last executing test programs: 1.961040483s ago: executing program 0 (id=956): setns(0xc9, 0x0) r0 = syz_io_uring_setup(0x4acb, &(0x7f0000000040)={0x0, 0x1eb3, 0x400, 0x2, 0x6a}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r1 = io_uring_setup(0x2575, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0x149, 0x0, r0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r3, 0xfffffe4d}}, 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffd, 0x7fffffff, 0x1, 0x1, 0x5, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) close_range(r1, 0xffffffffffffffff, 0x0) 1.820538086s ago: executing program 1 (id=961): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x2, @local}, 0x10) 1.820054876s ago: executing program 0 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 1.806324986s ago: executing program 1 (id=964): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x8000005, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0xc0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x90, 0x2, [@TCA_ROUTE4_ACT={0x8c, 0x6, [@m_gact={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xfe2a, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x6, "59eff6531e5688d4227d72f5d5cf5641fb2d30ad0e04a0d5e6adc9846b444ef0b354a0156d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x884}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0xa, 0x5, 0x0) setsockopt(r9, 0x84, 0x4083, &(0x7f0000000000), 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.767180197s ago: executing program 0 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x51642000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000b3000000000000000000"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20000061, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x90c7}, &(0x7f00000001c0)=0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000002c0), &(0x7f0000001740), 0x2, r0}, 0x38) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) unshare(0x8040480) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r8, &(0x7f00000001c0)=@other={'lock', ' ', 'mem'}, 0x9) close(0x3) ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000400)={'hsr0\x00', @random='\x00\x00\x00\x00(\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000200)={{r4, &(0x7f0000000000)=')][:]!,a-(-\x00', 0x501100, &(0x7f0000000280)={@_ha_fsid={[0x8493, 0x205]}, {0x7, 0x47b, 0x0, 0x7}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x800}, 0x0, &(0x7f00000001c0)}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) 1.766744937s ago: executing program 0 (id=966): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040041}, 0x810) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.6731558s ago: executing program 3 (id=969): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x20008010) 1.65942464s ago: executing program 3 (id=970): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54030000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000100000004000480080002000100000008000100000000000400088010"], 0x354}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.64549492s ago: executing program 3 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100283d"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r7 = gettid() tkill(r7, 0x2a) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 990.910546ms ago: executing program 2 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 990.563156ms ago: executing program 2 (id=976): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000, 0x3}}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) unshare(0x4000480) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) flistxattr(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x1c) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) r8 = io_uring_setup(0x5a93, &(0x7f0000000080)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000001bc0), 0x113e) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r6, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r2, r5}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r10, 0x25, 0x2}, 0x3a) 953.096067ms ago: executing program 2 (id=977): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x2, @local}, 0x10) 928.694367ms ago: executing program 2 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x51642000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000b3000000000000000000"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20000061, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x90c7}, &(0x7f00000001c0)=0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000002c0), &(0x7f0000001740), 0x2, r0}, 0x38) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) unshare(0x8040480) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r8, &(0x7f00000001c0)=@other={'lock', ' ', 'mem'}, 0x9) close(0x3) ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000400)={'hsr0\x00', @random='\x00\x00\x00\x00(\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000200)={{r4, &(0x7f0000000000)=')][:]!,a-(-\x00', 0x501100, &(0x7f0000000280)={@_ha_fsid={[0x8493, 0x205]}, {0x7, 0x47b, 0x0, 0x7}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x800}, 0x0, &(0x7f00000001c0)}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) 913.803128ms ago: executing program 1 (id=979): syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x7) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x1, 0x3}) epoll_create1(0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="cb", 0x1}, {0x0}], 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper=0x300}, 0x10) r4 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) r5 = socket$pptp(0x18, 0x1, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000580), 0x10) dup3(0xffffffffffffffff, r5, 0x0) gettid() 838.84476ms ago: executing program 0 (id=982): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0xcc, 0x0, 0x3, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x48010, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$packet(0x11, 0x2, 0x300) accept4(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x800) socket(0x15, 0x3, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000084) r3 = io_uring_setup(0x9a7, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x1, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x1]}, 0x8) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000000c0)=0x1) 838.36283ms ago: executing program 2 (id=983): r0 = socket$inet(0xa, 0x801, 0x84) accept4(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffce2, 0x810}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) mkdir(&(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001480)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8003, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r4, 0x200) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x199, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 837.70594ms ago: executing program 4 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r2 = epoll_create(0x2a1b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000010}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x4e24, @multicast1}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) 703.423083ms ago: executing program 0 (id=985): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 611.531065ms ago: executing program 4 (id=986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1226, 0xffffffff, 0x0, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 493.837308ms ago: executing program 3 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 475.145679ms ago: executing program 3 (id=988): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000, 0x3}}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) unshare(0x4000480) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) flistxattr(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x1c) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) r8 = io_uring_setup(0x5a93, &(0x7f0000000080)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000001bc0), 0x113e) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r6, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r2, r5}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r10, 0x25, 0x2}, 0x3a) 407.1868ms ago: executing program 4 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x560b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) write(r2, &(0x7f0000000000)="010000", 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) unshare(0x22020600) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 406.31059ms ago: executing program 3 (id=990): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x8000005, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0xc0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x90, 0x2, [@TCA_ROUTE4_ACT={0x8c, 0x6, [@m_gact={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xfe2a, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x6, "59eff6531e5688d4227d72f5d5cf5641fb2d30ad0e04a0d5e6adc9846b444ef0b354a0156d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x884}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0xa, 0x5, 0x0) setsockopt(r9, 0x84, 0x4083, &(0x7f0000000000), 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) 393.015061ms ago: executing program 4 (id=991): setns(0xc9, 0x0) r0 = syz_io_uring_setup(0x4acb, &(0x7f0000000040)={0x0, 0x1eb3, 0x400, 0x2, 0x6a}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r1 = io_uring_setup(0x2575, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0x149, 0x0, r0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x106, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff3d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067020000030000001503000000000010bf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffd, 0x7fffffff, 0x1, 0x1, 0x5, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) close_range(r1, 0xffffffffffffffff, 0x0) 288.600303ms ago: executing program 4 (id=992): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x20008010) 276.364063ms ago: executing program 4 (id=993): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040041}, 0x810) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 48.915959ms ago: executing program 1 (id=994): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x560b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) write(r2, &(0x7f0000000000)="010000", 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) unshare(0x22020600) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 45.353049ms ago: executing program 1 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x51642000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000b3000000000000000000"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000e00), 0x0, 0x20000061, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x90c7}, &(0x7f00000001c0)=0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000002c0), &(0x7f0000001740), 0x2, r0}, 0x38) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) unshare(0x8040480) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r8, &(0x7f00000001c0)=@other={'lock', ' ', 'mem'}, 0x9) close(0x3) ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000400)={'hsr0\x00', @random='\x00\x00\x00\x00(\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000200)={{r4, &(0x7f0000000000)=')][:]!,a-(-\x00', 0x501100, &(0x7f0000000280)={@_ha_fsid={[0x8493, 0x205]}, {0x7, 0x47b, 0x0, 0x7}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x800}, 0x0, &(0x7f00000001c0)}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) 949.97µs ago: executing program 1 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r2 = epoll_create(0x2a1b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000010}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x4e24, @multicast1}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) 0s ago: executing program 2 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100283d"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r7 = gettid() tkill(r7, 0x2a) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) kernel console output (not intermixed with test programs): 72] loop3: p172 start 33554432 is beyond EOD, truncated [ 48.660505][ T4472] loop3: p173 start 262144 is beyond EOD, truncated [ 48.660589][ T4472] loop3: p174 start 33554432 is beyond EOD, truncated [ 48.660604][ T4472] loop3: p175 start 262144 is beyond EOD, truncated [ 48.660619][ T4472] loop3: p176 start 33554432 is beyond EOD, truncated [ 48.660634][ T4472] loop3: p177 start 262144 is beyond EOD, truncated [ 48.660649][ T4472] loop3: p178 start 33554432 is beyond EOD, truncated [ 48.660664][ T4472] loop3: p179 start 262144 is beyond EOD, truncated [ 48.660679][ T4472] loop3: p180 start 33554432 is beyond EOD, truncated [ 48.660767][ T4472] loop3: p181 start 262144 is beyond EOD, truncated [ 48.660782][ T4472] loop3: p182 start 33554432 is beyond EOD, truncated [ 48.660797][ T4472] loop3: p183 start 262144 is beyond EOD, truncated [ 48.660860][ T4472] loop3: p184 start 33554432 is beyond EOD, truncated [ 48.660876][ T4472] loop3: p185 start 262144 is beyond EOD, truncated [ 48.660891][ T4472] loop3: p186 start 33554432 is beyond EOD, truncated [ 48.660906][ T4472] loop3: p187 start 262144 is beyond EOD, truncated [ 48.660921][ T4472] loop3: p188 start 33554432 is beyond EOD, truncated [ 48.660937][ T4472] loop3: p189 start 262144 is beyond EOD, truncated [ 48.661031][ T4472] loop3: p190 start 33554432 is beyond EOD, truncated [ 48.661047][ T4472] loop3: p191 start 262144 is beyond EOD, truncated [ 48.661062][ T4472] loop3: p192 start 33554432 is beyond EOD, truncated [ 48.661090][ T4472] loop3: p193 start 262144 is beyond EOD, truncated [ 48.661105][ T4472] loop3: p194 start 33554432 is beyond EOD, truncated [ 48.661120][ T4472] loop3: p195 start 262144 is beyond EOD, truncated [ 48.661136][ T4472] loop3: p196 start 33554432 is beyond EOD, truncated [ 48.661151][ T4472] loop3: p197 start 262144 is beyond EOD, truncated [ 48.661166][ T4472] loop3: p198 start 33554432 is beyond EOD, truncated [ 48.661182][ T4472] loop3: p199 start 262144 is beyond EOD, truncated [ 48.661207][ T4472] loop3: p200 start 33554432 is beyond EOD, truncated [ 48.661223][ T4472] loop3: p201 start 262144 is beyond EOD, truncated [ 48.661238][ T4472] loop3: