last executing test programs: 47.893381287s ago: executing program 1 (id=22): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x83cf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x8}, 0x18842, 0xf6b, 0x7fffffff, 0x7, 0x9, 0x9, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x104281, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 47.852897918s ago: executing program 1 (id=24): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 47.77023922s ago: executing program 1 (id=30): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 47.583466225s ago: executing program 1 (id=37): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") io_setup(0x200, 0x0) syz_clone(0x8120000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 47.284499162s ago: executing program 1 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 46.254763677s ago: executing program 1 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb", "9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c", "99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829", {"099446c31273fd7ec60f852bdbf775ec", "59036644ec92021d72dd3dc6cd23008a"}}}}}}}, 0x0) 46.219125448s ago: executing program 32 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb", "9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c", "99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829", {"099446c31273fd7ec60f852bdbf775ec", "59036644ec92021d72dd3dc6cd23008a"}}}}}}}, 0x0) 17.522622268s ago: executing program 2 (id=745): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0xff0a, 0x0) 17.470427519s ago: executing program 2 (id=746): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x40000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x24}]) 17.336625832s ago: executing program 2 (id=749): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x2, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) io_uring_enter(r0, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 16.342256056s ago: executing program 2 (id=763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x48042, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) 15.007366019s ago: executing program 2 (id=783): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 14.894810953s ago: executing program 2 (id=787): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 14.894561193s ago: executing program 33 (id=787): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 3.007421326s ago: executing program 0 (id=997): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@dioread_nolock}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4b2, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x40, 0x0, 0xfffffffffe000001}) 2.909413458s ago: executing program 0 (id=1001): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a388, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x0, 0x8c2c, 0x0, 0x7, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x3002200, 0x40001000}) 1.682745808s ago: executing program 4 (id=1025): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.673886329s ago: executing program 0 (id=1026): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) 1.342453077s ago: executing program 0 (id=1029): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.342257627s ago: executing program 0 (id=1030): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) fallocate(r0, 0x0, 0x9, 0x10001) truncate(&(0x7f0000000180)='./file1\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 1.341879397s ago: executing program 6 (id=1031): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 1.262831249s ago: executing program 4 (id=1034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 1.234573419s ago: executing program 6 (id=1035): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0xd3}], 0x1, 0x0, 0x6b, 0x1) 1.181305991s ago: executing program 6 (id=1037): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1000, 0x3, 0x9, 0x8, 0x20003, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x4, 0x7}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 1.131494372s ago: executing program 0 (id=1038): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a388, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x0, 0x8c2c, 0x0, 0x7, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x3002200, 0x40001000}) 1.131171042s ago: executing program 4 (id=1039): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001500)="00005135eba1", 0x0, 0x400000, 0x10011, 0x1, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000340)=""/149, 0x23}], 0x1) 1.087917734s ago: executing program 4 (id=1041): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@auto_da_alloc}, {@grpquota}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 1.039338005s ago: executing program 6 (id=1042): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x82, 0x48000) read(r2, 0x0, 0x0) 949.796407ms ago: executing program 4 (id=1044): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 692.389363ms ago: executing program 4 (id=1048): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 457.642009ms ago: executing program 3 (id=1050): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x143042, 0xf2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 319.307742ms ago: executing program 5 (id=1055): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x4, 0xc}, 0x8) 216.321735ms ago: executing program 5 (id=1056): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x80000}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 215.730065ms ago: executing program 3 (id=1066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) inotify_rm_watch(r2, r1) 153.677946ms ago: executing program 6 (id=1057): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESDEC, @ANYRES32=0x0], 0xff, 0x1211, &(0x7f0000000900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) 153.587696ms ago: executing program 3 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 153.480926ms ago: executing program 5 (id=1059): r0 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 153.145866ms ago: executing program 5 (id=1060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) 135.234327ms ago: executing program 5 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 135.118947ms ago: executing program 3 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) 100.472778ms ago: executing program 3 (id=1063): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) recvmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x10022) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x3fb}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccd", 0x1b8}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0x0) 40.637789ms ago: executing program 6 (id=1064): write$nci(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x3454, &(0x7f0000000000)={0x0, 0x7170, 0x40, 0x2023, 0x19a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af"}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001640)=""/117, 0x75}], 0x0, 0x11a}, 0x20) 32.42693ms ago: executing program 5 (id=1065): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=1067): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000400), 0x1000, 0x1) kernel console output (not intermixed with test programs): od="arptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.971623][ T29] audit: type=1400 audit(1791368158.726:352): avc: denied { create } for pid=4151 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.972083][ T29] audit: type=1400 audit(1791368158.726:353): avc: denied { bind } for pid=4151 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.030799][ T4139] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 42.555889][ T4196] SELinux: invalid class [ 42.555906][ T4196] SELinux: failed to load policy [ 42.838417][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881262bae00: rx timeout, send abort [ 42.838503][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881262bae00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.899743][ T4205] loop3: detected capacity change from 0 to 512 [ 43.539261][ T4218] Invalid argument reading file caps for ./file0 [ 43.566581][ T4221] loop0: detected capacity change from 0 to 128 [ 43.579323][ T4222] netlink: 'syz.3.264': attribute type 3 has an invalid length. [ 43.579340][ T4222] netlink: 'syz.3.264': attribute type 4 has an invalid length. [ 43.579350][ T4222] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.264'. [ 43.580818][ T4221] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.580964][ T4221] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.589163][ T4224] FAULT_INJECTION: forcing a failure. [ 43.589163][ T4224] name fail_futex, interval 1, probability 0, space 0, times 0 [ 43.589193][ T4224] CPU: 1 UID: 0 PID: 4224 Comm: syz.5.265 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.589248][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.589262][ T4224] Call Trace: [ 43.589268][ T4224] [ 43.589276][ T4224] __dump_stack+0x1d/0x30 [ 43.589315][ T4224] dump_stack_lvl+0x95/0xd0 [ 43.589339][ T4224] dump_stack+0x15/0x1b [ 43.589361][ T4224] should_fail_ex+0x262/0x280 [ 43.589447][ T4224] should_fail+0xb/0x20 [ 43.589543][ T4224] get_futex_key+0x12d/0xb10 [ 43.589577][ T4224] futex_wake+0x89/0x400 [ 43.589601][ T4224] do_futex+0x3f8/0x460 [ 43.589687][ T4224] ? kmem_cache_free+0x106/0x3b0 [ 43.589715][ T4224] __se_sys_futex+0x2f6/0x370 [ 43.589752][ T4224] __x64_sys_futex+0x78/0x90 [ 43.589805][ T4224] x64_sys_call+0x22e2/0x2550 [ 43.589834][ T4224] do_syscall_64+0x112/0x360 [ 43.589945][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.590016][ T4224] RIP: 0033:0x7f0e8de5e199 [ 43.590033][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.590053][ T4224] RSP: 002b:00007f0e8c8b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.590074][ T4224] RAX: ffffffffffffffda RBX: 00007f0e8e0e5fa8 RCX: 00007f0e8de5e199 [ 43.590090][ T4224] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e8e0e5fac [ 43.590165][ T4224] RBP: 00007f0e8e0e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 43.590180][ T4224] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 43.590193][ T4224] R13: 00007f0e8e0e6038 R14: 00007ffeaf46d8b0 R15: 00007ffeaf46d998 [ 43.590214][ T4224] [ 43.706078][ T4230] loop5: detected capacity change from 0 to 1764 [ 43.728170][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.788680][ T4236] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 43.912046][ T4244] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 43.930743][ T4249] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.103275][ T4271] loop4: detected capacity change from 0 to 512 [ 44.129830][ T4271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.130000][ T4271] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.177279][ T4284] loop0: detected capacity change from 0 to 128 [ 44.178167][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.229597][ T4288] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 44.311380][ T3358] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 44.335016][ T4299] loop5: detected capacity change from 0 to 8192 [ 44.335044][ T4308] udevd[4308]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 44.347971][ T4299] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.029602][ T4360] FAULT_INJECTION: forcing a failure. [ 45.029602][ T4360] name failslab, interval 1, probability 0, space 0, times 0 [ 45.029630][ T4360] CPU: 1 UID: 0 PID: 4360 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.029816][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 45.029902][ T4360] Call Trace: [ 45.029910][ T4360] [ 45.029918][ T4360] __dump_stack+0x1d/0x30 [ 45.029986][ T4360] dump_stack_lvl+0x95/0xd0 [ 45.030008][ T4360] dump_stack+0x15/0x1b [ 45.030028][ T4360] should_fail_ex+0x262/0x280 [ 45.030142][ T4360] ? devpts_init_fs_context+0x36/0x1a0 [ 45.030175][ T4360] should_failslab+0x8c/0xb0 [ 45.030214][ T4360] __kmalloc_cache_noprof+0x7a/0x400 [ 45.030331][ T4360] ? devpts_init_fs_context+0x36/0x1a0 [ 45.030409][ T4360] ? __kmalloc_cache_noprof+0x1ff/0x400 [ 45.030449][ T4360] devpts_init_fs_context+0x36/0x1a0 [ 45.030510][ T4360] alloc_fs_context+0x490/0x570 [ 45.030540][ T4360] fs_context_for_mount+0x22/0x30 [ 45.030569][ T4360] __se_sys_fsopen+0xa0/0x1e0 [ 45.030659][ T4360] __x64_sys_fsopen+0x31/0x40 [ 45.030690][ T4360] x64_sys_call+0x1f0f/0x2550 [ 45.030719][ T4360] do_syscall_64+0x112/0x360 [ 45.030769][ T4360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.030791][ T4360] RIP: 0033:0x7fe7fc83e199 [ 45.030807][ T4360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.030929][ T4360] RSP: 002b:00007fe7fb297028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 45.030948][ T4360] RAX: ffffffffffffffda RBX: 00007fe7fcac5fa0 RCX: 00007fe7fc83e199 [ 45.030962][ T4360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 45.030975][ T4360] RBP: 00007fe7fc8d58e0 R08: 0000000000000000 R09: 0000000000000000 [ 45.031036][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.031049][ T4360] R13: 00007fe7fcac6038 R14: 00007fe7fcac5fa0 R15: 00007fff232a0db8 [ 45.031068][ T4360] [ 45.399565][ T4380] loop5: detected capacity change from 0 to 512 [ 45.441145][ T4380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.441205][ T4380] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.490759][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.538653][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 45.538670][ T29] audit: type=1400 audit(1791368162.296:449): avc: denied { write } for pid=4383 comm="syz.4.334" name="tcp6" dev="proc" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.548565][ T4365] loop2: detected capacity change from 0 to 1024 [ 45.640171][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.660085][ T29] audit: type=1400 audit(1791368162.416:450): avc: denied { write } for pid=4364 comm="syz.2.325" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.663919][ T29] audit: type=1400 audit(1791368162.416:451): avc: denied { remove_name } for pid=4364 comm="syz.2.325" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.664013][ T29] audit: type=1400 audit(1791368162.416:452): avc: denied { rmdir } for pid=4364 comm="syz.2.325" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.766748][ T4399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.776474][ T4399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 45.776507][ T4399] System zones: 1-12 [ 45.776648][ T4399] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.336: bad orphan inode 131072 [ 45.776671][ T4399] loop0: lost filesystem