_capability+0x224/0x2a0 [ 89.943371][ T5385] ? selinux_capable+0x31/0x40 [ 89.943408][ T5385] ? security_capable+0x7b/0x90 [ 89.943494][ T5385] ? ns_capable+0x80/0xb0 [ 89.943532][ T5385] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.943566][ T5385] rtnetlink_rcv_msg+0x64b/0x720 [ 89.943608][ T5385] netlink_rcv_skb+0x11e/0x220 [ 89.943677][ T5385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.943720][ T5385] rtnetlink_rcv+0x1c/0x30 [ 89.943754][ T5385] netlink_unicast+0x665/0x740 [ 89.943810][ T5385] netlink_sendmsg+0x5ef/0x740 [ 89.943842][ T5385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.943871][ T5385] ____sys_sendmsg+0x54a/0x590 [ 89.943901][ T5385] ___sys_sendmsg+0x195/0x1e0 [ 89.943995][ T5385] __x64_sys_sendmsg+0xd4/0x160 [ 89.944027][ T5385] x64_sys_call+0x22ab/0x2550 [ 89.944063][ T5385] do_syscall_64+0x112/0x360 [ 89.944149][ T5385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.944179][ T5385] RIP: 0033:0x7f0fb47cf559 [ 89.944200][ T5385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.944284][ T5385] RSP: 002b:00007f0fb321f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.944311][ T5385] RAX: ffffffffffffffda RBX: 00007f0fb4a55fa0 RCX: 00007f0fb47cf559 [ 89.944385][ T5385] RDX: 0000000020000840 RSI: 0000200000004c40 RDI: 0000000000000007 [ 89.944402][ T5385] RBP: 00007f0fb4866b50 R08: 0000000000000000 R09: 0000000000000000 [ 89.944418][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.944435][ T5385] R13: 00007f0fb4a56038 R14: 00007f0fb4a55fa0 R15: 00007ffd602d27a8 [ 89.944462][ T5385] [ 90.092603][ T5350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.092825][ T5350] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.175385][ T5350] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 90.176437][ T29] audit: type=1400 audit(1793489985.492:2713): avc: denied { mac_admin } for pid=5349 comm="syz.4.591" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.176467][ T29] audit: type=1400 audit(1793489985.492:2714): avc: denied { relabelto } for pid=5349 comm="syz.4.591" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 90.331092][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.681102][ T5408] FAULT_INJECTION: forcing a failure. [ 90.681102][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 90.681197][ T5408] CPU: 1 UID: 0 PID: 5408 Comm: syz.2.612 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 90.681304][ T5408] Tainted: [W]=WARN [ 90.681313][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.681332][ T5408] Call Trace: [ 90.681341][ T5408] [ 90.681352][ T5408] __dump_stack+0x1d/0x30 [ 90.681397][ T5408] dump_stack_lvl+0x95/0xd0 [ 90.681429][ T5408] dump_stack+0x15/0x1b [ 90.681452][ T5408] should_fail_ex+0x259/0x270 [ 90.681517][ T5408] ? fasync_helper+0x46/0xc0 [ 90.681558][ T5408] should_failslab+0x8c/0xb0 [ 90.681601][ T5408] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 90.681722][ T5408] ? fasync_helper+0x46/0xc0 [ 90.681768][ T5408] fasync_helper+0x46/0xc0 [ 90.681806][ T5408] pipe_fasync+0xc7/0x140 [ 90.681829][ T5408] do_fcntl+0xd0e/0xfa0 [ 90.681871][ T5408] __se_sys_fcntl+0xb1/0x120 [ 90.681907][ T5408] __x64_sys_fcntl+0x43/0x50 [ 90.681934][ T5408] x64_sys_call+0x1a43/0x2550 [ 90.682032][ T5408] do_syscall_64+0x112/0x360 [ 90.682067][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.682094][ T5408] RIP: 0033:0x7fc6999bf559 [ 90.682115][ T5408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.682188][ T5408] RSP: 002b:00007fc698417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 90.682208][ T5408] RAX: ffffffffffffffda RBX: 00007fc699c45fa0 RCX: 00007fc6999bf559 [ 90.682306][ T5408] RDX: 0000000000002400 RSI: 0000000000000004 RDI: 0000000000000000 [ 90.682324][ T5408] RBP: 00007fc699a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 90.682339][ T5408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.682352][ T5408] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 90.682374][ T5408] [ 90.685248][ T5405] capability: warning: `syz.0.611' uses deprecated v2 capabilities in a way that may be insecure [ 90.708126][ T29] audit: type=1400 audit(1793489986.002:2715): avc: denied { mount } for pid=5400 comm="syz.4.610" name="/" dev="rpc_pipefs" ino=10441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 90.811164][ T5399] loop3: detected capacity change from 0 to 1024 [ 90.922025][ T29] audit: type=1400 audit(1793489986.232:2716): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 91.038797][ T29] audit: type=1400 audit(1793489986.352:2717): avc: denied { create } for pid=5425 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.155784][ T29] audit: type=1400 audit(1793489986.472:2718): avc: denied { mount } for pid=5431 comm="syz.3.622" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.229173][ T29] audit: type=1400 audit(1793489986.542:2719): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.276767][ T5442] loop3: detected capacity change from 0 to 164 [ 91.291075][ T5442] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.301917][ T5442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 91.303458][ T5442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 91.481051][ T5456] loop0: detected capacity change from 0 to 512 [ 91.502713][ T5456] netlink: 'syz.0.632': attribute type 4 has an invalid length. [ 91.502764][ T5456] netlink: 152 bytes leftover after parsing attributes in process `syz.0.632'. [ 91.537685][ T5456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 91.566924][ T5450] FAULT_INJECTION: forcing a failure. [ 91.566924][ T5450] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.567020][ T5450] CPU: 1 UID: 0 PID: 5450 Comm: syz.1.630 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 91.567061][ T5450] Tainted: [W]=WARN [ 91.567071][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.567135][ T5450] Call Trace: [ 91.567144][ T5450] [ 91.567155][ T5450] __dump_stack+0x1d/0x30 [ 91.567236][ T5450] dump_stack_lvl+0x95/0xd0 [ 91.567295][ T5450] dump_stack+0x15/0x1b [ 91.567319][ T5450] should_fail_ex+0x259/0x270 [ 91.567360][ T5450] should_fail+0xb/0x20 [ 91.567403][ T5450] should_fail_usercopy+0x1a/0x20 [ 91.567444][ T5450] _copy_from_user+0x1c/0xb0 [ 91.567522][ T5450] __ia32_sys_rt_sigreturn+0xd3/0x2f0 [ 91.567592][ T5450] x64_sys_call+0x1532/0x2550 [ 91.567629][ T5450] do_syscall_64+0x112/0x360 [ 91.567668][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.567749][ T5450] RIP: 0033:0x7f6c92f508d9 [ 91.567765][ T5450] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 91.567786][ T5450] RSP: 002b:00007f6c91a06a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 91.567823][ T5450] RAX: ffffffffffffffda RBX: 00007f6c93235fa0 RCX: 00007f6c92f508d9 [ 91.567852][ T5450] RDX: 00007f6c91a06a80 RSI: 00007f6c91a06bb0 RDI: 0000000000000011 [ 91.567870][ T5450] RBP: 00007f6c93046b50 R08: 0000000000000000 R09: 0000000000000000 [ 91.567888][ T5450] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 91.567903][ T5450] R13: 00007f6c93236038 R14: 00007f6c93235fa0 R15: 00007ffda70da268 [ 91.567996][ T5450] [ 91.669297][ T5453] FAULT_INJECTION: forcing a failure. [ 91.669297][ T5453] name failslab, interval 1, probability 0, space 0, times 0 [ 91.669388][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz.3.631 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 91.669502][ T5453] Tainted: [W]=WARN [ 91.669523][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.669565][ T5453] Call Trace: [ 91.669586][ T5453] [ 91.669609][ T5453] __dump_stack+0x1d/0x30 [ 91.669705][ T5453] dump_stack_lvl+0x95/0xd0 [ 91.669826][ T5453] dump_stack+0x15/0x1b [ 91.669909][ T5453] should_fail_ex+0x259/0x270 [ 91.670003][ T5453] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 91.670229][ T5453] should_failslab+0x8c/0xb0 [ 91.670348][ T5453] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 91.670461][ T5453] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 91.670617][ T5453] krealloc_node_align_noprof+0x11d/0x310 [ 91.670743][ T5453] kvrealloc_node_align_noprof+0x7b/0xe0 [ 91.670908][ T5453] add_expr+0x20d/0x3e0 [ 91.670994][ T5453] bpf_init_scev+0x144/0x280 [ 91.671114][ T5453] bpf_check+0x1f3b/0x20e0 [ 91.671203][ T5453] bpf_prog_load+0xf52/0x10b0 [ 91.671320][ T5453] __sys_bpf+0xbce/0xc50 [ 91.671437][ T5453] ? do_futex+0x380/0x460 [ 91.671537][ T5453] __x64_sys_bpf+0x69/0x80 [ 91.671600][ T5453] x64_sys_call+0xf26/0x2550 [ 91.671693][ T5453] do_syscall_64+0x112/0x360 [ 91.671853][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.671890][ T5453] RIP: 0033:0x7f8034e5f559 [ 91.671977][ T5453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.671998][ T5453] RSP: 002b:00007f80338af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.672024][ T5453] RAX: ffffffffffffffda RBX: 00007f80350e5fa0 RCX: 00007f8034e5f559 [ 91.672039][ T5453] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 91.672056][ T5453] RBP: 00007f8034ef6b50 R08: 0000000000000000 R09: 0000000000000000 [ 91.672073][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.672132][ T5453] R13: 00007f80350e6038 R14: 00007f80350e5fa0 R15: 00007fff79707488 [ 91.672160][ T5453] [ 93.140895][ T29] audit: type=1326 audit(1793489988.452:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37da0f559 