p202 start 33554432 is beyond EOD, truncated [ 48.661310][ T4472] loop3: p203 start 262144 is beyond EOD, truncated [ 48.661395][ T4472] loop3: p204 start 33554432 is beyond EOD, truncated [ 48.661411][ T4472] loop3: p205 start 262144 is beyond EOD, truncated [ 48.661426][ T4472] loop3: p206 start 33554432 is beyond EOD, truncated [ 48.661442][ T4472] loop3: p207 start 262144 is beyond EOD, truncated [ 48.661457][ T4472] loop3: p208 start 33554432 is beyond EOD, truncated [ 48.661472][ T4472] loop3: p209 start 262144 is beyond EOD, truncated [ 48.661509][ T4472] loop3: p210 start 33554432 is beyond EOD, truncated [ 48.661524][ T4472] loop3: p211 start 262144 is beyond EOD, truncated [ 48.661589][ T4472] loop3: p212 start 33554432 is beyond EOD, truncated [ 48.668887][ T4472] loop3: p213 start 262144 is beyond EOD, truncated [ 48.668990][ T4472] loop3: p214 start 33554432 is beyond EOD, truncated [ 48.669006][ T4472] loop3: p215 start 262144 is beyond EOD, truncated [ 48.669022][ T4472] loop3: p216 start 33554432 is beyond EOD, truncated [ 48.669037][ T4472] loop3: p217 start 262144 is beyond EOD, truncated [ 48.669052][ T4472] loop3: p218 start 33554432 is beyond EOD, truncated [ 48.669067][ T4472] loop3: p219 start 262144 is beyond EOD, truncated [ 48.669139][ T4472] loop3: p220 start 33554432 is beyond EOD, truncated [ 48.669154][ T4472] loop3: p221 start 262144 is beyond EOD, truncated [ 48.669169][ T4472] loop3: p222 start 33554432 is beyond EOD, truncated [ 48.669185][ T4472] loop3: p223 start 262144 is beyond EOD, truncated [ 48.669256][ T4472] loop3: p224 start 33554432 is beyond EOD, truncated [ 48.669271][ T4472] loop3: p225 start 262144 is beyond EOD, truncated [ 48.669287][ T4472] loop3: p226 start 33554432 is beyond EOD, truncated [ 48.669302][ T4472] loop3: p227 start 262144 is beyond EOD, truncated [ 48.669317][ T4472] loop3: p228 start 33554432 is beyond EOD, truncated [ 48.669332][ T4472] loop3: p229 start 262144 is beyond EOD, truncated [ 48.669386][ T4472] loop3: p230 start 33554432 is beyond EOD, truncated [ 48.669401][ T4472] loop3: p231 start 262144 is beyond EOD, truncated [ 48.669416][ T4472] loop3: p232 start 33554432 is beyond EOD, truncated [ 48.669431][ T4472] loop3: p233 start 262144 is beyond EOD, truncated [ 48.669495][ T4472] loop3: p234 start 33554432 is beyond EOD, truncated [ 48.669510][ T4472] loop3: p235 start 262144 is beyond EOD, truncated [ 48.669525][ T4472] loop3: p236 start 33554432 is beyond EOD, truncated [ 48.669540][ T4472] loop3: p237 start 262144 is beyond EOD, truncated [ 48.669555][ T4472] loop3: p238 start 33554432 is beyond EOD, truncated [ 48.669570][ T4472] loop3: p239 start 262144 is beyond EOD, truncated [ 48.669615][ T4472] loop3: p240 start 33554432 is beyond EOD, truncated [ 48.669690][ T4472] loop3: p241 start 262144 is beyond EOD, truncated [ 48.669716][ T4472] loop3: p242 start 33554432 is beyond EOD, truncated [ 48.669731][ T4472] loop3: p243 start 262144 is beyond EOD, truncated [ 48.669787][ T4472] loop3: p244 start 33554432 is beyond EOD, truncated [ 48.669802][ T4472] loop3: p245 start 262144 is beyond EOD, truncated [ 48.669817][ T4472] loop3: p246 start 33554432 is beyond EOD, truncated [ 48.669832][ T4472] loop3: p247 start 262144 is beyond EOD, truncated [ 48.669848][ T4472] loop3: p248 start 33554432 is beyond EOD, truncated [ 48.669863][ T4472] loop3: p249 start 262144 is beyond EOD, truncated [ 48.669878][ T4472] loop3: p250 start 33554432 is beyond EOD, truncated [ 48.669931][ T4472] loop3: p251 start 262144 is beyond EOD, truncated [ 48.669946][ T4472] loop3: p252 start 33554432 is beyond EOD, truncated [ 48.670014][ T4472] loop3: p253 start 262144 is beyond EOD, truncated [ 48.670029][ T4472] loop3: p254 start 33554432 is beyond EOD, truncated [ 48.670044][ T4472] loop3: p255 start 262144 is beyond EOD, truncated [ 48.978890][ T4500] veth0: entered promiscuous mode [ 48.998652][ T4497] syzkaller0: entered promiscuous mode [ 48.998673][ T4497] syzkaller0: entered allmulticast mode [ 49.009661][ T4492] veth0: left promiscuous mode [ 49.012338][ T4497] tipc: Started in network mode [ 49.012367][ T4497] tipc: Node identity b2c6425fba6, cluster identity 4711 [ 49.012457][ T4497] tipc: Enabled bearer , priority 0 [ 49.040017][ T4495] tipc: Resetting bearer [ 49.050732][ T4495] tipc: Disabling bearer [ 49.686569][ T4521] loop2: detected capacity change from 0 to 1024 [ 49.712166][ T4521] EXT4-fs: Ignoring removed oldalloc option [ 49.744786][ T4521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.882949][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.951779][ T4536] FAULT_INJECTION: forcing a failure. [ 49.951779][ T4536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.951807][ T4536] CPU: 1 UID: 0 PID: 4536 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.951893][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.951905][ T4536] Call Trace: [ 49.951912][ T4536] [ 49.951920][ T4536] __dump_stack+0x1d/0x30 [ 49.951944][ T4536] dump_stack_lvl+0x95/0xd0 [ 49.952017][ T4536] dump_stack+0x15/0x1b [ 49.952046][ T4536] should_fail_ex+0x262/0x280 [ 49.952100][ T4536] should_fail+0xb/0x20 [ 49.952117][ T4536] should_fail_usercopy+0x1a/0x20 [ 49.952139][ T4536] _copy_from_user+0x1c/0xb0 [ 49.952167][ T4536] kstrtouint_from_user+0x69/0xf0 [ 49.952205][ T4536] ? 0xffffffff81000000 [ 49.952220][ T4536] ? avc_policy_seqno+0x15/0x30 [ 49.952301][ T4536] proc_fail_nth_write+0x50/0x160 [ 49.952333][ T4536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.952397][ T4536] vfs_write+0x254/0x9a0 [ 49.952443][ T4536] ? __fget_files+0x184/0x1c0 [ 49.952463][ T4536] ? mutex_lock+0x57/0x90 [ 49.952484][ T4536] ksys_write+0xdc/0x1a0 [ 49.952510][ T4536] __x64_sys_write+0x40/0x50 [ 49.952534][ T4536] x64_sys_call+0x154e/0x2550 [ 49.952594][ T4536] do_syscall_64+0x112/0x360 [ 49.952662][ T4536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.952684][ T4536] RIP: 0033:0x7f2c4ed7e98e [ 49.952715][ T4536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.952769][ T4536] RSP: 002b:00007f2c4d816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.952791][ T4536] RAX: ffffffffffffffda RBX: 00007f2c4d8176c0 RCX: 00007f2c4ed7e98e [ 49.952817][ T4536] RDX: 0000000000000001 RSI: 00007f2c4d8170a0 RDI: 0000000000000003 [ 49.952830][ T4536] RBP: 00007f2c4d817090 R08: 0000000000000000 R09: 0000000000000000 [ 49.952842][ T4536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.952855][ T4536] R13: 00007f2c4f046038 R14: 00007f2c4f045fa0 R15: 00007ffca69eb178 [ 49.952873][ T4536] [ 49.981720][ T4537] netlink: 14 bytes leftover after parsing attributes in process `syz.2.330'. [ 50.381763][ T4556] veth0: entered promiscuous mode [ 50.387816][ T4552] veth0: left promiscuous mode [ 50.562882][ T4548] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.562952][ T4548] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.973431][ T4581] loop1: detected capacity change from 0 to 1024 [ 50.997075][ T4581] EXT4-fs: Ignoring removed oldalloc option [ 51.012111][ T4581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.146098][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.247417][ T4580] loop2: detected capacity change from 0 to 4096 [ 51.293037][ T4580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.348343][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.423921][ T4598] loop2: detected capacity change from 0 to 512 [ 51.438803][ T4598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.438949][ T4598] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.489974][ T4602] loop3: detected capacity change from 0 to 512 [ 51.519133][ T4602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.519277][ T4602] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.576574][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.625471][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.630435][ T4609] veth0: entered promiscuous mode [ 51.630836][ T4607] veth0: left promiscuous mode [ 51.717761][ T4611] netlink: 14 bytes leftover after parsing attributes in process `syz.1.351'. [ 51.733001][ T4613] loop3: detected capacity change from 0 to 512 [ 51.751857][ T4611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.851004][ T4611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.863175][ T4611] bond0 (unregistering): Released all slaves [ 51.876232][ T3384] hid_parser_main: 22 callbacks suppressed [ 51.876258][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876283][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876309][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876397][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876425][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876451][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876476][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.876497][ T3384] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 51.882841][ T3384] hid-generic 0000:0000:0001.0007: hidraw0: HID v0.10 Device [syz0] on syz1 [ 51.991587][ T4617] syz.3.350: attempt to access beyond end of device [ 51.991587][ T4617] loop3: rw=0, sector=504, nr_sectors = 16 limit=512 [ 52.009036][ T4620] loop2: detected capacity change from 0 to 1024 [ 52.016032][ T4620] EXT4-fs: Ignoring removed oldalloc option [ 52.058668][ T4620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.123063][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.498586][ T4635] mmap: syz.0.357 (4635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.651221][ T4629] batadv1: entered promiscuous mode [ 52.651629][ T4629] batadv1: entered allmulticast mode [ 52.699444][ T4637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 52.865240][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 52.865270][ T29] audit: type=1400 audit(1788240559.629:2359): avc: denied { remount } for pid=4650 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.907024][ T4653] veth0: entered promiscuous mode [ 52.915081][ T4652] veth0: left promiscuous mode [ 53.055873][ T4668] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 53.135300][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 53.135797][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 53.153996][ T4665] loop1: detected capacity change from 0 to 1024 [ 53.169896][ T4665] EXT4-fs: Ignoring removed oldalloc option [ 53.193079][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.890188][ T4675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.904822][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.965168][ T4675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.992085][ T4686] loop4: detected capacity change from 0 to 1024 [ 53.998957][ T4686] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.998994][ T4686] EXT4-fs: Ignoring removed oldalloc option [ 54.021110][ T4675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.022715][ T4686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.022773][ T4686] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.063542][ T29] audit: type=1326 audit(1788240560.819:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.063583][ T29] audit: type=1326 audit(1788240560.819:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.063641][ T29] audit: type=1326 audit(1788240560.819:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.099452][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.114501][ T29] audit: type=1326 audit(1788240560.849:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.114577][ T29] audit: type=1326 audit(1788240560.849:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.114688][ T29] audit: type=1326 audit(1788240560.849:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.114731][ T29] audit: type=1326 audit(1788240560.849:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.114755][ T29] audit: type=1326 audit(1788240560.849:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a781e159 code=0x7ffc0000 [ 54.114779][ T29] audit: type=1326 audit(1788240560.849:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33a77de98e code=0x7ffc0000 [ 54.244892][ T9] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 54.244922][ T9] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 54.245357][ T9] hid-generic 0000:0000:0001.0008: hidraw0: HID v0.10 Device [syz0] on syz1 [ 54.252751][ T4675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.349217][ T4697] fido_id[4697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.404481][ T301] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.404652][ T317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.405008][ T317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.405045][ T317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.467538][ T4702] veth0: entered promiscuous mode [ 54.470125][ T4701] veth0: left promiscuous mode [ 54.559154][ T4704] hub 7-0:1.0: USB hub found [ 54.564424][ T4704] FAULT_INJECTION: forcing a failure. [ 54.564424][ T4704] name failslab, interval 1, probability 0, space 0, times 0 [ 54.564624][ T4704] CPU: 1 UID: 0 PID: 4704 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.564669][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.564683][ T4704] Call Trace: [ 54.564732][ T4704] [ 54.564741][ T4704] __dump_stack+0x1d/0x30 [ 54.564769][ T4704] dump_stack_lvl+0x95/0xd0 [ 54.564821][ T4704] dump_stack+0x15/0x1b [ 54.564839][ T4704] should_fail_ex+0x262/0x280 [ 54.564858][ T4704] ? hub_probe+0x796/0x16e0 [ 54.564890][ T4704] should_failslab+0x8c/0xb0 [ 54.564927][ T4704] __kmalloc_cache_noprof+0x7a/0x400 [ 54.564952][ T4704] ? hub_probe+0x796/0x16e0 [ 54.565054][ T4704] ? kobject_get+0x93/0xd0 [ 54.565075][ T4704] hub_probe+0x796/0x16e0 [ 54.565109][ T4704] ? _raw_spin_unlock_irqrestore+0x1a/0x30 [ 54.565163][ T4704] usb_probe_interface+0x486/0x700 [ 54.565189][ T4704] ? __pfx_usb_probe_interface+0x10/0x10 [ 54.565212][ T4704] really_probe+0x1ba/0x600 [ 54.565263][ T4704] __driver_probe_device+0x14f/0x1c0 [ 54.565288][ T4704] driver_probe_device+0x37/0x2f0 [ 54.565343][ T4704] __device_attach_driver+0x227/0x330 [ 54.565366][ T4704] ? __pfx___device_attach_driver+0x10/0x10 [ 54.565414][ T4704] bus_for_each_drv+0x1c0/0x230 [ 54.565451][ T4704] __device_attach+0x1d1/0x2a0 [ 54.565478][ T4704] device_attach+0x17/0x20 [ 54.565526][ T4704] proc_ioctl+0x2c8/0x3e0 [ 54.565551][ T4704] proc_ioctl_default+0x71/0xa0 [ 54.565648][ T4704] usbdev_ioctl+0xe16/0x16a0 [ 54.565815][ T4704] ? __pfx_usbdev_ioctl+0x10/0x10 [ 54.565864][ T4704] __se_sys_ioctl+0xce/0x140 [ 54.565889][ T4704] __x64_sys_ioctl+0x43/0x50 [ 54.565981][ T4704] x64_sys_call+0x239d/0x2550 [ 54.566011][ T4704] do_syscall_64+0x112/0x360 [ 54.566037][ T4704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.566071][ T4704] RIP: 0033:0x7fd9f3f0e159 [ 54.566173][ T4704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.566189][ T4704] RSP: 002b:00007fd9f2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.566254][ T4704] RAX: ffffffffffffffda RBX: 00007fd9f4195fa0 RCX: 00007fd9f3f0e159 [ 54.566267][ T4704] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 54.566279][ T4704] RBP: 00007fd9f2967090 R08: 0000000000000000 R09: 0000000000000000 [ 54.566325][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.566339][ T4704] R13: 00007fd9f4196038 R14: 00007fd9f4195fa0 R15: 00007ffea18fd528 [ 54.566359][ T4704] [ 54.700607][ T4712] loop1: detected capacity change from 0 to 1024 [ 54.713407][ T4704] hub 7-0:1.0: config failed, out of memory (err -12) [ 54.730390][ T4712] EXT4-fs: Ignoring removed oldalloc option [ 54.759967][ T4712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.767937][ T4692] loop3: detected capacity change from 0 to 512 [ 54.941252][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.058508][ T4692] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 55.101879][ T4708] loop2: detected capacity change from 0 to 32768 [ 55.150101][ T4708] loop2: p1 p3 < > [ 55.383410][ T4736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.388'. [ 55.426876][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 55.433345][ T4740] netlink: 88 bytes leftover after parsing attributes in process `syz.3.389'. [ 55.959909][ T4789] syzkaller0: entered promiscuous mode [ 55.959937][ T4789] syzkaller0: entered allmulticast mode [ 55.990863][ T4789] tipc: Started in network mode [ 55.990897][ T4789] tipc: Node identity ae2cc9d16586, cluster identity 4711 [ 55.990918][ T4789] tipc: Disabling bearer [ 56.013508][ T4789] tipc: Enabling of bearer rejected, failed to create discoverer [ 56.023250][ T4761] loop2: detected capacity change from 0 to 32768 [ 56.040885][ T4798] capability: warning: `syz.4.408' uses deprecated v2 capabilities in a way that may be insecure [ 56.057597][ T4761] loop2: p1 p3 < > [ 56.134830][ T4805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'. [ 56.139649][ T4805] netlink: 80 bytes leftover after parsing attributes in process `syz.3.411'. [ 56.199998][ T4801] loop4: detected capacity change from 0 to 1024 [ 56.207125][ T4808] loop3: detected capacity change from 0 to 128 [ 56.219726][ T4801] EXT4-fs: Ignoring removed oldalloc option [ 56.250592][ T4801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.297856][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.334127][ T4815] 9p: Unknown access argument 00000000000000000000¼ÓZÀ‘ÓU Zýtm«g=3VÚ(¨ËuE"þª§aÚñáól».±g•úà”l—ûtVÚ\NG: -22 [ 56.468961][ T4822] FAULT_INJECTION: forcing a failure. [ 56.468961][ T4822] name failslab, interval 1, probability 0, space 0, times 0 [ 56.469005][ T4822] CPU: 1 UID: 0 PID: 4822 Comm: syz.4.413 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.469031][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.469045][ T4822] Call Trace: [ 56.469052][ T4822] [ 56.469060][ T4822] __dump_stack+0x1d/0x30 [ 56.469150][ T4822] dump_stack_lvl+0x95/0xd0 [ 56.469174][ T4822] dump_stack+0x15/0x1b [ 56.469195][ T4822] should_fail_ex+0x262/0x280 [ 56.469218][ T4822] ? process_preds+0x305/0x2a90 [ 56.469292][ T4822] should_failslab+0x8c/0xb0 [ 56.469364][ T4822] __kmalloc_noprof+0xd0/0x4d0 [ 56.469393][ T4822] ? process_preds+0x305/0x2a90 [ 56.469427][ T4822] process_preds+0x305/0x2a90 [ 56.469528][ T4822] ? should_fail_ex+0xdb/0x280 [ 56.469572][ T4822] ? should_fail_ex+0xdb/0x280 [ 56.469614][ T4822] ? should_failslab+0x8c/0xb0 [ 56.469674][ T4822] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 56.469711][ T4822] ? apply_subsystem_event_filter+0x20a/0xcd0 [ 56.469789][ T4822] ? apply_subsystem_event_filter+0x228/0xcd0 [ 56.469848][ T4822] apply_subsystem_event_filter+0x25f/0xcd0 [ 56.469880][ T4822] subsystem_filter_write+0x79/0xd0 [ 56.469902][ T4822] ? __pfx_subsystem_filter_write+0x10/0x10 [ 56.470002][ T4822] vfs_write+0x254/0x9a0 [ 56.470029][ T4822] ? __fget_files+0x184/0x1c0 [ 56.470046][ T4822] ? mutex_lock+0x57/0x90 [ 56.470094][ T4822] ksys_write+0xdc/0x1a0 [ 56.470121][ T4822] __x64_sys_write+0x40/0x50 [ 56.470149][ T4822] x64_sys_call+0x154e/0x2550 [ 56.470232][ T4822] do_syscall_64+0x112/0x360 [ 56.470262][ T4822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.470285][ T4822] RIP: 0033:0x7f2c4edbe159 [ 56.470303][ T4822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.470361][ T4822] RSP: 002b:00007f2c4d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.470383][ T4822] RAX: ffffffffffffffda RBX: 00007f2c4f046090 RCX: 00007f2c4edbe159 [ 56.470399][ T4822] RDX: 000000000000000f RSI: 0000200000000400 RDI: 0000000000000003 [ 56.470414][ T4822] RBP: 00007f2c4d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.470428][ T4822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.470441][ T4822] R13: 00007f2c4f046128 R14: 00007f2c4f046090 R15: 00007ffca69eb178 [ 56.470479][ T4822] [ 56.709818][ T284] hid-generic 0000:0000:0001.0009: hidraw0: HID v0.10 Device [syz0] on syz1 [ 56.791781][ T284] hid-generic 0000:0000:0001.000A: hidraw0: HID v0.10 Device [syz0] on syz1 [ 56.892008][ T4845] loop2: detected capacity change from 0 to 1024 [ 56.913040][ T4845] EXT4-fs: Ignoring removed oldalloc option [ 56.933683][ T4850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.426'. [ 56.947280][ T4845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.211502][ T4863] loop1: detected capacity change from 0 to 1024 [ 57.218298][ T4863] EXT4-fs: Ignoring removed orlov option [ 57.218377][ T4863] EXT4-fs: Ignoring removed orlov option [ 57.322651][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.434'. [ 57.560940][ T4885] loop3: detected capacity change from 0 to 1024 [ 57.568900][ T4885] EXT4-fs: Ignoring removed oldalloc option [ 57.785117][ T3494] hid_parser_main: 22 callbacks suppressed [ 57.785154][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785182][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785205][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785228][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785289][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785315][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785339][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.785361][ T3494] hid-generic 0000:0000:0001.000B: unknown main item tag 0x0 [ 57.833250][ T4892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.439'. [ 57.861087][ T3494] hid-generic 0000:0000:0001.000B: hidraw0: HID v0.10 Device [syz0] on syz1 [ 57.874148][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 57.874176][ T29] audit: type=1326 audit(1788240564.629:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.883723][ T4892] pim6reg1: entered promiscuous mode [ 57.883767][ T4892] pim6reg1: entered allmulticast mode [ 57.884349][ T29] audit: type=1326 audit(1788240564.639:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.884377][ T29] audit: type=1326 audit(1788240564.639:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.899754][ T29] audit: type=1326 audit(1788240564.649:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.899859][ T29] audit: type=1326 audit(1788240564.659:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.924154][ T29] audit: type=1326 audit(1788240564.679:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.924312][ T29] audit: type=1326 audit(1788240564.689:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.924861][ T29] audit: type=1326 audit(1788240564.689:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.924961][ T29] audit: type=1326 audit(1788240564.689:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 57.930448][ T29] audit: type=1326 audit(1788240564.689:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 58.032299][ T4897] fido_id[4897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.080943][ T4899] geneve3: entered allmulticast mode [ 58.200732][ T4905] FAULT_INJECTION: forcing a failure. [ 58.200732][ T4905] name failslab, interval 1, probability 0, space 0, times 0 [ 58.200769][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.200796][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.200807][ T4905] Call Trace: [ 58.200815][ T4905] [ 58.200839][ T4905] __dump_stack+0x1d/0x30 [ 58.200865][ T4905] dump_stack_lvl+0x95/0xd0 [ 58.200889][ T4905] dump_stack+0x15/0x1b [ 58.200946][ T4905] should_fail_ex+0x262/0x280 [ 58.201014][ T4905] ? bpf_test_init+0x86/0x130 [ 58.201065][ T4905] should_failslab+0x8c/0xb0 [ 58.201095][ T4905] __kmalloc_noprof+0xd0/0x4d0 [ 58.201181][ T4905] ? bpf_test_init+0x86/0x130 [ 58.201215][ T4905] bpf_test_init+0x86/0x130 [ 58.201263][ T4905] bpf_prog_test_run_skb+0x271/0x11b0 [ 58.201292][ T4905] ? __rcu_read_unlock+0x4e/0x70 [ 58.201322][ T4905] ? __fget_files+0x184/0x1c0 [ 58.201345][ T4905] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 58.201447][ T4905] bpf_prog_test_run+0x208/0x340 [ 58.201476][ T4905] __sys_bpf+0x8da/0xc30 [ 58.201570][ T4905] ? vfs_write+0x820/0x9a0 [ 58.201603][ T4905] __x64_sys_bpf+0x69/0x80 [ 58.201625][ T4905] x64_sys_call+0xf26/0x2550 [ 58.201653][ T4905] do_syscall_64+0x112/0x360 [ 58.201762][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.201816][ T4905] RIP: 0033:0x7f7f86ede159 [ 58.201834][ T4905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.201898][ T4905] RSP: 002b:00007f7f85937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.201922][ T4905] RAX: ffffffffffffffda RBX: 00007f7f87165fa0 RCX: 00007f7f86ede159 [ 58.201937][ T4905] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 58.201953][ T4905] RBP: 00007f7f85937090 R08: 0000000000000000 R09: 0000000000000000 [ 58.201993][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.202007][ T4905] R13: 00007f7f87166038 R14: 00007f7f87165fa0 R15: 00007fff25607768 [ 58.202028][ T4905] [ 58.432204][ T4916] loop4: detected capacity change from 0 to 1024 [ 58.440363][ T4916] EXT4-fs: Ignoring removed oldalloc option [ 58.491008][ T4935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.452'. [ 58.716868][ T4940] loop4: p1 p3 < > [ 58.855346][ T11] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 58.855384][ T11] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 58.855981][ T11] hid-generic 0000:0000:0001.000C: hidraw0: HID v0.10 Device [syz0] on syz1 [ 59.421153][ T4970] EXT4-fs: Ignoring removed oldalloc option [ 59.488452][ T4984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.468'. [ 59.550294][ T3384] hid-generic 0000:0000:0001.000D: hidraw0: HID v0.10 Device [syz0] on syz1 [ 59.615902][ T4990] fido_id[4990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.796655][ T5007] set_capacity_and_notify: 3 callbacks suppressed [ 59.796681][ T5007] loop3: detected capacity change from 0 to 1024 [ 59.907790][ T4980] loop1: detected capacity change from 0 to 32768 [ 59.940302][ T5019] loop4: detected capacity change from 0 to 512 [ 59.948942][ T4980] loop1: p1 p3 < > [ 59.977500][ T5019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.979704][ T5019] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.982734][ T5019] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 59.982873][ T5019] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.475: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.982983][ T5019] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.983198][ T5019] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.475: couldn't read orphan inode 13 (err -117) [ 59.983259][ T5019] loop4: lost filesystem error report for type 5 error -117 [ 60.049016][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 60.049061][ T5019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 60.090679][ T5025] FAULT_INJECTION: forcing a failure. [ 60.090679][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 60.090789][ T5025] CPU: 0 UID: 0 PID: 5025 Comm: syz.4.476 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.090896][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.090910][ T5025] Call Trace: [ 60.090918][ T5025] [ 60.090928][ T5025] __dump_stack+0x1d/0x30 [ 60.091025][ T5025] dump_stack_lvl+0x95/0xd0 [ 60.091046][ T5025] dump_stack+0x15/0x1b [ 60.091128][ T5025] should_fail_ex+0x262/0x280 [ 60.091168][ T5025] should_failslab+0x8c/0xb0 [ 60.091193][ T5025] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 60.091268][ T5025] ? sidtab_sid2str_get+0xa0/0x130 [ 60.091317][ T5025] ? sidtab_sid2str_get+0xa0/0x130 [ 60.091425][ T5025] kmemdup_noprof+0x2b/0x70 [ 60.091449][ T5025] sidtab_sid2str_get+0xa0/0x130 [ 60.091527][ T5025] security_sid_to_context_core+0x179/0x2d0 [ 60.091566][ T5025] security_sid_to_context+0x27/0x40 [ 60.091608][ T5025] selinux_lsmprop_to_secctx+0x67/0xf0 [ 60.091707][ T5025] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 60.091736][ T5025] audit_log_subj_ctx+0xa4/0x3e0 [ 60.091760][ T5025] audit_log_task_context+0x48/0x70 [ 60.091854][ T5025] audit_log_task+0xf3/0x240 [ 60.091884][ T5025] audit_seccomp+0x6a/0x110 [ 60.091918][ T5025] __seccomp_filter+0x909/0x1360 [ 60.091961][ T5025] ? __fget_files+0x184/0x1c0 [ 60.091986][ T5025] __seccomp_permit_syscall+0x7d/0x150 [ 60.092054][ T5025] do_syscall_64+0xca/0x360 [ 60.092086][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.092164][ T5025] RIP: 0033:0x7f2c4edbe159 [ 60.092182][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.092248][ T5025] RSP: 002b:00007f2c4d8170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.092341][ T5025] RAX: ffffffffffffffda RBX: 00007f2c4f045fa8 RCX: 00007f2c4edbe159 [ 60.092357][ T5025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c4f045fac [ 60.092466][ T5025] RBP: 00007f2c4f045fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 60.092481][ T5025] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000000 [ 60.092552][ T5025] R13: 00007f2c4f046038 R14: 00007ffca69eb090 R15: 00007ffca69eb178 [ 60.092575][ T5025] [ 60.279292][ T5034] loop4: detected capacity change from 0 to 512 [ 60.320685][ T5034] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.479: corrupted in-inode xattr: invalid ea_ino [ 60.320718][ T5034] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.320851][ T5034] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.479: couldn't read orphan inode 15 (err -117) [ 60.320877][ T5034] loop4: lost filesystem error report for type 5 error -117 [ 60.324087][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 60.324107][ C1] EXT4-fs (loop4): initial error at time 1788240567: ext4_iget_extra_inode:5210: inode 15 [ 60.324138][ C1] EXT4-fs (loop4): last error at time 1788240567: ext4_orphan_get:1408 [ 60.606246][ T5059] veth0: entered promiscuous mode [ 60.611770][ T5057] veth0: left promiscuous mode [ 60.660463][ T5064] veth0: entered promiscuous mode [ 60.662198][ T5061] veth0: left promiscuous mode [ 60.725429][ T5067] loop1: detected capacity change from 0 to 1024 [ 60.733422][ T5067] EXT4-fs: Ignoring removed oldalloc option [ 60.844185][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 60.844217][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 60.854028][ T5080] loop3: detected capacity change from 0 to 512 [ 60.871881][ T5080] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.488: Failed to acquire dquot type 1 [ 60.871976][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 60.874090][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.874124][ C1] EXT4-fs (loop3): initial error at time 1788240567: ext4_acquire_dquot:7069 [ 60.874186][ C1] EXT4-fs (loop3): last error at time 1788240567: ext4_acquire_dquot:7069 [ 60.874370][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.488: corrupted inode contents [ 60.874416][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.874647][ T5080] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #16: comm syz.3.488: mark_inode_dirty error [ 60.874710][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.875056][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.488: corrupted inode contents [ 60.875156][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.875448][ T5080] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.488: mark_inode_dirty error [ 60.875511][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.875803][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.488: corrupted inode contents [ 60.875883][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.876126][ T5080] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 60.876186][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 60.876505][ T5080] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.488: corrupted inode contents [ 60.876567][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.876854][ T5080] EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.488: mark_inode_dirty error [ 60.876917][ T5080] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.877123][ T5080] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 60.877155][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 60.878151][ T5080] EXT4-fs (loop3): 1 truncate cleaned up [ 60.880512][ T5080] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.197467][ T5087] loop2: detected capacity change from 0 to 32768 [ 61.246857][ T5087] loop2: p1 p3 < > [ 61.330023][ T5111] FAULT_INJECTION: forcing a failure. [ 61.330023][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 61.330061][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: syz.4.496 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.330137][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.330151][ T5111] Call Trace: [ 61.330211][ T5111] [ 61.330220][ T5111] __dump_stack+0x1d/0x30 [ 61.330246][ T5111] dump_stack_lvl+0x95/0xd0 [ 61.330328][ T5111] dump_stack+0x15/0x1b [ 61.330349][ T5111] should_fail_ex+0x262/0x280 [ 61.330377][ T5111] ? nft_set_elem_init+0x7c/0x430 [ 61.330400][ T5111] should_failslab+0x8c/0xb0 [ 61.330546][ T5111] __kmalloc_noprof+0xd0/0x4d0 [ 61.330644][ T5111] ? nft_set_elem_init+0x7c/0x430 [ 61.330666][ T5111] nft_set_elem_init+0x7c/0x430 [ 61.330693][ T5111] nf_tables_newsetelem+0x1d72/0x2d80 [ 61.330736][ T5111] ? nf_tables_newsetelem+0xf81/0x2d80 [ 61.330769][ T5111] ? __account_obj_stock+0x43d/0x720 [ 61.330802][ T5111] nfnetlink_rcv+0xbf7/0x1740 [ 61.330872][ T5111] netlink_unicast+0x5a9/0x680 [ 61.330899][ T5111] netlink_sendmsg+0x5be/0x6f0 [ 61.331040][ T5111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.331067][ T5111] ____sys_sendmsg+0x532/0x580 [ 61.331106][ T5111] ___sys_sendmsg+0x195/0x1e0 [ 61.331140][ T5111] __x64_sys_sendmsg+0xd4/0x160 [ 61.331189][ T5111] x64_sys_call+0x22ab/0x2550 [ 61.331218][ T5111] do_syscall_64+0x112/0x360 [ 61.331247][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.331306][ T5111] RIP: 0033:0x7f2c4edbe159 [ 61.331324][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.331344][ T5111] RSP: 002b:00007f2c4d817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.331392][ T5111] RAX: ffffffffffffffda RBX: 00007f2c4f045fa0 RCX: 00007f2c4edbe159 [ 61.331408][ T5111] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 61.331472][ T5111] RBP: 00007f2c4d817090 R08: 0000000000000000 R09: 0000000000000000 [ 61.331484][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.331496][ T5111] R13: 00007f2c4f046038 R14: 00007f2c4f045fa0 R15: 00007ffca69eb178 [ 61.331617][ T5111] [ 62.423038][ T5164] FAULT_INJECTION: forcing a failure. [ 62.423038][ T5164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.424346][ T5164] CPU: 1 UID: 0 PID: 5164 Comm: syz.0.510 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.424373][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.424385][ T5164] Call Trace: [ 62.424392][ T5164] [ 62.424400][ T5164] __dump_stack+0x1d/0x30 [ 62.424430][ T5164] dump_stack_lvl+0x95/0xd0 [ 62.424451][ T5164] dump_stack+0x15/0x1b [ 62.424490][ T5164] should_fail_ex+0x262/0x280 [ 62.424511][ T5164] should_fail+0xb/0x20 [ 62.424529][ T5164] should_fail_usercopy+0x1a/0x20 [ 62.424557][ T5164] _copy_to_iter+0x248/0xea0 [ 62.424577][ T5164] ? rcu_preempt_deferred_qs_irqrestore+0x3b6/0x5a0 [ 62.424692][ T5164] ? rcu_read_unlock_special+0xa0/0x210 [ 62.424797][ T5164] seq_read_iter+0x728/0x8f0 [ 62.424824][ T5164] seq_read+0x279/0x2c0 [ 62.424925][ T5164] ? __pfx_seq_read+0x10/0x10 [ 62.424948][ T5164] proc_reg_read+0x128/0x1c0 [ 62.424970][ T5164] ? __pfx_proc_reg_read+0x10/0x10 [ 62.424992][ T5164] vfs_read+0x18e/0x7c0 [ 62.425023][ T5164] ? __fget_files+0x184/0x1c0 [ 62.425064][ T5164] ? __rcu_read_unlock+0x4e/0x70 [ 62.425091][ T5164] ? __fget_files+0x184/0x1c0 [ 62.425109][ T5164] ? mutex_unlock+0x4e/0x90 [ 62.425131][ T5164] __x64_sys_pread64+0xfd/0x150 [ 62.425225][ T5164] x64_sys_call+0xd2e/0x2550 [ 62.425299][ T5164] do_syscall_64+0x112/0x360 [ 62.425390][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.425411][ T5164] RIP: 0033:0x7fd9f3f0e159 [ 62.425428][ T5164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.425508][ T5164] RSP: 002b:00007fd9f2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 62.425530][ T5164] RAX: ffffffffffffffda RBX: 00007fd9f4195fa0 RCX: 00007fd9f3f0e159 [ 62.425620][ T5164] RDX: 0000000000018fdd RSI: 0000200000001b40 RDI: 0000000000000003 [ 62.425634][ T5164] RBP: 00007fd9f2967090 R08: 0000000000000000 R09: 0000000000000000 [ 62.425647][ T5164] R10: 00000000000009a3 R11: 0000000000000246 R12: 0000000000000001 [ 62.425660][ T5164] R13: 00007fd9f4196038 R14: 00007fd9f4195fa0 R15: 00007ffea18fd528 [ 62.425679][ T5164] [ 62.432437][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.432576][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.552761][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'. [ 62.552783][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'. [ 62.904398][ T5176] loop4: detected capacity change from 0 to 512 [ 62.997231][ T5176] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 63.219511][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 63.219539][ T29] audit: type=1400 audit(1788240569.849:3074): avc: denied { create } for pid=5186 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.292801][ T5190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.516'. [ 63.381947][ T29] audit: type=1400 audit(1788240570.139:3075): avc: denied { create } for pid=5192 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.384936][ T29] audit: type=1400 audit(1788240570.139:3076): avc: denied { ioctl } for pid=5192 comm="syz.2.518" path="socket:[11307]" dev="sockfs" ino=11307 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.451552][ T29] audit: type=1400 audit(1788240570.209:3077): avc: denied { bind } for pid=5175 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.493791][ T29] audit: type=1400 audit(1788240570.239:3078): avc: denied { write } for pid=5175 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.611971][ T29] audit: type=1400 audit(1788240570.369:3079): avc: denied { read } for pid=5203 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.612239][ T29] audit: type=1400 audit(1788240570.369:3080): avc: denied { getopt } for pid=5203 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.622592][ T29] audit: type=1400 audit(1788240570.369:3081): avc: denied { create } for pid=5203 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.646384][ T29] audit: type=1400 audit(1788240570.389:3082): avc: denied { read write } for pid=5203 comm="syz.3.523" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.646415][ T29] audit: type=1400 audit(1788240570.389:3083): avc: denied { open } for pid=5203 comm="syz.3.523" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.724147][ T5212] FAULT_INJECTION: forcing a failure. [ 63.724147][ T5212] name failslab, interval 1, probability 0, space 0, times 0 [ 63.724193][ T5212] CPU: 1 UID: 0 PID: 5212 Comm: syz.4.527 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.724219][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.724233][ T5212] Call Trace: [ 63.724314][ T5212] [ 63.724324][ T5212] __dump_stack+0x1d/0x30 [ 63.724354][ T5212] dump_stack_lvl+0x95/0xd0 [ 63.724378][ T5212] dump_stack+0x15/0x1b [ 63.724400][ T5212] should_fail_ex+0x262/0x280 [ 63.724422][ T5212] should_failslab+0x8c/0xb0 [ 63.724651][ T5212] __kvmalloc_node_noprof+0x168/0x5c0 [ 63.724684][ T5212] ? bpf_compute_postorder+0x83/0x3f0 [ 63.724803][ T5212] ? bpf_compute_postorder+0x83/0x3f0 [ 63.724838][ T5212] bpf_compute_postorder+0x83/0x3f0 [ 63.724876][ T5212] bpf_check+0x1a51/0x1d00 [ 63.724949][ T5212] bpf_prog_load+0xefb/0x1060 [ 63.725049][ T5212] ? avc_has_perm_noaudit+0xa3/0x120 [ 63.725079][ T5212] ? vfs_write+0x820/0x9a0 [ 63.725107][ T5212] __sys_bpf+0xbae/0xc30 [ 63.725131][ T5212] ? vfs_write+0x820/0x9a0 [ 63.725183][ T5212] ? vfs_write+0x820/0x9a0 [ 63.725215][ T5212] __x64_sys_bpf+0x69/0x80 [ 63.725291][ T5212] x64_sys_call+0xf26/0x2550 [ 63.725314][ T5212] do_syscall_64+0x112/0x360 [ 63.725338][ T5212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.725431][ T5212] RIP: 0033:0x7f2c4edbe159 [ 63.725518][ T5212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.725538][ T5212] RSP: 002b:00007f2c4d817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.725562][ T5212] RAX: ffffffffffffffda RBX: 00007f2c4f045fa0 RCX: 00007f2c4edbe159 [ 63.725579][ T5212] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 63.725594][ T5212] RBP: 00007f2c4d817090 R08: 0000000000000000 R09: 0000000000000000 [ 63.725608][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.725667][ T5212] R13: 00007f2c4f046038 R14: 00007f2c4f045fa0 R15: 00007ffca69eb178 [ 63.725720][ T5212] [ 63.832524][ T5218] loop2: detected capacity change from 0 to 1764 [ 63.948494][ T5215] loop3: detected capacity change from 0 to 2048 [ 63.978286][ T5215] loop3: p3 p4 < > [ 63.978656][ T5215] loop3: p3 size 201326592 extends beyond EOD, truncated [ 64.066562][ T5221] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.530: Failed to acquire dquot type 1 [ 64.066712][ T5221] loop4: lost filesystem error report for type 5 error -117 [ 64.078122][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 64.078150][ C1] EXT4-fs (loop4): initial error at time 1788240570: ext4_acquire_dquot:7069 [ 64.078190][ C1] EXT4-fs (loop4): last error at time 1788240570: ext4_acquire_dquot:7069 [ 64.119058][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.530: corrupted inode contents [ 64.119190][ T5221] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.134651][ T5221] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.530: mark_inode_dirty error [ 64.144251][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.530: corrupted inode contents [ 64.155878][ T5221] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.530: mark_inode_dirty error [ 64.168306][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.530: corrupted inode contents [ 64.174490][ T5221] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 64.174539][ T5221] loop4: lost filesystem error report for type 5 error -117 [ 64.176974][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.530: corrupted inode contents [ 64.177341][ T5221] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.530: mark_inode_dirty error [ 64.177847][ T5221] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 64.177882][ T5221] loop4: lost filesystem error report for type 5 error -117 [ 64.180840][ T5221] EXT4-fs (loop4): 1 truncate cleaned up [ 64.187634][ T5221] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.352411][ T5224] SELinux: policydb magic number 0x360303 does not match expected magic number 0xf97cff8c [ 64.352504][ T5224] SELinux: failed to load policy [ 64.393534][ T5232] EXT4-fs: Ignoring removed oldalloc option [ 64.482568][ T11] hid_parser_main: 14 callbacks suppressed [ 64.482596][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482625][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482723][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482747][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482769][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482794][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482818][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.482841][ T11] hid-generic 0000:0000:0001.000E: unknown main item tag 0x0 [ 64.483541][ T11] hid-generic 0000:0000:0001.000E: hidraw0: HID v0.10 Device [syz0] on syz1 [ 64.659320][ T5259] netlink: 14 bytes leftover after parsing attributes in process `syz.4.542'. [ 64.676180][ T5259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.700289][ T5259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.716897][ T5259] bond0 (unregistering): Released all slaves [ 64.732348][ T5265] netlink: 'syz.3.544': attribute type 15 has an invalid length. [ 64.732372][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 64.796885][ T5240] fido_id[5240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.815109][ T5265] netlink: 'syz.3.544': attribute type 15 has an invalid length. [ 64.815153][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 64.897262][ T5262] set_capacity_and_notify: 3 callbacks suppressed [ 64.897300][ T5262] loop1: detected capacity change from 0 to 512 [ 64.959548][ T5262] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.543: Failed to acquire dquot type 1 [ 64.959615][ T5262] loop1: lost filesystem error report for type 5 error -117 [ 64.971125][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.971148][ C1] EXT4-fs (loop1): initial error at time 1788240571: ext4_acquire_dquot:7069 [ 64.971174][ C1] EXT4-fs (loop1): last error at time 1788240571: ext4_acquire_dquot:7069 [ 65.006566][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.543: corrupted inode contents [ 65.006719][ T5262] fserror_report: 6 callbacks suppressed [ 65.006761][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.025760][ T5273] loop3: detected capacity change from 0 to 1024 [ 65.026056][ T5273] EXT4-fs: Ignoring removed oldalloc option [ 65.049749][ T5262] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.543: mark_inode_dirty error [ 65.049850][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.061699][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.543: corrupted inode contents [ 65.061849][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.083345][ T5262] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.543: mark_inode_dirty error [ 65.083438][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.104632][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.543: corrupted inode contents [ 65.104717][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.126231][ T5262] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 65.126309][ T5262] loop1: lost filesystem error report for type 5 error -117 [ 65.145843][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.543: corrupted inode contents [ 65.145928][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.165688][ T5262] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.543: mark_inode_dirty error [ 65.165757][ T5262] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.186759][ T5262] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 65.186841][ T5262] loop1: lost filesystem error report for type 5 error -117 [ 65.209339][ T5262] EXT4-fs (loop1): 1 truncate cleaned up [ 65.224133][ T5262] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.290627][ T5262] bridge0: port 2(bridge_slave_1) entered listening state [ 65.309058][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.322133][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 65.337823][ T5279] SELinux: policydb magic number 0x360303 does not match expected magic number 0xf97cff8c [ 65.337922][ T5279] SELinux: failed to load policy [ 65.344439][ T3421] bond0: (slave bond_slave_0): interface is now down [ 65.344460][ T3421] bond0: (slave bond_slave_1): interface is now down [ 65.374188][ T3421] bond0: (slave bond_slave_0): interface is now down [ 65.374218][ T3421] bond0: (slave bond_slave_1): interface is now down [ 65.374551][ T3421] bond0: now running without any active interface! [ 65.608681][ T5287] loop2: detected capacity change from 0 to 32768 [ 65.655448][ T5287] loop2: p1 p3 < > [ 65.781203][ T5312] loop4: detected capacity change from 0 to 512 [ 65.804793][ T37] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 65.804826][ T37] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 65.812681][ T37] hid-generic 0000:0000:0001.000F: hidraw0: HID v0.10 Device [syz0] on syz1 [ 66.016047][ T5326] loop4: detected capacity change from 0 to 128 [ 66.025470][ T5326] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.055259][ T5323] loop3: detected capacity change from 0 to 512 [ 66.115431][ T5323] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.561: Failed to acquire dquot type 1 [ 66.115514][ T5323] loop3: lost filesystem error report for type 5 error -117 [ 66.131030][ T5331] netlink: 14 bytes leftover after parsing attributes in process `syz.4.563'. [ 66.134578][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 66.134689][ C0] EXT4-fs (loop3): initial error at time 1788240572: ext4_acquire_dquot:7069 [ 66.135139][ C0] EXT4-fs (loop3): last error at time 1788240572: ext4_acquire_dquot:7069 [ 66.188795][ T5323] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.561: corrupted inode contents [ 66.188846][ T5323] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.189677][ T5323] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #16: comm syz.3.561: mark_inode_dirty error [ 66.189743][ T5323] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.190040][ T5323] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.561: corrupted inode contents [ 66.190155][ T5323] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.190486][ T5323] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.561: mark_inode_dirty error [ 66.191428][ T5323] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.561: corrupted inode contents [ 66.191785][ T5323] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 66.191847][ T5323] loop3: lost filesystem error report for type 5 error -117 [ 66.192270][ T5323] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.561: corrupted inode contents [ 66.192554][ T5323] EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.561: mark_inode_dirty error [ 66.192818][ T5323] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 66.192851][ T5323] loop3: lost filesystem error report for type 5 error -117 [ 66.193998][ T5323] EXT4-fs (loop3): 1 truncate cleaned up [ 66.203486][ T5323] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.379242][ T3384] hid-generic 0000:0000:0001.0010: hidraw0: HID v0.10 Device [syz0] on syz1 [ 66.503099][ T3308] EXT4-fs unmount: 32 callbacks suppressed [ 66.503124][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.633607][ T5349] loop2: detected capacity change from 0 to 512 [ 66.724667][ T5349] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 66.748550][ T5354] loop1: detected capacity change from 0 to 1024 [ 66.756806][ T5354] EXT4-fs: Ignoring removed oldalloc option [ 66.770344][ T5359] loop3: detected capacity change from 0 to 512 [ 66.770481][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.793378][ T5359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.814930][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.009277][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.041410][ T5375] loop2: detected capacity change from 0 to 1024 [ 67.065849][ T3494] hid-generic 0000:0000:0001.0011: hidraw0: HID v0.10 Device [syz0] on syz1 [ 67.079252][ T5375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.089771][ T5375] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 67.109535][ T5375] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 67.111907][ T5375] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.111907][ T5375] [ 67.111932][ T5375] EXT4-fs (loop2): Total free blocks count 0 [ 67.111985][ T5375] EXT4-fs (loop2): Free/Dirty block details [ 67.112000][ T5375] EXT4-fs (loop2): free_blocks=20480 [ 67.112017][ T5375] EXT4-fs (loop2): dirty_blocks=80 [ 67.112033][ T5375] EXT4-fs (loop2): Block reservation details [ 67.112047][ T5375] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 67.183991][ T5375] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.205176][ T5382] fido_id[5382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.215881][ T5375] bridge0: port 3(netdevsim1) entered blocking state [ 67.215915][ T5375] bridge0: port 3(netdevsim1) entered disabled state [ 67.216033][ T5375] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 67.237567][ T5375] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 67.237858][ T5375] bridge0: port 3(netdevsim1) entered blocking state [ 67.237892][ T5375] bridge0: port 3(netdevsim1) entered forwarding state [ 67.394422][ T5376] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.578: Failed to acquire dquot type 1 [ 67.394549][ T5376] loop4: lost filesystem error report for type 5 error -117 [ 67.396816][ T5376] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.578: corrupted inode contents [ 67.397218][ T5376] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.578: mark_inode_dirty error [ 67.397541][ T5376] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.578: corrupted inode contents [ 67.397818][ T5376] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.578: mark_inode_dirty error [ 67.398231][ T5376] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.578: corrupted inode contents [ 67.398497][ T5376] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 67.398529][ T5376] loop4: lost filesystem error report for type 5 error -117 [ 67.398932][ T5376] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.578: corrupted inode contents [ 67.399250][ T5376] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.578: mark_inode_dirty error [ 67.399542][ T5376] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 67.399572][ T5376] loop4: lost filesystem error report for type 5 error -117 [ 67.400740][ T5376] EXT4-fs (loop4): 1 truncate cleaned up [ 67.402862][ T5376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.403128][ T5376] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.482132][ T5400] FAULT_INJECTION: forcing a failure. [ 67.482132][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 67.482162][ T5400] CPU: 0 UID: 0 PID: 5400 Comm: syz.3.582 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.482250][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.482262][ T5400] Call Trace: [ 67.482269][ T5400] [ 67.482276][ T5400] __dump_stack+0x1d/0x30 [ 67.482306][ T5400] dump_stack_lvl+0x95/0xd0 [ 67.482327][ T5400] dump_stack+0x15/0x1b [ 67.482347][ T5400] should_fail_ex+0x262/0x280 [ 67.482368][ T5400] ? rtnl_newlink+0x5c/0x1510 [ 67.482514][ T5400] should_failslab+0x8c/0xb0 [ 67.482541][ T5400] __kmalloc_cache_noprof+0x7a/0x400 [ 67.482568][ T5400] ? rtnl_newlink+0x5c/0x1510 [ 67.482705][ T5400] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.482726][ T5400] rtnl_newlink+0x5c/0x1510 [ 67.482754][ T5400] ? __memcg_slab_free_hook+0x154/0x340 [ 67.482777][ T5400] ? __rcu_read_unlock+0x4e/0x70 [ 67.482850][ T5400] ? avc_has_perm_noaudit+0xa3/0x120 [ 67.482873][ T5400] ? cred_has_capability+0x224/0x2a0 [ 67.482918][ T5400] ? selinux_capable+0x31/0x40 [ 67.482941][ T5400] ? security_capable+0x7b/0x90 [ 67.482972][ T5400] ? ns_capable+0x80/0xb0 [ 67.483002][ T5400] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.483023][ T5400] rtnetlink_rcv_msg+0x64b/0x720 [ 67.483048][ T5400] netlink_rcv_skb+0x11e/0x220 [ 67.483071][ T5400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.483096][ T5400] rtnetlink_rcv+0x1c/0x30 [ 67.483116][ T5400] netlink_unicast+0x5a9/0x680 [ 67.483194][ T5400] netlink_sendmsg+0x5be/0x6f0 [ 67.483250][ T5400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.483275][ T5400] ____sys_sendmsg+0x532/0x580 [ 67.483306][ T5400] ___sys_sendmsg+0x195/0x1e0 [ 67.483378][ T5400] __x64_sys_sendmsg+0xd4/0x160 [ 67.483409][ T5400] x64_sys_call+0x22ab/0x2550 [ 67.483491][ T5400] do_syscall_64+0x112/0x360 [ 67.483571][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.483593][ T5400] RIP: 0033:0x7f7363bde159 [ 67.483651][ T5400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.483669][ T5400] RSP: 002b:00007f7362616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.483757][ T5400] RAX: ffffffffffffffda RBX: 00007f7363e66090 RCX: 00007f7363bde159 [ 67.483920][ T5400] RDX: 0000000020000840 RSI: 0000200000000200 RDI: 0000000000000004 [ 67.483934][ T5400] RBP: 00007f7362616090 R08: 0000000000000000 R09: 0000000000000000 [ 67.483948][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.483960][ T5400] R13: 00007f7363e66128 R14: 00007f7363e66090 R15: 00007ffe0113de38 [ 67.484031][ T5400] [ 67.655055][ T5405] EXT4-fs: Ignoring removed oldalloc option [ 67.694929][ T5405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.809366][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.869497][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.880769][ T5418] netlink: 14 bytes leftover after parsing attributes in process `syz.2.589'. [ 68.131231][ T9] hid-generic 0000:0000:0001.0012: hidraw0: HID v0.10 Device [syz0] on syz1 [ 68.205358][ T5442] fido_id[5442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.273398][ T5437] FAULT_INJECTION: forcing a failure. [ 68.273398][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 68.286366][ T5437] CPU: 1 UID: 0 PID: 5437 Comm: syz.3.595 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.286398][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.286471][ T5437] Call Trace: [ 68.286478][ T5437] [ 68.286554][ T5437] __dump_stack+0x1d/0x30 [ 68.286584][ T5437] dump_stack_lvl+0x95/0xd0 [ 68.286610][ T5437] dump_stack+0x15/0x1b [ 68.286632][ T5437] should_fail_ex+0x262/0x280 [ 68.286656][ T5437] ? security_inode_alloc+0x37/0x100 [ 68.286691][ T5437] should_failslab+0x8c/0xb0 [ 68.286717][ T5437] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 68.286746][ T5437] ? security_inode_alloc+0x37/0x100 [ 68.286787][ T5437] security_inode_alloc+0x37/0x100 [ 68.286811][ T5437] inode_init_always_gfp+0x495/0x4e0 [ 68.286883][ T5437] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 68.287020][ T5437] alloc_inode+0x58/0x170 [ 68.287091][ T5437] new_inode+0x1d/0xe0 [ 68.287110][ T5437] __debugfs_create_file+0x97/0x2b0 [ 68.287133][ T5437] debugfs_create_file_full+0x3f/0x60 [ 68.287186][ T5437] ref_tracker_dir_debugfs+0x10e/0x220 [ 68.287217][ T5437] ? copy_net_ns+0x139/0x490 [ 68.287245][ T5437] preinit_net+0x100/0x330 [ 68.287268][ T5437] copy_net_ns+0x188/0x490 [ 68.287288][ T5437] create_new_namespaces+0x1f6/0x420 [ 68.287395][ T5437] unshare_nsproxy_namespaces+0x115/0x150 [ 68.287461][ T5437] ksys_unshare+0x42b/0x710 [ 68.287491][ T5437] __x64_sys_unshare+0x1f/0x30 [ 68.287524][ T5437] x64_sys_call+0x1e33/0x2550 [ 68.287551][ T5437] do_syscall_64+0x112/0x360 [ 68.287583][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.287682][ T5437] RIP: 0033:0x7f7363bde159 [ 68.287701][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.287769][ T5437] RSP: 002b:00007f7362616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 68.287792][ T5437] RAX: ffffffffffffffda RBX: 00007f7363e66090 RCX: 00007f7363bde159 [ 68.287807][ T5437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 68.287823][ T5437] RBP: 00007f7362616090 R08: 0000000000000000 R09: 0000000000000000 [ 68.287837][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.287851][ T5437] R13: 00007f7363e66128 R14: 00007f7363e66090 R15: 00007ffe0113de38 [ 68.287940][ T5437] [ 68.397455][ T5437] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88810b0564c0' [ 68.481422][ T5437] Failed to initialize the IGMP autojoin socket (err -2) [ 68.885601][ T5449] EXT4-fs: Ignoring removed oldalloc option [ 68.988162][ T5449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.032928][ T5456] __quota_error: 666 callbacks suppressed [ 69.032968][ T5456] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 69.033251][ T5456] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 69.033333][ T5456] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.602: Failed to acquire dquot type 1 [ 69.033399][ T5456] loop4: lost filesystem error report for type 5 error -117 [ 69.039509][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.039531][ C0] EXT4-fs (loop4): initial error at time 1788240575: ext4_acquire_dquot:7069 [ 69.039568][ C0] EXT4-fs (loop4): last error at time 1788240575: ext4_acquire_dquot:7069 [ 69.076740][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.602: corrupted inode contents [ 69.077079][ T5456] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.602: mark_inode_dirty error [ 69.077464][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.602: corrupted inode contents [ 69.077800][ T5456] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.602: mark_inode_dirty error [ 69.078222][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.602: corrupted inode contents [ 69.078627][ T5456] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 69.078658][ T5456] loop4: lost filesystem error report for type 5 error -117 [ 69.078977][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.602: corrupted inode contents [ 69.079192][ T5456] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.602: mark_inode_dirty error [ 69.079506][ T5456] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 69.081087][ T5456] EXT4-fs (loop4): 1 truncate cleaned up [ 69.083323][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.083635][ T5456] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.246204][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.258262][ T29] audit: type=1326 audit(1788240576.019:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.258335][ T29] audit: type=1326 audit(1788240576.019:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.283863][ T29] audit: type=1326 audit(1788240576.019:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.283912][ T29] audit: type=1326 audit(1788240576.019:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.283997][ T29] audit: type=1326 audit(1788240576.019:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.284023][ T29] audit: type=1326 audit(1788240576.019:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.284046][ T29] audit: type=1326 audit(1788240576.019:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7363bde159 code=0x7ffc0000 [ 69.284143][ T29] audit: type=1326 audit(1788240576.019:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.3.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7363b9e98e code=0x7ffc0000 [ 69.388566][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.461144][ T5479] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.595112][ T5492] netlink: 14 bytes leftover after parsing attributes in process `syz.1.614'. [ 69.885045][ T3494] hid_parser_main: 30 callbacks suppressed [ 69.885076][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885129][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885168][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885192][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885217][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885243][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885321][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.885346][ T3494] hid-generic 0000:0000:0001.0013: unknown main item tag 0x0 [ 69.891949][ T3494] hid-generic 0000:0000:0001.0013: hidraw0: HID v0.10 Device [syz0] on syz1 [ 69.984087][ T5494] set_capacity_and_notify: 5 callbacks suppressed [ 69.984170][ T5494] loop3: detected capacity change from 0 to 32768 [ 70.064861][ T5494] loop3: p1 p3 < > [ 70.107285][ T5516] loop4: detected capacity change from 0 to 512 [ 70.149760][ T5516] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.621: Failed to acquire dquot type 1 [ 70.149825][ T5516] fserror_report: 1 callbacks suppressed [ 70.149905][ T5516] loop4: lost filesystem error report for type 5 error -117 [ 70.161340][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 70.161366][ C0] EXT4-fs (loop4): initial error at time 1788240576: ext4_acquire_dquot:7069 [ 70.161406][ C0] EXT4-fs (loop4): last error at time 1788240576: ext4_acquire_dquot:7069 [ 70.204160][ T5516] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.621: corrupted inode contents [ 70.204261][ T5516] fserror_report: 18 callbacks suppressed [ 70.204309][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.222432][ T5516] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.621: mark_inode_dirty error [ 70.222513][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.243589][ T5516] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.621: corrupted inode contents [ 70.243653][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.262317][ T5516] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.621: mark_inode_dirty error [ 70.262361][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.262918][ T5516] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.621: corrupted inode contents [ 70.262969][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.264597][ T5516] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 70.264655][ T5516] loop4: lost filesystem error report for type 5 error -117 [ 70.265123][ T5516] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.621: corrupted inode contents [ 70.265175][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.267171][ T5516] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.621: mark_inode_dirty error [ 70.267234][ T5516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.271259][ T5516] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 70.271292][ T5516] loop4: lost filesystem error report for type 5 error -117 [ 70.273763][ T5516] EXT4-fs (loop4): 1 truncate cleaned up [ 70.279890][ T5516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.292406][ T5516] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.402262][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.403062][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 70.527834][ T5544] loop1: detected capacity change from 0 to 764 [ 70.581724][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.595708][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.595912][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.644602][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 70.644677][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 70.663805][ T5552] loop3: detected capacity change from 0 to 512 [ 70.686112][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.747444][ T5548] ./dev/sda1: Can't lookup blockdev [ 70.972572][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.988389][ T5562] loop4: detected capacity change from 0 to 32768 [ 71.016303][ T5576] netlink: 14 bytes leftover after parsing attributes in process `syz.2.641'. [ 71.044766][ T5562] loop4: p1 p3 < > [ 71.156525][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 71.167637][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.181008][ T5580] loop4: detected capacity change from 0 to 512 [ 71.242199][ T5580] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.643: Failed to acquire dquot type 1 [ 71.242265][ T5580] loop4: lost filesystem error report for type 5 error -117 [ 71.254183][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 71.254207][ C0] EXT4-fs (loop4): initial error at time 1788240577: ext4_acquire_dquot:7069 [ 71.254232][ C0] EXT4-fs (loop4): last error at time 1788240577: ext4_acquire_dquot:7069 [ 71.298297][ T5580] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.643: corrupted inode contents [ 71.298356][ T5580] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 71.312064][ T5580] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.643: mark_inode_dirty error [ 71.312146][ T5580] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 71.334579][ T5580] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.643: corrupted inode contents [ 71.334657][ T5580] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 71.338286][ T5580] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.643: mark_inode_dirty error [ 71.338748][ T5580] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.643: corrupted inode contents [ 71.339219][ T5580] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 71.339303][ T5580] loop4: lost filesystem error report for type 5 error -117 [ 71.339682][ T5580] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.643: corrupted inode contents [ 71.341046][ T5580] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.643: mark_inode_dirty error [ 71.342268][ T5580] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 71.342414][ T5580] loop4: lost filesystem error report for type 5 error -117 [ 71.351688][ T5580] EXT4-fs (loop4): 1 truncate cleaned up [ 71.358930][ T5580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.359259][ T5580] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.562031][ T5593] ./dev/sda1: Can't lookup blockdev [ 71.583820][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.725351][ T5608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'. [ 71.904401][ T5611] loop1: detected capacity change from 0 to 32768 [ 71.955424][ T5611] loop1: p1 p3 < > [ 72.031393][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 72.034342][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 72.160034][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 72.160064][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 72.181742][ T5621] loop2: detected capacity change from 0 to 512 [ 72.214424][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.214802][ T5621] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.268507][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.664'. [ 72.268605][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.664'. [ 72.268628][ T5640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 72.391606][ T5637] ./dev/sda1: Can't lookup blockdev [ 72.410007][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.475691][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.489411][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.492312][ T5650] bond0 (unregistering): Released all slaves [ 72.772831][ T5656] loop2: detected capacity change from 0 to 32768 [ 72.829905][ T5656] loop2: p1 p3 < > [ 73.007898][ T5679] loop2: detected capacity change from 0 to 1024 [ 73.023283][ T5679] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.023322][ T5679] EXT4-fs: Ignoring removed oldalloc option [ 73.025709][ T5679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.025810][ T5679] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.068175][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.100539][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.102788][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.125245][ T5688] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 73.554210][ T5713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.575157][ T5715] FAULT_INJECTION: forcing a failure. [ 73.575157][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 73.575193][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: syz.0.691 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.575283][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.575294][ T5715] Call Trace: [ 73.575300][ T5715] [ 73.575358][ T5715] __dump_stack+0x1d/0x30 [ 73.575415][ T5715] dump_stack_lvl+0x95/0xd0 [ 73.575435][ T5715] dump_stack+0x15/0x1b [ 73.575453][ T5715] should_fail_ex+0x262/0x280 [ 73.575475][ T5715] should_failslab+0x8c/0xb0 [ 73.575508][ T5715] __kvmalloc_node_noprof+0x168/0x5c0 [ 73.575537][ T5715] ? simple_xattr_alloc+0x58/0xe0 [ 73.575561][ T5715] ? simple_xattr_alloc+0x58/0xe0 [ 73.575586][ T5715] simple_xattr_alloc+0x58/0xe0 [ 73.575683][ T5715] shmem_initxattrs+0x19f/0x360 [ 73.575704][ T5715] security_inode_init_security+0x249/0x320 [ 73.575728][ T5715] ? __pfx_shmem_initxattrs+0x10/0x10 [ 73.575750][ T5715] shmem_mknod+0xaa/0x170 [ 73.575816][ T5715] shmem_create+0x34/0x50 [ 73.575846][ T5715] lookup_open+0xc88/0x10d0 [ 73.575898][ T5715] path_openat+0x415/0x10d0 [ 73.575923][ T5715] ? kstrtouint+0x76/0xc0 [ 73.576053][ T5715] do_file_open+0x16c/0x290 [ 73.576084][ T5715] do_sys_openat2+0xa0/0x130 [ 73.576112][ T5715] __x64_sys_openat+0xf2/0x120 [ 73.576134][ T5715] x64_sys_call+0x1f72/0x2550 [ 73.576158][ T5715] do_syscall_64+0x112/0x360 [ 