last executing test programs: 2m34.602270402s ago: executing program 32 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000440)=' ', &(0x7f00000005c0)=""/152}, 0x20) 2m0.968798689s ago: executing program 33 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='10', 0x2) pipe2$9p(0x0, 0x4800) 1m51.760991632s ago: executing program 4 (id=1226): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x26, 0x1}, 0xc) 1m51.721887936s ago: executing program 4 (id=1228): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) 1m51.657460332s ago: executing program 4 (id=1232): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x3018e58, &(0x7f0000002280), 0x1, 0x61d, &(0x7f00000001c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) 1m49.675700625s ago: executing program 4 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x9) 1m49.621433881s ago: executing program 4 (id=1262): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.345088409s ago: executing program 4 (id=1269): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 1m49.33732806s ago: executing program 34 (id=1269): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 1m12.873539076s ago: executing program 7 (id=2017): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) 1m12.798585324s ago: executing program 7 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m12.74055893s ago: executing program 7 (id=2020): creat(0x0, 0x1a2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.523353252s ago: executing program 7 (id=2023): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x181) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 1m12.455038829s ago: executing program 7 (id=2026): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000ec0)={0x1, &(0x7f0000000f00)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) 1m11.487279658s ago: executing program 7 (id=2032): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x404, &(0x7f0000000940)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f00000009c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x10ecc8, 0xc, 0x40, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000001040)={@id={0x2, 0x0, @d}}) mount$bind(0x0, &(0x7f0000002300)='.\x00', 0x0, 0x21, 0x0) 1m11.421135945s ago: executing program 35 (id=2032): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x404, &(0x7f0000000940)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f00000009c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x10ecc8, 0xc, 0x40, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000001040)={@id={0x2, 0x0, @d}}) mount$bind(0x0, &(0x7f0000002300)='.\x00', 0x0, 0x21, 0x0) 1m3.105107815s ago: executing program 6 (id=2184): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0xb4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_ACT={0x84, 0x1, [@m_skbmod={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m3.063482349s ago: executing program 6 (id=2186): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000380)) 1m3.062827489s ago: executing program 6 (id=2188): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="3c840300000000002c0012800e000100697036677265746170000000188002801400070000000000000000000000ffffff00ffff0a000100aaba"], 0x58}}, 0x80) 1m3.028353673s ago: executing program 6 (id=2190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1d000, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0/../file0\x00') 1m2.981150557s ago: executing program 6 (id=2191): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000180)) 1m2.76248078s ago: executing program 6 (id=2194): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4009) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m2.76212539s ago: executing program 36 (id=2194): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4009) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 50.971578234s ago: executing program 9 (id=2384): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000540)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000002940)='#', 0x1}], 0x2) 50.803434911s ago: executing program 9 (id=2385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080f0000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 50.52500183s ago: executing program 9 (id=2386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f00000008c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000900)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1100"], 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 50.52467877s ago: executing program 9 (id=2387): syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x21081e, &(0x7f0000000cc0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000003640)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000003b40)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000003c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000003c40)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000003c80)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x4, 0x0, 0x0, 0x417, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffdf2e500000f0000000e000200", [0x40000000004]}) 50.302267122s ago: executing program 9 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002f9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 49.942414649s ago: executing program 9 (id=2399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0xd8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0xa8, 0x1, [@m_mirred={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x74, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b364"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 49.896020604s ago: executing program 37 (id=2399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0xd8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0xa8, 0x1, [@m_mirred={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x74, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b364"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18.628015127s ago: executing program 8 (id=3056): socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000640)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 18.584275692s ago: executing program 8 (id=3059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@bridge_setlink={0x44, 0x13, 0x8, 0x70bd6a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x18, 0x40a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x16cd2}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734"], 0xdc}}, 0x0) 18.513893099s ago: executing program 8 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 18.377594153s ago: executing program 8 (id=3066): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x1000410, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000900)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) 16.581766976s ago: executing program 8 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20882, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca58c30f81b6079f}) 16.241774881s ago: executing program 8 (id=3112): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x200008, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001640)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101040, 0x177) 16.186408707s ago: executing program 38 (id=3112): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x200008, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001640)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101040, 0x177) 7.080912727s ago: executing program 3 (id=3248): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000600)="05", &(0x7f0000000780)=""/70}, 0x20) 7.025421752s ago: executing program 3 (id=3249): r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) 6.549269311s ago: executing program 3 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.203438343s ago: executing program 3 (id=3265): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18, 0x400000, 0x0, 0x7, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002000000ffffffffffff0800410073697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noauto_da_alloc}, {@orlov}]}, 0x1, 0xb66, &(0x7f0000000a40)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2.762462718s ago: executing program 0 (id=3277): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32], 0x1, 0x2cb, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2040, 0x121) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 2.646783539s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.499693394s ago: executing program 0 (id=3282): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000ac0)=""/173) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000480)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000fc0)=""/4103, &(0x7f0000002000)=0x1007) 2.207841944s ago: executing program 1 (id=3285): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08009325214fd965", 0x8}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}], 0x20}, 0x4) 2.130926482s ago: executing program 1 (id=3286): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f0000001780)="$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") truncate(&(0x7f0000001680)='./file1\x00', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000001fc0)='2', 0xfdef, 0xc00) 1.85360974s ago: executing program 1 (id=3297): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x50f, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000840)='./file1\x00', 0x14d642, 0x9c) fallocate(r0, 0x10, 0x6, 0x7000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x94fd}, {0xffffffff, 0x4000000, 0x696, 0xea05}], ['\x00']}) 1.740458792s ago: executing program 1 (id=3289): unshare(0x60000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xa15ea000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.399339707s ago: executing program 0 (id=3293): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002880)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.356651541s ago: executing program 5 (id=3294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x4, 0x7, 0x80000009, 0x6, 0x800004, 0x1, 0xffff8001, 0x401, 0x2, 0xc, 0x4, 0x5, 0x0, 0x3, 0x8}}]}}]}, 0x170}}, 0x24008004) 1.317008065s ago: executing program 5 (id=3295): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0), 0x3, 0x42f, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000001700)='2', 0xfdef, 0xfecc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001740)=0x7873) 1.069957851s ago: executing program 5 (id=3296): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000002900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002940), 0x0, 0x10, &(0x7f0000002980), 0x171}, 0x48) 931.102045ms ago: executing program 2 (id=3298): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0x200a6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xb, 0x90000000}, 0x2000, 0xc, 0x40, 0x7, 0x2, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000002c0), 0x1, 0xbdb, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x4042, 0xc) write$P9_RUNLINKAT(r0, &(0x7f0000001080)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 791.229739ms ago: executing program 2 (id=3299): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@noquota}, {@norecovery}, {@bh}, {@noload}, {@bsdgroups}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000010c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x2002, 0xa) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000011c0)={0xc, r0, 0xfeffffff, 0x0, 0x0, 0xfffffffffdffffff}) 635.110765ms ago: executing program 2 (id=3300): perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x808, 0x8518}, 0x200, 0xe7e, 0x4, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xe8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000) 469.521932ms ago: executing program 5 (id=3301): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x8000c89f, 0xc880, 0x7, 0x20002f3}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'tunl0\x00', {0x3}, 0xff}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 450.199164ms ago: executing program 1 (id=3302): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x200c080, 0x0) move_pages(0x0, 0x1efe, &(0x7f00000002c0), 0x0, &(0x7f0000000300), 0x0) 248.022394ms ago: executing program 0 (id=3303): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x112a1, &(0x7f0000001180)={0x0, 0xe191, 0x2, 0x0, 0x30d}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000001280)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000100)=0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000680)=""/209, 0xd1, 0xa) 247.827994ms ago: executing program 2 (id=3304): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x4f, 0x408, 0x3, 0x5}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000005c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x4}) 215.564408ms ago: executing program 1 (id=3305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000100)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000007c0)={0x0, 0x6, 0x5, 0x100000, 0x2, 0x0, [{0x0, 0x76, 0x6, '\x00', 0x582}, {0x7, 0x101, 0x1, '\x00', 0x8}]}) 155.929774ms ago: executing program 5 (id=3315): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x200c080, 0x0) move_pages(0x0, 0x1efe, &(0x7f00000002c0), 0x0, &(0x7f0000000300), 0x0) 141.922625ms ago: executing program 3 (id=3306): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 96.97673ms ago: executing program 2 (id=3307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20) recvmsg$kcm(r1, &(0x7f0000004a40)={0x0, 0x0, 0x0}, 0x40002103) 80.782521ms ago: executing program 3 (id=3308): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 166.454456][ T29] audit: type=1400 audit(1793616129.337:1191): avc: denied { write } for pid=11166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.539455][T11171] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 166.653117][T11182] scsi_dev_info_list_add_str: bad dev info string '»¤‡ï' '' '' [ 166.718394][ T29] audit: type=1400 audit(1793616129.597:1192): avc: denied { bind } for pid=11186 comm="syz.8.