error report for type 5 error -117 [ 45.780264][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.867824][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.900622][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.921829][ T4410] veth0: entered promiscuous mode [ 45.922309][ T4409] veth0: left promiscuous mode [ 45.955359][ T29] audit: type=1326 audit(1791368162.716:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 45.955393][ T29] audit: type=1326 audit(1791368162.716:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 45.956949][ T29] audit: type=1326 audit(1791368162.716:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 45.956980][ T29] audit: type=1326 audit(1791368162.716:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 45.957038][ T29] audit: type=1326 audit(1791368162.716:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 45.957064][ T29] audit: type=1326 audit(1791368162.716:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 46.075386][ T4416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 46.075417][ T4416] System zones: 1-12 [ 46.075784][ T4416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.345: missing EA_INODE flag [ 46.075809][ T4416] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.075888][ T4416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.345: error while reading EA inode 12 err=-117 [ 46.075914][ T4416] loop3: lost filesystem error report for type 5 error -117 [ 46.076051][ T4416] EXT4-fs (loop3): 1 orphan inode deleted [ 46.076489][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.196375][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.544955][ T4433] set_capacity_and_notify: 3 callbacks suppressed [ 46.544991][ T4433] loop0: detected capacity change from 0 to 1024 [ 46.590327][ T4442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.356'. [ 46.590579][ T4442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'. [ 46.630019][ T4433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.631927][ T4446] loop2: detected capacity change from 0 to 512 [ 46.666328][ T4446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 46.666506][ T4446] System zones: 1-12 [ 46.672071][ T4446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.357: missing EA_INODE flag [ 46.672099][ T4446] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.672263][ T4446] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.357: error while reading EA inode 12 err=-117 [ 46.672322][ T4446] loop2: lost filesystem error report for type 5 error -117 [ 46.672419][ T4446] EXT4-fs (loop2): 1 orphan inode deleted [ 46.672827][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.717903][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.777917][ T4425] loop4: detected capacity change from 0 to 8192 [ 46.783159][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.861389][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891377][ T4468] loop3: detected capacity change from 0 to 256 [ 46.898722][ T4468] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.970505][ T4470] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 46.970531][ T4470] FAT-fs (loop3): Filesystem has been set read-only [ 46.970618][ T4470] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 46.970642][ T4470] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 47.035466][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.035555][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.060650][ T4467] loop0: detected capacity change from 0 to 8192 [ 47.123604][ T4470] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 47.290783][ T4480] loop4: detected capacity change from 0 to 1024 [ 47.306748][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.334476][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.353376][ T4490] loop0: detected capacity change from 0 to 1024 [ 47.377906][ T4490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.377971][ T4490] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.384092][ T4490] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.385: bg 0: block 112: padding at end of block bitmap is not set [ 47.384465][ T4490] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 47.384497][ T4490] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.384497][ T4490] [ 47.384510][ T4490] EXT4-fs (loop0): Total free blocks count 0 [ 47.384523][ T4490] EXT4-fs (loop0): Free/Dirty block details [ 47.384535][ T4490] EXT4-fs (loop0): free_blocks=0 [ 47.384548][ T4490] EXT4-fs (loop0): dirty_blocks=80 [ 47.384561][ T4490] EXT4-fs (loop0): Block reservation details [ 47.384600][ T4490] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 47.409773][ T4490] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.385: Freeing blocks not in datazone - block = 0, count = 16 [ 47.430131][ T4490] syz.0.385 (4490) used greatest stack depth: 9824 bytes left [ 47.436735][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.474359][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 47.489672][ T4501] bond1: entered allmulticast mode [ 47.491352][ T4501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.534693][ T4506] FAULT_INJECTION: forcing a failure. [ 47.534693][ T4506] name failslab, interval 1, probability 0, space 0, times 0 [ 47.534724][ T4506] CPU: 1 UID: 0 PID: 4506 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.534805][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.534817][ T4506] Call Trace: [ 47.534824][ T4506] [ 47.534832][ T4506] __dump_stack+0x1d/0x30 [ 47.534859][ T4506] dump_stack_lvl+0x95/0xd0 [ 47.534925][ T4506] dump_stack+0x15/0x1b [ 47.535037][ T4506] should_fail_ex+0x262/0x280 [ 47.535088][ T4506] ? find_get_context+0x75/0x4f0 [ 47.535111][ T4506] should_failslab+0x8c/0xb0 [ 47.535219][ T4506] __kmalloc_cache_noprof+0x7a/0x400 [ 47.535271][ T4506] ? find_get_context+0x75/0x4f0 [ 47.535295][ T4506] ? security_capable+0x7b/0x90 [ 47.535374][ T4506] find_get_context+0x75/0x4f0 [ 47.535394][ T4506] __se_sys_perf_event_open+0x911/0x1290 [ 47.535490][ T4506] ? do_futex+0x391/0x460 [ 47.535527][ T4506] __x64_sys_perf_event_open+0x67/0x80 [ 47.535550][ T4506] x64_sys_call+0x1f25/0x2550 [ 47.535640][ T4506] do_syscall_64+0x112/0x360 [ 47.535655][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.535668][ T4506] RIP: 0033:0x7f89dadee199 [ 47.535706][ T4506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.535717][ T4506] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 47.535729][ T4506] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 47.535858][ T4506] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000240 [ 47.535866][ T4506] RBP: 00007f89dae858e0 R08: 0000000000000008 R09: 0000000000000000 [ 47.535887][ T4506] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 47.535895][ T4506] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 47.535906][ T4506] [ 47.835098][ T4519] loop0: detected capacity change from 0 to 128 [ 47.840715][ T4519] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.865519][ T4519] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.921098][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.997322][ T4531] loop2: detected capacity change from 0 to 128 [ 48.001266][ T4531] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.002603][ T4531] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.119553][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.289115][ T4551] loop5: detected capacity change from 0 to 128 [ 48.301647][ T4551] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.302610][ T4551] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.370178][ T3676] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.496485][ T4559] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 48.496507][ T4559] vhci_hcd vhci_hcd.2: invalid port number 96 [ 48.496571][ T4559] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 48.571470][ T4570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.595822][ T4570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.596063][ T4570] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.621526][ T4574] EXT4-fs: Ignoring removed bh option [ 48.627434][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.629041][ T4574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.629182][ T4574] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.667792][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.726161][ T4583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.742119][ T4583] EXT4-fs (loop5): shut down requested (2) [ 48.759732][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.872568][ T4589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 48.872789][ T4589] System zones: 1-3, 19-19, 35-36 [ 48.894541][ T4589] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.897822][ T4589] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.956619][ T4598] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 48.956647][ T4598] FAT-fs (loop0): Filesystem has been set read-only [ 48.966007][ T3676] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.681984][ T4645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 49.711527][ T4604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.792831][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.933886][ T4657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 49.934083][ T4657] System zones: 1-3, 19-19, 35-36 [ 49.963640][ T4657] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.978413][ T4657] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.689181][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.752465][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 50.752544][ T29] audit: type=1400 audit(1791368167.506:524): avc: denied { write } for pid=4681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.761027][ T4694] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.830711][ T29] audit: type=1400 audit(1791368167.586:525): avc: denied { write } for pid=4705 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.845428][ T4709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 50.845491][ T4709] FAT-fs (loop2): Filesystem has been set read-only [ 50.845626][ T4709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 50.845656][ T4709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 51.033368][ T4714] netlink: 'syz.4.454': attribute type 2 has an invalid length. [ 51.043003][ T29] audit: type=1400 audit(1791368167.796:526): avc: denied { create } for pid=4713 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.059781][ T29] audit: type=1400 audit(1791368167.816:527): avc: denied { connect } for pid=4713 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.091290][ T4709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 51.106434][ T29] audit: type=1400 audit(1791368167.866:528): avc: denied { listen } for pid=4713 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.564046][ T4720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.612283][ T29] audit: type=1400 audit(1791368168.346:529): avc: denied { write } for pid=4719 comm="syz.3.444" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.933271][ T4734] netlink: 'syz.0.451': attribute type 3 has an invalid length. [ 51.933291][ T4734] netlink: 148 bytes leftover after parsing attributes in process `syz.0.451'. [ 52.217304][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.258537][ T4737] set_capacity_and_notify: 10 callbacks suppressed [ 52.258554][ T4737] loop4: detected capacity change from 0 to 512 [ 52.276737][ T29] audit: type=1326 audit(1791368169.026:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.5.453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 52.276813][ T29] audit: type=1326 audit(1791368169.026:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.5.453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 52.285213][ T29] audit: type=1326 audit(1791368169.036:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.5.453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 52.285246][ T29] audit: type=1326 audit(1791368169.036:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.5.453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 52.358971][ T4737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.379095][ T4737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c01c, mo2=0082] [ 52.379133][ T4737] System zones: 1-12 [ 52.379690][ T4737] EXT4-fs (loop4): 1 truncate cleaned up [ 52.380010][ T4737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.438949][ T4743] loop3: detected capacity change from 0 to 128 [ 52.469172][ T4743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 52.469370][ T4743] System zones: 1-3, 19-19, 35-36 [ 52.492366][ T4743] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.514257][ T4743] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.591618][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.621443][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.641543][ T4759] loop4: detected capacity change from 0 to 256 [ 52.655888][ T4759] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.712739][ T4760] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 52.712814][ T4760] FAT-fs (loop4): Filesystem has been set read-only [ 52.713005][ T4760] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 52.713031][ T4760] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 52.796863][ T4763] loop3: detected capacity change from 0 to 512 [ 52.808403][ T4763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.809980][ T4763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c01c, mo2=0082] [ 52.810014][ T4763] System zones: 1-12 [ 52.810343][ T4763] EXT4-fs (loop3): 1 truncate cleaned up [ 52.810845][ T4763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.869718][ T4760] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 53.009166][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.247623][ T4780] loop4: detected capacity change from 0 to 512 [ 53.303980][ T4780] Invalid ELF header magic: != ELF [ 53.335325][ T4782] loop0: detected capacity change from 0 to 512 [ 53.392482][ T4782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.392556][ T4782] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.942577][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.019530][ T4792] loop2: detected capacity change from 0 to 128 [ 54.103099][ T4792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 54.103239][ T4792] System zones: 1-3, 19-19, 35-36 [ 54.108243][ T4792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.144990][ T4792] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.151955][ T4803] loop5: detected capacity change from 0 to 256 [ 54.178677][ T4803] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.212685][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.237302][ T4806] loop3: detected capacity change from 0 to 2048 [ 54.246917][ T4809] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 54.247015][ T4809] FAT-fs (loop5): Filesystem has been set read-only [ 54.247093][ T4809] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 54.247117][ T4809] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 54.284720][ T4806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.303475][ T4806] EXT4-fs (loop3): shut down requested (2) [ 54.326444][ T4810] loop2: detected capacity change from 0 to 512 [ 54.340784][ T4810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.342162][ T4810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c01c, mo2=0082] [ 54.342195][ T4810] System zones: 1-12 [ 54.346684][ T4810] EXT4-fs (loop2): 1 truncate cleaned up [ 54.457149][ T4809] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 54.457247][ T4817] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.459194][ T4817] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.494: bad orphan inode 131083 [ 54.459218][ T4817] loop0: lost filesystem error report for type 5 error -117 [ 54.514240][ T4816] Invalid ELF header magic: != ELF [ 54.548859][ T4825] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 55.832907][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 55.843492][ T4874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.869324][ T4874] EXT4-fs (loop3): 1 truncate cleaned up [ 55.870051][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 55.870063][ T29] audit: type=1326 audit(1791368172.626:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.4.508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89dadee199 code=0x0 [ 55.936669][ T29] audit: type=1400 audit(1791368172.696:555): avc: denied { append } for pid=4883 comm="syz.3.511" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.041003][ T4896] syz.0.518: attempt to access beyond end of device [ 56.041003][ T4896] loop0: rw=8388608, sector=17179852707, nr_sectors = 1 limit=512 [ 56.114980][ T4908] mtrr: base(0x2d7a7973000) is not aligned on a size(0x0000) boundary [ 56.154857][ T4914] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.159151][ T4914] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.213221][ T3452] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.324791][ T29] audit: type=1400 audit(1791368173.086:556): avc: denied { write } for pid=4915 comm="syz.5.527" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.387957][ T29] audit: type=1400 audit(1791368173.146:557): avc: denied { getopt } for pid=4927 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.495820][ T29] audit: type=1326 audit(1791368173.256:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.495943][ T29] audit: type=1326 audit(1791368173.256:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.496446][ T29] audit: type=1326 audit(1791368173.256:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.496631][ T29] audit: type=1326 audit(1791368173.256:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.496681][ T29] audit: type=1326 audit(1791368173.256:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.497017][ T29] audit: type=1326 audit(1791368173.256:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.3.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x7ffc0000 [ 56.673899][ T4949] dns_resolver: Unsupported content type (152) [ 56.700246][ T4951] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.727557][ T4951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.540: bg 0: block 112: padding at end of block bitmap is not set [ 56.727835][ T4951] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 56.727862][ T4951] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.727862][ T4951] [ 56.727873][ T4951] EXT4-fs (loop2): Total free blocks count 0 [ 56.727885][ T4951] EXT4-fs (loop2): Free/Dirty block details [ 56.727904][ T4951] EXT4-fs (loop2): free_blocks=0 [ 56.727915][ T4951] EXT4-fs (loop2): dirty_blocks=80 [ 56.727939][ T4951] EXT4-fs (loop2): Block reservation details [ 56.727951][ T4951] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 56.776019][ T4951] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.540: Freeing blocks not in datazone - block = 0, count = 16 [ 57.078440][ T4978] FAULT_INJECTION: forcing a failure. [ 57.078440][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 57.078470][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.4.551 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.078493][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.078539][ T4978] Call Trace: [ 57.078545][ T4978] [ 57.078554][ T4978] __dump_stack+0x1d/0x30 [ 57.078578][ T4978] dump_stack_lvl+0x95/0xd0 [ 57.078601][ T4978] dump_stack+0x15/0x1b [ 57.078630][ T4978] should_fail_ex+0x262/0x280 [ 57.078656][ T4978] should_failslab+0x8c/0xb0 [ 57.078736][ T4978] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 57.078829][ T4978] ? kvasprintf_const+0xb3/0x130 [ 57.078902][ T4978] ? kvasprintf_const+0xb3/0x130 [ 57.078946][ T4978] kvasprintf+0x8a/0x110 [ 57.079068][ T4978] kvasprintf_const+0xb3/0x130 [ 57.079100][ T4978] kobject_set_name_vargs+0x44/0xe0 [ 57.079141][ T4978] dev_set_name+0x83/0xb0 [ 57.079166][ T4978] ? nfc_allocate_device+0x110/0x2e0 [ 57.079330][ T4978] ? __pfx_nci_transceive+0x10/0x10 [ 57.079356][ T4978] nfc_allocate_device+0x12e/0x2e0 [ 57.079389][ T4978] nci_allocate_device+0x13b/0x200 [ 57.079462][ T4978] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 57.079517][ T4978] virtual_ncidev_open+0x55/0x130 [ 57.079594][ T4978] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 57.079613][ T4978] misc_open+0x1df/0x220 [ 57.079680][ T4978] chrdev_open+0x2eb/0x3a0 [ 57.079702][ T4978] do_dentry_open+0x49f/0xa60 [ 57.079729][ T4978] ? __pfx_chrdev_open+0x10/0x10 [ 57.079753][ T4978] vfs_open+0x37/0x1e0 [ 57.079777][ T4978] path_openat+0xc01/0x10d0 [ 57.079870][ T4978] do_file_open+0x16c/0x290 [ 57.079907][ T4978] do_sys_openat2+0xa0/0x130 [ 57.079932][ T4978] __x64_sys_openat+0xf2/0x120 [ 57.079995][ T4978] x64_sys_call+0x1f72/0x2550 [ 57.080025][ T4978] do_syscall_64+0x112/0x360 [ 57.080055][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.080133][ T4978] RIP: 0033:0x7f89dadee199 [ 57.080148][ T4978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.080166][ T4978] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.080266][ T4978] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 57.080283][ T4978] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 57.080295][ T4978] RBP: 00007f89dae858e0 R08: 0000000000000000 R09: 0000000000000000 [ 57.080369][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.080381][ T4978] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 57.080398][ T4978] [ 57.299057][ T4949] Set syz1 is full, maxelem 65536 reached [ 57.353465][ T4996] batadv_slave_1: entered promiscuous mode [ 57.376579][ T4995] batadv_slave_1: left promiscuous mode [ 57.532113][ T4997] set_capacity_and_notify: 10 callbacks suppressed [ 57.532168][ T4997] loop4: detected capacity change from 0 to 1024 [ 57.686697][ T5026] loop5: detected capacity change from 0 to 512 [ 57.688604][ T5025] netlink: 256 bytes leftover after parsing attributes in process `syz.0.578'. [ 57.688700][ T5025] netlink: 256 bytes leftover after parsing attributes in process `syz.0.578'. [ 57.720394][ T5026] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.732189][ T5026] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.568: bad orphan inode 131083 [ 57.732242][ T5026] loop5: lost filesystem error report for type 5 error -117 [ 57.786222][ T5014] loop3: detected capacity change from 0 to 512 [ 57.791683][ T5014] EXT4-fs: Ignoring removed bh option [ 57.792263][ T5014] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.810672][ T5014] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 57.831527][ T5014] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.831738][ T5014] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.832104][ T5014] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.832302][ T5014] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 57.832761][ T5014] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.565: Invalid block bitmap block 0 in block_group 0 [ 57.832790][ T5014] loop3: lost filesystem error report for type 5 error -117 [ 57.833067][ T5014] EXT4-fs (loop3): Remounting filesystem read-only [ 57.833137][ T5014] EXT4-fs (loop3): 1 orphan inode deleted [ 57.970272][ T5034] dns_resolver: Unsupported content type (152) [ 58.015911][ T5036] loop5: detected capacity change from 0 to 512 [ 58.048480][ T5036] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.130707][ T5052] xt_hashlimit: max too large, truncated to 1048576 [ 58.136940][ T5050] capability: warning: `syz.0.574' uses deprecated v2 capabilities in a way that may be insecure [ 58.170087][ T5052] loop2: detected capacity change from 0 to 512 [ 58.172788][ T5052] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.178184][ T5052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.178202][ T5052] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.197072][ T5052] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.577: Allocating blocks 41-42 which overlap fs metadata [ 58.197140][ T5052] loop2: lost filesystem error report for type 5 error -117 [ 58.197404][ T5052] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.577: Allocating blocks 41-42 which overlap fs metadata [ 58.197431][ T5052] loop2: lost filesystem error report for type 5 error -117 [ 58.197630][ T5052] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.577: Failed to acquire dquot type 1 [ 58.197726][ T5052] loop2: lost filesystem error report for type 5 error -117 [ 58.197854][ T5052] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.197929][ T5052] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.577: corrupted inode contents [ 58.197951][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.198242][ T5052] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #12: comm syz.2.577: mark_inode_dirty error [ 58.198356][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.198512][ T5052] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.577: corrupted inode contents [ 58.198536][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.198685][ T5052] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.577: mark_inode_dirty error [ 58.198708][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.198809][ T5052] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.577: corrupted inode contents [ 58.198832][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.198990][ T5052] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 58.199008][ T5052] loop2: lost filesystem error report for type 5 error -117 [ 58.199094][ T5052] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.577: corrupted inode contents [ 58.199165][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.199349][ T5052] EXT4-fs error (device loop2): ext4_truncate:4721: inode #12: comm syz.2.577: mark_inode_dirty error [ 58.199423][ T5052] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 58.199583][ T5052] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 58.199600][ T5052] loop2: lost filesystem error report for type 5 error -117 [ 58.199745][ T5052] EXT4-fs (loop2): 1 truncate cleaned up [ 58.432949][ T5034] Set syz1 is full, maxelem 65536 reached [ 59.093751][ T5105] FAULT_INJECTION: forcing a failure. [ 59.093751][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 59.093840][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz.2.601 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.093869][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.093883][ T5105] Call Trace: [ 59.093892][ T5105] [ 59.093901][ T5105] __dump_stack+0x1d/0x30 [ 59.093947][ T5105] dump_stack_lvl+0x95/0xd0 [ 59.093970][ T5105] dump_stack+0x15/0x1b [ 59.094069][ T5105] should_fail_ex+0x262/0x280 [ 59.094098][ T5105] ? ioctx_alloc+0xe3/0x480 [ 59.094136][ T5105] should_failslab+0x8c/0xb0 [ 59.094180][ T5105] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 59.094286][ T5105] ? ioctx_alloc+0xe3/0x480 [ 59.094322][ T5105] ioctx_alloc+0xe3/0x480 [ 59.094431][ T5105] __se_sys_io_setup+0x6b/0x1b0 [ 59.094462][ T5105] __x64_sys_io_setup+0x31/0x40 [ 59.094532][ T5105] x64_sys_call+0x1a9f/0x2550 [ 59.094559][ T5105] do_syscall_64+0x112/0x360 [ 59.094586][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.094641][ T5105] RIP: 0033:0x7fe7fc83e199 [ 59.094726][ T5105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.094812][ T5105] RSP: 002b:00007fe7fb297028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 59.094831][ T5105] RAX: ffffffffffffffda RBX: 00007fe7fcac5fa0 RCX: 00007fe7fc83e199 [ 59.094845][ T5105] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: 000000000000ffff [ 59.094860][ T5105] RBP: 00007fe7fc8d58e0 R08: 0000000000000000 R09: 0000000000000000 [ 59.094876][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.094888][ T5105] R13: 00007fe7fcac6038 R14: 00007fe7fcac5fa0 R15: 00007fff232a0db8 [ 59.094955][ T5105] [ 59.125144][ T5107] Invalid argument reading file caps for ./file0 [ 59.476740][ T5112] loop5: detected capacity change from 0 to 2048 [ 59.504680][ T5112] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.504750][ T5112] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 59.504778][ T5112] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.504778][ T5112] [ 59.504791][ T5112] EXT4-fs (loop5): Total free blocks count 0 [ 59.504804][ T5112] EXT4-fs (loop5): Free/Dirty block details [ 59.504827][ T5112] EXT4-fs (loop5): free_blocks=4096 [ 59.504937][ T5112] EXT4-fs (loop5): dirty_blocks=32 [ 59.504951][ T5112] EXT4-fs (loop5): Block reservation details [ 59.504962][ T5112] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 59.553640][ T3452] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.553670][ T3452] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.553670][ T3452] [ 59.593102][ T5120] netlink: 'syz.5.607': attribute type 22 has an invalid length. [ 59.593132][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'. [ 59.648730][ T5122] loop0: detected capacity change from 0 to 1024 [ 59.664091][ T5120] Zero length message leads to an empty skb [ 59.712123][ T5126] can0: slcan on ttyS3. [ 59.755317][ T5126] can0 (unregistered): slcan off ttyS3. [ 59.847910][ T5138] loop0: detected capacity change from 0 to 2048 [ 60.017858][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 60.168459][ T5136] loop3: detected capacity change from 0 to 1024 [ 60.205774][ T3358] kernel write not supported for file 351/net/vlan/vlan1 (pid: 3358 comm: kworker/1:2) [ 60.268025][ T5169] can0: slcan on ttyS3. [ 60.314050][ T5169] can0 (unregistered): slcan off ttyS3. [ 60.614447][ T5214] loop0: detected capacity change from 0 to 512 [ 60.631226][ T5214] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 60.633679][ T5214] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.648: corrupted in-inode xattr: e_value size too large [ 60.633706][ T5214] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.633787][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.633805][ C0] EXT4-fs (loop0): initial error at time 1791368177: ext4_iget_extra_inode:5210: inode 15 [ 60.633850][ C0] EXT4-fs (loop0): last error at time 1791368177: ext4_iget_extra_inode:5210: inode 15 [ 60.635045][ T5214] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.648: couldn't read orphan inode 15 (err -117) [ 60.635133][ T5214] loop0: lost filesystem error report for type 5 error -117 [ 60.747478][ T5217] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 60.943924][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 60.943939][ T29] audit: type=1326 audit(1791368177.696:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.944347][ T29] audit: type=1326 audit(1791368177.706:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.944637][ T29] audit: type=1326 audit(1791368177.706:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.944729][ T29] audit: type=1326 audit(1791368177.706:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.944851][ T29] audit: type=1326 audit(1791368177.706:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.944990][ T29] audit: type=1326 audit(1791368177.706:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.945069][ T29] audit: type=1326 audit(1791368177.706:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 60.945370][ T29] audit: type=1326 audit(1791368177.706:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 61.019684][ T5246] ip6erspan0: entered allmulticast mode [ 61.196643][ T29] audit: type=1326 audit(1791368177.956:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.5.660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0e8de5e199 code=0x7ffc0000 [ 61.497279][ T5254] tipc: Started in network mode [ 61.497307][ T5254] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 61.497371][ T5254] tipc: Enabled bearer , priority 12 [ 61.497579][ T5254] tipc: Enabled bearer , priority 6 [ 61.679495][ T5264] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.787750][ T29] audit: type=1400 audit(1791368178.546:1055): avc: denied { write } for pid=5277 comm="syz.0.674" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.891249][ T5284] xt_hashlimit: max too large, truncated to 1048576 [ 61.906690][ T5284] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.916038][ T5284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.916057][ T5284] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.958609][ T5284] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.676: Allocating blocks 41-42 which overlap fs metadata [ 61.958640][ T5284] loop0: lost filesystem error report for type 5 error -117 [ 61.960471][ T5284] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.676: Allocating blocks 41-42 which overlap fs metadata [ 61.960502][ T5284] loop0: lost filesystem error report for type 5 error -117 [ 61.961716][ T5284] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.676: Failed to acquire dquot type 1 [ 61.961741][ T5284] loop0: lost filesystem error report for type 5 error -117 [ 61.963871][ T5284] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.963930][ T5284] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.676: corrupted inode contents [ 61.963955][ T5284] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 61.977775][ C1] EXT4-fs (loop0): error count since last fsck: 5 [ 61.977794][ C1] EXT4-fs (loop0): initial error at time 1791368178: ext4_mb_mark_diskspace_used:4223 [ 61.977815][ C1] EXT4-fs (loop0): last error at time 1791368178: ext4_do_update_inode:5801: inode 12 [ 61.987372][ T5284] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #12: comm syz.0.676: mark_inode_dirty error [ 61.987398][ T5284] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 62.001213][ T5284] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.676: corrupted inode contents [ 62.009131][ T5284] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.676: mark_inode_dirty error [ 62.020817][ T5284] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.676: corrupted inode contents [ 62.044529][ T5284] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 62.044548][ T5284] loop0: lost filesystem error report for type 5 error -117 [ 62.045574][ T5284] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.676: corrupted inode contents [ 62.045759][ T5284] EXT4-fs error (device loop0): ext4_truncate:4721: inode #12: comm syz.0.676: mark_inode_dirty error [ 62.045879][ T5284] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 62.045895][ T5284] loop0: lost filesystem error report for type 5 error -117 [ 62.046183][ T5284] EXT4-fs (loop0): 1 truncate cleaned up [ 62.221701][ T5309] sg_write: data in/out 437760/136 bytes for SCSI command 0x0-- guessing data in; [ 62.221701][ T5309] program syz.5.686 not setting count and/or reply_len properly [ 62.261905][ T5305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 62.261965][ T5305] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 62.261988][ T5305] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.261988][ T5305] [ 62.261999][ T5305] EXT4-fs (loop2): Total free blocks count 0 [ 62.262011][ T5305] EXT4-fs (loop2): Free/Dirty block details [ 62.262040][ T5305] EXT4-fs (loop2): free_blocks=4096 [ 62.262052][ T5305] EXT4-fs (loop2): dirty_blocks=32 [ 62.262066][ T5305] EXT4-fs (loop2): Block reservation details [ 62.262079][ T5305] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 62.336186][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.336216][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.336216][ T51] [ 62.353676][ T5318] hsr0: entered allmulticast mode [ 62.353697][ T5318] hsr_slave_0: entered allmulticast mode [ 62.353714][ T5318] hsr_slave_1: entered allmulticast mode [ 62.354749][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 62.458801][ T5318] hsr_slave_0: left promiscuous mode [ 62.459274][ T5318] hsr_slave_1: left promiscuous mode [ 62.504806][ T5318] hsr0 (unregistering): left allmulticast mode [ 62.556142][ T5329] xt_hashlimit: max too large, truncated to 1048576 [ 62.615253][ T3384] tipc: Node number set to 10136234 [ 62.686088][ T5329] set_capacity_and_notify: 4 callbacks suppressed [ 62.686105][ T5329] loop5: detected capacity change from 0 to 512 [ 62.715965][ T5329] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.717077][ T5329] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.717094][ T5329] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.742378][ T5338] syz_tun: entered allmulticast mode [ 62.759713][ T5329] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.694: Allocating blocks 41-42 which overlap fs metadata [ 62.759791][ T5329] loop5: lost filesystem error report for type 5 error -117 [ 62.759990][ T5329] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.694: Allocating blocks 41-42 which overlap fs metadata [ 62.760017][ T5329] loop5: lost filesystem error report for type 5 error -117 [ 62.760173][ T5329] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.694: Failed to acquire dquot type 1 [ 62.760193][ T5329] loop5: lost filesystem error report for type 5 error -117 [ 62.760419][ T5329] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.760473][ T5329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.694: corrupted inode contents [ 62.760815][ T5329] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #12: comm syz.5.694: mark_inode_dirty error [ 62.761014][ T5329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.694: corrupted inode contents [ 62.761124][ T5329] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.694: mark_inode_dirty error [ 62.761287][ T5329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.694: corrupted inode contents [ 62.761403][ T5329] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 62.761456][ T5329] loop5: lost filesystem error report for type 5 error -117 [ 62.761548][ T5329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.694: corrupted inode contents [ 62.761727][ T5329] EXT4-fs error (device loop5): ext4_truncate:4721: inode #12: comm syz.5.694: mark_inode_dirty error [ 62.761854][ T5329] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 62.762098][ T5329] EXT4-fs (loop5): 1 truncate cleaned up [ 63.032291][ T5349] netlink: 256 bytes leftover after parsing attributes in process `syz.4.702'. [ 63.032851][ T5349] netlink: 48 bytes leftover after parsing attributes in process `syz.4.702'. [ 63.060038][ T5356] loop3: detected capacity change from 0 to 512 [ 63.082507][ T5356] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.138571][ T5363] loop3: detected capacity change from 0 to 512 [ 63.138998][ T5363] EXT4-fs: Ignoring removed oldalloc option [ 63.169220][ T5325] loop2: detected capacity change from 0 to 512 [ 63.198036][ T5325] EXT4-fs: Ignoring removed bh option [ 63.199514][ T5325] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.218499][ T5363] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.708: bg 0: block 5: invalid block bitmap [ 63.220055][ T5363] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 63.220935][ T5363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.708: invalid indirect mapped block 3 (level 2) [ 63.220962][ T5363] fserror_report: 12 callbacks suppressed [ 63.220972][ T5363] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.222569][ T5363] EXT4-fs (loop3): 1 orphan inode deleted [ 63.222744][ T5363] EXT4-fs (loop3): 1 truncate cleaned up [ 63.223568][ T5325] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.328766][ T5325] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.331755][ T5325] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.350002][ T5325] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.351619][ T5325] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 63.382012][ T5325] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.692: Invalid block bitmap block 0 in block_group 0 [ 63.383320][ T5325] EXT4-fs (loop2): Remounting filesystem read-only [ 63.383840][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.383983][ C1] EXT4-fs (loop2): last error at time 1791368180: ext4_read_block_bitmap_nowait:487 [ 63.391169][ T5373] FAULT_INJECTION: forcing a failure. [ 63.391169][ T5373] name failslab, interval 1, probability 0, space 0, times 0 [ 63.391199][ T5373] CPU: 0 UID: 0 PID: 5373 Comm: syz.4.712 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.391226][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.391300][ T5373] Call Trace: [ 63.391307][ T5373] [ 63.391316][ T5373] __dump_stack+0x1d/0x30 [ 63.391379][ T5373] dump_stack_lvl+0x95/0xd0 [ 63.391403][ T5373] dump_stack+0x15/0x1b [ 63.391472][ T5373] should_fail_ex+0x262/0x280 [ 63.391503][ T5373] ? call_usermodehelper_setup+0x72/0x190 [ 63.391539][ T5373] should_failslab+0x8c/0xb0 [ 63.391628][ T5373] __kmalloc_cache_noprof+0x7a/0x400 [ 63.391701][ T5373] ? call_usermodehelper_setup+0x72/0x190 [ 63.391799][ T5373] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 63.391832][ T5373] call_usermodehelper_setup+0x72/0x190 [ 63.391895][ T5373] ? __pfx_umh_keys_init+0x10/0x10 [ 63.391928][ T5373] call_sbin_request_key+0x578/0x740 [ 63.392047][ T5373] request_key_and_link+0x95b/0xe20 [ 63.392155][ T5373] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 63.392192][ T5373] ? __pfx_keyring_search_iterator+0x10/0x10 [ 63.392218][ T5373] __se_sys_request_key+0x1e9/0x2a0 [ 63.392318][ T5373] __x64_sys_request_key+0x55/0x70 [ 63.392355][ T5373] x64_sys_call+0x1741/0x2550 [ 63.392383][ T5373] do_syscall_64+0x112/0x360 [ 63.392479][ T5373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.392503][ T5373] RIP: 0033:0x7f89dadee199 [ 63.392553][ T5373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.392650][ T5373] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 63.392672][ T5373] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 63.392687][ T5373] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000100 [ 63.392778][ T5373] RBP: 00007f89dae858e0 R08: 0000000000000000 R09: 0000000000000000 [ 63.392792][ T5373] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 63.392806][ T5373] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 63.392827][ T5373] [ 63.414670][ T5325] EXT4-fs (loop2): 1 orphan inode deleted [ 63.537835][ T5378] loop4: detected capacity change from 0 to 256 [ 63.539005][ T5378] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 63.539048][ T5378] FAT-fs (loop4): Can't find a valid FAT filesystem [ 63.827264][ T5406] loop2: detected capacity change from 0 to 512 [ 63.831278][ T5406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.836691][ T5406] EXT4-fs (loop2): 1 truncate cleaned up [ 63.982637][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 64.198818][ T5418] loop4: detected capacity change from 0 to 512 [ 64.212655][ T5418] EXT4-fs: Ignoring removed bh option [ 64.213225][ T5418] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.237350][ T5418] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.255811][ T5418] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.272219][ T5418] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.274316][ T5418] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.275101][ T5418] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 64.277954][ T5418] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.732: Invalid block bitmap block 0 in block_group 0 [ 64.279280][ T5418] EXT4-fs (loop4): Remounting filesystem read-only [ 64.280639][ T5418] EXT4-fs (loop4): 1 orphan inode deleted [ 64.546689][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 64.548047][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 64.932543][ T5452] loop3: detected capacity change from 0 to 