73.576185][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.576268][ T5715] RIP: 0033:0x7fd9f3f0e159 [ 73.576285][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.576306][ T5715] RSP: 002b:00007fd9f2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.576328][ T5715] RAX: ffffffffffffffda RBX: 00007fd9f4195fa0 RCX: 00007fd9f3f0e159 [ 73.576343][ T5715] RDX: 0000000000183042 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 73.576357][ T5715] RBP: 00007fd9f2967090 R08: 0000000000000000 R09: 0000000000000000 [ 73.576397][ T5715] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 73.576410][ T5715] R13: 00007fd9f4196038 R14: 00007fd9f4195fa0 R15: 00007ffea18fd528 [ 73.576428][ T5715] [ 73.876631][ T5704] loop2: p1 p3 < > [ 74.251487][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.495977][ T5747] __quota_error: 362 callbacks suppressed [ 74.496083][ T5747] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 74.496425][ T5747] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 74.496513][ T5747] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.702: Failed to acquire dquot type 1 [ 74.496611][ T5747] loop1: lost filesystem error report for type 5 error -117 [ 74.512767][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 74.512792][ C0] EXT4-fs (loop1): initial error at time 1788240581: ext4_acquire_dquot:7069 [ 74.512827][ C0] EXT4-fs (loop1): last error at time 1788240581: ext4_acquire_dquot:7069 [ 74.522465][ T29] audit: type=1326 audit(1788240581.279:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.522514][ T29] audit: type=1326 audit(1788240581.279:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.528484][ T29] audit: type=1326 audit(1788240581.229:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.528575][ T29] audit: type=1326 audit(1788240581.289:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.538334][ T29] audit: type=1326 audit(1788240581.289:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.538513][ T29] audit: type=1326 audit(1788240581.299:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.538821][ T29] audit: type=1326 audit(1788240581.299:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.538919][ T29] audit: type=1326 audit(1788240581.299:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4edbe159 code=0x7ffc0000 [ 74.666395][ T5747] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.702: corrupted inode contents [ 74.666738][ T5747] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.702: mark_inode_dirty error [ 74.667147][ T5747] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.702: corrupted inode contents [ 74.667423][ T5747] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.702: mark_inode_dirty error [ 74.668127][ T5747] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.702: corrupted inode contents [ 74.668467][ T5747] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 74.668499][ T5747] loop1: lost filesystem error report for type 5 error -117 [ 74.668795][ T5747] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.702: corrupted inode contents [ 74.669154][ T5747] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.702: mark_inode_dirty error [ 74.669493][ T5747] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 74.669524][ T5747] loop1: lost filesystem error report for type 5 error -117 [ 74.670749][ T5747] EXT4-fs (loop1): 1 truncate cleaned up [ 74.672671][ T5747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.672900][ T5747] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.826031][ T5760] __nla_validate_parse: 5 callbacks suppressed [ 74.826049][ T5760] netlink: 7 bytes leftover after parsing attributes in process `syz.0.706'. [ 74.826186][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 74.826201][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 74.978726][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.927326][ T5914] set_capacity_and_notify: 3 callbacks suppressed [ 75.927355][ T5914] loop4: detected capacity change from 0 to 512 [ 76.117887][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.117926][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.117985][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118008][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118035][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118060][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118135][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118164][ T3494] hid-generic 0000:0000:0001.0014: unknown main item tag 0x0 [ 76.118810][ T3494] hid-generic 0000:0000:0001.0014: hidraw0: HID v0.10 Device [syz0] on syz1 [ 76.120498][ T5930] netlink: 14 bytes leftover after parsing attributes in process `syz.2.722'. [ 76.199486][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 76.229408][ T5937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 76.727400][ T5942] loop1: detected capacity change from 0 to 32768 [ 76.778832][ T5942] loop1: p1 p3 < > [ 76.861917][ T5977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 77.208134][ T5994] loop2: detected capacity change from 0 to 512 [ 77.292669][ T6012] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 77.293578][ T5994] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.746: Failed to acquire dquot type 1 [ 77.293628][ T5994] loop2: lost filesystem error report for type 5 error -117 [ 77.294394][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 77.294535][ C1] EXT4-fs (loop2): initial error at time 1788240584: ext4_acquire_dquot:7069 [ 77.294742][ C1] EXT4-fs (loop2): last error at time 1788240584: ext4_acquire_dquot:7069 [ 77.340460][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.746: corrupted inode contents [ 77.340506][ T5994] fserror_report: 11 callbacks suppressed [ 77.340586][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.340886][ T5994] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #16: comm syz.2.746: mark_inode_dirty error [ 77.340937][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.341325][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.746: corrupted inode contents [ 77.341407][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.341824][ T5994] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.746: mark_inode_dirty error [ 77.341903][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.342300][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.746: corrupted inode contents [ 77.342351][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.342678][ T5994] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 77.342725][ T5994] loop2: lost filesystem error report for type 5 error -117 [ 77.343091][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.746: corrupted inode contents [ 77.343221][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.343482][ T5994] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.746: mark_inode_dirty error [ 77.343541][ T5994] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.343818][ T5994] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 77.343850][ T5994] loop2: lost filesystem error report for type 5 error -117 [ 77.346310][ T5994] EXT4-fs (loop2): 1 truncate cleaned up [ 77.348063][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.348408][ T5994] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.579151][ T6019] netlink: 14 bytes leftover after parsing attributes in process `syz.1.755'. [ 77.625243][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.649855][ T6025] veth0: entered promiscuous mode [ 77.657008][ T6024] veth0: left promiscuous mode [ 77.823621][ T6041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 78.091838][ T6053] loop2: detected capacity change from 0 to 512 [ 78.126089][ T6053] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.770: Failed to acquire dquot type 1 [ 78.126186][ T6053] loop2: lost filesystem error report for type 5 error -117 [ 78.131814][ T6053] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.770: corrupted inode contents [ 78.131933][ T6053] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.132536][ T6053] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #16: comm syz.2.770: mark_inode_dirty error [ 78.132585][ T6053] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.132935][ T6053] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.770: corrupted inode contents [ 78.133066][ T6053] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.133448][ T6053] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.770: mark_inode_dirty error [ 78.133800][ T6053] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.770: corrupted inode contents [ 78.134126][ C1] EXT4-fs (loop2): error count since last fsck: 6 [ 78.134145][ C1] EXT4-fs (loop2): initial error at time 1788240584: ext4_acquire_dquot:7069 [ 78.134169][ C1] EXT4-fs (loop2): last error at time 1788240584: ext4_do_update_inode:5801: inode 16 [ 78.139878][ T6053] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 78.139927][ T6053] loop2: lost filesystem error report for type 5 error -117 [ 78.147402][ T6053] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.770: corrupted inode contents [ 78.158634][ T6053] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.770: mark_inode_dirty error [ 78.168576][ T6053] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 78.168625][ T6053] loop2: lost filesystem error report for type 5 error -117 [ 78.200975][ T6053] EXT4-fs (loop2): 1 truncate cleaned up [ 78.202841][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.203133][ T6053] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.366475][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.454133][ T6078] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 78.587889][ T6092] netlink: 14 bytes leftover after parsing attributes in process `syz.3.786'. [ 78.730116][ T6103] veth0: entered promiscuous mode [ 78.730361][ T6102] veth0: left promiscuous mode [ 78.790157][ T6108] ./dev/sda1: Can't lookup blockdev [ 78.857115][ T6112] FAULT_INJECTION: forcing a failure. [ 78.857115][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 78.857151][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.2.794 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.857204][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.857218][ T6112] Call Trace: [ 78.857225][ T6112] [ 78.857252][ T6112] __dump_stack+0x1d/0x30 [ 78.857313][ T6112] dump_stack_lvl+0x95/0xd0 [ 78.857402][ T6112] dump_stack+0x15/0x1b [ 78.857422][ T6112] should_fail_ex+0x262/0x280 [ 78.857442][ T6112] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 78.857463][ T6112] should_failslab+0x8c/0xb0 [ 78.857537][ T6112] __kmalloc_cache_noprof+0x7a/0x400 [ 78.857563][ T6112] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 78.857581][ T6112] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 78.857612][ T6112] bpf_prog_alloc_no_stats+0xc4/0x390 [ 78.857694][ T6112] bpf_prog_alloc+0x3c/0x150 [ 78.857722][ T6112] __get_filter+0x92/0x230 [ 78.857754][ T6112] sk_attach_filter+0x25/0x280 [ 78.857851][ T6112] ? sk_setsockopt+0x1eec/0x20e0 [ 78.857880][ T6112] sk_setsockopt+0x1ef9/0x20e0 [ 78.857996][ T6112] sock_setsockopt+0x40/0x50 [ 78.858026][ T6112] __sys_setsockopt+0x13a/0x200 [ 78.858055][ T6112] __x64_sys_setsockopt+0x64/0x80 [ 78.858199][ T6112] x64_sys_call+0x248f/0x2550 [ 78.858240][ T6112] do_syscall_64+0x112/0x360 [ 78.858400][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.858423][ T6112] RIP: 0033:0x7f7f86ede159 [ 78.858511][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.858530][ T6112] RSP: 002b:00007f7f85937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.858552][ T6112] RAX: ffffffffffffffda RBX: 00007f7f87165fa0 RCX: 00007f7f86ede159 [ 78.858635][ T6112] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000006 [ 78.858648][ T6112] RBP: 00007f7f86f75024 R08: 0000000000000010 R09: 0000000000000000 [ 78.858662][ T6112] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000000 [ 78.858676][ T6112] R13: 00007f7f87166038 R14: 00007f7f87165fa0 R15: 00007fff25607768 [ 78.858695][ T6112] [ 78.915274][ T6112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 79.065691][ T6121] loop4: detected capacity change from 0 to 1024 [ 79.067897][ T6121] EXT4-fs: Ignoring removed oldalloc option [ 79.081718][ T6121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.155125][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.313963][ T6139] veth0: entered promiscuous mode [ 79.315678][ T6138] veth0: left promiscuous mode [ 79.317031][ T6142] ./dev/sda1: Can't lookup blockdev [ 79.329561][ T6140] loop2: detected capacity change from 0 to 2048 [ 79.339469][ T6134] loop1: detected capacity change from 0 to 512 [ 79.371616][ T6140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.396425][ T6134] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.803: Failed to acquire dquot type 1 [ 79.396481][ T6134] loop1: lost filesystem error report for type 5 error -117 [ 79.407961][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.407983][ C0] EXT4-fs (loop1): initial error at time 1788240586: ext4_acquire_dquot:7069 [ 79.408030][ C0] EXT4-fs (loop1): last error at time 1788240586: ext4_acquire_dquot:7069 [ 79.447520][ T6134] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.803: corrupted inode contents [ 79.464420][ T6134] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.803: mark_inode_dirty error [ 79.465846][ T6134] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.803: corrupted inode contents [ 79.478408][ T6134] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.803: mark_inode_dirty error [ 79.485302][ T6134] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.803: corrupted inode contents [ 79.488808][ T6134] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 79.488875][ T6134] loop1: lost filesystem error report for type 5 error -117 [ 79.493242][ T6134] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.803: corrupted inode contents [ 79.493771][ T6134] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.803: mark_inode_dirty error [ 79.496665][ T6134] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 79.496699][ T6134] loop1: lost filesystem error report for type 5 error -117 [ 79.497948][ T6134] EXT4-fs (loop1): 1 truncate cleaned up [ 79.503206][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.503501][ T6134] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.532509][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 79.532526][ T29] audit: type=1400 audit(1788240586.289:4723): avc: denied { map } for pid=6137 comm="syz.2.806" path="/160/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.532593][ T29] audit: type=1400 audit(1788240586.289:4724): avc: denied { execute } for pid=6137 comm="syz.2.806" path="/160/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.548617][ T6155] FAULT_INJECTION: forcing a failure. [ 79.548617][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 79.548647][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.2.806 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.548671][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.548683][ T6155] Call Trace: [ 79.548689][ T6155] [ 79.548697][ T6155] __dump_stack+0x1d/0x30 [ 79.548723][ T6155] dump_stack_lvl+0x95/0xd0 [ 79.548818][ T6155] dump_stack+0x15/0x1b [ 79.548837][ T6155] should_fail_ex+0x262/0x280 [ 79.548921][ T6155] ? __es_insert_extent+0x50e/0xee0 [ 79.548941][ T6155] should_failslab+0x8c/0xb0 [ 79.548968][ T6155] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 79.548994][ T6155] ? __es_insert_extent+0x50e/0xee0 [ 79.549159][ T6155] __es_insert_extent+0x50e/0xee0 [ 79.549205][ T6155] ext4_es_insert_extent+0x44f/0x1c30 [ 79.549230][ T6155] ext4_map_create_blocks+0x2f3/0x390 [ 79.549315][ T6155] ext4_map_blocks+0x57f/0x9a0 [ 79.549348][ T6155] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 79.549380][ T6155] ext4_convert_inline_data+0x2bd/0x360 [ 79.549462][ T6155] ext4_fallocate+0x163/0x320 [ 79.549491][ T6155] vfs_fallocate+0x3ac/0x400 [ 79.549581][ T6155] __x64_sys_fallocate+0x7a/0xd0 [ 79.549608][ T6155] x64_sys_call+0x1e1d/0x2550 [ 79.549633][ T6155] do_syscall_64+0x112/0x360 [ 79.549660][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.549758][ T6155] RIP: 0033:0x7f7f86ede159 [ 79.549776][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.549794][ T6155] RSP: 002b:00007f7f85916028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 79.549816][ T6155] RAX: ffffffffffffffda RBX: 00007f7f87166090 RCX: 00007f7f86ede159 [ 79.549830][ T6155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 79.549843][ T6155] RBP: 00007f7f85916090 R08: 0000000000000000 R09: 0000000000000000 [ 79.549899][ T6155] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000001 [ 79.549912][ T6155] R13: 00007f7f87166128 R14: 00007f7f87166090 R15: 00007fff25607768 [ 79.549931][ T6155] [ 79.604366][ T6159] loop4: detected capacity change from 0 to 1024 [ 79.622906][ T6159] EXT4-fs: Ignoring removed oldalloc option [ 79.661878][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.700911][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.754011][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.865419][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.892909][ T29] audit: type=1326 audit(1788240586.649:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.909426][ T29] audit: type=1326 audit(1788240586.659:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.909714][ T29] audit: type=1326 audit(1788240586.669:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.909874][ T29] audit: type=1326 audit(1788240586.669:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.922378][ T29] audit: type=1326 audit(1788240586.679:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.934491][ T6175] ./dev/sda1: Can't lookup blockdev [ 79.961471][ T29] audit: type=1326 audit(1788240586.719:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.961501][ T29] audit: type=1326 audit(1788240586.719:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86ede159 code=0x7ffc0000 [ 79.961940][ T29] audit: type=1326 audit(1788240586.719:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f86e9e98e code=0x7ffc0000 [ 80.219601][ T6186] netlink: 14 bytes leftover after parsing attributes in process `syz.3.823'. [ 80.310477][ T6190] veth0: entered promiscuous mode [ 80.310630][ T6189] veth0: left promiscuous mode [ 80.321817][ T6191] loop4: detected capacity change from 0 to 1764 [ 80.398877][ T6204] ./dev/sda1: Can't lookup blockdev [ 80.456708][ T6202] loop4: detected capacity change from 0 to 1024 [ 80.480235][ T6202] EXT4-fs: Ignoring removed oldalloc option [ 80.502121][ T6202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.531895][ T6208] geneve2: entered allmulticast mode [ 80.572116][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.781124][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'. [ 80.781154][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'. [ 80.893908][ T6233] veth0: entered promiscuous mode [ 80.894125][ T6230] veth0: left promiscuous mode [ 80.932323][ T6237] ./dev/sda1: Can't lookup blockdev [ 80.976316][ T6239] loop4: detected capacity change from 0 to 1024 [ 80.986906][ T6239] EXT4-fs: Ignoring removed oldalloc option [ 81.008727][ T6239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.042033][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.255440][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255477][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255508][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255538][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255564][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255591][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255618][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.255684][ T37] hid-generic 0000:0000:0001.0015: unknown main item tag 0x0 [ 81.256217][ T37] hid-generic 0000:0000:0001.0015: hidraw0: HID v0.10 Device [syz0] on syz1 [ 81.370829][ T6263] geneve2: entered allmulticast mode [ 81.390850][ T6265] ./dev/sda1: Can't lookup blockdev [ 81.435342][ T6268] veth0: entered promiscuous mode [ 81.435518][ T6266] veth0: left promiscuous mode [ 81.569019][ T6277] netlink: 14 bytes leftover after parsing attributes in process `syz.3.858'. [ 81.610407][ T6271] loop4: detected capacity change from 0 to 1024 [ 81.636720][ T6271] EXT4-fs: Ignoring removed oldalloc option [ 81.677688][ T6271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.716553][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.745617][ T6292] ./dev/sda1: Can't lookup blockdev [ 81.944752][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 81.944783][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 82.020062][ T6319] loop2: detected capacity change from 0 to 1024 [ 82.027851][ T6319] EXT4-fs: Ignoring removed oldalloc option [ 82.058217][ T6326] ./dev/sda1: Can't lookup blockdev [ 82.070432][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.110827][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.320993][ T6350] ./dev/sda1: Can't lookup blockdev [ 82.356002][ T6352] loop2: detected capacity change from 0 to 1024 [ 82.363909][ T6352] EXT4-fs: Ignoring removed oldalloc option [ 82.379778][ T6352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.418970][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.530633][ T6368] geneve2: entered allmulticast mode [ 82.621136][ T6382] netlink: 14 bytes leftover after parsing attributes in process `syz.2.903'. [ 82.676807][ T6384] loop3: detected capacity change from 0 to 1024 [ 82.693399][ T6384] EXT4-fs: Ignoring removed oldalloc option [ 82.718759][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.774484][ T6391] netlink: 820 bytes leftover after parsing attributes in process `syz.1.907'. [ 82.794477][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.923358][ T6402] geneve2: entered allmulticast mode [ 83.045733][ T6412] loop4: detected capacity change from 0 to 1024 [ 83.054839][ T6412] EXT4-fs: Ignoring removed oldalloc option [ 83.105952][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.134396][ T6424] netlink: 820 bytes leftover after parsing attributes in process `syz.3.920'. [ 83.149418][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'. [ 83.169369][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.242646][ T6434] geneve2: entered allmulticast mode [ 83.655938][ T6455] loop2: detected capacity change from 0 to 1024 [ 83.663376][ T6455] EXT4-fs: Ignoring removed oldalloc option [ 83.701739][ T6464] No source specified [ 83.703539][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.737005][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.739693][ T6471] geneve2: entered allmulticast mode [ 83.913501][ T6490] FAULT_INJECTION: forcing a failure. [ 83.913501][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 83.913572][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.0.948 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.913605][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.913631][ T6490] Call Trace: [ 83.913639][ T6490] [ 83.913648][ T6490] __dump_stack+0x1d/0x30 [ 83.913677][ T6490] dump_stack_lvl+0x95/0xd0 [ 83.913702][ T6490] dump_stack+0x15/0x1b [ 83.913739][ T6490] should_fail_ex+0x262/0x280 [ 83.913758][ T6490] ? bpf_test_init+0x86/0x130 [ 83.913784][ T6490] should_failslab+0x8c/0xb0 [ 83.913816][ T6490] __kmalloc_noprof+0xd0/0x4d0 [ 83.913849][ T6490] ? bpf_test_init+0x86/0x130 [ 83.913877][ T6490] bpf_test_init+0x86/0x130 [ 83.913901][ T6490] bpf_prog_test_run_skb+0x271/0x11b0 [ 83.914004][ T6490] ? irqentry_exit+0x58f/0x610 [ 83.914046][ T6490] ? __rcu_read_unlock+0x4e/0x70 [ 83.914078][ T6490] ? __fget_files+0x184/0x1c0 [ 83.914127][ T6490] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 83.914170][ T6490] bpf_prog_test_run+0x208/0x340 [ 83.914207][ T6490] __sys_bpf+0x8da/0xc30 [ 83.914235][ T6490] ? vfs_write+0x820/0x9a0 [ 83.914400][ T6490] __x64_sys_bpf+0x69/0x80 [ 83.914420][ T6490] x64_sys_call+0xf26/0x2550 [ 83.914443][ T6490] do_syscall_64+0x112/0x360 [ 83.914470][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.914500][ T6490] RIP: 0033:0x7fd9f3f0e159 [ 83.914517][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.914536][ T6490] RSP: 002b:00007fd9f2967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.914558][ T6490] RAX: ffffffffffffffda RBX: 00007fd9f4195fa0 RCX: 00007fd9f3f0e159 [ 83.914573][ T6490] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 83.914667][ T6490] RBP: 00007fd9f2967090 R08: 0000000000000000 R09: 0000000000000000 [ 83.914681][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.914694][ T6490] R13: 00007fd9f4196038 R14: 00007fd9f4195fa0 R15: 00007ffea18fd528 [ 83.914713][ T6490] [ 83.959698][ T6494] No source specified [ 84.042615][ T6500] geneve2: entered allmulticast mode [ 84.326007][ T6519] veth0: entered promiscuous mode [ 84.331598][ T6518] veth0: left promiscuous mode [ 84.339377][ T6522] No source specified [ 84.721091][ T29] kauditd_printk_skb: 1308 callbacks suppressed [ 84.721213][ T29] audit: type=1400 audit(1788240591.479:6041): avc: denied { cpu } for pid=6549 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.221914][ T6560] veth0: entered promiscuous mode [ 85.222310][ T6559] veth0: left promiscuous mode [ 85.300154][ T6569] __nla_validate_parse: 8 callbacks suppressed [ 85.300259][ T6569] netlink: 792 bytes leftover after parsing attributes in process `syz.4.981'. [ 85.300282][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 85.328860][ T6574] netlink: 14 bytes leftover after parsing attributes in process `syz.2.983'. [ 85.378170][ T29] audit: type=1326 audit(1788240592.139:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.403590][ T29] audit: type=1326 audit(1788240592.149:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.403624][ T29] audit: type=1326 audit(1788240592.149:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414153][ T29] audit: type=1326 audit(1788240592.169:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414233][ T29] audit: type=1326 audit(1788240592.169:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414258][ T29] audit: type=1326 audit(1788240592.169:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414282][ T29] audit: type=1326 audit(1788240592.169:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414306][ T29] audit: type=1326 audit(1788240592.169:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.414421][ T29] audit: type=1326 audit(1788240592.169:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.0.982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f3f0e159 code=0x7ffc0000 [ 85.608240][ T6586] veth0: entered promiscuous mode [ 85.617712][ T6583] veth0: left promiscuous mode [ 85.726988][ T6592] geneve2: entered allmulticast mode [ 85.813293][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.990'. [ 85.813371][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.990'. [ 86.143003][ T2982] ================================================================== [ 86.143035][ T2982] BUG: KCSAN: data-race in dont_mount / path_lookupat [ 86.143064][ T2982] [ 86.143070][ T2982] read-write to 0xffff88811a4d7000 of 4 bytes by task 3287 on cpu 0: [ 86.143086][ T2982] dont_mount+0x2a/0x40 [ 86.143112][ T2982] vfs_unlink+0x202/0x490 [ 86.143136][ T2982] filename_unlinkat+0x1dc/0x410 [ 86.143165][ T2982] __se_sys_unlink+0x2b/0xe0 [ 86.143192][ T2982] __x64_sys_unlink+0x1f/0x30 [ 86.143216][ T2982] x64_sys_call+0x18ee/0x2550 [ 86.143238][ T2982] do_syscall_64+0x112/0x360 [ 86.143264][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.143287][ T2982] [ 86.143293][ T2982] read to 0xffff88811a4d7000 of 4 bytes by task 2982 on cpu 1: [ 86.143310][ T2982] path_lookupat+0x19b/0x4c0 [ 86.143331][ T2982] filename_lookup+0x18f/0x390 [ 86.143352][ T2982] do_readlinkat+0x74/0x2f0 [ 86.143376][ T2982] __x64_sys_readlink+0x47/0x60 [ 86.143392][ T2982] x64_sys_call+0x1d41/0x2550 [ 86.143415][ T2982] do_syscall_64+0x112/0x360 [ 86.143442][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.143461][ T2982] [ 86.143464][ T2982] value changed: 0x00300080 -> 0x00004080 [ 86.143475][ T2982] [ 86.143479][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 86.143489][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 86.143513][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.143525][ T2982] ==================================================================