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.784237][T11194] FAULT_INJECTION: forcing a failure. [ 166.784237][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 166.784268][T11194] CPU: 0 UID: 0 PID: 11194 Comm: syz.2.2634 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 166.784297][T11194] Tainted: [W]=WARN [ 166.784304][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.784317][T11194] Call Trace: [ 166.784325][T11194] [ 166.784334][T11194] __dump_stack+0x1d/0x30 [ 166.784420][T11194] dump_stack_lvl+0x95/0xd0 [ 166.784490][T11194] dump_stack+0x15/0x1b [ 166.784509][T11194] should_fail_ex+0x259/0x270 [ 166.784541][T11194] ? devinet_init_net+0xb5/0x550 [ 166.784597][T11194] should_failslab+0x8c/0xb0 [ 166.784666][T11194] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 166.784792][T11194] ? should_failslab+0x8c/0xb0 [ 166.784818][T11194] ? devinet_init_net+0xb5/0x550 [ 166.784853][T11194] kmemdup_noprof+0x2b/0x70 [ 166.784927][T11194] devinet_init_net+0xb5/0x550 [ 166.784950][T11194] ops_init+0x22a/0x2e0 [ 166.784978][T11194] setup_net+0x9f/0x230 [ 166.785084][T11194] copy_net_ns+0x339/0x490 [ 166.785115][T11194] create_new_namespaces+0x1f6/0x420 [ 166.785221][T11194] unshare_nsproxy_namespaces+0x115/0x150 [ 166.785245][T11194] ksys_unshare+0x3a3/0x690 [ 166.785274][T11194] __x64_sys_unshare+0x1f/0x30 [ 166.785308][T11194] x64_sys_call+0x1e33/0x2550 [ 166.785340][T11194] do_syscall_64+0x112/0x360 [ 166.785370][T11194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.785430][T11194] RIP: 0033:0x7fe5a22bfb19 [ 166.785449][T11194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.785530][T11194] RSP: 002b:00007fe5a0d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.785551][T11194] RAX: ffffffffffffffda RBX: 00007fe5a2545fa0 RCX: 00007fe5a22bfb19 [ 166.785603][T11194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 166.785617][T11194] RBP: 00007fe5a2357af8 R08: 0000000000000000 R09: 0000000000000000 [ 166.785630][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.785645][T11194] R13: 00007fe5a2546038 R14: 00007fe5a2545fa0 R15: 00007ffe62893ff8 [ 166.785669][T11194] [ 166.963829][ T29] audit: type=1400 audit(1793616129.837:1193): avc: denied { create } for pid=11207 comm="syz.8.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.996494][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.049780][T11216] FAULT_INJECTION: forcing a failure. [ 167.049780][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 167.049810][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.8.2642 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 167.049841][T11216] Tainted: [W]=WARN [ 167.049883][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.049895][T11216] Call Trace: [ 167.049903][T11216] [ 167.049911][T11216] __dump_stack+0x1d/0x30 [ 167.049937][T11216] dump_stack_lvl+0x95/0xd0 [ 167.050026][T11216] dump_stack+0x15/0x1b [ 167.050047][T11216] should_fail_ex+0x259/0x270 [ 167.050075][T11216] should_failslab+0x8c/0xb0 [ 167.050129][T11216] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 167.050186][T11216] ? sock_alloc_inode+0x36/0xf0 [ 167.050290][T11216] ? sock_alloc_inode+0x36/0xf0 [ 167.050371][T11216] ? selinux_socket_create+0x86/0x180 [ 167.050406][T11216] ? __pfx_sock_alloc_inode+0x10/0x10 [ 167.050432][T11216] sock_alloc_inode+0x36/0xf0 [ 167.050474][T11216] alloc_inode+0x40/0x170 [ 167.050496][T11216] __sock_create+0x121/0x580 [ 167.050523][T11216] ? inet_pton_with_scope+0x143/0x170 [ 167.050555][T11216] p9_fd_create_tcp+0x183/0x430 [ 167.050622][T11216] ? p9_client_create+0x49/0x760 [ 167.050677][T11216] ? should_failslab+0x8c/0xb0 [ 167.050707][T11216] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 167.050755][T11216] ? p9_client_create+0x49/0x760 [ 167.050819][T11216] p9_client_create+0x22d/0x760 [ 167.050842][T11216] ? v9fs_get_tree+0x49/0x600 [ 167.050906][T11216] ? should_failslab+0x8c/0xb0 [ 167.050937][T11216] v9fs_session_init+0x38/0x510 [ 167.050958][T11216] v9fs_get_tree+0x5c/0x600 [ 167.051048][T11216] vfs_get_tree+0x57/0x1d0 [ 167.051078][T11216] do_new_mount+0x288/0x730 [ 167.051101][T11216] path_mount+0x4ad/0xba0 [ 167.051123][T11216] __se_sys_mount+0x28c/0x2e0 [ 167.051148][T11216] __x64_sys_mount+0x67/0x80 [ 167.051221][T11216] x64_sys_call+0xc3b/0x2550 [ 167.051247][T11216] do_syscall_64+0x112/0x360 [ 167.051278][T11216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.051309][T11216] RIP: 0033:0x7f22167bfb19 [ 167.051392][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.051411][T11216] RSP: 002b:00007f2215217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.051471][T11216] RAX: ffffffffffffffda RBX: 00007f2216a45fa0 RCX: 00007f22167bfb19 [ 167.051486][T11216] RDX: 0000200000001840 RSI: 0000200000000340 RDI: 0000200000000280 [ 167.051500][T11216] RBP: 00007f2216857af8 R08: 0000200000001880 R09: 0000000000000000 [ 167.051568][T11216] R10: 0000000000800010 R11: 0000000000000246 R12: 0000000000000000 [ 167.051582][T11216] R13: 00007f2216a46038 R14: 00007f2216a45fa0 R15: 00007ffde7447488 [ 167.051602][T11216] [ 167.072456][T11216] socket: no more sockets [ 167.072466][T11216] 9pnet_fd: p9_fd_create_tcp (11216): problem creating socket [ 167.081566][T11220] FAULT_INJECTION: forcing a failure. [ 167.081566][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 167.081595][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.3.2641 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 167.081624][T11220] Tainted: [W]=WARN [ 167.081632][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.081643][T11220] Call Trace: [ 167.081650][T11220] [ 167.081657][T11220] __dump_stack+0x1d/0x30 [ 167.081683][T11220] dump_stack_lvl+0x95/0xd0 [ 167.081705][T11220] dump_stack+0x15/0x1b [ 167.081726][T11220] should_fail_ex+0x259/0x270 [ 167.081752][T11220] ? vm_area_dup+0x33/0x300 [ 167.081777][T11220] should_failslab+0x8c/0xb0 [ 167.081805][T11220] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 167.081833][T11220] ? vm_area_dup+0x33/0x300 [ 167.081858][T11220] vm_area_dup+0x33/0x300 [ 167.081892][T11220] __split_vma+0xe3/0x7c0 [ 167.081913][T11220] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 167.081934][T11220] ? hrtimer_start_range_ns+0x108/0x120 [ 167.081962][T11220] ? _raw_spin_unlock+0x9/0x30 [ 167.081983][T11220] vma_modify+0x2bd/0x1220 [ 167.082008][T11220] vma_modify_flags+0x1be/0x250 [ 167.082036][T11220] mprotect_fixup+0x42c/0x710 [ 167.082063][T11220] do_mprotect_pkey+0x69f/0x990 [ 167.082096][T11220] __x64_sys_mprotect+0x48/0x60 [ 167.082121][T11220] x64_sys_call+0xd54/0x2550 [ 167.082145][T11220] do_syscall_64+0x112/0x360 [ 167.082175][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.082196][T11220] RIP: 0033:0x7fafcd12fb19 [ 167.082213][T11220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.082232][T11220] RSP: 002b:00007fafcbb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 167.082254][T11220] RAX: ffffffffffffffda RBX: 00007fafcd3b5fa0 RCX: 00007fafcd12fb19 [ 167.082268][T11220] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00002000007c4000 [ 167.082282][T11220] RBP: 00007fafcd1c7af8 R08: 0000000000000000 R09: 0000000000000000 [ 167.082299][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.082312][T11220] R13: 00007fafcd3b6038 R14: 00007fafcd3b5fa0 R15: 00007ffc6753a298 [ 167.082331][T11220] [ 167.179923][T11180] coredump: 1183(syz.0.2628): |0x0000000000000000 pipe failed [ 167.251677][T11233] set_capacity_and_notify: 1 callbacks suppressed [ 167.251694][T11233] loop8: detected capacity change from 0 to 1024 [ 167.254366][T11233] EXT4-fs: Ignoring removed bh option [ 167.283750][T11233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.283900][T11233] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.314882][T11233] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 3: comm syz.8.2649: lblock 3 mapped to illegal pblock 3 (length 3) [ 167.315105][T11233] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 167.315133][T11233] EXT4-fs (loop8): This should not happen!! Data will be lost [ 167.315133][T11233] [ 167.330458][T11233] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.2649: bg 0: block 112: padding at end of block bitmap is not set [ 167.330736][T11233] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 7 with error 28 [ 167.330817][T11233] EXT4-fs (loop8): This should not happen!! Data will be lost [ 167.330817][T11233] [ 167.330830][T11233] EXT4-fs (loop8): Total free blocks count 0 [ 167.330843][T11233] EXT4-fs (loop8): Free/Dirty block details [ 167.330854][T11233] EXT4-fs (loop8): free_blocks=0 [ 167.330954][T11233] EXT4-fs (loop8): dirty_blocks=64 [ 167.330967][T11233] EXT4-fs (loop8): Block reservation details [ 167.391978][ T3912] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 167.530835][T11263] loop8: detected capacity change from 0 to 128 [ 167.558364][T11263] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.561547][T11263] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.646295][ T9133] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.876208][T11298] loop1: detected capacity change from 0 to 128 [ 167.897142][T11298] bio_check_eod: 32 callbacks suppressed [ 167.897158][T11298] syz.1.2670: attempt to access beyond end of device [ 167.897158][T11298] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 167.897577][T11298] syz.1.2670: attempt to access beyond end of device [ 167.897577][T11298] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 167.897663][T11298] buffer_io_error: 18 callbacks suppressed [ 167.897673][T11298] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 167.897688][T11298] syz.1.2670: attempt to access beyond end of device [ 167.897688][T11298] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 167.897761][T11298] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 167.898006][T11298] syz.1.2670: attempt to access beyond end of device [ 167.898006][T11298] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 167.901634][T11298] syz.1.2670: attempt to access beyond end of device [ 167.901634][T11298] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 167.901703][T11298] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 167.901720][T11298] syz.1.2670: attempt to access beyond end of device [ 167.901720][T11298] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 167.901743][T11298] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 167.903187][T11298] syz.1.2670: attempt to access beyond end of device [ 167.903187][T11298] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 167.903621][T11298] syz.1.2670: attempt to access beyond end of device [ 167.903621][T11298] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 167.903650][T11298] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 167.903668][T11298] syz.1.2670: attempt to access beyond end of device [ 167.903668][T11298] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 167.903691][T11298] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 167.903840][T11298] syz.1.2670: attempt to access beyond end of device [ 167.903840][T11298] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 167.906221][T11298] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 167.906243][T11298] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 167.908286][T11298] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 167.908307][T11298] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 167.982072][T11287] 9pnet_fd: p9_fd_create_unix (11287): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.146780][T11317] coredump: 1189(syz.3.2675): |0x0000000000000000 pipe failed [ 168.359992][T11338] atomic_op ffff888102a2b548 conn xmit_atomic 0000000000000000 [ 168.438401][T11350] loop6: detected capacity change from 0 to 7 [ 168.439965][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.441815][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.448643][T11350] loop6: unable to read partition table [ 168.448666][T11350] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 168.450595][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.450836][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.450987][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.451140][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.451307][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.472066][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 168.491077][T11354] Set syz1 is full, maxelem 1029 reached [ 168.586984][T11362] netlink: 75 bytes leftover after parsing attributes in process `syz.3.2692'. [ 168.780217][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.780419][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.839426][T11394] loop3: detected capacity change from 0 to 128 [ 168.864612][T11394] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 168.865734][T11394] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.903664][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.987706][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.987862][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.637816][T11409] loop8: detected capacity change from 0 to 512 [ 169.646855][T11409] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.667369][T11409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 169.667401][T11409] System zones: 0-2, 18-18, 34-34 [ 169.668825][T11409] EXT4-fs (loop8): 1 orphan inode deleted [ 169.669196][T11409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.669312][T11409] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.712492][ T3912] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 1 [ 169.808092][T11417] sctp: [Deprecated]: syz.1.2714 (pid 11417) Use of int in maxseg socket option. [ 169.808092][T11417] Use struct sctp_assoc_value instead [ 169.854163][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.904973][T11425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.964272][T11429] loop3: detected capacity change from 0 to 512 [ 170.050905][T11434] 9pnet_fd: p9_fd_create_unix (11434): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 170.246323][T11432] futex_wake_op: syz.2.2715 tries to shift op by -1; fix this program [ 170.282008][T11441] netlink: 'syz.2.2727': attribute type 10 has an invalid length. [ 170.282027][T11441] netlink: 'syz.2.2727': attribute type 4 has an invalid length. [ 170.282039][T11441] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2727'. [ 170.283695][T11441] team0: left allmulticast mode [ 170.283713][T11441] team_slave_0: left allmulticast mode [ 170.283727][T11441] team_slave_1: left allmulticast mode [ 170.283828][T11441] bridge0: port 4(team0) entered disabled state [ 170.595114][T11443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.595194][T11443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.598554][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 170.842542][T11441] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 