code=0x7ffc0000 [ 93.141259][ T29] audit: type=1326 audit(1793489988.452:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37da0f559 code=0x7ffc0000 [ 93.159551][ T5491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.646'. [ 93.456542][ T5503] loop4: detected capacity change from 0 to 128 [ 93.514373][ T5505] FAULT_INJECTION: forcing a failure. [ 93.514373][ T5505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.514414][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.2.652 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 93.514470][ T5505] Tainted: [W]=WARN [ 93.514480][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.514497][ T5505] Call Trace: [ 93.514506][ T5505] [ 93.514515][ T5505] __dump_stack+0x1d/0x30 [ 93.514550][ T5505] dump_stack_lvl+0x95/0xd0 [ 93.514614][ T5505] dump_stack+0x15/0x1b [ 93.514642][ T5505] should_fail_ex+0x259/0x270 [ 93.514740][ T5505] should_fail+0xb/0x20 [ 93.514774][ T5505] should_fail_usercopy+0x1a/0x20 [ 93.514833][ T5505] _copy_from_user+0x1c/0xb0 [ 93.514949][ T5505] copy_from_sockptr_offset+0x66/0xa0 [ 93.514990][ T5505] do_ipt_set_ctl+0x676/0x970 [ 93.515026][ T5505] ? _raw_spin_lock_bh+0x57/0xb0 [ 93.515064][ T5505] nf_setsockopt+0x199/0x1b0 [ 93.515114][ T5505] ip_setsockopt+0x102/0x110 [ 93.515150][ T5505] tcp_setsockopt+0x98/0xb0 [ 93.515190][ T5505] sock_common_setsockopt+0x69/0x80 [ 93.515284][ T5505] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 93.515322][ T5505] __sys_setsockopt+0x184/0x200 [ 93.515436][ T5505] __x64_sys_setsockopt+0x64/0x80 [ 93.515531][ T5505] x64_sys_call+0x248f/0x2550 [ 93.515567][ T5505] do_syscall_64+0x112/0x360 [ 93.515666][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.515696][ T5505] RIP: 0033:0x7fc6999bf559 [ 93.515717][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.515742][ T5505] RSP: 002b:00007fc698417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 93.515763][ T5505] RAX: ffffffffffffffda RBX: 00007fc699c45fa0 RCX: 00007fc6999bf559 [ 93.515849][ T5505] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 93.515868][ T5505] RBP: 00007fc699a56b50 R08: 0000000000000288 R09: 0000000000000000 [ 93.515886][ T5505] R10: 0000200000001980 R11: 0000000000000246 R12: 0000000000000000 [ 93.515984][ T5505] R13: 00007fc699c46038 R14: 00007fc699c45fa0 R15: 00007ffcd70d5108 [ 93.516053][ T5505] [ 93.805738][ T5510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.806984][ T5510] team0: Failed to send port change of device bond1 via netlink (err -105) [ 93.807070][ T5510] team0: Failed to send options change via netlink (err -105) [ 93.807087][ T5510] team0: Port device bond1 added [ 93.810837][ T12] team0: Failed to send port change of device bond1 via netlink (err -105) [ 94.199076][ T5533] loop4: detected capacity change from 0 to 512 [ 94.213413][ T5533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.213553][ T5533] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.472163][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.535169][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 94.555611][ T5547] v: renamed from veth0_vlan [ 94.608757][ T5549] bond1: entered promiscuous mode [ 94.608777][ T5549] bond1: entered allmulticast mode [ 94.757410][ T5565] netlink: 48 bytes leftover after parsing attributes in process `syz.2.670'. [ 94.929575][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 94.929597][ T29] audit: type=1400 audit(1793489990.242:2767): avc: denied { write } for pid=5558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.963622][ T5579] FAULT_INJECTION: forcing a failure. [ 94.963622][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 94.963699][ T5579] CPU: 1 UID: 0 PID: 5579 Comm: syz.1.674 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 94.963742][ T5579] Tainted: [W]=WARN [ 94.963752][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.963766][ T5579] Call Trace: [ 94.963774][ T5579] [ 94.963786][ T5579] __dump_stack+0x1d/0x30 [ 94.963866][ T5579] dump_stack_lvl+0x95/0xd0 [ 94.963898][ T5579] dump_stack+0x15/0x1b [ 94.963992][ T5579] should_fail_ex+0x259/0x270 [ 94.964031][ T5579] ? radix_tree_node_alloc+0xa0/0x200 [ 94.964073][ T5579] should_failslab+0x8c/0xb0 [ 94.964186][ T5579] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 94.964220][ T5579] ? radix_tree_node_alloc+0xa0/0x200 [ 94.964334][ T5579] radix_tree_node_alloc+0xa0/0x200 [ 94.964369][ T5579] idr_get_free+0x1fc/0x560 [ 94.964404][ T5579] idr_alloc_u32+0xe9/0x1a0 [ 94.964504][ T5579] idr_alloc_cyclic+0x7b/0x140 [ 94.964529][ T5579] map_create+0x332/0xfe0 [ 94.964562][ T5579] __sys_bpf+0x8e0/0xc50 [ 94.964621][ T5579] ? do_futex+0x380/0x460 [ 94.964671][ T5579] __x64_sys_bpf+0x69/0x80 [ 94.964691][ T5579] x64_sys_call+0xf26/0x2550 [ 94.964720][ T5579] do_syscall_64+0x112/0x360 [ 94.964794][ T5579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.964818][ T5579] RIP: 0033:0x7f6c92faf559 [ 94.964836][ T5579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.964856][ T5579] RSP: 002b:00007f6c91a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.964877][ T5579] RAX: ffffffffffffffda RBX: 00007f6c93235fa0 RCX: 00007f6c92faf559 [ 94.964943][ T5579] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000000 [ 94.964957][ T5579] RBP: 00007f6c93046b50 R08: 0000000000000000 R09: 0000000000000000 [ 94.964971][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.964986][ T5579] R13: 00007f6c93236038 R14: 00007f6c93235fa0 R15: 00007ffda70da268 [ 94.965085][ T5579] [ 95.190621][ T29] audit: type=1400 audit(1793489990.502:2768): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.301996][ T3018] v: left promiscuous mode [ 95.307659][ T3406] v: entered promiscuous mode [ 95.346414][ T5587] syzkaller0: entered promiscuous mode [ 95.346438][ T5587] syzkaller0: entered allmulticast mode [ 95.362941][ T29] audit: type=1400 audit(1793489990.662:2769): avc: denied { ioctl } for pid=5586 comm="syz.1.676" path="socket:[10847]" dev="sockfs" ino=10847 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.545444][ T29] audit: type=1400 audit(1793489990.862:2770): avc: denied { write } for pid=5589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.590300][ T29] audit: type=1400 audit(1793489990.902:2771): avc: denied { write } for pid=5600 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.735301][ T5608] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 95.740588][ T5609] FAULT_INJECTION: forcing a failure. [ 95.740588][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 95.740623][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.4.678 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 95.740652][ T5609] Tainted: [W]=WARN [ 95.740659][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.740750][ T5609] Call Trace: [ 95.740755][ T5609] [ 95.740762][ T5609] __dump_stack+0x1d/0x30 [ 95.740865][ T5609] dump_stack_lvl+0x95/0xd0 [ 95.740952][ T5609] dump_stack+0x15/0x1b [ 95.740979][ T5609] should_fail_ex+0x259/0x270 [ 95.741061][ T5609] ? security_prepare_creds+0x52/0x120 [ 95.741107][ T5609] should_failslab+0x8c/0xb0 [ 95.741186][ T5609] __kmalloc_noprof+0xb6/0x4b0 [ 95.741219][ T5609] ? security_prepare_creds+0x52/0x120 [ 95.741314][ T5609] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 95.741364][ T5609] security_prepare_creds+0x52/0x120 [ 95.741410][ T5609] prepare_creds+0x385/0x550 [ 95.741455][ T5609] lookup_user_key+0x185/0xf10 [ 95.741619][ T5609] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 95.741782][ T5609] __se_sys_request_key+0x17e/0x2a0 [ 95.741867][ T5609] __x64_sys_request_key+0x55/0x70 [ 95.741939][ T5609] x64_sys_call+0x1741/0x2550 [ 95.742064][ T5609] do_syscall_64+0x112/0x360 [ 95.742161][ T5609] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 95.742372][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.742444][ T5609] RIP: 0033:0x7fc37da0f559 [ 95.742545][ T5609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.742622][ T5609] RSP: 002b:00007fc37c45f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 95.742693][ T5609] RAX: ffffffffffffffda RBX: 00007fc37dc95fa0 RCX: 00007fc37da0f559 [ 95.742737][ T5609] RDX: 0000000000000000 RSI: 0000200000001ffb RDI: 0000200000000040 [ 95.742796][ T5609] RBP: 00007fc37daa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 95.742839][ T5609] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 95.742898][ T5609] R13: 00007fc37dc96038 R14: 00007fc37dc95fa0 R15: 00007ffed76dea08 [ 95.743047][ T5609] [ 95.972200][ T5608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.979318][ T29] audit: type=1400 audit(1793489991.292:2772): avc: denied { create } for pid=5612 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.022814][ T5613] macvtap1: entered allmulticast mode [ 96.063704][ T5618] bond1: (slave geneve2): making interface the new active one [ 96.083234][ T5618] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.126563][ T5617] loop3: detected capacity change from 0 to 512 [ 96.149325][ T5617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.190986][ T5617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 96.191039][ T5617] System zones: 0-2, 18-18, 34-34 [ 96.201809][ T5617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.213281][ T5617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.681: bg 0: block 248: padding at end of block bitmap is not set [ 96.213334][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 96.213830][ T5617] Quota error (device loop3): write_blk: dquota write failed [ 96.213865][ T5617] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 96.213893][ T5617] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.681: Failed to acquire dquot type 1 [ 96.213941][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 96.217226][ T5617] EXT4-fs (loop3): 1 truncate cleaned up [ 96.248762][ T5617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.982378][ T5634] netlink: 'syz.2.687': attribute type 29 has an invalid length. [ 96.999589][ T29] audit: type=1400 audit(1793489992.312:2773): avc: denied { connect } for pid=5633 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.048059][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.328201][ T29] audit: type=1326 audit(1793489992.642:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.692" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6999bf559 code=0x7ffc0000 [ 97.464685][ T5640] loop3: detected capacity change from 0 to 512 [ 97.549471][ T5640] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.689: iget: bad extended attribute block 134217728 [ 97.549661][ T5640] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.551670][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.551858][ C0] EXT4-fs (loop3): initial error at time 1793489992: ext4_orphan_get:1404: inode 15 [ 97.552048][ C0] EXT4-fs (loop3): last error at time 1793489992: ext4_orphan_get:1404: inode 15 [ 97.607532][ T5640] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.689: couldn't read orphan inode 15 (err -117) [ 97.607701][ T5640] loop3: lost filesystem error report for type 5 error -117 [ 97.620101][ T5640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.725488][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.991611][ T5657] loop3: detected capacity change from 0 to 128 [ 98.005884][ T5662] capability: warning: `syz.4.696' uses 32-bit capabilities (legacy support in use) [ 98.048080][ T5657] FAT-fs (loop3): bogus number of reserved sectors [ 98.048580][ T5657] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 98.048610][ T5657] FAT-fs (loop3): Can't find a valid FAT filesystem [ 98.184917][ T5657] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 98.273470][ T5671] netlink: 463 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.329041][ T5681] loop4: detected capacity change from 0 to 128 [ 98.336207][ T5681] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.353072][ T5681] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.545601][ T5687] loop4: detected capacity change from 0 to 164 [ 98.565469][ T5687] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 98.583694][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'. [ 98.585644][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'. [ 98.843044][ T5693] loop4: detected capacity change from 0 to 512 [ 98.974015][ T5693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.980991][ T5691] loop2: detected capacity change from 0 to 128 [ 98.985352][ T5691] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.990828][ T5691] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.035211][ T5693] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.096146][ T5703] uprobe: syz.2.712:5703 failed to unregister, leaking uprobe [ 99.096186][ T5703] uprobe: syz.2.712:5703 failed to unregister, leaking uprobe [ 99.111355][ T5701] loop3: detected capacity change from 0 to 128 [ 99.138224][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.733510][ T3406] hid (null): invalid report_size 6930 [ 99.733537][ T3406] hid (null): report_id 0 is invalid [ 99.739157][ T3406] hid-generic 0001:0F08:07AD.0002: invalid report_size 6930 [ 99.739232][ T3406] hid-generic 0001:0F08:07AD.0002: item 0 2 1 7 parsing failed [ 99.739312][ T3406] hid-generic 0001:0F08:07AD.0002: probe with driver hid-generic failed with error -22 [ 99.909006][ T5721] loop4: detected capacity change from 0 to 512 [ 99.936923][ T5721] netlink: 'syz.4.720': attribute type 4 has an invalid length. [ 99.936970][ T5721] netlink: 152 bytes leftover after parsing attributes in process `syz.4.720'. [ 100.181592][ T5721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.266238][ T5729] loop1: detected capacity change from 0 to 512 [ 100.304501][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 100.304520][ T29] audit: type=1400 audit(1793489995.612:2801): avc: denied { mounton } for pid=5728 comm="syz.1.723" path="/syzcgroup/unified/syz1/file0" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 100.309410][ T5729] ext4: Unknown parameter 'fsmagic' [ 106.508120][ T29] audit: type=1400 audit(1793490001.822:2802): avc: denied { write } for pid=5734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.557587][ T29] audit: type=1400 audit(1793490001.872:2803): avc: denied { write } for pid=5745 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.672864][ T29] audit: type=1400 audit(1793490001.992:2804): avc: denied { write } for pid=5748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.718637][ T29] audit: type=1400 audit(1793490002.032:2805): avc: denied { write } for pid=5759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.779063][ T5770] loop4: detected capacity change from 0 to 1024 [ 109.805456][ T5770] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 109.805491][ T5770] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 109.805526][ T5770] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.734: Failed to acquire dquot type 0 [ 109.805550][ T5770] loop4: lost filesystem error report for type 5 error -5 [ 109.807359][ T5770] EXT4-fs (loop4): 1 truncate cleaned up [ 109.807849][ T5770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.885128][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.968010][ T5776] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.999602][ T5776] lo speed is unknown, defaulting to 1000 [ 110.084937][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.085035][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.085189][ T5776] bridge_slave_0: entered allmulticast mode [ 110.085654][ T5776] bridge_slave_0: entered promiscuous mode [ 110.087201][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.087304][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.087584][ T5776] bridge_slave_1: entered allmulticast mode [ 110.088764][ T5776] bridge_slave_1: entered promiscuous mode [ 110.115210][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.118069][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.142658][ T5776] team0: Port device team_slave_0 added [ 110.145291][ T5776] team0: Port device team_slave_1 added [ 110.170282][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.170323][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.170348][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.170858][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.170873][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.170906][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.205724][ T5776] hsr_slave_0: entered promiscuous mode [ 110.206722][ T5776] hsr_slave_1: entered promiscuous mode [ 110.207398][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 110.207437][ T5776] Cannot create hsr debugfs directory [ 110.324083][ T5776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.326291][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.326725][ T5776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.328911][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.329416][ T5776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.332711][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.333944][ T5776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.343480][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.386604][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.386768][ T5776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.386987][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.387154][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.431371][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.436712][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.437370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.441206][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.473115][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.473146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.476277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.476311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.619185][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.806054][ T5832] FAULT_INJECTION: forcing a failure. [ 110.806054][ T5832] name failslab, interval 1, probability 0, space 0, times 0 [ 110.806148][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz.1.732 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 110.806194][ T5832] Tainted: [W]=WARN [ 110.806204][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.806277][ T5832] Call Trace: [ 110.806286][ T5832] [ 110.806308][ T5832] __dump_stack+0x1d/0x30 [ 110.806338][ T5832] dump_stack_lvl+0x95/0xd0 [ 110.806367][ T5832] dump_stack+0x15/0x1b [ 110.806422][ T5832] should_fail_ex+0x259/0x270 [ 110.806461][ T5832] ? security_file_alloc+0x32/0xf0 [ 110.806503][ T5832] should_failslab+0x8c/0xb0 [ 110.806623][ T5832] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 110.806672][ T5832] ? security_file_alloc+0x32/0xf0 [ 110.806710][ T5832] security_file_alloc+0x32/0xf0 [ 110.806787][ T5832] init_file+0x5b/0x1b0 [ 110.806816][ T5832] alloc_empty_file+0x85/0x1e0 [ 110.806849][ T5832] alloc_file_pseudo+0x92/0x120 [ 110.806912][ T5832] anon_inode_getfile+0xa0/0x120 [ 110.806939][ T5832] do_epoll_create+0x1c1/0x290 [ 110.806960][ T5832] __x64_sys_epoll_create1+0x1e/0x30 [ 110.807023][ T5832] x64_sys_call+0x20bc/0x2550 [ 110.807053][ T5832] do_syscall_64+0x112/0x360 [ 110.807164][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.807307][ T5832] RIP: 0033:0x7f6c92faf559 [ 110.807330][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.807356][ T5832] RSP: 002b:00007f6c91a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 110.807486][ T5832] RAX: ffffffffffffffda RBX: 00007f6c93235fa0 RCX: 00007f6c92faf559 [ 110.807507][ T5832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 110.807526][ T5832] RBP: 00007f6c93046b50 R08: 0000000000000000 R09: 0000000000000000 [ 110.807546][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.807564][ T5832] R13: 00007f6c93236038 R14: 00007f6c93235fa0 R15: 00007ffda70da268 [ 110.807607][ T5832] [ 110.993580][ T5816] loop3: detected capacity change from 0 to 512 [ 111.102262][ T28] lo speed is unknown, defaulting to 1000 [ 111.117863][ T5776] veth0_vlan: entered promiscuous mode [ 111.126007][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.128360][ T5776] veth1_vlan: entered promiscuous mode [ 111.129828][ T5816] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.174864][ T5776] veth0_macvtap: entered promiscuous mode [ 111.176588][ T5776] veth1_macvtap: entered promiscuous mode [ 111.198545][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.210855][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.232291][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.233332][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.233413][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.233456][ T139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.235445][ T29] audit: type=1400 audit(1793490006.552:2806): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/root/syzkaller.4NbZmL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 111.237174][ T29] audit: type=1400 audit(1793490006.552:2807): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 111.237460][ T29] audit: type=1400 audit(1793490006.552:2808): avc: denied { mount } for pid=5776 comm="syz-executor" name="/" dev="gadgetfs" ino=4422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.376621][ T5849] loop1: detected capacity change from 0 to 256 [ 111.376995][ T5849] vfat: Unknown parameter '' [ 111.454741][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.584573][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 111.658169][ T29] audit: type=1326 audit(1793490006.972:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 111.658914][ T29] audit: type=1326 audit(1793490006.972:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 111.726530][ T5860] tipc: Started in network mode [ 111.726552][ T5860] tipc: Node identity , cluster identity 4711 [ 111.726569][ T5860] tipc: Failed to obtain node identity [ 111.726578][ T5860] tipc: Enabling of bearer rejected, failed to enable media [ 111.793534][ T29] audit: type=1326 audit(1793490007.112:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 111.793650][ T29] audit: type=1326 audit(1793490007.112:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.3.739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 111.895441][ T5873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.985534][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.985751][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.026875][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.029362][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.055288][ T5874] v: left promiscuous mode [ 112.087749][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.088764][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.105618][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.123892][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.123934][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.125988][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.126054][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.164487][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.166066][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.174369][ T5877] veth1_vlan: left promiscuous mode [ 112.176703][ T5877] v: entered promiscuous mode [ 112.181589][ T5877] veth1_vlan: entered promiscuous mode [ 112.191512][ T5877] veth1_macvtap: left promiscuous mode [ 112.192692][ T5877] veth0_macvtap: left promiscuous mode [ 112.195131][ T5877] veth0_macvtap: entered promiscuous mode [ 112.197342][ T5877] veth1_macvtap: entered promiscuous mode [ 112.207880][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.209911][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.214702][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.216789][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.220626][ T5877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.268109][ T5873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.304852][ T5873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.382969][ T5873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.441884][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.442742][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.452199][ T38] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.453084][ T38] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.495044][ T29] audit: type=1400 audit(1793490007.812:2813): avc: denied { ioctl } for pid=5879 comm="syz.3.749" path="socket:[13816]" dev="sockfs" ino=13816 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.579632][ T5886] loop3: detected capacity change from 0 to 256 [ 112.637829][ T29] audit: type=1400 audit(1793490007.952:2814): avc: denied { remount } for pid=5884 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.663900][ T5886] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 112.664094][ T5886] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 112.687688][ T29] audit: type=1400 audit(1793490008.002:2815): avc: denied { wake_alarm } for pid=5885 comm="syz.1.751" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.716215][ T29] audit: type=1326 audit(1793490008.032:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 112.716650][ T29] audit: type=1326 audit(1793490008.032:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 112.717346][ T29] audit: type=1326 audit(1793490008.032:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8034e5f559 code=0x7ffc0000 [ 112.815377][ T5896] loop4: detected capacity change from 0 to 128 [ 112.816485][ T5896] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.817079][ T5896] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.896302][ T5898] loop3: detected capacity change from 0 to 512 [ 112.992680][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.363902][ T5920] loop3: detected capacity change from 0 to 164 [ 113.434570][ T2979] ================================================================== [ 113.434613][ T2979] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 113.434668][ T2979] [ 113.434676][ T2979] write to 0xffff888105a12930 of 8 bytes by task 5772 on cpu 0: [ 113.434698][ T2979] dentry_unlink_inode+0x65/0x290 [ 113.434737][ T2979] d_delete+0x164/0x180 [ 113.434772][ T2979] d_delete_notify+0x32/0x100 [ 113.434806][ T2979] vfs_unlink+0x287/0x4a0 [ 113.434821][ T2979] filename_unlinkat+0x1db/0x400 [ 113.434837][ T2979] __se_sys_unlink+0x2b/0xe0 [ 113.434855][ T2979] __x64_sys_unlink+0x1f/0x30 [ 113.434873][ T2979] x64_sys_call+0x18ee/0x2550 [ 113.434905][ T2979] do_syscall_64+0x112/0x360 [ 113.434943][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434972][ T2979] [ 113.434979][ T2979] read to 0xffff888105a12930 of 8 bytes by task 2979 on cpu 1: [ 113.435001][ T2979] step_into_slowpath+0x12c/0x4c0 [ 113.435030][ T2979] path_lookupat+0x2eb/0x4c0 [ 113.435059][ T2979] filename_lookup+0x18f/0x390 [ 113.435088][ T2979] do_readlinkat+0x74/0x2f0 [ 113.435121][ T2979] __x64_sys_readlink+0x47/0x60 [ 113.435152][ T2979] x64_sys_call+0x1d41/0x2550 [ 113.435186][ T2979] do_syscall_64+0x112/0x360 [ 113.435222][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.435247][ T2979] [ 113.435252][ T2979] value changed: 0xffff88811f1b10d0 -> 0x0000000000000000 [ 113.435267][ T2979] [ 113.435272][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 113.435290][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.435329][ T2979] Tainted: [W]=WARN [ 113.435339][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.435357][ T2979] ==================================================================