8192 [ 64.991402][ T5460] syz.3.747: attempt to access beyond end of device [ 64.991402][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 64.991431][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000039][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000039][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000069][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000098][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000098][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000137][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000164][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000164][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000187][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000236][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000236][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000302][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000329][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000329][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000366][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000389][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000389][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000461][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000501][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000501][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000525][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000551][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000551][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000646][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.000672][ T5460] syz.3.747: attempt to access beyond end of device [ 65.000672][ T5460] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 65.000725][ T5460] Buffer I/O error on dev loop3, logical block 57847, async page read [ 65.500382][ T5470] loop0: detected capacity change from 0 to 512 [ 65.527161][ T5470] EXT4-fs: Ignoring removed bh option [ 65.527903][ T5470] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.532230][ T5470] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 65.563538][ T5470] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.567637][ T5470] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.568625][ T5470] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.569977][ T5470] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 65.572600][ T5470] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.754: Invalid block bitmap block 0 in block_group 0 [ 65.577395][ T5470] EXT4-fs (loop0): Remounting filesystem read-only [ 65.578244][ T5470] EXT4-fs (loop0): 1 orphan inode deleted [ 65.901641][ T5486] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc01 [ 66.585381][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 66.585402][ T29] audit: type=1400 audit(1791368183.346:1121): avc: denied { setopt } for pid=5506 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.604659][ T5509] sctp: [Deprecated]: syz.5.771 (pid 5509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.604659][ T5509] Use struct sctp_sack_info instead [ 66.604693][ T29] audit: type=1400 audit(1791368183.356:1122): avc: denied { getopt } for pid=5508 comm="syz.5.771" lport=50411 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.651785][ T5511] netlink: 256 bytes leftover after parsing attributes in process `syz.5.773'. [ 66.651903][ T5511] netlink: 48 bytes leftover after parsing attributes in process `syz.5.773'. [ 66.751475][ T5519] loop3: detected capacity change from 0 to 256 [ 66.763728][ T5519] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 66.764472][ T5519] FAT-fs (loop3): Can't find a valid FAT filesystem [ 66.974662][ T5520] EXT4-fs: Ignoring removed bh option [ 66.975212][ T5520] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.983735][ T5520] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 67.011458][ T5520] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 67.011647][ T5520] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.012248][ T5520] Quota error (device loop5): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 67.047437][ T5520] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.048179][ T5520] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 67.051108][ T5520] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.775: Invalid block bitmap block 0 in block_group 0 [ 67.051148][ T5520] fserror_report: 6 callbacks suppressed [ 67.051220][ T5520] loop5: lost filesystem error report for type 5 error -117 [ 67.052451][ T5520] EXT4-fs (loop5): Remounting filesystem read-only [ 67.053410][ T5520] EXT4-fs (loop5): 1 orphan inode deleted [ 67.063860][ T29] audit: type=1400 audit(1791368183.816:1123): avc: denied { mounton } for pid=5526 comm="syz.3.779" path="/163/file0" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.090122][ T5529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.151949][ T5529] EXT4-fs (loop3): 1 truncate cleaned up [ 67.152358][ T5529] EXT4-fs mount: 57 callbacks suppressed [ 67.152371][ T5529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.161424][ T29] audit: type=1400 audit(1791368183.916:1124): avc: denied { write } for pid=5528 comm="syz.3.780" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.182375][ T5520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.215802][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.327834][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.369051][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.419024][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.478177][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.537495][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.598927][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.598958][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.599060][ T5549] bridge_slave_0: entered allmulticast mode [ 67.599749][ T5549] bridge_slave_0: entered promiscuous mode [ 67.625702][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.625735][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.625824][ T5549] bridge_slave_1: entered allmulticast mode [ 67.626324][ T5549] bridge_slave_1: entered promiscuous mode [ 67.657696][ T51] bridge_slave_1: left allmulticast mode [ 67.657711][ T51] bridge_slave_1: left promiscuous mode [ 67.657858][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.658726][ T51] bridge_slave_0: left allmulticast mode [ 67.658741][ T51] bridge_slave_0: left promiscuous mode [ 67.658892][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.722089][ T29] audit: type=1400 audit(1791368184.476:1125): avc: denied { write } for pid=5570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.747629][ T29] audit: type=1400 audit(1791368184.496:1126): avc: denied { write } for pid=5581 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.787398][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.788333][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.789069][ T51] bond0 (unregistering): Released all slaves [ 67.790371][ T51] bond1 (unregistering): Released all slaves [ 67.798019][ T5549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.799084][ T5549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.835458][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.857531][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.857605][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.857925][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.857977][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.860256][ T51] veth1_macvtap: left promiscuous mode [ 67.860281][ T51] veth0_macvtap: left promiscuous mode [ 67.860323][ T51] veth1_vlan: left promiscuous mode [ 67.860432][ T51] veth0_vlan: left promiscuous mode [ 67.925469][ T51] team0 (unregistering): Port device team_slave_1 removed [ 67.927609][ T51] team0 (unregistering): Port device team_slave_0 removed [ 67.950986][ T5549] team0: Port device team_slave_0 added [ 67.952087][ T5549] team0: Port device team_slave_1 added [ 67.967838][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.967852][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.967878][ T5549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.968549][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.968559][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.968583][ T5549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.991363][ T5549] hsr_slave_0: entered promiscuous mode [ 67.991676][ T5549] hsr_slave_1: entered promiscuous mode [ 68.073096][ T5549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.082628][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.086187][ T5549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.100925][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.102035][ T5549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.116041][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.116640][ T5549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.119855][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.148945][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.148977][ T5549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.149086][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.149118][ T5549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.170949][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.177498][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.185529][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.209068][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.212390][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.212422][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.212957][ T29] audit: type=1400 audit(1791368184.966:1127): avc: denied { write } for pid=5585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.237031][ T29] audit: type=1400 audit(1791368184.996:1128): avc: denied { write } for pid=5602 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.249951][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.249986][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.251809][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 68.377798][ T29] audit: type=1400 audit(1791368185.136:1129): avc: denied { write } for pid=5608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.381342][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.443111][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.495469][ T5549] veth0_vlan: entered promiscuous mode [ 68.497271][ T5549] veth1_vlan: entered promiscuous mode [ 68.506560][ T5549] veth0_macvtap: entered promiscuous mode [ 68.507927][ T5549] veth1_macvtap: entered promiscuous mode [ 68.511853][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.516559][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.519313][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519454][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519491][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519523][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.646086][ T5669] set_capacity_and_notify: 2 callbacks suppressed [ 68.646103][ T5669] loop0: detected capacity change from 0 to 512 [ 68.651990][ T5669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.680939][ T5669] EXT4-fs (loop0): 1 truncate cleaned up [ 68.687321][ T5669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.704914][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.780788][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.958391][ T5691] netlink: 256 bytes leftover after parsing attributes in process `syz.0.798'. [ 68.958522][ T5691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 69.059859][ T5703] Invalid argument reading file caps for ./file0 [ 69.928338][ T5713] FAULT_INJECTION: forcing a failure. [ 69.928338][ T5713] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.928405][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.928433][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.928447][ T5713] Call Trace: [ 69.928454][ T5713] [ 69.928461][ T5713] __dump_stack+0x1d/0x30 [ 69.928494][ T5713] dump_stack_lvl+0x95/0xd0 [ 69.928539][ T5713] dump_stack+0x15/0x1b [ 69.928564][ T5713] should_fail_ex+0x262/0x280 [ 69.928596][ T5713] should_fail+0xb/0x20 [ 69.928625][ T5713] should_fail_usercopy+0x1a/0x20 [ 69.928705][ T5713] _copy_from_user+0x1c/0xb0 [ 69.928734][ T5713] __sys_bpf+0x1e2/0xc30 [ 69.928858][ T5713] ? do_futex+0x380/0x460 [ 69.928895][ T5713] __x64_sys_bpf+0x69/0x80 [ 69.928920][ T5713] x64_sys_call+0xf26/0x2550 [ 69.928945][ T5713] do_syscall_64+0x112/0x360 [ 69.928980][ T5713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.929011][ T5713] RIP: 0033:0x7fa6c03fe199 [ 69.929029][ T5713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.929048][ T5713] RSP: 002b:00007fa6bee57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.929069][ T5713] RAX: ffffffffffffffda RBX: 00007fa6c0685fa0 RCX: 00007fa6c03fe199 [ 69.929162][ T5713] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 69.929178][ T5713] RBP: 00007fa6c04958e0 R08: 0000000000000000 R09: 0000000000000000 [ 69.929193][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.929208][ T5713] R13: 00007fa6c0686038 R14: 00007fa6c0685fa0 R15: 00007fff9b4bb4b8 [ 69.929229][ T5713] [ 69.950272][ T5716] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.952473][ T5716] netlink: 'syz.4.811': attribute type 12 has an invalid length. [ 70.391209][ T5748] FAULT_INJECTION: forcing a failure. [ 70.391209][ T5748] name failslab, interval 1, probability 0, space 0, times 0 [ 70.391242][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: syz.0.828 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.391308][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.391320][ T5748] Call Trace: [ 70.391328][ T5748] [ 70.391337][ T5748] __dump_stack+0x1d/0x30 [ 70.391368][ T5748] dump_stack_lvl+0x95/0xd0 [ 70.391408][ T5748] dump_stack+0x15/0x1b [ 70.391461][ T5748] should_fail_ex+0x262/0x280 [ 70.391494][ T5748] ? resv_map_alloc+0x57/0x190 [ 70.391518][ T5748] should_failslab+0x8c/0xb0 [ 70.391566][ T5748] __kmalloc_cache_noprof+0x7a/0x400 [ 70.391646][ T5748] ? resv_map_alloc+0x57/0x190 [ 70.391676][ T5748] resv_map_alloc+0x57/0x190 [ 70.391700][ T5748] hugetlbfs_get_inode+0x67/0x330 [ 70.391805][ T5748] ? xfd_validate_state+0x45/0xf0 [ 70.391881][ T5748] hugetlb_file_setup+0x192/0x3d0 [ 70.391972][ T5748] ksys_mmap_pgoff+0x13f/0x310 [ 70.392005][ T5748] x64_sys_call+0x23b3/0x2550 [ 70.392035][ T5748] do_syscall_64+0x112/0x360 [ 70.392065][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.392121][ T5748] RIP: 0033:0x7fa6c03fe199 [ 70.392137][ T5748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.392155][ T5748] RSP: 002b:00007fa6bee57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 70.392228][ T5748] RAX: ffffffffffffffda RBX: 00007fa6c0685fa0 RCX: 00007fa6c03fe199 [ 70.392243][ T5748] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 70.392259][ T5748] RBP: 00007fa6c04958e0 R08: ffffffffffffffff R09: 0000000000000000 [ 70.392277][ T5748] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 70.392292][ T5748] R13: 00007fa6c0686038 R14: 00007fa6c0685fa0 R15: 00007fff9b4bb4b8 [ 70.392372][ T5748] [ 70.630901][ T5729] loop6: detected capacity change from 0 to 512 [ 70.668692][ T5729] EXT4-fs: Ignoring removed bh option [ 70.675736][ T5729] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.719156][ T5729] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 70.730479][ T5729] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 70.733072][ T5729] EXT4-fs (loop6): orphan cleanup on readonly fs [ 70.741816][ T5729] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.746484][ T5729] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 70.751156][ T5729] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.809: Invalid block bitmap block 0 in block_group 0 [ 70.751254][ T5729] loop6: lost filesystem error report for type 5 error -117 [ 70.752334][ T5729] EXT4-fs (loop6): Remounting filesystem read-only [ 70.753486][ T5729] EXT4-fs (loop6): 1 orphan inode deleted [ 70.774873][ T5729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.042006][ T5549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.562551][ T5823] pci 0000:00:01.0: MSI/MSI-X allowed for future drivers [ 71.609002][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 71.609019][ T29] audit: type=1400 audit(1791368188.366:1162): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.658888][ T29] audit: type=1400 audit(1791368188.416:1163): avc: denied { create } for pid=5834 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.662793][ T29] audit: type=1400 audit(1791368188.416:1164): avc: denied { ioctl } for pid=5834 comm="syz.5.840" path="socket:[12523]" dev="sockfs" ino=12523 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.757062][ T29] audit: type=1326 audit(1791368188.516:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5836 comm="syz.3.841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069fa7e199 code=0x0 [ 71.888763][ T5851] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 72.202222][ T5902] loop6: detected capacity change from 0 to 8192 [ 72.398129][ T29] audit: type=1400 audit(1791368189.156:1166): avc: denied { read } for pid=5911 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.494471][ T5916] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.859' sets config #0 [ 73.100990][ T5944] loop6: detected capacity change from 0 to 8192 [ 73.183718][ T5950] bio_check_eod: 4879 callbacks suppressed [ 73.183980][ T5950] syz.6.873: attempt to access beyond end of device [ 73.183980][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.184082][ T5950] buffer_io_error: 4879 callbacks suppressed [ 73.184094][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227125][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227125][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227155][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227199][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227199][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227219][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227275][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227275][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227295][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227318][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227318][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227338][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227443][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227443][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227463][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227490][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227490][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227536][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227560][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227560][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227579][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227605][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227605][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227641][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.227669][ T5950] syz.6.873: attempt to access beyond end of device [ 73.227669][ T5950] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.227689][ T5950] Buffer I/O error on dev loop6, logical block 57847, async page read [ 73.542550][ T5958] netlink: 64 bytes leftover after parsing attributes in process `syz.0.878'. [ 73.591612][ T29] audit: type=1326 audit(1791368190.346:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.0.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 73.591705][ T29] audit: type=1326 audit(1791368190.346:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.0.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 73.593040][ T29] audit: type=1326 audit(1791368190.346:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.0.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 73.593109][ T29] audit: type=1326 audit(1791368190.346:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.0.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 73.593159][ T29] audit: type=1326 audit(1791368190.346:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.0.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa6c03fe199 code=0x7ffc0000 [ 74.474700][ T6004] loop4: detected capacity change from 0 to 8192 [ 75.001085][ T6017] loop5: detected capacity change from 0 to 512 [ 75.030491][ T6017] EXT4-fs: Ignoring removed bh option [ 75.031141][ T6017] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.040403][ T6031] loop3: detected capacity change from 0 to 512 [ 75.054002][ T6031] EXT4-fs: inline encryption not supported [ 75.060602][ T6031] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.908: corrupted in-inode xattr: invalid ea_ino [ 75.060632][ T6031] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.063775][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 75.063796][ C1] EXT4-fs (loop3): initial error at time 1791368191: ext4_iget_extra_inode:5210: inode 15 [ 75.063828][ C1] EXT4-fs (loop3): last error at time 1791368191: ext4_iget_extra_inode:5210: inode 15 [ 75.064787][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.908: couldn't read orphan inode 15 (err -117) [ 75.064813][ T6031] loop3: lost filesystem error report for type 5 error -117 [ 75.065319][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.069381][ T6031] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.908: invalid indirect mapped block 234881024 (level 0) [ 75.069472][ T6031] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 75.092326][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.145052][ T6040] pci 0000:00:01.0: MSI/MSI-X allowed for future drivers [ 75.167662][ T6017] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 75.219465][ T6042] loop0: detected capacity change from 0 to 2048 [ 75.226028][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.249950][ T6017] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 75.250801][ T6017] EXT4-fs (loop5): orphan cleanup on readonly fs [ 75.267481][ T6017] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.271989][ T6017] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 75.276969][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.307211][ T6017] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.903: Invalid block bitmap block 0 in block_group 0 [ 75.307373][ T6017] loop5: lost filesystem error report for type 5 error -117 [ 75.309735][ T6017] EXT4-fs (loop5): Remounting filesystem read-only [ 75.311159][ T6017] EXT4-fs (loop5): 1 orphan inode deleted [ 75.359596][ T6017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.506996][ T6055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.507443][ T6055] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.563198][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.586695][ T6062] loop3: detected capacity change from 0 to 8192 [ 75.641742][ T6071] FAULT_INJECTION: forcing a failure. [ 75.641742][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.641771][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.0.925 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.641794][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.641807][ T6071] Call Trace: [ 75.641814][ T6071] [ 75.641822][ T6071] __dump_stack+0x1d/0x30 [ 75.641907][ T6071] dump_stack_lvl+0x95/0xd0 [ 75.641936][ T6071] dump_stack+0x15/0x1b [ 75.641994][ T6071] should_fail_ex+0x262/0x280 [ 75.642030][ T6071] should_fail+0xb/0x20 [ 75.642057][ T6071] should_fail_usercopy+0x1a/0x20 [ 75.642086][ T6071] _copy_from_user+0x1c/0xb0 [ 75.642152][ T6071] do_seccomp+0x324/0xa40 [ 75.642188][ T6071] ? restore_fpregs_from_fpstate+0x61/0x110 [ 75.642217][ T6071] __x64_sys_seccomp+0x40/0x50 [ 75.642328][ T6071] x64_sys_call+0x3f0/0x2550 [ 75.642361][ T6071] do_syscall_64+0x112/0x360 [ 75.642392][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.642419][ T6071] RIP: 0033:0x7fa6c03fe199 [ 75.642524][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.642552][ T6071] RSP: 002b:00007fa6bee57028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 75.642614][ T6071] RAX: ffffffffffffffda RBX: 00007fa6c0685fa0 RCX: 00007fa6c03fe199 [ 75.642627][ T6071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.642645][ T6071] RBP: 00007fa6c04958e0 R08: 0000000000000000 R09: 0000000000000000 [ 75.642659][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.642671][ T6071] R13: 00007fa6c0686038 R14: 00007fa6c0685fa0 R15: 00007fff9b4bb4b8 [ 75.642744][ T6071] [ 75.842887][ T5874] tipc: Subscription rejected, illegal request [ 75.920069][ T6087] loop0: detected capacity change from 0 to 8192 [ 76.023295][ T6099] loop4: detected capacity change from 0 to 164 [ 76.036239][ T6099] iso9660: Unknown parameter '0xffffffffffffffffÿ .ÃNÛBþO' [ 76.065684][ T6099] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.065730][ T6099] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 76.133641][ T6102] FAULT_INJECTION: forcing a failure. [ 76.133641][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 76.133670][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.5.939 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.133782][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.133796][ T6102] Call Trace: [ 76.133803][ T6102] [ 76.133812][ T6102] __dump_stack+0x1d/0x30 [ 76.133840][ T6102] dump_stack_lvl+0x95/0xd0 [ 76.133899][ T6102] dump_stack+0x15/0x1b [ 76.133938][ T6102] should_fail_ex+0x262/0x280 [ 76.133970][ T6102] ? shmem_init_fs_context+0x38/0x110 [ 76.134016][ T6102] should_failslab+0x8c/0xb0 [ 76.134051][ T6102] __kmalloc_cache_noprof+0x7a/0x400 [ 76.134148][ T6102] ? shmem_init_fs_context+0x38/0x110 [ 76.134181][ T6102] shmem_init_fs_context+0x38/0x110 [ 76.134212][ T6102] devtmpfs_init_fs_context+0x18/0x60 [ 76.134300][ T6102] alloc_fs_context+0x490/0x570 [ 76.134328][ T6102] fs_context_for_mount+0x22/0x30 [ 76.134392][ T6102] __se_sys_fsopen+0xa0/0x1e0 [ 76.134418][ T6102] __x64_sys_fsopen+0x31/0x40 [ 76.134447][ T6102] x64_sys_call+0x1f0f/0x2550 [ 76.134514][ T6102] do_syscall_64+0x112/0x360 [ 76.134544][ T6102] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 76.134613][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.134635][ T6102] RIP: 0033:0x7f0e8de5e199 [ 76.134649][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.134747][ T6102] RSP: 002b:00007f0e8c8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 76.134774][ T6102] RAX: ffffffffffffffda RBX: 00007f0e8e0e5fa0 RCX: 00007f0e8de5e199 [ 76.134788][ T6102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 76.134847][ T6102] RBP: 00007f0e8def58e0 R08: 0000000000000000 R09: 0000000000000000 [ 76.134862][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.134876][ T6102] R13: 00007f0e8e0e6038 R14: 00007f0e8e0e5fa0 R15: 00007ffeaf46d998 [ 76.134939][ T6102] [ 76.427424][ T6097] loop6: detected capacity change from 0 to 512 [ 76.462697][ T6097] EXT4-fs: Ignoring removed bh option [ 76.463507][ T6097] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.479303][ T6116] loop4: detected capacity change from 0 to 512 [ 76.492822][ T6097] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.506951][ T6097] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 76.507718][ T6097] EXT4-fs (loop6): orphan cleanup on readonly fs [ 76.509072][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.509135][ T6116] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.511936][ T6097] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.516122][ T6097] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 76.529298][ T6097] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.936: Invalid block bitmap block 0 in block_group 0 [ 76.529378][ T6097] loop6: lost filesystem error report for type 5 error -117 [ 76.534696][ T6097] EXT4-fs (loop6): Remounting filesystem read-only [ 76.536413][ T6097] EXT4-fs (loop6): 1 orphan inode deleted [ 76.593162][ T6097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.593795][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.874272][ T37] kernel read not supported for file /per_cpu/cpu0/trace_pipe (pid: 37 comm: kworker/1:1) [ 76.874357][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 76.874369][ T29] audit: type=1400 audit(1791368193.626:1208): avc: denied { mounton } for pid=6127 comm="syz.4.946" path="/143/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=2132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 76.928707][ T5549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.239090][ T29] audit: type=1326 audit(1791368193.996:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.240074][ T29] audit: type=1326 audit(1791368193.996:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.241116][ T29] audit: type=1326 audit(1791368193.996:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.241147][ T29] audit: type=1326 