170.946893][T11456] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.056392][T11476] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 171.056413][T11476] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2742'. [ 171.182632][T11489] loop3: detected capacity change from 0 to 164 [ 171.288914][T11494] FAULT_INJECTION: forcing a failure. [ 171.288914][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 171.288994][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.3.2750 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 171.289029][T11494] Tainted: [W]=WARN [ 171.289037][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.289100][T11494] Call Trace: [ 171.289108][T11494] [ 171.289117][T11494] __dump_stack+0x1d/0x30 [ 171.289152][T11494] dump_stack_lvl+0x95/0xd0 [ 171.289177][T11494] dump_stack+0x15/0x1b [ 171.289281][T11494] should_fail_ex+0x259/0x270 [ 171.289311][T11494] ? set_task_ioprio+0x173/0x270 [ 171.289393][T11494] should_failslab+0x8c/0xb0 [ 171.289438][T11494] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 171.289470][T11494] ? set_task_ioprio+0x173/0x270 [ 171.289506][T11494] set_task_ioprio+0x173/0x270 [ 171.289587][T11494] __se_sys_ioprio_set+0x24f/0x5c0 [ 171.289616][T11494] __x64_sys_ioprio_set+0x43/0x50 [ 171.289642][T11494] x64_sys_call+0x1d57/0x2550 [ 171.289722][T11494] do_syscall_64+0x112/0x360 [ 171.289758][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.289782][T11494] RIP: 0033:0x7fafcd12fb19 [ 171.289801][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.289853][T11494] RSP: 002b:00007fafcbb87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 171.289879][T11494] RAX: ffffffffffffffda RBX: 00007fafcd3b5fa0 RCX: 00007fafcd12fb19 [ 171.289959][T11494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 171.289973][T11494] RBP: 00007fafcd1c7af8 R08: 0000000000000000 R09: 0000000000000000 [ 171.289988][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.290003][T11494] R13: 00007fafcd3b6038 R14: 00007fafcd3b5fa0 R15: 00007ffc6753a298 [ 171.290103][T11494] [ 171.534701][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 171.534718][ T29] audit: type=1326 audit(1793616134.417:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.534794][ T29] audit: type=1326 audit(1793616134.417:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535112][ T29] audit: type=1326 audit(1793616134.417:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535146][ T29] audit: type=1326 audit(1793616134.417:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535211][ T29] audit: type=1326 audit(1793616134.417:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535487][ T29] audit: type=1326 audit(1793616134.417:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535516][ T29] audit: type=1326 audit(1793616134.417:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.535618][ T29] audit: type=1326 audit(1793616134.417:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.630086][T11499] loop0: detected capacity change from 0 to 256 [ 171.668349][T11499] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 171.668396][T11499] FAT-fs (loop0): Can't find a valid FAT filesystem [ 171.675303][T11516] device-mapper: ioctl: Invalid ioctl structure: uuid Å€, name , dev 42 [ 171.808638][ T29] audit: type=1326 audit(1793616134.687:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.1.2754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 171.877243][T11531] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 171.942456][T11539] loop1: detected capacity change from 0 to 512 [ 171.945944][T11539] EXT4-fs: Ignoring removed oldalloc option [ 171.978228][T11539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.982376][ T29] audit: type=1400 audit(1793616134.857:1223): avc: denied { write } for pid=11532 comm="syz.1.2768" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.078498][T11550] EXT4-fs: Ignoring removed oldalloc option [ 172.080712][T11550] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.2773: bad orphan inode 32 [ 172.080741][T11550] loop8: lost filesystem error report for type 5 error -117 [ 172.080895][T11550] ext4_test_bit(bit=31, block=4) = 0 [ 172.080910][T11550] EXT4-fs (loop8): 1 truncate cleaned up [ 172.081313][T11550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.083213][T11550] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.117522][T11549] coredump: 1259(syz.3.2774): |0x0000000000000000 pipe failed [ 172.281652][T11566] xt_hashlimit: max too large, truncated to 1048576 [ 172.358729][T11566] set_capacity_and_notify: 1 callbacks suppressed [ 172.358746][T11566] loop3: detected capacity change from 0 to 512 [ 172.359180][T11566] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.373918][T11566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.373956][T11566] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.389480][T11566] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4221: comm syz.3.2780: Allocating blocks 41-42 which overlap fs metadata [ 172.389511][T11566] loop3: lost filesystem error report for type 5 error -117 [ 172.389744][T11566] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4221: comm syz.3.2780: Allocating blocks 41-42 which overlap fs metadata [ 172.389773][T11566] loop3: lost filesystem error report for type 5 error -117 [ 172.389979][T11566] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.2780: Failed to acquire dquot type 1 [ 172.390003][T11566] loop3: lost filesystem error report for type 5 error -117 [ 172.390145][T11566] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 172.390280][T11566] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #12: comm syz.3.2780: corrupted inode contents [ 172.390303][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.390548][T11566] EXT4-fs error (device loop3): ext4_dirty_inode:7679: inode #12: comm syz.3.2780: mark_inode_dirty error [ 172.390573][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.390755][T11566] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #12: comm syz.3.2780: corrupted inode contents [ 172.390780][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.390916][T11566] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.2780: mark_inode_dirty error [ 172.390940][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.391069][T11566] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #12: comm syz.3.2780: corrupted inode contents [ 172.391093][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.391370][T11566] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 172.391388][T11566] loop3: lost filesystem error report for type 5 error -117 [ 172.391583][T11566] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #12: comm syz.3.2780: corrupted inode contents [ 172.391662][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.391836][T11566] EXT4-fs error (device loop3): ext4_truncate:5538: inode #12: comm syz.3.2780: mark_inode_dirty error [ 172.391920][T11566] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.392036][T11566] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 172.392054][T11566] loop3: lost filesystem error report for type 5 error -117 [ 172.392313][ C1] EXT4-fs (loop3): error count since last fsck: 13 [ 172.392333][ C1] EXT4-fs (loop3): initial error at time 1793616135: ext4_mb_mark_diskspace_used:4221 [ 172.392365][ C1] EXT4-fs (loop3): last error at time 1793616135: ext4_process_orphan:346 [ 172.392429][T11566] EXT4-fs (loop3): 1 truncate cleaned up [ 172.393048][T11566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.433106][T11566] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.849995][T11606] loop8: detected capacity change from 0 to 1024 [ 172.864006][T11606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.864146][T11606] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.894236][T11605] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: comm syz.8.2794: lblock 0 mapped to illegal pblock 0 (length 1) [ 172.907437][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.916785][T11605] EXT4-fs (loop8): Remounting filesystem read-only [ 172.916952][T11610] loop2: detected capacity change from 0 to 512 [ 172.940165][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.964260][T11614] loop1: detected capacity change from 0 to 128 [ 172.964880][T11614] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.970187][T11614] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.017028][ T72] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.135640][T10868] kernel write not supported for file /uhid (pid: 10868 comm: kworker/1:8) [ 173.166075][T11640] loop8: detected capacity change from 0 to 512 [ 173.167863][T11640] EXT4-fs: Ignoring removed oldalloc option [ 173.177239][T11640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.205528][T11648] loop1: detected capacity change from 0 to 512 [ 173.281392][T11652] bio_check_eod: 88 callbacks suppressed [ 173.281410][T11652] syz.1.2811: attempt to access beyond end of device [ 173.281410][T11652] loop1: rw=2049, sector=560, nr_sectors = 32 limit=512 [ 173.281563][T11652] syz.1.2811: attempt to access beyond end of device [ 173.281563][T11652] loop1: rw=2049, sector=624, nr_sectors = 32 limit=512 [ 173.281963][T11652] syz.1.2811: attempt to access beyond end of device [ 173.281963][T11652] loop1: rw=2049, sector=688, nr_sectors = 32 limit=512 [ 173.282258][T11652] syz.1.2811: attempt to access beyond end of device [ 173.282258][T11652] loop1: rw=2049, sector=752, nr_sectors = 32 limit=512 [ 173.284528][T11652] syz.1.2811: attempt to access beyond end of device [ 173.284528][T11652] loop1: rw=2049, sector=816, nr_sectors = 32 limit=512 [ 173.284662][T11652] syz.1.2811: attempt to access beyond end of device [ 173.284662][T11652] loop1: rw=2049, sector=880, nr_sectors = 32 limit=512 [ 173.284770][T11652] syz.1.2811: attempt to access beyond end of device [ 173.284770][T11652] loop1: rw=2049, sector=944, nr_sectors = 32 limit=512 [ 173.284823][T11652] syz.1.2811: attempt to access beyond end of device [ 173.284823][T11652] loop1: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 173.284894][T11652] syz.1.2811: attempt to access beyond end of device [ 173.284894][T11652] loop1: rw=2049, sector=1072, nr_sectors = 32 limit=512 [ 173.285024][T11652] syz.1.2811: attempt to access beyond end of device [ 173.285024][T11652] loop1: rw=2049, sector=1136, nr_sectors = 32 limit=512 [ 173.358271][T11648] buffer_io_error: 25 callbacks suppressed [ 173.358289][T11648] Buffer I/O error on dev loop1, logical block 291, lost async page write [ 173.409407][T11658] loop2: detected capacity change from 0 to 128 [ 173.625843][T11671] loop1: detected capacity change from 0 to 128 [ 173.630008][T11671] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.630157][T11671] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.765265][ T3401] kernel read not supported for file /vcsa (pid: 3401 comm: kworker/0:5) [ 173.801196][T10297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.865876][T11690] loop2: detected capacity change from 0 to 512 [ 173.979876][T11690] Buffer I/O error on dev loop2, logical block 371, lost async page write [ 174.065800][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.209186][T11702] loop8: detected capacity change from 0 to 512 [ 174.209861][T11702] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 174.214394][T11702] EXT4-fs (loop8): 1 truncate cleaned up [ 174.214863][T11702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.258322][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.423641][T11677] rock: directory entry would overflow storage [ 174.423715][T11677] rock: sig=0x5245, size=8, remaining=5 [ 174.480093][T11709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.481769][T11710] syzkaller0: left promiscuous mode [ 174.483379][ T3912] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.485335][ T72] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.485402][ T72] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.485437][ T72] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.488014][T11709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 174.488046][T11709] System zones: 0-1, 3-36 [ 174.490525][T11709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.546056][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.713133][T11725] EXT4-fs: Ignoring removed oldalloc option [ 174.727931][T11725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.539351][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.619577][T11735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.625101][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20800800 phys_seg 0 prio class 2 [ 175.699635][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.704061][T11747] FAULT_INJECTION: forcing a failure. [ 175.704061][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 175.704141][T11747] CPU: 1 UID: 0 PID: 11747 Comm: syz.3.2851 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.704173][T11747] Tainted: [W]=WARN [ 175.704180][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.704192][T11747] Call Trace: [ 175.704199][T11747] [ 175.704207][T11747] __dump_stack+0x1d/0x30 [ 175.704284][T11747] dump_stack_lvl+0x95/0xd0 [ 175.704351][T11747] dump_stack+0x15/0x1b [ 175.704379][T11747] should_fail_ex+0x259/0x270 [ 175.704406][T11747] ? __se_sys_getcwd+0x48/0x2e0 [ 175.704435][T11747] should_failslab+0x8c/0xb0 [ 175.704503][T11747] __kmalloc_cache_noprof+0x5d/0x3e0 [ 175.704582][T11747] ? __se_sys_getcwd+0x48/0x2e0 [ 175.704612][T11747] __se_sys_getcwd+0x48/0x2e0 [ 175.704724][T11747] ? restore_fpregs_from_fpstate+0x61/0x110 [ 175.704798][T11747] __x64_sys_getcwd+0x31/0x40 [ 175.704825][T11747] x64_sys_call+0x1648/0x2550 [ 175.704851][T11747] do_syscall_64+0x112/0x360 [ 175.704960][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.704997][T11747] RIP: 0033:0x7fafcd12fb19 [ 175.705041][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.705060][T11747] RSP: 002b:00007fafcbb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 175.705083][T11747] RAX: ffffffffffffffda RBX: 00007fafcd3b5fa0 RCX: 00007fafcd12fb19 [ 175.705098][T11747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.705111][T11747] RBP: 00007fafcd1c7af8 R08: 0000000000000000 R09: 0000000000000000 [ 175.705144][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.705158][T11747] R13: 00007fafcd3b6038 R14: 