audit(1791368193.996:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.243252][ T29] audit: type=1326 audit(1791368193.996:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.243934][ T29] audit: type=1326 audit(1791368193.996:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.243963][ T29] audit: type=1326 audit(1791368194.006:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.269942][ T29] audit: type=1326 audit(1791368194.006:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.270015][ T29] audit: type=1326 audit(1791368194.006:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dadee199 code=0x7ffc0000 [ 77.476864][ T6147] netlink: 256 bytes leftover after parsing attributes in process `syz.6.953'. [ 77.487145][ T6149] FAULT_INJECTION: forcing a failure. [ 77.487145][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 77.487174][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.5.954 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.487271][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.487284][ T6149] Call Trace: [ 77.487290][ T6149] [ 77.487298][ T6149] __dump_stack+0x1d/0x30 [ 77.487325][ T6149] dump_stack_lvl+0x95/0xd0 [ 77.487352][ T6149] dump_stack+0x15/0x1b [ 77.487379][ T6149] should_fail_ex+0x262/0x280 [ 77.487408][ T6149] ? ioctx_alloc+0xe3/0x480 [ 77.487443][ T6149] should_failslab+0x8c/0xb0 [ 77.487531][ T6149] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 77.487566][ T6149] ? ioctx_alloc+0xe3/0x480 [ 77.487665][ T6149] ioctx_alloc+0xe3/0x480 [ 77.487780][ T6149] __se_sys_io_setup+0x6b/0x1b0 [ 77.487840][ T6149] __x64_sys_io_setup+0x31/0x40 [ 77.487928][ T6149] x64_sys_call+0x1a9f/0x2550 [ 77.487957][ T6149] do_syscall_64+0x112/0x360 [ 77.487988][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.488082][ T6149] RIP: 0033:0x7f0e8de5e199 [ 77.488100][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.488119][ T6149] RSP: 002b:00007f0e8c8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 77.488145][ T6149] RAX: ffffffffffffffda RBX: 00007f0e8e0e5fa0 RCX: 00007f0e8de5e199 [ 77.488160][ T6149] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: 000000000000ffff [ 77.488175][ T6149] RBP: 00007f0e8def58e0 R08: 0000000000000000 R09: 0000000000000000 [ 77.488189][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.488203][ T6149] R13: 00007f0e8e0e6038 R14: 00007f0e8e0e5fa0 R15: 00007ffeaf46d998 [ 77.488290][ T6149] [ 77.650624][ T6154] loop5: detected capacity change from 0 to 8192 [ 78.185628][ T6158] bio_check_eod: 40203 callbacks suppressed [ 78.185648][ T6158] syz.5.955: attempt to access beyond end of device [ 78.185648][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.185691][ T6158] syz.5.955: attempt to access beyond end of device [ 78.185691][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.185755][ T6158] syz.5.955: attempt to access beyond end of device [ 78.185755][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.185793][ T6158] syz.5.955: attempt to access beyond end of device [ 78.185793][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187342][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187342][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187434][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187434][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187468][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187468][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187510][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187510][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187542][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187542][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.187576][ T6158] syz.5.955: attempt to access beyond end of device [ 78.187576][ T6158] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 78.273881][ T6158] buffer_io_error: 40325 callbacks suppressed [ 78.273899][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.273975][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274002][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274026][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274171][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274200][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274241][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274269][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274355][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.274390][ T6158] Buffer I/O error on dev loop5, logical block 57847, async page read [ 78.362090][ T6189] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.362279][ T6189] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.461138][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.676129][ T6205] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 78.738554][ T6211] capability: warning: `syz.4.979' uses 32-bit capabilities (legacy support in use) [ 78.784482][ T6213] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.806914][ T6213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.806977][ T6213] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.814804][ T6213] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.982: corrupted xattr block 6: invalid header [ 78.814992][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 78.815063][ T6213] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.982: corrupted xattr block 6: invalid header [ 78.815182][ T6213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 78.816300][ T6213] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.982: corrupted xattr block 6: invalid header [ 78.896549][ T6221] Invalid argument reading file caps for ./file0 [ 78.898249][ T5549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.939533][ T6227] FAULT_INJECTION: forcing a failure. [ 78.939533][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 78.939572][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.4.988 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.939694][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.939707][ T6227] Call Trace: [ 78.939713][ T6227] [ 78.939721][ T6227] __dump_stack+0x1d/0x30 [ 78.939776][ T6227] dump_stack_lvl+0x95/0xd0 [ 78.939801][ T6227] dump_stack+0x15/0x1b [ 78.939825][ T6227] should_fail_ex+0x262/0x280 [ 78.939854][ T6227] should_failslab+0x8c/0xb0 [ 78.939954][ T6227] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 78.940064][ T6227] ? key_alloc+0x2b2/0x940 [ 78.940144][ T6227] ? key_alloc+0x2b2/0x940 [ 78.940214][ T6227] kmemdup_noprof+0x2b/0x70 [ 78.940243][ T6227] key_alloc+0x2b2/0x940 [ 78.940303][ T6227] keyring_alloc+0x45/0xb0 [ 78.940354][ T6227] join_session_keyring+0xe7/0x2a0 [ 78.940390][ T6227] lookup_user_key+0x3a1/0xd60 [ 78.940462][ T6227] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 78.940495][ T6227] __se_sys_add_key+0x272/0x360 [ 78.940521][ T6227] __x64_sys_add_key+0x67/0x80 [ 78.940553][ T6227] x64_sys_call+0x1fa9/0x2550 [ 78.940700][ T6227] do_syscall_64+0x112/0x360 [ 78.940731][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.940811][ T6227] RIP: 0033:0x7f89dadee199 [ 78.940826][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.940843][ T6227] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 78.940862][ T6227] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 78.940924][ T6227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 78.940936][ T6227] RBP: 00007f89dae858e0 R08: fffffffffffffffd R09: 0000000000000000 [ 78.940949][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.940960][ T6227] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 78.940980][ T6227] [ 79.162613][ T5878] IPVS: starting estimator thread 0... [ 79.275961][ T6243] IPVS: using max 2448 ests per chain, 122400 per kthread [ 79.326946][ T6253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.327002][ T6253] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.381810][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.482638][ T6263] FAULT_INJECTION: forcing a failure. [ 79.482638][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 79.482668][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.4.1003 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.482703][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.482715][ T6263] Call Trace: [ 79.482721][ T6263] [ 79.482729][ T6263] __dump_stack+0x1d/0x30 [ 79.482823][ T6263] dump_stack_lvl+0x95/0xd0 [ 79.482916][ T6263] dump_stack+0x15/0x1b [ 79.483015][ T6263] should_fail_ex+0x262/0x280 [ 79.483048][ T6263] should_failslab+0x8c/0xb0 [ 79.483087][ T6263] __kmalloc_node_noprof+0xdb/0x500 [ 79.483120][ T6263] ? __kmalloc_noprof+0x1f1/0x4d0 [ 79.483262][ T6263] ? get_callchain_buffers+0x19c/0x2f0 [ 79.483342][ T6263] ? get_callchain_buffers+0x19c/0x2f0 [ 79.483409][ T6263] get_callchain_buffers+0x19c/0x2f0 [ 79.483438][ T6263] perf_event_alloc+0x180a/0x19e0 [ 79.483477][ T6263] __se_sys_perf_event_open+0x67d/0x1290 [ 79.483553][ T6263] ? do_futex+0x391/0x460 [ 79.483589][ T6263] __x64_sys_perf_event_open+0x67/0x80 [ 79.483665][ T6263] x64_sys_call+0x1f25/0x2550 [ 79.483689][ T6263] do_syscall_64+0x112/0x360 [ 79.483720][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.483808][ T6263] RIP: 0033:0x7f89dadee199 [ 79.483824][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.483845][ T6263] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 79.483891][ T6263] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 79.483906][ T6263] RDX: 0000004000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 79.483919][ T6263] RBP: 00007f89dae858e0 R08: 0000000000000008 R09: 0000000000000000 [ 79.483935][ T6263] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 79.483949][ T6263] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 79.483967][ T6263] [ 80.224295][ T6340] FAULT_INJECTION: forcing a failure. [ 80.224295][ T6340] name failslab, interval 1, probability 0, space 0, times 0 [ 80.224330][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.4.1019 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.224358][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.224374][ T6340] Call Trace: [ 80.224381][ T6340] [ 80.224388][ T6340] __dump_stack+0x1d/0x30 [ 80.224441][ T6340] dump_stack_lvl+0x95/0xd0 [ 80.224468][ T6340] dump_stack+0x15/0x1b [ 80.224493][ T6340] should_fail_ex+0x262/0x280 [ 80.224524][ T6340] should_failslab+0x8c/0xb0 [ 80.224598][ T6340] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 80.224637][ T6340] ? __d_alloc+0x34/0x320 [ 80.224734][ T6340] ? __d_alloc+0x34/0x320 [ 80.224766][ T6340] __d_alloc+0x34/0x320 [ 80.224794][ T6340] ? d_alloc_pseudo+0x13/0x80 [ 80.224825][ T6340] d_alloc_pseudo+0x1e/0x80 [ 80.224874][ T6340] alloc_path_pseudo+0xa4/0x140 [ 80.224904][ T6340] alloc_file_pseudo+0x55/0x120 [ 80.224934][ T6340] sock_alloc_file+0x9c/0x1e0 [ 80.224971][ T6340] __sys_socket+0x118/0x180 [ 80.225084][ T6340] __x64_sys_socket+0x3f/0x50 [ 80.225162][ T6340] x64_sys_call+0x246e/0x2550 [ 80.225192][ T6340] do_syscall_64+0x112/0x360 [ 80.225223][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.225276][ T6340] RIP: 0033:0x7f89dadee199 [ 80.225295][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.225315][ T6340] RSP: 002b:00007f89d9847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 80.225395][ T6340] RAX: ffffffffffffffda RBX: 00007f89db075fa0 RCX: 00007f89dadee199 [ 80.225412][ T6340] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 80.225433][ T6340] RBP: 00007f89dae858e0 R08: 0000000000000000 R09: 0000000000000000 [ 80.225502][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.225516][ T6340] R13: 00007f89db076038 R14: 00007f89db075fa0 R15: 00007ffff590b628 [ 80.225559][ T6340] [ 80.259594][ T6345] FAULT_INJECTION: forcing a failure. [ 80.259594][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 80.259637][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.3.1021 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.259664][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.259695][ T6345] Call Trace: [ 80.259702][ T6345] [ 80.259709][ T6345] __dump_stack+0x1d/0x30 [ 80.259737][ T6345] dump_stack_lvl+0x95/0xd0 [ 80.259762][ T6345] dump_stack+0x15/0x1b [ 80.259784][ T6345] should_fail_ex+0x262/0x280 [ 80.259851][ T6345] should_failslab+0x8c/0xb0 [ 80.259955][ T6345] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 80.259992][ T6345] ? sock_alloc_inode+0x36/0xf0 [ 80.260083][ T6345] ? sock_alloc_inode+0x36/0xf0 [ 80.260163][ T6345] ? selinux_socket_create+0x86/0x180 [ 80.260201][ T6345] ? __pfx_sock_alloc_inode+0x10/0x10 [ 80.260255][ T6345] sock_alloc_inode+0x36/0xf0 [ 80.260333][ T6345] alloc_inode+0x40/0x170 [ 80.260358][ T6345] __sock_create+0x121/0x580 [ 80.260391][ T6345] ? __rcu_read_unlock+0x4e/0x70 [ 80.260450][ T6345] ? _raw_write_lock_bh+0x57/0xb0 [ 80.260484][ T6345] sock_create_kern+0x38/0x50 [ 80.260519][ T6345] smc_create+0x3ea/0x480 [ 80.260627][ T6345] __sock_create+0x2e5/0x580 [ 80.260665][ T6345] __sys_socket+0xaf/0x180 [ 80.260751][ T6345] __x64_sys_socket+0x3f/0x50 [ 80.260786][ T6345] x64_sys_call+0x246e/0x2550 [ 80.260813][ T6345] do_syscall_64+0x112/0x360 [ 80.260841][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.260890][ T6345] RIP: 0033:0x7f069fa7e199 [ 80.260987][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.261007][ T6345] RSP: 002b:00007f069e4d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 80.261067][ T6345] RAX: ffffffffffffffda RBX: 00007f069fd05fa0 RCX: 00007f069fa7e199 [ 80.261082][ T6345] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 80.261096][ T6345] RBP: 00007f069fb158e0 R08: 0000000000000000 R09: 0000000000000000 [ 80.261111][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.261137][ T6345] R13: 00007f069fd06038 R14: 00007f069fd05fa0 R15: 00007ffd977a7de8 [ 80.261158][ T6345] [ 80.261222][ T6345] socket: no more sockets [ 80.344469][ T6349] FAULT_INJECTION: forcing a failure. [ 80.344469][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 80.344501][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.6.1032 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.344572][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.344588][ T6349] Call Trace: [ 80.344659][ T6349] [ 80.344668][ T6349] __dump_stack+0x1d/0x30 [ 80.344717][ T6349] dump_stack_lvl+0x95/0xd0 [ 80.344742][ T6349] dump_stack+0x15/0x1b [ 80.344764][ T6349] should_fail_ex+0x262/0x280 [ 80.344838][ T6349] ? security_inode_init_security+0xb4/0x320 [ 80.344890][ T6349] should_failslab+0x8c/0xb0 [ 80.344925][ T6349] __kmalloc_noprof+0xd0/0x4d0 [ 80.345000][ T6349] ? security_inode_init_security+0xb4/0x320 [ 80.345071][ T6349] ? __pfx_shmem_initxattrs+0x10/0x10 [ 80.345099][ T6349] security_inode_init_security+0xb4/0x320 [ 80.345132][ T6349] ? simple_acl_create+0x328/0x370 [ 80.345187][ T6349] shmem_mknod+0xaa/0x170 [ 80.345213][ T6349] shmem_mkdir+0x33/0x70 [ 80.345238][ T6349] vfs_mkdir+0x291/0x3e0 [ 80.345284][ T6349] filename_mkdirat+0x138/0x300 [ 80.345322][ T6349] __se_sys_mkdirat+0x32/0xf0 [ 80.345342][ T6349] __x64_sys_mkdirat+0x43/0x50 [ 80.345363][ T6349] x64_sys_call+0x368/0x2550 [ 80.345391][ T6349] do_syscall_64+0x112/0x360 [ 80.345474][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.345498][ T6349] RIP: 0033:0x7fbf15bae199 [ 80.345591][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.345610][ T6349] RSP: 002b:00007fbf14607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 80.345666][ T6349] RAX: ffffffffffffffda RBX: 00007fbf15e35fa0 RCX: 00007fbf15bae199 [ 80.345682][ T6349] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 80.345696][ T6349] RBP: 00007fbf15c458e0 R08: 0000000000000000 R09: 0000000000000000 [ 80.345710][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.345724][ T6349] R13: 00007fbf15e36038 R14: 00007fbf15e35fa0 R15: 00007fff0e090768 [ 80.345744][ T6349] [ 80.703189][ T6368] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.952266][ T6380] set_capacity_and_notify: 5 callbacks suppressed [ 80.952298][ T6380] loop0: detected capacity change from 0 to 128 [ 81.219963][ T6398] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 81.220641][ T6400] loop4: detected capacity change from 0 to 512 [ 81.256161][ T6400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.256293][ T6400] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.259770][ T6400] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1041: corrupted xattr block 32: invalid ea_ino [ 81.260187][ T6400] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.260295][ T6400] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1041: corrupted xattr block 32: invalid ea_ino [ 81.260508][ T6400] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.260652][ T6400] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1041: corrupted xattr block 32: invalid ea_ino [ 81.260830][ T6400] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.262600][ T6400] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1041: corrupted xattr block 32: invalid ea_ino [ 81.262868][ T6400] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.262894][ T6400] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1041: corrupted xattr block 32: invalid ea_ino [ 81.263134][ T6400] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.351857][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.483459][ T42] tipc: Subscription rejected, illegal request [ 81.506106][ T6413] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.840989][ T6422] loop3: detected capacity change from 0 to 512 [ 81.872330][ T6422] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 81.912198][ T6430] loop5: detected capacity change from 0 to 1024 [ 81.913810][ T6430] EXT4-fs: inline encryption not supported [ 81.913840][ T6430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.936256][ T6430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.936387][ T6430] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.938297][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 81.938310][ T29] audit: type=1400 audit(1791368198.696:1273): avc: denied { write } for pid=6429 comm="syz.5.1054" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.938464][ T29] audit: type=1400 audit(1791368198.696:1274): avc: denied { read append } for pid=6429 comm="syz.5.1054" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.938550][ T29] audit: type=1400 audit(1791368198.696:1275): avc: denied { open } for pid=6429 comm="syz.5.1054" path="/178/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.968296][ T3676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.083645][ T6436] netlink: 'syz.5.1056': attribute type 5 has an invalid length. [ 82.083662][ T6436] netlink: 'syz.5.1056': attribute type 8 has an invalid length. [ 82.120732][ T11] kernel read not supported for file /swaps (pid: 11 comm: kworker/0:1) [ 82.142063][ T6446] netlink: 'syz.5.1060': attribute type 1 has an invalid length. [ 82.171319][ T6449] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.217858][ T6443] loop6: detected capacity change from 0 to 8192 [ 82.277788][ T2983] ================================================================== [ 82.277827][ T2983] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 82.277861][ T2983] [ 82.277867][ T2983] write to 0xffff88811b043b40 of 4 bytes by task 3291 on cpu 0: [ 82.277885][ T2983] d_make_discardable+0x4f/0x90 [ 82.277911][ T2983] simple_unlink+0x68/0x80 [ 82.277930][ T2983] shmem_unlink+0x12d/0x140 [ 82.277953][ T2983] vfs_unlink+0x1c3/0x490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.277971][ T2983] filename_unlinkat+0x1dc/0x410 [ 82.277988][ T2983] __se_sys_unlink+0x2b/0xe0 [ 82.278006][ T2983] __x64_sys_unlink+0x1f/0x30 [ 82.278026][ T2983] x64_sys_call+0x18ee/0x2550 [ 82.278053][ T2983] do_syscall_64+0x112/0x360 [ 82.278079][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.278102][ T2983] [ 82.278108][ T2983] read to 0xffff88811b043b40 of 4 bytes by task 2983 on cpu 1: [ 82.278125][ T2983] step_into_slowpath+0x139/0x4c0 [ 82.278149][ T2983] path_lookupat+0x2eb/0x4c0 [ 82.278170][ T2983] filename_lookup+0x18f/0x390 [ 82.278194][ T2983] do_readlinkat+0x74/0x2f0 [ 82.278222][ T2983] __x64_sys_readlink+0x47/0x60 [ 82.278249][ T2983] x64_sys_call+0x1d41/0x2550 [ 82.278277][ T2983] do_syscall_64+0x112/0x360 [ 82.278296][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.278326][ T2983] [ 82.278330][ T2983] value changed: 0x08300080 -> 0x00004080 [ 82.278342][ T2983] [ 82.278345][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 82.278355][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 82.278381][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.278395][ T2983] ================================================================== [ 82.731159][ T5878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.777876][ T5878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.827079][ T5878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.832025][ T4704] syz_tun (unregistering): left allmulticast mode [ 82.857418][ T5878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.974004][ T5878] bridge_slave_1: left allmulticast mode [ 82.974028][ T5878] bridge_slave_1: left promiscuous mode [ 82.974132][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.974867][ T5878] bridge_slave_0: left allmulticast mode [ 82.975050][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.045586][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.047254][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.048207][ T5878] bond0 (unregistering): Released all slaves [ 83.049749][ T5878] bond1 (unregistering): Released all slaves [ 83.096452][ T5878] tipc: Left network mode [ 83.099913][ T5878] hsr_slave_0: left promiscuous mode [ 83.100256][ T5878] hsr_slave_1: left promiscuous mode [ 83.100635][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.100651][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.100967][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.100981][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.103546][ T5878] veth1_macvtap: left promiscuous mode [ 83.103635][ T5878] veth0_macvtap: left promiscuous mode [ 83.103678][ T5878] veth1_vlan: left promiscuous mode [ 83.103696][ T5878] veth0_vlan: left promiscuous mode [ 83.200621][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 83.203295][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 83.227962][ T29] audit: type=1400 audit(1791368199.986:1276): avc: denied { write } for pid=6464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.265277][ T29] audit: type=1400 audit(1791368200.026:1277): avc: denied { write } for pid=6475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.275900][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 83.341900][ T29] audit: type=1400 audit(1791368200.096:1278): avc: denied { write } for pid=6478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.373526][ T29] audit: type=1400 audit(1791368200.126:1279): avc: denied { write } for pid=6489 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.405096][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 83.467379][ T29] audit: type=1400 audit(1791368200.226:1280): avc: denied { write } for pid=6492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.502702][ T29] audit: type=1400 audit(1791368200.256:1281): avc: denied { write } for pid=6503 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.535110][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 83.537823][ T5878] IPVS: stop unused estimator thread 0... [ 83.599371][ T5878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.601699][ T29] audit: type=1400 audit(1791368200.356:1282): avc: denied { write } for pid=6506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.647711][ T5878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.649904][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 83.688687][ T5878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.726345][ T5878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.785082][ T5878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.826603][ T5878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.876836][ T5878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.884438][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 83.906944][ T5878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.972122][ T5878] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.997267][ T5878] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.016559][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 84.047025][ T5878] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.076737][ T5878] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.132496][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 84.146312][ T5878] bridge_slave_1: left allmulticast mode [ 84.146333][ T5878] bridge_slave_1: left promiscuous mode [ 84.146433][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.147407][ T5878] bridge_slave_0: left allmulticast mode [ 84.147433][ T5878] bridge_slave_0: left promiscuous mode [ 84.147507][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.170269][ T5878] bridge_slave_1: left allmulticast mode [ 84.170289][ T5878] bridge_slave_1: left promiscuous mode [ 84.170413][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.181946][ T5878] bridge_slave_0: left allmulticast mode [ 84.181968][ T5878] bridge_slave_0: left promiscuous mode [ 84.182098][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.214906][ T5878] bridge_slave_1: left allmulticast mode [ 84.214929][ T5878] bridge_slave_1: left promiscuous mode [ 84.215023][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.227953][ T5878] bridge_slave_0: left allmulticast mode [ 84.227975][ T5878] bridge_slave_0: left promiscuous mode [ 84.228133][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.325885][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.327090][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.327996][ T5878] bond0 (unregistering): Released all slaves [ 84.359404][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.360572][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.361367][ T5878] bond0 (unregistering): Released all slaves [ 84.388680][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.389857][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.390669][ T5878] bond0 (unregistering): Released all slaves [ 84.431694][ T5878] hsr_slave_0: left promiscuous mode [ 84.432007][ T5878] hsr_slave_1: left promiscuous mode [ 84.432421][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.432436][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.432766][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.432837][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.439333][ T5878] hsr_slave_0: left promiscuous mode [ 84.439706][ T5878] hsr_slave_1: left promiscuous mode [ 84.440362][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.440377][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.440764][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.440778][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.468269][ T5878] hsr_slave_0: left promiscuous mode [ 84.475766][ T5878] hsr_slave_1: left promiscuous mode [ 84.476395][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.476409][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.481210][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.481227][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.503553][ T5878] veth1_macvtap: left promiscuous mode [ 84.503581][ T5878] veth0_macvtap: left promiscuous mode [ 84.503698][ T5878] veth1_vlan: left promiscuous mode [ 84.503730][ T5878] veth0_vlan: left promiscuous mode [ 84.542514][ T5878] veth1_macvtap: left promiscuous mode [ 84.542587][ T5878] veth0_macvtap: left promiscuous mode [ 84.542669][ T5878] veth1_vlan: left promiscuous mode [ 84.542768][ T5878] veth0_vlan: left promiscuous mode [ 84.567956][ T5878] veth1_macvtap: left promiscuous mode [ 84.567985][ T5878] veth0_macvtap: left promiscuous mode [ 84.568104][ T5878] veth1_vlan: left promiscuous mode [ 84.568146][ T5878] veth0_vlan: left promiscuous mode [ 84.682827][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 84.691423][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 84.734892][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 84.736548][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 84.781512][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 84.783506][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 84.810270][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 84.899806][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 84.984647][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 85.067689][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 85.154304][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 85.242885][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 85.342062][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 85.447766][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.532446][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24