00007fafcd3b5fa0 R15: 00007ffc6753a298 [ 175.705239][T11747] [ 175.989491][T11770] FAULT_INJECTION: forcing a failure. [ 175.989491][T11770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.989564][T11770] CPU: 0 UID: 0 PID: 11770 Comm: syz.1.2863 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.989602][T11770] Tainted: [W]=WARN [ 175.989611][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.989627][T11770] Call Trace: [ 175.989634][T11770] [ 175.989642][T11770] __dump_stack+0x1d/0x30 [ 175.989667][T11770] dump_stack_lvl+0x95/0xd0 [ 175.989752][T11770] dump_stack+0x15/0x1b [ 175.989771][T11770] should_fail_ex+0x259/0x270 [ 175.989805][T11770] should_fail+0xb/0x20 [ 175.989834][T11770] should_fail_usercopy+0x1a/0x20 [ 175.989872][T11770] _copy_from_user+0x1c/0xb0 [ 175.989983][T11770] __se_sys_splice+0x197/0x3a0 [ 175.990014][T11770] __x64_sys_splice+0x78/0x90 [ 175.990039][T11770] x64_sys_call+0x1797/0x2550 [ 175.990068][T11770] do_syscall_64+0x112/0x360 [ 175.990151][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.990176][T11770] RIP: 0033:0x7f5ee50efb19 [ 175.990196][T11770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.990218][T11770] RSP: 002b:00007f5ee3b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 175.990283][T11770] RAX: ffffffffffffffda RBX: 00007f5ee5375fa0 RCX: 00007f5ee50efb19 [ 175.990296][T11770] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.990310][T11770] RBP: 00007f5ee5187af8 R08: 0000000000001000 R09: 000000000000000e [ 175.990338][T11770] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 175.990353][T11770] R13: 00007f5ee5376038 R14: 00007f5ee5375fa0 R15: 00007ffe45b8d9c8 [ 175.990375][T11770] [ 176.128816][T11771] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 176.128844][T11771] FAT-fs (loop8): Filesystem has been set read-only [ 176.131273][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.131332][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.131680][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.131823][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.132001][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.132181][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.132812][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.132899][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.141234][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.141335][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.141600][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.141756][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.142159][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.142242][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.149119][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.149215][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.149365][T11771] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 176.149430][T11771] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 176.338845][T11788] FAULT_INJECTION: forcing a failure. [ 176.338845][T11788] name failslab, interval 1, probability 0, space 0, times 0 [ 176.338938][T11788] CPU: 0 UID: 0 PID: 11788 Comm: syz.2.2872 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.338972][T11788] Tainted: [W]=WARN [ 176.338995][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.339056][T11788] Call Trace: [ 176.339064][T11788] [ 176.339104][T11788] __dump_stack+0x1d/0x30 [ 176.339131][T11788] dump_stack_lvl+0x95/0xd0 [ 176.339157][T11788] dump_stack+0x15/0x1b [ 176.339205][T11788] should_fail_ex+0x259/0x270 [ 176.339235][T11788] ? pty_unix98_install+0x93/0x380 [ 176.339340][T11788] should_failslab+0x8c/0xb0 [ 176.339373][T11788] __kmalloc_cache_noprof+0x5d/0x3e0 [ 176.339404][T11788] ? pty_unix98_install+0x93/0x380 [ 176.339459][T11788] pty_unix98_install+0x93/0x380 [ 176.339500][T11788] tty_init_dev+0x7c/0x320 [ 176.339522][T11788] ptmx_open+0xda/0x240 [ 176.339596][T11788] chrdev_open+0x2eb/0x3a0 [ 176.339753][T11788] do_dentry_open+0x496/0xa40 [ 176.339851][T11788] ? __pfx_chrdev_open+0x10/0x10 [ 176.339871][T11788] ? may_open+0x1f4/0x350 [ 176.339900][T11788] vfs_open_consume+0x46/0x1f0 [ 176.339928][T11788] path_openat+0xc16/0x11c0 [ 176.340039][T11788] do_file_open+0x16c/0x290 [ 176.340079][T11788] do_sys_openat2+0xa1/0x140 [ 176.340118][T11788] __x64_sys_openat+0xf2/0x120 [ 176.340147][T11788] x64_sys_call+0x1f72/0x2550 [ 176.340202][T11788] do_syscall_64+0x112/0x360 [ 176.340258][T11788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.340283][T11788] RIP: 0033:0x7fe5a22bfb19 [ 176.340301][T11788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.340320][T11788] RSP: 002b:00007fe5a0d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.340369][T11788] RAX: ffffffffffffffda RBX: 00007fe5a2545fa0 RCX: 00007fe5a22bfb19 [ 176.340386][T11788] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 176.340403][T11788] RBP: 00007fe5a2357af8 R08: 0000000000000000 R09: 0000000000000000 [ 176.340418][T11788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.340432][T11788] R13: 00007fe5a2546038 R14: 00007fe5a2545fa0 R15: 00007ffe62893ff8 [ 176.340455][T11788] [ 176.783694][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 176.844809][T11804] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 176.844957][T11804] FAT-fs (loop2): Can't find a valid FAT filesystem [ 176.999298][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2887'. [ 177.028014][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 177.077967][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.083571][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 177.083585][ T29] audit: type=1400 audit(1793616139.967:1243): avc: denied { connect } for pid=11831 comm="syz.2.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.181835][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2897'. [ 177.181866][T11841] netlink: 'syz.8.2897': attribute type 30 has an invalid length. [ 177.262224][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 177.283275][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2897'. [ 177.283302][T11841] netlink: 'syz.8.2897': attribute type 30 has an invalid length. [ 177.337763][T11853] netlink: 'syz.3.2903': attribute type 2 has an invalid length. [ 177.362984][T11855] set_capacity_and_notify: 10 callbacks suppressed [ 177.363005][T11855] loop1: detected capacity change from 0 to 512 [ 177.370725][T11855] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.389146][T11855] EXT4-fs (loop1): 1 orphan inode deleted [ 177.389542][T11855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.389779][T11855] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.427480][ T72] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.427514][ T72] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 177.447119][T11862] EXT4-fs (loop1): shut down requested (1) [ 177.516430][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2909'. [ 177.516452][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2909'. [ 177.516551][T11871] netlink: 'syz.3.2909': attribute type 6 has an invalid length. [ 177.519498][ T29] audit: type=1326 audit(1793616140.397:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519529][ T29] audit: type=1326 audit(1793616140.397:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519699][ T29] audit: type=1326 audit(1793616140.397:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519724][ T29] audit: type=1326 audit(1793616140.397:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519821][ T29] audit: type=1326 audit(1793616140.397:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519845][ T29] audit: type=1326 audit(1793616140.397:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519894][ T29] audit: type=1326 audit(1793616140.397:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.519922][ T29] audit: type=1326 audit(1793616140.397:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.0.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb32f6dfb19 code=0x7ffc0000 [ 177.520362][T11871] vxlan0: entered promiscuous mode [ 177.521430][ T3905] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.521517][ T3905] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.521560][ T3905] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.521619][ T3905] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.543291][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.602618][T11876] loop1: detected capacity change from 0 to 512 [ 177.608464][T11876] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2911: inode has both inline data and extents flags [ 177.608565][T11876] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.608860][T11876] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2911: couldn't read orphan inode 15 (err -117) [ 177.608889][T11876] loop1: lost filesystem error report for type 5 error -117 [ 177.609931][T11876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.707755][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.731059][T11881] syzkaller1: entered promiscuous mode [ 177.731079][T11881] syzkaller1: entered allmulticast mode [ 177.734973][T11883] random: crng reseeded on system resumption [ 177.736015][T11883] FAULT_INJECTION: forcing a failure. [ 177.736015][T11883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.736046][T11883] CPU: 1 UID: 0 PID: 11883 Comm: syz.1.2914 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 177.736078][T11883] Tainted: [W]=WARN [ 177.736086][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.736149][T11883] Call Trace: [ 177.736156][T11883] [ 177.736164][T11883] __dump_stack+0x1d/0x30 [ 177.736256][T11883] dump_stack_lvl+0x95/0xd0 [ 177.736279][T11883] dump_stack+0x15/0x1b [ 177.736302][T11883] should_fail_ex+0x259/0x270 [ 177.736330][T11883] should_fail_alloc_page+0xf2/0x100 [ 177.736388][T11883] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 177.736569][T11883] alloc_pages_mpol+0xaf/0x1d0 [ 177.736622][T11883] alloc_pages_noprof+0x94/0x140 [ 177.736720][T11883] get_zeroed_page_noprof+0x1a/0x40 [ 177.736768][T11883] get_image_page+0x2b/0x420 [ 177.736798][T11883] memory_bm_create+0x94f/0x1440 [ 177.736831][T11883] create_basic_memory_bitmaps+0xa6/0x8e0 [ 177.736893][T11883] snapshot_open+0x1b4/0x280 [ 177.736941][T11883] ? __pfx_snapshot_open+0x10/0x10 [ 177.736971][T11883] misc_open+0x1df/0x220 [ 177.737001][T11883] chrdev_open+0x2eb/0x3a0 [ 177.737029][T11883] do_dentry_open+0x496/0xa40 [ 177.737052][T11883] ? __pfx_chrdev_open+0x10/0x10 [ 177.737085][T11883] vfs_open_consume+0x46/0x1f0 [ 177.737149][T11883] path_openat+0xc16/0x11c0 [ 177.737180][T11883] do_file_open+0x16c/0x290 [ 177.737224][T11883] do_sys_openat2+0xa1/0x140 [ 177.737276][T11883] __x64_sys_openat+0xf2/0x120 [ 177.737299][T11883] x64_sys_call+0x1f72/0x2550 [ 177.737332][T11883] do_syscall_64+0x112/0x360 [ 177.737371][T11883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.737433][T11883] RIP: 0033:0x7f5ee50efb19 [ 177.737450][T11883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.737519][T11883] RSP: 002b:00007f5ee3b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.737542][T11883] RAX: ffffffffffffffda RBX: 00007f5ee5375fa0 RCX: 00007f5ee50efb19 [ 177.737558][T11883] RDX: 0000000000103881 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 177.737573][T11883] RBP: 00007f5ee5187af8 R08: 0000000000000000 R09: 0000000000000000 [ 177.737587][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.737672][T11883] R13: 00007f5ee5376038 R14: 00007f5ee5375fa0 R15: 00007ffe45b8d9c8 [ 177.737692][T11883] [ 177.961862][T11898] FAULT_INJECTION: forcing a failure. [ 177.961862][T11898] name failslab, interval 1, probability 0, space 0, times 0 [ 177.961893][T11898] CPU: 1 UID: 0 PID: 11898 Comm: syz.3.2922 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 177.961925][T11898] Tainted: [W]=WARN [ 177.961932][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.962045][T11898] Call Trace: [ 177.962052][T11898] [ 177.962060][T11898] __dump_stack+0x1d/0x30 [ 177.962087][T11898] dump_stack_lvl+0x95/0xd0 [ 177.962110][T11898] dump_stack+0x15/0x1b [ 177.962131][T11898] should_fail_ex+0x259/0x270 [ 177.962166][T11898] ? __devinet_sysctl_register+0x5a/0x250 [ 177.962272][T11898] should_failslab+0x8c/0xb0 [ 177.962347][T11898] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 177.962387][T11898] ? ida_alloc_range+0x6f4/0x730 [ 177.962408][T11898] ? __devinet_sysctl_register+0x5a/0x250 [ 177.962503][T11898] kmemdup_noprof+0x2b/0x70 [ 177.962524][T11898] __devinet_sysctl_register+0x5a/0x250 [ 177.962588][T11898] ? should_failslab+0x8c/0xb0 [ 177.962684][T11898] ? devinet_init_net+0xb5/0x550 [ 177.962711][T11898] devinet_init_net+0x272/0x550 [ 177.962737][T11898] ops_init+0x22a/0x2e0 [ 177.962815][T11898] setup_net+0x9f/0x230 [ 177.962841][T11898] copy_net_ns+0x339/0x490 [ 177.962872][T11898] create_new_namespaces+0x1f6/0x420 [ 177.962897][T11898] unshare_nsproxy_namespaces+0x115/0x150 [ 177.962923][T11898] ksys_unshare+0x3a3/0x690 [ 177.963060][T11898] __x64_sys_unshare+0x1f/0x30 [ 177.963120][T11898] x64_sys_call+0x1e33/0x2550 [ 177.963146][T11898] do_syscall_64+0x112/0x360 [ 177.963177][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.963200][T11898] RIP: 0033:0x7fafcd12fb19 [ 177.963232][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.963251][T11898] RSP: 002b:00007fafcbb87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.963274][T11898] RAX: ffffffffffffffda RBX: 00007fafcd3b5fa0 RCX: 00007fafcd12fb19 [ 177.963289][T11898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 177.963303][T11898] RBP: 00007fafcd1c7af8 R08: 0000000000000000 R09: 0000000000000000 [ 177.963317][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.963403][T11898] R13: 00007fafcd3b6038 R14: 00007fafcd3b5fa0 R15: 00007ffc6753a298 [ 177.963423][T11898] [ 178.101965][T11911] loop0: detected capacity change from 0 to 512 [ 178.106338][T11911] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 178.106415][T11911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.107999][T11911] EXT4-fs (loop0): 1 truncate cleaned up [ 178.108486][T11911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.141667][T11912] loop1: detected capacity change from 0 to 512 [ 178.194857][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.194883][T11912] FAT-fs (loop1): Filesystem has been set read-only [ 178.195183][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.195341][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.195447][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.195587][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.195780][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.195979][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.197613][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.197831][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.197958][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.198211][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.198299][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.198434][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.198590][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.198744][T11912] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 178.198863][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.208731][T11912] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 178.476525][T11920] loop3: detected capacity change from 0 to 256 [ 178.486311][T11920] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 178.486374][T11920] FAT-fs (loop3): Can't find a valid FAT filesystem [ 178.498977][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.979599][T11949] loop0: detected capacity change from 0 to 128 [ 178.998846][T11949] bio_check_eod: 183 callbacks suppressed [ 178.998864][T11949] syz.0.2945: attempt to access beyond end of device [ 178.998864][T11949] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 178.999207][T11949] syz.0.2945: attempt to access beyond end of device [ 178.999207][T11949] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 178.999236][T11949] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 178.999321][T11949] syz.0.2945: attempt to access beyond end of device [ 178.999321][T11949] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 178.999355][T11949] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 178.999506][T11949] syz.0.2945: attempt to access beyond end of device [ 178.999506][T11949] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 179.000400][T11949] syz.0.2945: attempt to access beyond end of device [ 179.000400][T11949] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 179.000427][T11949] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 179.000456][T11949] syz.0.2945: attempt to access beyond end of device [ 179.000456][T11949] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 179.000479][T11949] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 179.000794][T11949] syz.0.2945: attempt to access beyond end of device [ 179.000794][T11949] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 179.001166][T11949] syz.0.2945: attempt to access beyond end of device [ 179.001166][T11949] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 179.001191][T11949] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 179.001208][T11949] syz.0.2945: attempt to access beyond end of device [ 179.001208][T11949] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 179.001230][T11949] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 179.001333][T11949] syz.0.2945: attempt to access beyond end of device [ 179.001333][T11949] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 179.001745][T11949] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 179.001766][T11949] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 179.002611][T11949] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 179.002633][T11949] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 179.097173][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.229989][T11958] loop3: detected capacity change from 0 to 1024 [ 179.234375][T11958] EXT4-fs: Ignoring removed bh option [ 179.248256][T11958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.248315][T11958] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.267040][T11958] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 3) [ 179.270936][T11958] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 179.270963][T11958] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.270963][T11958] [ 179.280387][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.280701][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.280930][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.281142][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.282776][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.284547][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.284841][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.285137][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.287305][T11958] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #15: block 3: comm syz.3.2950: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.334313][ T3905] IPVS: stopping estimator thread 0... [ 179.337490][ T3905] IPVS: starting estimator thread 0... [ 179.462879][T11964] IPVS: using max 2640 ests per chain, 132000 per kthread [ 179.515304][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.609112][T11982] loop8: detected capacity change from 0 to 1024 [ 179.610217][T11984] loop0: detected capacity change from 0 to 256 [ 179.612749][T11982] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 179.618136][T11982] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 2: comm syz.8.2957: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.618178][T11982] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.618251][T11982] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 48: comm syz.8.2957: lblock 0 mapped to illegal pblock 48 (length 1) [ 179.618295][T11982] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.618398][T11982] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.2957: Failed to acquire dquot type 0 [ 179.618497][T11982] loop8: lost filesystem error report for type 5 error -117 [ 179.618565][T11982] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 179.618581][T11982] loop8: lost filesystem error report for type 5 error -117 [ 179.618749][T11982] EXT4-fs error (device loop8): ext4_evict_inode:336: inode #11: comm syz.8.2957: mark_inode_dirty error [ 179.618773][T11982] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.618848][T11982] EXT4-fs warning (device loop8): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 179.618878][T11982] EXT4-fs (loop8): 1 orphan inode deleted [ 179.619170][T11982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.664479][T11988] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2961'. [ 179.683717][ T12] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.688632][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 0 [ 179.849973][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.856588][ T12] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.856623][ T12] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.856714][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 0 [ 179.856780][ T12] loop8: lost filesystem error report for type 5 error -117 [ 179.857026][ T9133] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 179.857053][ T9133] loop8: lost filesystem error report for type 5 error -117 [ 179.857193][ T9133] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 179.857229][ T9133] loop8: lost filesystem error report for type 5 error -117 [ 179.857294][ T9133] EXT4-fs error (device loop8): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 179.857317][ T9133] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.857459][ T9133] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 179.857484][ T9133] loop8: lost filesystem error report for type 5 error -117 [ 180.129690][T12022] loop2: detected capacity change from 0 to 1024 [ 180.130075][T12022] EXT4-fs: Ignoring removed bh option [ 180.147399][T12022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.147537][T12022] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.181407][T12022] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 3: comm syz.2.2976: lblock 3 mapped to illegal pblock 3 (length 3) [ 180.181690][T12022] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 180.181721][T12022] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.181721][T12022] [ 180.219231][T12024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.219335][T12024] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.246061][T12022] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2976: bg 0: block 112: padding at end of block bitmap is not set [ 180.249030][T12022] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 180.249062][T12022] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.249062][T12022] [ 180.249076][T12022] EXT4-fs (loop2): Total free blocks count 0 [ 180.249088][T12022] EXT4-fs (loop2): Free/Dirty block details [ 180.249170][T12022] EXT4-fs (loop2): free_blocks=0 [ 180.249181][T12022] EXT4-fs (loop2): dirty_blocks=64 [ 180.249193][T12022] EXT4-fs (loop2): Block reservation details [ 180.298340][T12033] EXT4-fs: Ignoring removed oldalloc option [ 180.301427][ T12] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 180.302269][ T4487] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 180.332162][T12033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.417046][ T9133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.522892][T12046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.555868][T12046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.614610][T12046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.654057][T12046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.818620][T12062] forcing mempool usage for swap_add_folio+0x25f/0x4f0 [ 180.952979][T12071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.966339][T12071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.966433][T12071] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.981209][T12071] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2996: bg 0: block 112: padding at end of block bitmap is not set [ 180.983014][T12071] EXT4-fs (loop1): Remounting filesystem read-only [ 180.983251][ T3912] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5202: inode #15: block 3: len 1: ext4_map_blocks returned -30 [ 181.034947][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.194044][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.314185][T12078] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 181.469334][T12122] EXT4-fs: Ignoring removed oldalloc option [ 181.486800][T12122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.218425][ T9367] kernel write not supported for file bpf-prog (pid: 9367 comm: kworker/0:7) [ 182.424678][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.438107][T12198] netlink: 'syz.0.3049': attribute type 9 has an invalid length. [ 182.631246][T12221] set_capacity_and_notify: 6 callbacks suppressed [ 182.631266][T12221] loop0: detected capacity change from 0 to 512 [ 182.631550][T12221] EXT4-fs: Ignoring removed bh option [ 182.652213][T12219] loop1: detected capacity change from 0 to 4096 [ 182.652878][T12219] EXT4-fs: Ignoring removed orlov option [ 182.654350][T12222] netlink: 'syz.8.3059': attribute type 8 has an invalid length. [ 182.654446][T12222] netlink: 'syz.8.3059': attribute type 3 has an invalid length. [ 182.654458][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3059'. [ 182.660733][T12221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.660865][T12221] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.661067][T12219] EXT4-fs (loop1): invalid #clusters per group: 32768 [ 182.733383][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 182.733398][ T29] audit: type=1400 audit(1793616145.617:1267): avc: denied { write } for pid=12220 comm="syz.0.3060" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.744191][T12209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 182.853118][T12238] FAULT_INJECTION: forcing a failure. [ 182.853118][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 182.853153][T12238] CPU: 0 UID: 0 PID: 12238 Comm: syz.1.3067 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 182.853261][T12238] Tainted: [W]=WARN [ 182.853269][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.853344][T12238] Call Trace: [ 182.853389][T12238] [ 182.853398][T12238] __dump_stack+0x1d/0x30 [ 182.853427][T12238] dump_stack_lvl+0x95/0xd0 [ 182.853454][T12238] dump_stack+0x15/0x1b [ 182.853540][T12238] should_fail_ex+0x259/0x270 [ 182.853648][T12238] ? get_callchain_buffers+0x19c/0x2f0 [ 182.853672][T12238] should_failslab+0x8c/0xb0 [ 182.853772][T12238] __kmalloc_node_noprof+0xb8/0x4d0 [ 182.853806][T12238] ? get_callchain_buffers+0x19c/0x2f0 [ 182.853835][T12238] get_callchain_buffers+0x19c/0x2f0 [ 182.853947][T12238] stack_map_alloc+0x247/0x2b0 [ 182.853978][T12238] map_create+0xaf2/0xfe0 [ 182.854006][T12238] __sys_bpf+0x8e0/0xc50 [ 182.854032][T12238] ? do_futex+0x340/0x460 [ 182.854106][T12238] __x64_sys_bpf+0x69/0x80 [ 182.854127][T12238] x64_sys_call+0xf26/0x2550 [ 182.854154][T12238] do_syscall_64+0x112/0x360 [ 182.854243][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.854275][T12238] RIP: 0033:0x7f5ee50efb19 [ 182.854294][T12238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.854321][T12238] RSP: 002b:00007f5ee3b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.854346][T12238] RAX: ffffffffffffffda RBX: 00007f5ee5375fa0 RCX: 00007f5ee50efb19 [ 182.854363][T12238] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 0000000000000000 [ 182.854379][T12238] RBP: 00007f5ee5187af8 R08: 0000000000000000 R09: 0000000000000000 [ 182.854470][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.854485][T12238] R13: 00007f5ee5376038 R14: 00007f5ee5375fa0 R15: 00007ffe45b8d9c8 [ 182.854508][T12238] [ 182.890268][T12232] loop2: detected capacity change from 0 to 164 [ 183.126252][ T29] audit: type=1326 audit(1793616146.007:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.126667][ T29] audit: type=1326 audit(1793616146.007:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.126703][ T29] audit: type=1326 audit(1793616146.007:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.126862][ T29] audit: type=1326 audit(1793616146.007:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.126952][ T29] audit: type=1326 audit(1793616146.007:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.127316][ T29] audit: type=1326 audit(1793616146.007:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.127804][ T29] audit: type=1326 audit(1793616146.007:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.260184][ T29] audit: type=1326 audit(1793616146.137:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.1.3075" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ee50efb19 code=0x7ffc0000 [ 183.695351][T12289] netlink: 'syz.1.3090': attribute type 39 has an invalid length. [ 183.704382][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 183.791877][T12236] loop8: detected capacity change from 0 to 512 [ 183.840790][T12297] Falling back ldisc for ttyS3. [ 184.071943][T12301] loop2: detected capacity change from 0 to 512 [ 184.156056][T12301] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 184.189699][T12236] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.567979][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.568021][ T29] audit: type=1400 audit(1793616147.447:1276): avc: denied { write } for pid=9133 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.568253][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.568604][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.568856][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.569109][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.569394][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.569687][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.570082][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.570428][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.570699][ T9133] EXT4-fs error (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 184.787906][T12329] veth1_to_team: Caught tx_queue_len zero misconfig [ 184.829698][T12333] loop0: detected capacity change from 0 to 2048 [ 184.848513][T12333] ext4 filesystem being mounted at /616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.947254][ T3905] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.947335][ T3905] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.954811][T12338] loop0: detected capacity change from 0 to 164 [ 184.977145][T12338] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 185.019807][T12341] loop0: detected capacity change from 0 to 512 [ 185.032032][T12341] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 185.046110][ T3905] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.046202][ T3905] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.073954][T12341] EXT4-fs (loop0): 1 orphan inode deleted [ 185.074671][T12341] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.124791][ T3905] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.124906][ T3905] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.178285][ T3905] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.178397][ T3905] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.263679][T12362] gtp1: entered promiscuous mode [ 185.263699][T12362] gtp1: entered allmulticast mode [ 185.265657][T12362] team0: Device gtp1 is of different type [ 185.336746][ T3905] bridge_slave_1: left allmulticast mode [ 185.336770][ T3905] bridge_slave_1: left promiscuous mode [ 185.336985][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.337743][ T3905] bridge_slave_0: left allmulticast mode [ 185.337764][ T3905] bridge_slave_0: left promiscuous mode [ 185.337845][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.438302][T12374] ptp ptp0: new virtual clock ptp1 [ 185.440801][T12374] ptp ptp0: new virtual clock ptp2 [ 185.447681][T12374] ptp ptp0: new virtual clock ptp3 [ 185.449911][T12374] ptp ptp0: new virtual clock ptp4 [ 185.449930][T12374] ptp ptp0: guarantee physical clock free running [ 185.455219][T12374] ptp ptp0: delete virtual clock ptp4 [ 185.456005][T12374] ptp ptp0: delete virtual clock ptp3 [ 185.458634][T12374] ptp ptp0: delete virtual clock ptp2 [ 185.462329][T12374] ptp ptp0: guarantee physical clock free running [ 185.519811][T12385] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3123'. [ 185.606228][T12398] Config c/1 of g1 needs at least one function. [ 185.606262][T12398] udc usbip-vudc.0: failed to start g1: -22 [ 185.606304][T12398] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 185.606644][T12398] UDC core: g1: couldn't find an available UDC or it's busy [ 185.671362][ T3905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.688436][ T3905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.690927][ T3905] bond0 (unregistering): Released all slaves [ 185.719617][ T3905] bond1 (unregistering): Released all slaves [ 185.740863][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.746825][T12408] loop1: detected capacity change from 0 to 736 [ 185.769196][T12348] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.797349][T12408] rock: directory entry would overflow storage [ 185.797362][T12408] rock: sig=0x3b10, size=4, remaining=3 [ 186.081463][ T3905] hsr_slave_0: left promiscuous mode [ 186.082109][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.082192][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.103255][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.103273][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.105137][T12423] FAULT_INJECTION: forcing a failure. [ 186.105137][T12423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.105175][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.1.3132 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 186.105267][T12423] Tainted: [W]=WARN [ 186.105276][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.105293][T12423] Call Trace: [ 186.105310][T12423] [ 186.105343][T12423] __dump_stack+0x1d/0x30 [ 186.105376][T12423] dump_stack_lvl+0x95/0xd0 [ 186.105405][T12423] dump_stack+0x15/0x1b [ 186.105432][T12423] should_fail_ex+0x259/0x270 [ 186.105503][T12423] should_fail+0xb/0x20 [ 186.105533][T12423] should_fail_usercopy+0x1a/0x20 [ 186.105560][T12423] _copy_from_user+0x1c/0xb0 [ 186.105585][T12423] do_seccomp+0x27f/0xa50 [ 186.105628][T12423] ? restore_fpregs_from_fpstate+0x61/0x110 [ 186.105667][T12423] __x64_sys_seccomp+0x40/0x50 [ 186.105692][T12423] x64_sys_call+0x3f0/0x2550 [ 186.105720][T12423] do_syscall_64+0x112/0x360 [ 186.105764][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.105789][T12423] RIP: 0033:0x7f5ee50efb19 [ 186.105806][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.105824][T12423] RSP: 002b:00007f5ee3b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 186.105853][T12423] RAX: ffffffffffffffda RBX: 00007f5ee5375fa0 RCX: 00007f5ee50efb19 [ 186.105871][T12423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 186.105964][T12423] RBP: 00007f5ee5187af8 R08: 0000000000000000 R09: 0000000000000000 [ 186.105979][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.105991][T12423] R13: 00007f5ee5376038 R14: 00007f5ee5375fa0 R15: 00007ffe45b8d9c8 [ 186.106010][T12423] [ 186.110435][ T3905] veth1_macvtap: left promiscuous mode [ 186.110464][ T3905] veth0_macvtap: left promiscuous mode [ 186.110510][ T3905] veth1_vlan: left promiscuous mode [ 186.110566][ T3905] veth0_vlan: left promiscuous mode [ 186.505756][ T3905] team0 (unregistering): Port device team_slave_1 removed [ 186.512207][ T3905] team0 (unregistering): Port device team_slave_0 removed [ 186.528226][T12449] loop2: detected capacity change from 0 to 512 [ 186.547009][T12449] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 186.547024][T12449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.571831][T12449] EXT4-fs (loop2): 1 truncate cleaned up [ 186.583529][T12451] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.668110][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.776692][T12467] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 186.776711][T12467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.809364][T12467] EXT4-fs (loop0): 1 truncate cleaned up [ 186.840584][T12459] coredump: 332(syz.1.3144): |0x0000000000000000 pipe failed [ 186.931214][T12348] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.931298][T12348] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.931344][T12348] bridge_slave_0: entered allmulticast mode [ 186.931761][T12348] bridge_slave_0: entered promiscuous mode [ 186.975260][T12348] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.975296][T12348] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.975442][T12348] bridge_slave_1: entered allmulticast mode [ 186.977516][T12348] bridge_slave_1: entered promiscuous mode [ 186.995505][T12348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.996525][T12348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.029615][T12348] team0: Port device team_slave_0 added [ 187.030562][T12348] team0: Port device team_slave_1 added [ 187.065806][T12348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.065822][T12348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.065858][T12348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.066559][T12348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.066571][T12348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.066596][T12348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.146933][T12348] hsr_slave_0: entered promiscuous mode [ 187.147348][T12348] hsr_slave_1: entered promiscuous mode [ 187.147564][T12348] debugfs: 'hsr0' already exists in 'hsr' [ 187.147578][T12348] Cannot create hsr debugfs directory [ 187.147819][T12493] lo: Caught tx_queue_len zero misconfig [ 187.245342][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.464666][T12515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.466634][T12515] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.475102][T12515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.518034][T12515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.520575][T12515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.520966][T12515] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 187.556499][T12515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.557455][T12515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.558274][T12515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.559127][T12515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.565477][T12515] veth1_macvtap: entered allmulticast mode [ 187.587590][T12515] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 187.618024][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.618114][ T3905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.637456][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 187.665447][ T3908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.667169][ T3905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.667237][ T3905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.667271][ T3905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.845110][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 187.845128][ T29] audit: type=1400 audit(1793616150.727:1408): avc: denied { write } for pid=12527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.860447][T12348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.894618][T12348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.896107][T12348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.900143][T12348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.901171][ T29] audit: type=1400 audit(1793616150.777:1409): avc: denied { write } for pid=12542 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.902139][T12348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.918231][T12348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.918672][T12348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.929169][T12348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.983474][T12519] set_capacity_and_notify: 2 callbacks suppressed [ 187.983637][T12519] loop1: detected capacity change from 0 to 512 [ 188.083968][T12554] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.108105][T12348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.119303][T12348] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.132153][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.132260][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.161529][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.161560][ T3905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.256469][ T29] audit: type=1400 audit(1793616151.137:1410): avc: denied { write } for pid=12555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.290738][T12519] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 188.359569][T12574] Config c/1 of g1 needs at least one function. [ 188.359604][T12574] udc usbip-vudc.0: failed to start g1: -22 [ 188.359627][T12574] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 188.359990][T12574] UDC core: g1: couldn't find an available UDC or it's busy [ 188.388874][ T29] audit: type=1400 audit(1793616151.257:1411): avc: denied { write } for pid=12571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.481684][T12348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.682005][ T29] audit: type=1400 audit(1793616151.557:1412): avc: denied { write } for pid=12583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.781984][ T29] audit: type=1400 audit(1793616151.657:1413): avc: denied { write } for pid=12606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.914135][T12348] veth0_vlan: entered promiscuous mode [ 188.919266][T12348] veth1_vlan: entered promiscuous mode [ 188.960453][T12348] veth0_macvtap: entered promiscuous mode [ 188.973739][T12348] veth1_macvtap: entered promiscuous mode [ 188.995995][T12348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.029285][T12348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.064815][ T3908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.064859][ T3908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.064896][ T3908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.064997][ T3908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.196047][ T29] audit: type=1400 audit(1793616152.077:1414): avc: denied { write } for pid=12618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.249329][ T29] audit: type=1400 audit(1793616152.127:1415): avc: denied { write } for pid=12639 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.315685][T12642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.316907][T12642] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.335885][T12642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.390293][T12642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.392129][T12642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.400377][ T29] audit: type=1400 audit(1793616152.217:1416): avc: denied { relabelfrom } for pid=12638 comm="syz.5.3114" name="" dev="pipefs" ino=35565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 189.425729][ T29] audit: type=1400 audit(1793616152.297:1417): avc: denied { write } for pid=12643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.440312][T12642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.440336][T12642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.541017][T12642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.543613][T12642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.566939][T12642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.569262][T12642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.570351][T12642] bridge0: port 3(vlan2) entered blocking state [ 189.570386][T12642] bridge0: port 3(vlan2) entered forwarding state [ 189.596560][T12642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.623960][ T3401] syz1: Port: 1 Link ACTIVE [ 189.627969][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.628013][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.631064][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.631123][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.728527][ T72] bridge0: port 3(vlan2) entered disabled state [ 189.842609][ T3912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.843276][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.843807][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.844030][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.938784][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 190.210564][T12708] ptp ptp0: new virtual clock ptp2 [ 190.211713][T12708] ptp ptp0: new virtual clock ptp3 [ 190.218315][T12708] ptp ptp0: new virtual clock ptp4 [ 190.218332][T12708] ptp ptp0: guarantee physical clock free running [ 190.219893][T12708] ptp ptp0: delete virtual clock ptp4 [ 190.244053][T12708] ptp ptp0: delete virtual clock ptp3 [ 190.256068][T12708] ptp ptp0: delete virtual clock ptp2 [ 190.263332][T12708] ptp ptp0: guarantee physical clock free running [ 190.458675][T12734] loop5: detected capacity change from 0 to 512 [ 190.459041][T12734] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 190.693859][T12743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.703550][T12743] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.726580][T12743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.830883][T12743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.847396][T12743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.863637][T12743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.863661][T12743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.919454][T12743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.925886][T12743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.930106][T12743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.940103][T12743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.009820][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.009914][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.011292][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.011334][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.071014][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 191.071046][T12757] netlink: 'syz.3.3188': attribute type 30 has an invalid length. [ 191.096182][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.096246][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.096347][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.096436][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.103415][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 191.103498][T12757] netlink: 'syz.3.3188': attribute type 30 has an invalid length. [ 191.126448][T12764] loop0: detected capacity change from 0 to 512 [ 191.345578][T12788] atomic_op ffff88811d959948 conn xmit_atomic 0000000000000000 [ 191.603406][T12819] loop5: detected capacity change from 0 to 512 [ 191.606300][T12819] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 191.608563][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 191.608612][T12822] netlink: 'syz.0.3203': attribute type 30 has an invalid length. [ 191.618991][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 191.622237][T12822] netlink: 'syz.0.3203': attribute type 30 has an invalid length. [ 191.643149][ T316] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.643243][ T316] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.643277][ T316] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.643372][ T316] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.705980][ T316] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 191.942083][T12842] loop5: detected capacity change from 0 to 1024 [ 191.950699][T12842] EXT4-fs: Ignoring removed bh option [ 192.004850][T12842] EXT4-fs mount: 13 callbacks suppressed [ 192.004869][T12842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.088422][T12348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.147796][T12856] netlink: 'syz.5.3211': attribute type 2 has an invalid length. [ 192.396698][T12825] loop0: detected capacity change from 0 to 512 [ 192.465356][T12825] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 192.550791][T12861] loop3: detected capacity change from 0 to 512 [ 192.563594][T12861] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.3213: corrupted in-inode xattr: invalid ea_ino [ 192.563625][T12861] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.564039][T12861] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.3213: couldn't read orphan inode 15 (err -117) [ 192.564076][T12861] loop3: lost filesystem error report for type 5 error -117 [ 192.564610][T12861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.600724][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.693742][T12872] FAULT_INJECTION: forcing a failure. [ 192.693742][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 192.693777][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.1.3216 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 192.693812][T12872] Tainted: [W]=WARN [ 192.693820][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.693912][T12872] Call Trace: [ 192.693920][T12872] [ 192.693929][T12872] __dump_stack+0x1d/0x30 [ 192.694036][T12872] dump_stack_lvl+0x95/0xd0 [ 192.694062][T12872] dump_stack+0x15/0x1b [ 192.694086][T12872] should_fail_ex+0x259/0x270 [ 192.694179][T12872] ? prepare_creds+0x38/0x550 [ 192.694212][T12872] should_failslab+0x8c/0xb0 [ 192.694279][T12872] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 192.694398][T12872] ? prepare_creds+0x38/0x550 [ 192.694431][T12872] ? __se_sys_futex+0x2f6/0x370 [ 192.694494][T12872] prepare_creds+0x38/0x550 [ 192.694529][T12872] __sys_setfsgid+0x8b/0x1f0 [ 192.694555][T12872] __x64_sys_setfsgid+0x1e/0x30 [ 192.694581][T12872] x64_sys_call+0x1af2/0x2550 [ 192.694680][T12872] do_syscall_64+0x112/0x360 [ 192.694715][T12872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.694753][T12872] RIP: 0033:0x7f5ee50efb19 [ 192.694772][T12872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.694792][T12872] RSP: 002b:00007f5ee3b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 192.694856][T12872] RAX: ffffffffffffffda RBX: 00007f5ee5375fa0 RCX: 00007f5ee50efb19 [ 192.694873][T12872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 192.694889][T12872] RBP: 00007f5ee5187af8 R08: 0000000000000000 R09: 0000000000000000 [ 192.694913][T12872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.694929][T12872] R13: 00007f5ee5376038 R14: 00007f5ee5375fa0 R15: 00007ffe45b8d9c8 [ 192.694968][T12872] [ 192.902614][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 192.902631][ T29] audit: type=1400 audit(1793616155.777:1445): avc: denied { node_bind } for pid=12877 comm="syz.1.3218" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 193.039831][T12887] loop3: detected capacity change from 0 to 128 [ 193.040774][T12887] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.056357][T12887] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.229337][T12897] tap0: tun_chr_ioctl cmd 1074025675 [ 193.229424][T12897] tap0: persist enabled [ 193.231011][T12897] tap0: tun_chr_ioctl cmd 1074025678 [ 193.231031][T12897] tap0: group set to 0 [ 193.297067][T12899] loop5: detected capacity change from 0 to 512 [ 193.311239][T12899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 193.311475][T12899] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.311759][T12899] EXT4-fs error (device loop5): ext4_quota_enable:7311: inode #15: comm syz.5.3228: iget: bad i_size value: 360287970189639690 [ 193.311798][T12899] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.312000][T12899] EXT4-fs error (device loop5): ext4_quota_enable:7314: comm syz.5.3228: Bad quota inode: 15, type: 2 [ 193.312069][T12899] loop5: lost filesystem error report for type 5 error -117 [ 193.312176][T12899] EXT4-fs warning (device loop5): ext4_enable_quotas:7355: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 193.312308][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 193.312329][ C1] EXT4-fs (loop5): last error at time 1793616156: ext4_quota_enable:7314 [ 193.315801][T12899] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 193.316124][T12899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.330256][T12899] EXT4-fs (loop5): shut down requested (0) [ 193.380751][ T29] audit: type=1400 audit(1793616156.257:1446): avc: denied { ioctl } for pid=12903 comm="syz.3.3231" path="socket:[34805]" dev="sockfs" ino=34805 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.384488][T12348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.585089][T12912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 193.714407][T12913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.723528][ T1510] team_slave_0: entered promiscuous mode [ 193.723554][ T1510] team_slave_1: entered promiscuous mode [ 193.811832][T12921] loop0: detected capacity change from 0 to 512 [ 193.824802][T12921] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.3237: iget: bad i_size value: 38620345925642 [ 193.824836][T12921] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.825017][T12921] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3237: couldn't read orphan inode 15 (err -117) [ 193.825046][T12921] loop0: lost filesystem error report for type 5 error -117 [ 193.825724][T12921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.828388][ T29] audit: type=1400 audit(1793616156.707:1447): avc: denied { write } for pid=12915 comm="syz.0.3237" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.830050][T12925] netlink: 'syz.1.3240': attribute type 5 has an invalid length. [ 193.830067][T12925] netlink: 'syz.1.3240': attribute type 9 has an invalid length. [ 193.830082][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 194.011895][T12931] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 194.039493][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.501798][T12953] netlink: 'syz.5.3251': attribute type 153 has an invalid length. [ 194.580568][T12960] batman_adv: batadv0: Adding interface: syz_tun [ 194.580586][T12960] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.580675][T12960] batman_adv: batadv0: Interface activated: syz_tun [ 194.785800][T12971] FAULT_INJECTION: forcing a failure. [ 194.785800][T12971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.785901][T12971] CPU: 0 UID: 0 PID: 12971 Comm: syz.0.3258 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 194.785939][T12971] Tainted: [W]=WARN [ 194.785949][T12971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.785999][T12971] Call Trace: [ 194.786006][T12971] [ 194.786064][T12971] __dump_stack+0x1d/0x30 [ 194.786095][T12971] dump_stack_lvl+0x95/0xd0 [ 194.786143][T12971] dump_stack+0x15/0x1b [ 194.786165][T12971] should_fail_ex+0x259/0x270 [ 194.786253][T12971] should_fail+0xb/0x20 [ 194.786276][T12971] should_fail_usercopy+0x1a/0x20 [ 194.786311][T12971] _copy_to_user+0x20/0xa0 [ 194.786346][T12971] bpf_verifier_vlog+0x2c5/0x5a0 [ 194.786378][T12971] __btf_verifier_log+0x7f/0xb0 [ 194.786525][T12971] btf_verifier_log_member+0x3dd/0x430 [ 194.786586][T12971] ? __btf_verifier_log_type+0x302/0x330 [ 194.786637][T12971] btf_struct_check_meta+0x4d7/0x6e0 [ 194.786713][T12971] btf_parse_type_sec+0x284/0x15b0 [ 194.786745][T12971] ? btf_parse_hdr+0x43a/0x440 [ 194.786779][T12971] ? btf_parse_str_sec+0x1ae/0x1b0 [ 194.786812][T12971] btf_new_fd+0x2ec/0x6a0 [ 194.786890][T12971] bpf_btf_load+0x116/0x130 [ 194.786913][T12971] __sys_bpf+0xbee/0xc50 [ 194.786935][T12971] ? do_futex+0x340/0x460 [ 194.786993][T12971] __x64_sys_bpf+0x69/0x80 [ 194.787016][T12971] x64_sys_call+0xf26/0x2550 [ 194.787043][T12971] do_syscall_64+0x112/0x360 [ 194.787077][T12971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.787160][T12971] RIP: 0033:0x7fb32f6dfb19 [ 194.787179][T12971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.787200][T12971] RSP: 002b:00007fb32e137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.787224][T12971] RAX: ffffffffffffffda RBX: 00007fb32f965fa0 RCX: 00007fb32f6dfb19 [ 194.787296][T12971] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000012 [ 194.787312][T12971] RBP: 00007fb32f777af8 R08: 0000000000000000 R09: 0000000000000000 [ 194.787329][T12971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.787352][T12971] R13: 00007fb32f966038 R14: 00007fb32f965fa0 R15: 00007ffe16fc4488 [ 194.787375][T12971] [ 197.678422][T12981] loop0: detected capacity change from 0 to 256 [ 197.692455][T12968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.694313][T12968] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.699535][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.701589][T12968] tipc: Resetting bearer [ 197.747991][T12986] loop1: detected capacity change from 0 to 2048 [ 197.769456][T12986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.791112][ T29] audit: type=1400 audit(1793616160.667:1448): avc: denied { write } for pid=12985 comm="syz.1.3272" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.836651][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.841026][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.851913][T12968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.874939][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.892853][T12968] tipc: Resetting bearer [ 197.914001][T12968] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 197.922157][ T3908] bridge0: port 3(veth0) entered blocking state [ 197.922191][ T3908] bridge0: port 3(veth0) entered forwarding state [ 197.923549][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.923584][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.926006][ T3908] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.926057][ T3908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.951833][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 197.976403][T12987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.016517][T12992] loop0: detected capacity change from 0 to 2048 [ 198.031491][T12987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.060957][T12992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.061068][T12992] ext4 filesystem being mounted at /650/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.118666][T12987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.120252][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 198.173464][T12987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.194035][T13012] loop1: detected capacity change from 0 to 512 [ 198.194882][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.200463][T13012] ext3: Unknown parameter 'nouser_xattr' [ 198.251705][T13012] loop1: detected capacity change from 0 to 1024 [ 198.255284][T13012] EXT4-fs: Ignoring removed i_version option [ 198.255311][T13012] EXT4-fs: Ignoring removed orlov option [ 198.263088][T13012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.351877][ T29] audit: type=1400 audit(1793616161.227:1449): avc: denied { setopt } for pid=13014 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 198.377737][T13018] loop1: detected capacity change from 0 to 1024 [ 198.387184][T13018] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 198.390118][T13018] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.3274: lblock 2 mapped to illegal pblock 2 (length 1) [ 198.390154][T13018] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.390640][T13018] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 198.390698][T13018] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 48: comm syz.1.3274: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.390775][T13018] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.390858][T13018] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 198.390876][T13018] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.3274: Failed to acquire dquot type 0 [ 198.390899][T13018] loop1: lost filesystem error report for type 5 error -117 [ 198.391015][T13018] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 198.391035][T13018] loop1: lost filesystem error report for type 5 error -117 [ 198.391098][T13018] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.3274: mark_inode_dirty error [ 198.391192][T13018] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.391259][T13018] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 198.391289][T13018] EXT4-fs (loop1): 1 orphan inode deleted [ 198.391664][T13018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.410184][ T29] audit: type=1400 audit(1793616161.287:1450): avc: denied { write } for pid=13017 comm="syz.1.3274" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.410617][ T29] audit: type=1400 audit(1793616161.287:1451): avc: denied { write } for pid=13017 comm="syz.1.3274" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.454780][T13027] loop0: detected capacity change from 0 to 256 [ 198.469032][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.473105][ T3908] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.473140][ T3908] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.477226][ T3908] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 198.477248][ T3908] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 0 [ 198.477327][ T3908] loop1: lost filesystem error report for type 5 error -117 [ 198.478342][T10297] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.478421][T10297] loop1: lost filesystem error report for type 5 error -117 [ 198.478485][T10297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 198.478503][T10297] loop1: lost filesystem error report for type 5 error -117 [ 198.478564][T10297] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 198.478780][T10297] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.478954][T10297] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.478985][T10297] loop1: lost filesystem error report for type 5 error -117 [ 198.485047][T13025] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 198.485070][T13025] FAT-fs (loop0): Filesystem has been set read-only [ 198.528271][T13031] loop1: detected capacity change from 0 to 128 [ 198.545502][T13031] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.547579][T13031] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.642751][T10297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.720863][ T29] audit: type=1400 audit(1793616161.597:1452): avc: denied { write } for pid=13013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.863978][ T29] audit: type=1400 audit(1793616161.747:1453): avc: denied { write } for pid=13047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.871128][T13050] loop2: detected capacity change from 0 to 512 [ 198.878597][T13050] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 198.878686][T13050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.885538][T13050] EXT4-fs (loop2): 1 truncate cleaned up [ 198.885904][T13050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.897634][ T29] audit: type=1400 audit(1793616161.777:1454): avc: denied { write } for pid=13048 comm="syz.2.3284" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.084056][T13059] loop1: detected capacity change from 0 to 256 [ 199.090858][T13059] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.109557][T13059] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 199.109612][T13059] FAT-fs (loop1): Filesystem has been set read-only [ 199.346777][T13062] loop1: detected capacity change from 0 to 512 [ 199.369271][T13062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.369333][T13062] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.407391][ T29] audit: type=1400 audit(1793616162.287:1455): avc: denied { write } for pid=13061 comm="syz.1.3297" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.421771][ T4487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.449890][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.517077][T13066] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.529259][T13071] loop5: detected capacity change from 0 to 1024 [ 199.533710][T13071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.582814][T13071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.582880][T13071] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.604168][T13071] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.3287: bg 0: block 3: invalid block bitmap [ 199.605849][T13071] EXT4-fs (loop5): Remounting filesystem read-only [ 199.606100][ T3912] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5202: inode #15: block 3: len 1: ext4_map_blocks returned -30 [ 199.655830][T12348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.794624][T13081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.794682][T13081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.877220][T13081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.877261][T13081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.911039][T13087] loop5: detected capacity change from 0 to 512 [ 199.921612][T13087] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 199.921629][T13087] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.945105][T13087] EXT4-fs (loop5): 1 truncate cleaned up [ 199.945528][T13087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.948954][T13081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.948991][T13081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.019636][T13081] bridge0: port 3(vlan2) entered disabled state [ 200.024777][T13081] vlan2 (unregistering): left allmulticast mode [ 200.024847][T13081] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 200.024883][T13081] bridge0: port 3(vlan2) entered disabled state [ 200.044086][T13081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.044121][T13081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.124683][T12348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.314734][T13094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.399626][ T4487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.474868][T13097] EXT4-fs: Ignoring removed bh option [ 200.490046][T13097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.490159][T13097] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.535944][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.557554][ T4487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.773180][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.782681][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.991368][T13110] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 200.996954][T13110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 200.996991][T13110] System zones: 0-2, 18-18, 34-34 [ 200.998555][T13110] EXT4-fs (loop1): 1 orphan inode deleted [ 200.998912][T13110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.999081][T13110] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.205899][T13140] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3310'. [ 201.279696][T10297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.383320][T13126] ================================================================== [ 201.383358][T13126] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 201.383405][T13126] [ 201.383411][T13126] read-write to 0xffff88811a458230 of 8 bytes by interrupt on cpu 0: [ 201.383432][T13126] __xa_clear_mark+0xf5/0x1e0 [ 201.383451][T13126] __folio_end_writeback+0xe7/0x530 [ 201.383482][T13126] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 201.383508][T13126] folio_end_writeback+0x72/0x110 [ 201.383530][T13126] bh_end_async_write+0x18b/0x230 [ 201.383554][T13126] bio_endio+0x390/0x570 [ 201.383583][T13126] blk_update_request+0x33a/0x710 [ 201.383611][T13126] blk_mq_end_request+0x26/0x50 [ 201.383639][T13126] lo_complete_rq+0x98/0x130 [ 201.383670][T13126] blk_done_softirq+0x77/0xb0 [ 201.383692][T13126] handle_softirqs+0x109/0x310 [ 201.383719][T13126] __irq_exit_rcu+0x40/0xf0 [ 201.383744][T13126] sysvec_apic_timer_interrupt+0x74/0x80 [ 201.383773][T13126] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.383799][T13126] kcsan_setup_watchpoint+0x429/0x4a0 [ 201.383827][T13126] shmem_get_folio_gfp+0x18b/0xb90 [ 201.383850][T13126] shmem_write_begin+0xfc/0x1f0 [ 201.383876][T13126] generic_perform_write+0x186/0x490 [ 201.383904][T13126] shmem_file_write_iter+0xc5/0xf0 [ 201.383938][T13126] lo_rw_aio+0x6d4/0x780 [ 201.383972][T13126] loop_process_work+0x569/0xac0 [ 201.384005][T13126] loop_workfn+0x31/0x40 [ 201.384038][T13126] process_scheduled_works+0x53f/0xa20 [ 201.384062][T13126] worker_thread+0x56c/0x770 [ 201.384086][T13126] kthread+0x223/0x270 [ 201.384110][T13126] ret_from_fork+0x146/0x330 [ 201.384140][T13126] ret_from_fork_asm+0x1a/0x30 [ 201.384168][T13126] [ 201.384177][T13126] read to 0xffff88811a458230 of 8 bytes by task 13126 on cpu 1: [ 201.384197][T13126] xas_find_marked+0x211/0x650 [ 201.384227][T13126] filemap_get_folios_tag+0xf7/0x400 [ 201.384251][T13126] filemap_write_and_wait_range+0x1f5/0x370 [ 201.384280][T13126] bdev_release+0xd4/0x3d0 [ 201.384305][T13126] blkdev_release+0x15/0x20 [ 201.384321][T13126] __fput+0x286/0x610 [ 201.384343][T13126] fput_close_sync+0xad/0x190 [ 201.384363][T13126] filp_close_sync+0x27/0x40 [ 201.384393][T13126] __se_sys_close_range+0x915/0xa00 [ 201.384419][T13126] __x64_sys_close_range+0x43/0x50 [ 201.384442][T13126] x64_sys_call+0x2198/0x2550 [ 201.384471][T13126] do_syscall_64+0x112/0x360 [ 201.384502][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.384523][T13126] [ 201.384528][T13126] value changed: 0xffffffffffffff00 -> 0xffffffffffff0000 [ 201.384542][T13126] [ 201.384547][T13126] Reported by Kernel Concurrency Sanitizer on: [ 201.384563][T13126] CPU: 1 UID: 0 PID: 13126 Comm: syz.3.3308 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 201.384597][T13126] Tainted: [W]=WARN [ 201.384606][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.384621][T13126] ================================================================== [ 201.583206][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.052553][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 202.070019][T10871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.613526][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.332694][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.342552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.652451][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.071918][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 204.071935][ T29] audit: type=1400 audit(1793616166.947:1464): avc: denied { write } for pid=13145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.108311][ T29] audit: type=1400 audit(1793616166.987:1465): avc: denied { write } for pid=13156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.644132][ T29] audit: type=1400 audit(1793616167.527:1466): avc: denied { write } for pid=13159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.683430][ T29] audit: type=1400 audit(1793616167.567:1467): avc: denied { write } for pid=13170 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.715383][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.732870][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.372536][T10869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.772484][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.812883][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.852416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.412420][T10871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.892517][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.382515][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 210.942880][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog