last executing test programs: 2m2.894379507s ago: executing program 3 (id=130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000002340), 0x39, 0x10, &(0x7f0000002380), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002400)={'rose0\x00', 0x112}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) close(r1) 2m2.751497792s ago: executing program 3 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000640)={@remote, r2}, 0x14) 2m2.732294564s ago: executing program 3 (id=134): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) 2m2.711262226s ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b) mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0) 2m2.642380103s ago: executing program 3 (id=137): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xe}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f7ff40", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffffe, 0x300}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) 2m2.38424867s ago: executing program 3 (id=142): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_rxfh_indir={0x39}}) 2m2.341722744s ago: executing program 32 (id=142): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_rxfh_indir={0x39}}) 1m59.815845885s ago: executing program 2 (id=189): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x10, 0x10, &(0x7f00000003c0)="0000ffffffffa000", &(0x7f0000000400)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m59.47876203s ago: executing program 2 (id=180): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x54c}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0xc, &(0x7f00000003c0), 0x2, 0x556, &(0x7f0000000400)="$eJzs3c9vG1kdAPDvuHHjdN1NF/YACNiyLBRU1fnR3Wq1F7oXEFqthKg4ceiG1BtFtesqdkUTekiPiOtKW4kDAv4Dbggh7YkDnLiBxGEvywGpQAXaIjgYzXiSeh27cRPXTp3PRxrPvDeT+b4X983zvGb8Aji2zkbEdkScjIh3ImI+z0/yJS53lvS4jx/cWX344M5qEu32lX8k2f40L7p+JvVcfs5SRHz3WxE/SPbGbW5uXV+p1aobeXqhVb+50NzcurBeyHOWLy1dWnz94muFkdX1pfqv7n9z/a3v/fbXX/joj9tf/1FarPKPT2f7uuvxSPHQMZP8POWuvJmIeOvQZz46ZvJ/Pzx70tb1qYh4OWv/83EiezcBgGnWbs9He747DQBMu/T+vxxJoZKPBZSjUKhUOmN4L8apQq3RbJ2fb9y6cS2yMawzUSy8u16rLuZjhWeimKTppWz7UXr5E+n3qhcj4oWIeG92Ltt/+JE1AOCgnuvp//892+n/u+mrAWAKlSZdAABg7Lr6/zOTLAcAMD7u/wHg+HmC/t/TgQAwJZ7o/t9fAwLAVDD+DwDHz779/93xlAMAGIvvvP12urQfdr7/euebui9cqzavV+q3ViurjY2blbVGY61Wray22/udr9Zo3Fx6dTfZ3Ny6Wm/cutG6ul5fWate9b0/AHAEvPDSB39OO/3tN+ayJbrmctBXw3Qb3ew6wLPmxKQLAEzMcM/zeOoHptEQ9/iGAWDK9ZmityMfIEgGHXBv2MlfywcrGPDUnPus8X84rg4z/m9UAJ5tBxv//8bIywGMnz4cjq92O+md8/8PP4veLABgmhjjB/r8935pYKLbvSFOfvlgZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjrpwtSaGSzQW+nb4WKpWI0xFxJorJu+u16mJEPB8Rf5otzqbppUkXGgA4pMLfknz+r3Pzr5R7955M/jObrSPihz+98v5vFiM2ltL8f+7mt+5def/2ylxrY/nkJCoAAHTbmXfzw0dZt1darY3lfN11I//xgzurO8s4i3j/zYgozWXxH+ZLZ89MzGTrUhQj4tS/kjzdkX5eOTGC+Nt3I+IzO/Uvxe2uCOVsDKQz82lv/DT26dHF/2+73e75/XfFn9v7c4VsX7ouZr+LT0dP4YB9ffBm5zqZt720ieftrxBns3X/9l/KrlCHl17/0ub6cM/1r7B7/TuxJ36Stfmzu+nHl+T+q7/79p7M9nxn392Iz830i5/sxk/6X3+LrwxZxw8//8WXB+1r/zziXN/678xIXf9J+rrQqt9caG5uXVivr6xV16o3lpcvLV1afP3ia8sL2Rh15/X3/WL8/Y3zzw+Kn9b/1ID4pcfXP74yZP1/8b93vv+lx8T/2pf7v/8vPiZ+2id+dVDAnkn9V05dHjh9dxr/2oD67/P+x/n9Kp776K9b14Y8FAAYg+bm1vWVWq26sc9G+llzv2NsDL+R3tsfgWJkG7EdMaoTZoMSEdH3mPQT9dGo8tPaSCYW/ZejPuGkr0zA0/ao0Q8+5i/jLBAAAAAAAAAAAAAAALBHc3Pr+mz/p7VGtjHpOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC9/h8AAP//WjbCKA==") 1m59.152091914s ago: executing program 2 (id=187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000480)={r1, @in={{0x2, 0x4e20, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0x1, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) 1m59.09229225s ago: executing program 2 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b) mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0) 1m59.011535469s ago: executing program 2 (id=193): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/198) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x1ff) 1m58.637168547s ago: executing program 2 (id=200): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 1m58.591652632s ago: executing program 33 (id=200): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 57.135718944s ago: executing program 5 (id=1131): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000002c0)=""/65) 56.956258113s ago: executing program 5 (id=1134): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0xfffffffb) capset(&(0x7f0000000640)={0x20071026}, &(0x7f0000000680)={0x200000, 0x200000, 0x3, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x14e174135c0b87af) 56.876216951s ago: executing program 5 (id=1137): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000340)="c96522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca400c829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc933253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d80004000000000000098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74ab479fc315c5f3919df3d2dc079cb705001a3f7239f7c71e559fa55729836bb564b5", 0x38}) 56.839436555s ago: executing program 5 (id=1141): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x1000410, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000900)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) 56.104056591s ago: executing program 5 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 55.571173606s ago: executing program 5 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000c00), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000c80)=0x304, 0x4) 55.485053125s ago: executing program 34 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000c00), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000c80)=0x304, 0x4) 42.640119353s ago: executing program 4 (id=1344): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x204818, &(0x7f0000000740)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f00000007c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000d40)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 42.47427773s ago: executing program 4 (id=1345): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xa}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ab) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/firmware/acpi/interrupts/gpe00\x00', 0x1, 0x10) write(r0, &(0x7f0000000280)='0', 0x1) 42.167952442s ago: executing program 4 (id=1348): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x45, 0x4000011224, 0xffffffff, 0x2, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x8) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/221, 0xa1ff}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) 42.011086668s ago: executing program 4 (id=1349): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x1000410, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000900)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) 40.770937346s ago: executing program 4 (id=1373): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084) 40.088290846s ago: executing program 4 (id=1383): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 40.066894259s ago: executing program 35 (id=1383): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.674482608s ago: executing program 6 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 1.407311505s ago: executing program 6 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./tracing\x00', &(0x7f0000000c00)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./tracing/dynamic_events\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(r0, &(0x7f0000001300)='e&my_read_msr1 msr/r', 0x14) 1.295654987s ago: executing program 6 (id=2308): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)='2', 0x1}], 0x1}}], 0x1, 0x20000854) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000540)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.148575311s ago: executing program 6 (id=2309): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 872.70409ms ago: executing program 6 (id=2325): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) 665.244642ms ago: executing program 0 (id=2321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(r1, 0x4020744f, 0x0) 652.171663ms ago: executing program 8 (id=2322): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000480)='\x00', 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000500)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/60, 0x3c}], 0x1}, 0xf8d}], 0x1, 0x10122, 0x0) 513.042737ms ago: executing program 1 (id=2323): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xcc, 0x4, 0x42, 0x7, 0x0, 0xfffffffffffffff8, 0x956d1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x34, 0x400, 0xfffffff8, 0x0, 0x7fffffff, 0x10000, 0xff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 255.607604ms ago: executing program 8 (id=2329): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "896b8057cf0c94e193c469962ca46908"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c2}, 0x8880) 255.146034ms ago: executing program 0 (id=2339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 203.818469ms ago: executing program 8 (id=2330): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272692467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080) close(r0) 180.536262ms ago: executing program 7 (id=2332): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000340)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 167.952483ms ago: executing program 1 (id=2333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000a80)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000ac0)={0x0, 0x10, &(0x7f0000000b00)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000b80)={r1, 0x9, 0x20, 0x100000000, 0x81}, &(0x7f0000000bc0)=0x18) 165.211983ms ago: executing program 0 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') sendfile(r0, r0, 0x0, 0x8) 154.372465ms ago: executing program 7 (id=2335): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x6, 0x30}, &(0x7f00000002c0)=0xc) 125.990528ms ago: executing program 0 (id=2337): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='enable_event:sched:sched_process_fork', 0x25) 111.511319ms ago: executing program 8 (id=2348): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000340)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 111.128539ms ago: executing program 1 (id=2338): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(r1, 0x4020744f, 0x0) 106.7338ms ago: executing program 7 (id=2340): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/kcore\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x40000007fd) 86.502212ms ago: executing program 1 (id=2341): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x20000a, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0], 0x1, 0x39a, &(0x7f00000014c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) 1.56193ms ago: executing program 6 (id=2342): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x48, r1, 0x5eae78d9c54e9d3f, 0x3, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bf0754d15eb5fc0ff4bd8a74af0bd215"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x48}}, 0x8030) 0s ago: executing program 8 (id=2354): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='enable_event:sched:sched_process_fork', 0x25) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.632882][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.740028][ T29] audit: type=1400 audit(1793762115.466:1160): avc: denied { write } for pid=7259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.809633][ T7133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.829698][ T29] audit: type=1400 audit(1793762115.556:1161): avc: denied { write } for pid=7286 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.103322][ T7133] veth0_vlan: entered promiscuous mode [ 119.108976][ T7133] veth1_vlan: entered promiscuous mode [ 119.137445][ T7133] veth0_macvtap: entered promiscuous mode [ 119.148072][ T7133] veth1_macvtap: entered promiscuous mode [ 119.168074][ T7133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.184168][ T7133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.201608][ T415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.201662][ T415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.201706][ T415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.201750][ T415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.279240][ T7323] loop4: detected capacity change from 0 to 164 [ 119.571910][ T7344] loop1: detected capacity change from 0 to 512 [ 119.580570][ T7344] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1347: inode has both inline data and extents flags [ 119.580687][ T7344] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.581110][ T7344] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1347: couldn't read orphan inode 15 (err -117) [ 119.581225][ T7344] loop1: lost filesystem error report for type 5 error -117 [ 119.581481][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 119.581562][ C1] EXT4-fs (loop1): initial error at time 1793762116: ext4_orphan_get:1404: inode 15 [ 119.581638][ C1] EXT4-fs (loop1): last error at time 1793762116: ext4_orphan_get:1409 [ 119.601610][ T7344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.740518][ T7337] bond1: option miimon: invalid value (18446744073709551104) [ 119.740742][ T7337] bond1: option miimon: allowed values 0 - 2147483647 [ 119.770358][ T7337] bond1 (unregistering): Released all slaves [ 120.016251][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.160672][ T53] IPVS: starting estimator thread 0... [ 120.254887][ T7389] IPVS: using max 1824 ests per chain, 91200 per kthread [ 120.325008][ T7360] loop4: detected capacity change from 0 to 512 [ 120.335300][ T7400] FAULT_INJECTION: forcing a failure. [ 120.335300][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.335458][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.7.1364 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.335585][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.335654][ T7400] Call Trace: [ 120.335687][ T7400] [ 120.335713][ T7400] __dump_stack+0x1d/0x30 [ 120.335792][ T7400] dump_stack_lvl+0x95/0xd0 [ 120.335903][ T7400] dump_stack+0x15/0x1b [ 120.336063][ T7400] should_fail_ex+0x259/0x270 [ 120.336152][ T7400] should_fail+0xb/0x20 [ 120.336268][ T7400] should_fail_usercopy+0x1a/0x20 [ 120.336371][ T7400] strncpy_from_user+0x27/0x250 [ 120.336450][ T7400] path_setxattrat+0xeb/0x320 [ 120.336645][ T7400] __x64_sys_fsetxattr+0x6b/0x80 [ 120.336737][ T7400] x64_sys_call+0x1a88/0x2550 [ 120.336822][ T7400] do_syscall_64+0x112/0x360 [ 120.336959][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.337041][ T7400] RIP: 0033:0x7f1c1f0ffb19 [ 120.337102][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.337150][ T7400] RSP: 002b:00007f1c1db57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 120.337222][ T7400] RAX: ffffffffffffffda RBX: 00007f1c1f385fa0 RCX: 00007f1c1f0ffb19 [ 120.337276][ T7400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.337326][ T7400] RBP: 00007f1c1f197b70 R08: 0000000000000002 R09: 0000000000000000 [ 120.337368][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.337410][ T7400] R13: 00007f1c1f386038 R14: 00007f1c1f385fa0 R15: 00007fffbf146118 [ 120.337476][ T7400] [ 120.544079][ T7407] bond0: invalid ARP target specified [ 120.566768][ T7410] loop7: detected capacity change from 0 to 1024 [ 120.590954][ T7410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.591069][ T7410] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.592620][ T7410] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1367: bg 0: block 112: padding at end of block bitmap is not set [ 120.606312][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.613412][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.620376][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.627211][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.634543][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.638140][ T7409] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.639381][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.639782][ T7360] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.644562][ T7410] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.645084][ T7410] EXT4-fs error (device loop7): ext4_map_blocks:895: inode #15: comm syz.7.1367: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.779945][ T7418] loop0: detected capacity change from 0 to 1024 [ 120.780288][ T7418] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.798784][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.803541][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.811948][ T7421] loop6: detected capacity change from 0 to 512 [ 120.842716][ T7421] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1368: inode has both inline data and extents flags [ 120.842756][ T7421] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.842861][ T7421] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1368: couldn't read orphan inode 15 (err -117) [ 120.842889][ T7421] loop6: lost filesystem error report for type 5 error -117 [ 120.864294][ T7421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.012036][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.137212][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.139589][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.148919][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.157863][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.174859][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.176374][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.195240][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.197337][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.216164][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.220484][ T3298] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 121.427656][ T7460] type: 704 invalid [ 121.439549][ T7438] bond1: option miimon: invalid value (18446744073709551104) [ 121.439629][ T7438] bond1: option miimon: allowed values 0 - 2147483647 [ 121.473398][ T7438] bond1 (unregistering): Released all slaves [ 121.502153][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.746543][ T4345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.778803][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.846761][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1385'. [ 121.846853][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1385'. [ 121.866750][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.886006][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.957070][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.993587][ T7503] type: 704 invalid [ 122.043730][ T7510] loop7: detected capacity change from 0 to 256 [ 122.121603][ T12] bridge_slave_1: left allmulticast mode [ 122.121627][ T12] bridge_slave_1: left promiscuous mode [ 122.121712][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.126798][ T12] bridge_slave_0: left allmulticast mode [ 122.126822][ T12] bridge_slave_0: left promiscuous mode [ 122.127000][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.213055][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.214715][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.215543][ T12] bond0 (unregistering): Released all slaves [ 122.334662][ T12] hsr_slave_0: left promiscuous mode [ 122.335126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.335144][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.338064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.338079][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.383372][ T12] veth1_macvtap: left promiscuous mode [ 122.383401][ T12] veth0_macvtap: left promiscuous mode [ 122.383447][ T12] veth1_vlan: left promiscuous mode [ 122.383545][ T12] veth0_vlan: left promiscuous mode [ 122.463478][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 122.495553][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 122.495570][ T29] audit: type=1400 audit(1793762119.226:1292): avc: denied { write } for pid=7539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.498952][ T29] audit: type=1326 audit(1793762119.226:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.499110][ T29] audit: type=1326 audit(1793762119.226:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.499370][ T29] audit: type=1326 audit(1793762119.226:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.499525][ T29] audit: type=1326 audit(1793762119.226:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.500072][ T29] audit: type=1326 audit(1793762119.226:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.506518][ T29] audit: type=1326 audit(1793762119.236:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.506648][ T29] audit: type=1326 audit(1793762119.236:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.508776][ T29] audit: type=1326 audit(1793762119.236:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.509389][ T29] audit: type=1326 audit(1793762119.236:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 122.547168][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 122.799999][ T7497] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.829783][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 122.945402][ T12] IPVS: stop unused estimator thread 0... [ 123.067765][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.067802][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.067866][ T7497] bridge_slave_0: entered allmulticast mode [ 123.068379][ T7497] bridge_slave_0: entered promiscuous mode [ 123.073336][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.073430][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.073583][ T7497] bridge_slave_1: entered allmulticast mode [ 123.074848][ T7497] bridge_slave_1: entered promiscuous mode [ 123.112517][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.115786][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.142285][ T7497] team0: Port device team_slave_0 added [ 123.143422][ T7497] team0: Port device team_slave_1 added [ 123.175378][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 123.181255][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.181270][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.181299][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.188164][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.188253][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.188342][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.304961][ T7497] hsr_slave_0: entered promiscuous mode [ 123.305654][ T7497] hsr_slave_1: entered promiscuous mode [ 123.306915][ T7497] debugfs: 'hsr0' already exists in 'hsr' [ 123.306933][ T7497] Cannot create hsr debugfs directory [ 123.531080][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 123.581182][ T7497] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 123.591193][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.592335][ T7497] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 123.610160][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.610857][ T7497] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 123.629229][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.629971][ T7497] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 123.646077][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.690184][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.690239][ T7497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.690446][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.690487][ T7497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.778126][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.806649][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.811095][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.846806][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.312450][ T7652] loop7: detected capacity change from 0 to 2048 [ 124.333609][ T7652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.493489][ T7652] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 124.706706][ T7635] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 124.707963][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 124.728597][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.728633][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.730184][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.758526][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.758637][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.903999][ T4111] kernel write not supported for file /ppp (pid: 4111 comm: kworker/0:4) [ 125.085990][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.223835][ T7497] veth0_vlan: entered promiscuous mode [ 125.226469][ T7497] veth1_vlan: entered promiscuous mode [ 125.245819][ T7497] veth0_macvtap: entered promiscuous mode [ 125.247814][ T7497] veth1_macvtap: entered promiscuous mode [ 125.259022][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.270259][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.292306][ T32] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.292435][ T32] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.292480][ T32] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.294977][ T32] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.380174][ T3398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.381043][ T3398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.395064][ T7713] FAULT_INJECTION: forcing a failure. [ 125.395064][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 125.395235][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.8.1386 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.395380][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.395433][ T7713] Call Trace: [ 125.395461][ T7713] [ 125.395501][ T7713] __dump_stack+0x1d/0x30 [ 125.395583][ T7713] dump_stack_lvl+0x95/0xd0 [ 125.395667][ T7713] dump_stack+0x15/0x1b [ 125.395741][ T7713] should_fail_ex+0x259/0x270 [ 125.395907][ T7713] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 125.396019][ T7713] should_failslab+0x8c/0xb0 [ 125.396200][ T7713] __kmalloc_node_noprof+0xb8/0x4d0 [ 125.396324][ T7713] ? __get_vm_area_node+0x1bc/0x1f0 [ 125.396467][ T7713] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 125.396661][ T7713] __vmalloc_node_range_noprof+0x442/0x10e0 [ 125.396786][ T7713] ? __account_obj_stock+0x27f/0x2d0 [ 125.396940][ T7713] ? write_ldt+0x342/0x470 [ 125.397027][ T7713] __vmalloc_noprof+0xa4/0xf0 [ 125.397164][ T7713] ? write_ldt+0x342/0x470 [ 125.397222][ T7713] write_ldt+0x342/0x470 [ 125.397302][ T7713] __se_sys_modify_ldt+0x6c/0x260 [ 125.397385][ T7713] x64_sys_call+0x26b/0x2550 [ 125.397579][ T7713] do_syscall_64+0x112/0x360 [ 125.397700][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.397773][ T7713] RIP: 0033:0x7f473918fb19 [ 125.397833][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.397964][ T7713] RSP: 002b:00007f4737be7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 125.398139][ T7713] RAX: ffffffffffffffda RBX: 00007f4739415fa0 RCX: 00007f473918fb19 [ 125.398190][ T7713] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 0000000000000001 [ 125.398232][ T7713] RBP: 00007f4739227b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.398282][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.398322][ T7713] R13: 00007f4739416038 R14: 00007f4739415fa0 R15: 00007fff59e15dd8 [ 125.398452][ T7713] [ 125.409974][ T7713] syz.8.1386: vmalloc error: size 65536, failed to allocated page array size 128, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 125.410201][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.8.1386 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.410419][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.410461][ T7713] Call Trace: [ 125.410483][ T7713] [ 125.410515][ T7713] __dump_stack+0x1d/0x30 [ 125.410596][ T7713] dump_stack_lvl+0x95/0xd0 [ 125.410702][ T7713] dump_stack+0x15/0x1b [ 125.410724][ T7713] warn_alloc+0x146/0x1c0 [ 125.410757][ T7713] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 125.410915][ T7713] ? should_failslab+0x8c/0xb0 [ 125.411013][ T7713] ? __kmalloc_node_noprof+0xb8/0x4d0 [ 125.411112][ T7713] __vmalloc_node_range_noprof+0x771/0x10e0 [ 125.411262][ T7713] ? __account_obj_stock+0x27f/0x2d0 [ 125.411450][ T7713] ? write_ldt+0x342/0x470 [ 125.411552][ T7713] __vmalloc_noprof+0xa4/0xf0 [ 125.411657][ T7713] ? write_ldt+0x342/0x470 [ 125.411800][ T7713] write_ldt+0x342/0x470 [ 125.411901][ T7713] __se_sys_modify_ldt+0x6c/0x260 [ 125.411995][ T7713] x64_sys_call+0x26b/0x2550 [ 125.412079][ T7713] do_syscall_64+0x112/0x360 [ 125.412191][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.412319][ T7713] RIP: 0033:0x7f473918fb19 [ 125.412417][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.412549][ T7713] RSP: 002b:00007f4737be7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 125.412610][ T7713] RAX: ffffffffffffffda RBX: 00007f4739415fa0 RCX: 00007f473918fb19 [ 125.412658][ T7713] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 0000000000000001 [ 125.412701][ T7713] RBP: 00007f4739227b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.412772][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.412818][ T7713] R13: 00007f4739416038 R14: 00007f4739415fa0 R15: 00007fff59e15dd8 [ 125.412893][ T7713] [ 125.430709][ T7713] Mem-Info: [ 125.430719][ T7713] active_anon:4302 inactive_anon:2880 isolated_anon:0 [ 125.430719][ T7713] active_file:7511 inactive_file:18116 isolated_file:0 [ 125.430719][ T7713] unevictable:0 dirty:260 writeback:0 [ 125.430719][ T7713] slab_reclaimable:2457 slab_unreclaimable:17929 [ 125.430719][ T7713] mapped:28069 shmem:27 pagetables:1668 [ 125.430719][ T7713] sec_pagetables:0 bounce:0 [ 125.430719][ T7713] kernel_misc_reclaimable:0 [ 125.430719][ T7713] free:1876038 free_pcp:10888 free_cma:0 [ 125.430814][ T7713] Node 0 active_anon:17208kB inactive_anon:11520kB active_file:30044kB inactive_file:72464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112276kB dirty:1040kB writeback:0kB shmem:108kB kernel_stack:4224kB pagetables:6672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.431060][ T7713] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.431281][ T7713] lowmem_reserve[]: 0 2877 7856 7856 [ 125.431365][ T7713] Node 0 DMA32 free:2942956kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946480kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 125.434168][ T7713] lowmem_reserve[]: 0 0 4978 4978 [ 125.434209][ T7713] Node 0 Normal free:4545836kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17208kB inactive_anon:11520kB active_file:30044kB inactive_file:72464kB unevictable:0kB writepending:1040kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:40036kB local_pcp:7200kB free_cma:0kB [ 125.434280][ T7713] lowmem_reserve[]: 0 0 0 0 [ 125.434418][ T7713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.434930][ T7713] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942956kB [ 125.452434][ T7713] Node 0 Normal: 434*4kB (UE) 222*8kB (U) 73*16kB (U) 30*32kB (UME) 35*64kB (UME) 29*128kB (UME) 28*256kB (UME) 18*512kB (UM) 14*1024kB (UME) 11*2048kB (UME) 1094*4096kB (UM) = 4545864kB [ 125.453076][ T7713] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 125.453137][ T7713] 26040 total pagecache pages [ 125.453189][ T7713] 387 pages in swap cache [ 125.453220][ T7713] Free swap = 119984kB [ 125.453243][ T7713] Total swap = 124996kB [ 125.453338][ T7713] 2097051 pages RAM [ 125.453368][ T7713] 0 pages HighMem/MovableOnly [ 125.453389][ T7713] 82038 pages reserved [ 125.676841][ T7717] FAULT_INJECTION: forcing a failure. [ 125.676841][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.676941][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.1.1432 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.677023][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.677087][ T7717] Call Trace: [ 125.677108][ T7717] [ 125.677136][ T7717] __dump_stack+0x1d/0x30 [ 125.677226][ T7717] dump_stack_lvl+0x95/0xd0 [ 125.677324][ T7717] dump_stack+0x15/0x1b [ 125.677397][ T7717] should_fail_ex+0x259/0x270 [ 125.677505][ T7717] should_fail+0xb/0x20 [ 125.677605][ T7717] should_fail_usercopy+0x1a/0x20 [ 125.677735][ T7717] strncpy_from_user+0x27/0x250 [ 125.677811][ T7717] path_setxattrat+0xeb/0x320 [ 125.678079][ T7717] __x64_sys_fsetxattr+0x6b/0x80 [ 125.678238][ T7717] x64_sys_call+0x1a88/0x2550 [ 125.678363][ T7717] do_syscall_64+0x112/0x360 [ 125.678498][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.678571][ T7717] RIP: 0033:0x7f581bb4fb19 [ 125.678609][ T7717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.678732][ T7717] RSP: 002b:00007f581a5a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 125.678803][ T7717] RAX: ffffffffffffffda RBX: 00007f581bdd5fa0 RCX: 00007f581bb4fb19 [ 125.678864][ T7717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.678913][ T7717] RBP: 00007f581bbe7b70 R08: 0000000000000002 R09: 0000000000000000 [ 125.678956][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.678992][ T7717] R13: 00007f581bdd6038 R14: 00007f581bdd5fa0 R15: 00007ffc6636c128 [ 125.679063][ T7717] [ 125.946960][ T7715] fido_id[7715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.329223][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'. [ 126.329282][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 126.444139][ T7744] loop6: detected capacity change from 0 to 1 [ 126.550304][ T7755] loop6: detected capacity change from 0 to 7 [ 126.550533][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.550573][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.550676][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.550712][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.550742][ T7755] loop6: unable to read partition table [ 126.550782][ T7755] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 126.564356][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 126.566697][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.566790][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.567175][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.567267][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.567761][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.567841][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.568255][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.568307][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.568845][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.568926][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.803410][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'. [ 126.803450][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1455'. [ 127.121137][ T7802] loop8: detected capacity change from 0 to 1024 [ 127.156887][ T7802] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.157037][ T7802] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.189156][ T7802] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1471: bg 0: block 112: padding at end of block bitmap is not set [ 127.207716][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.209366][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.210965][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.225179][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.238686][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.252471][ T7801] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.253153][ T7802] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.253938][ T7802] EXT4-fs error (device loop8): ext4_map_blocks:895: inode #15: comm syz.8.1471: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.328157][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.524149][ T7817] loop1: detected capacity change from 0 to 1024 [ 127.526136][ T7817] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.546064][ T7817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.567421][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 127.567440][ T29] audit: type=1400 audit(1793762124.296:1322): avc: denied { write } for pid=7816 comm="syz.1.1476" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.633707][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.656292][ T7823] loop6: detected capacity change from 0 to 1024 [ 127.686872][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.686954][ T7823] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.692456][ T29] audit: type=1400 audit(1793762124.426:1323): avc: denied { write } for pid=7822 comm="syz.6.1478" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.692552][ T29] audit: type=1400 audit(1793762124.426:1324): avc: denied { append } for pid=7822 comm="syz.6.1478" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.772328][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.007812][ T7841] Format for adding new port is "id [perm_addr]" (uint MAC). [ 128.314225][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 128.318002][ T7854] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1498'. [ 128.329199][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 128.378902][ T7859] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1492'. [ 128.418797][ T7863] macvlan2: entered promiscuous mode [ 128.418824][ T7863] bridge0: entered promiscuous mode [ 129.208930][ T7877] FAULT_INJECTION: forcing a failure. [ 129.208930][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 129.208965][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.7.1501 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.208998][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.209078][ T7877] Call Trace: [ 129.209087][ T7877] [ 129.209098][ T7877] __dump_stack+0x1d/0x30 [ 129.209136][ T7877] dump_stack_lvl+0x95/0xd0 [ 129.209228][ T7877] dump_stack+0x15/0x1b [ 129.209252][ T7877] should_fail_ex+0x259/0x270 [ 129.209319][ T7877] ? __se_sys_mincore+0xec/0x510 [ 129.209358][ T7877] should_failslab+0x8c/0xb0 [ 129.209405][ T7877] __kmalloc_cache_noprof+0x5d/0x3e0 [ 129.209519][ T7877] ? __se_sys_mincore+0xec/0x510 [ 129.209566][ T7877] ? __se_sys_futex+0x2f6/0x370 [ 129.209645][ T7877] __se_sys_mincore+0xec/0x510 [ 129.209684][ T7877] ? restore_fpregs_from_fpstate+0x61/0x110 [ 129.209718][ T7877] __x64_sys_mincore+0x43/0x50 [ 129.209757][ T7877] x64_sys_call+0x1c8c/0x2550 [ 129.209845][ T7877] do_syscall_64+0x112/0x360 [ 129.209970][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.210050][ T7877] RIP: 0033:0x7f1c1f0ffb19 [ 129.210067][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.210087][ T7877] RSP: 002b:00007f1c1db57028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 129.210114][ T7877] RAX: ffffffffffffffda RBX: 00007f1c1f385fa0 RCX: 00007f1c1f0ffb19 [ 129.210196][ T7877] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 129.210215][ T7877] RBP: 00007f1c1f197b70 R08: 0000000000000000 R09: 0000000000000000 [ 129.210234][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.210296][ T7877] R13: 00007f1c1f386038 R14: 00007f1c1f385fa0 R15: 00007fffbf146118 [ 129.210323][ T7877] [ 129.404190][ T29] audit: type=1400 audit(1793762126.136:1325): avc: denied { bind } for pid=7881 comm="syz.7.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.405630][ T29] audit: type=1400 audit(1793762126.136:1326): avc: denied { name_bind } for pid=7881 comm="syz.7.1502" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 129.405658][ T29] audit: type=1400 audit(1793762126.136:1327): avc: denied { node_bind } for pid=7881 comm="syz.7.1502" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 130.107714][ T7939] loop6: detected capacity change from 0 to 1 [ 130.128877][ T7938] loop8: detected capacity change from 0 to 2048 [ 130.157165][ T7938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.297988][ T7957] team_slave_1: Caught tx_queue_len zero misconfig [ 130.383661][ T7966] loop6: detected capacity change from 0 to 7 [ 130.444251][ T29] audit: type=1400 audit(1793762127.126:1328): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.444496][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.444539][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.444573][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 130.446676][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.446712][ T7966] loop6: unable to read partition table [ 130.446738][ T7966] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 130.483032][ T7938] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 130.623528][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.787563][ T7988] loop1: detected capacity change from 0 to 1024 [ 130.808574][ T7988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.808734][ T7988] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.836121][ T29] audit: type=1400 audit(1793762127.566:1329): avc: denied { write } for pid=7987 comm="syz.1.1547" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.869475][ T7993] FAULT_INJECTION: forcing a failure. [ 130.869475][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 130.869508][ T7993] CPU: 0 UID: 0 PID: 7993 Comm: syz.6.1558 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.869541][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.869558][ T7993] Call Trace: [ 130.869566][ T7993] [ 130.869644][ T7993] __dump_stack+0x1d/0x30 [ 130.869673][ T7993] dump_stack_lvl+0x95/0xd0 [ 130.869705][ T7993] dump_stack+0x15/0x1b [ 130.869734][ T7993] should_fail_ex+0x259/0x270 [ 130.869772][ T7993] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 130.869889][ T7993] should_failslab+0x8c/0xb0 [ 130.869934][ T7993] __kmalloc_node_noprof+0xb8/0x4d0 [ 130.869972][ T7993] ? __get_vm_area_node+0x1bc/0x1f0 [ 130.870026][ T7993] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 130.870076][ T7993] __vmalloc_node_range_noprof+0x442/0x10e0 [ 130.870179][ T7993] ? __account_obj_stock+0x27f/0x2d0 [ 130.870292][ T7993] ? write_ldt+0x342/0x470 [ 130.870315][ T7993] __vmalloc_noprof+0xa4/0xf0 [ 130.870365][ T7993] ? write_ldt+0x342/0x470 [ 130.870393][ T7993] write_ldt+0x342/0x470 [ 130.870455][ T7993] __se_sys_modify_ldt+0x6c/0x260 [ 130.870485][ T7993] x64_sys_call+0x26b/0x2550 [ 130.870515][ T7993] do_syscall_64+0x112/0x360 [ 130.870578][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.870610][ T7993] RIP: 0033:0x7f62f1b4fb19 [ 130.870625][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.870710][ T7993] RSP: 002b:00007f62f05a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 130.870733][ T7993] RAX: ffffffffffffffda RBX: 00007f62f1dd5fa0 RCX: 00007f62f1b4fb19 [ 130.870749][ T7993] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 0000000000000001 [ 130.870763][ T7993] RBP: 00007f62f1be7b70 R08: 0000000000000000 R09: 0000000000000000 [ 130.870777][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.870841][ T7993] R13: 00007f62f1dd6038 R14: 00007f62f1dd5fa0 R15: 00007ffe52a3a148 [ 130.870869][ T7993] [ 130.947488][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.166947][ T8005] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1552'. [ 131.194116][ T8003] unsupported nlmsg_type 40 [ 131.194197][ T29] audit: type=1400 audit(1793762127.926:1330): avc: denied { nlmsg_write } for pid=8006 comm="syz.7.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 131.240379][ T8012] loop6: detected capacity change from 0 to 7 [ 131.240834][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.240978][ T8012] loop6: unable to read partition table [ 131.241057][ T8012] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 131.357063][ T8027] FAULT_INJECTION: forcing a failure. [ 131.357063][ T8027] name failslab, interval 1, probability 0, space 0, times 0 [ 131.357140][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.7.1564 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.357173][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.357191][ T8027] Call Trace: [ 131.357269][ T8027] [ 131.357288][ T8027] __dump_stack+0x1d/0x30 [ 131.357320][ T8027] dump_stack_lvl+0x95/0xd0 [ 131.357363][ T8027] dump_stack+0x15/0x1b [ 131.357394][ T8027] should_fail_ex+0x259/0x270 [ 131.357433][ T8027] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 131.357579][ T8027] should_failslab+0x8c/0xb0 [ 131.357697][ T8027] __kmalloc_node_noprof+0xb8/0x4d0 [ 131.357732][ T8027] ? __get_vm_area_node+0x1bc/0x1f0 [ 131.357775][ T8027] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 131.357865][ T8027] __vmalloc_node_range_noprof+0x442/0x10e0 [ 131.357916][ T8027] ? __account_obj_stock+0x27f/0x2d0 [ 131.357965][ T8027] ? write_ldt+0x342/0x470 [ 131.358075][ T8027] __vmalloc_noprof+0xa4/0xf0 [ 131.358164][ T8027] ? write_ldt+0x342/0x470 [ 131.358198][ T8027] write_ldt+0x342/0x470 [ 131.358293][ T8027] __se_sys_modify_ldt+0x6c/0x260 [ 131.358347][ T8027] x64_sys_call+0x26b/0x2550 [ 131.358459][ T8027] do_syscall_64+0x112/0x360 [ 131.358509][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.358595][ T8027] RIP: 0033:0x7f1c1f0ffb19 [ 131.358619][ T8027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.358646][ T8027] RSP: 002b:00007f1c1db57028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 131.358675][ T8027] RAX: ffffffffffffffda RBX: 00007f1c1f385fa0 RCX: 00007f1c1f0ffb19 [ 131.358704][ T8027] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 0000000000000001 [ 131.358723][ T8027] RBP: 00007f1c1f197b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.358742][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.358839][ T8027] R13: 00007f1c1f386038 R14: 00007f1c1f385fa0 R15: 00007fffbf146118 [ 131.358911][ T8027] [ 131.605743][ T8038] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1567'. [ 131.686342][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 131.737430][ T8050] loop0: detected capacity change from 0 to 128 [ 131.784944][ T8053] loop6: detected capacity change from 0 to 7 [ 131.785278][ C1] blk_print_req_error: 9 callbacks suppressed [ 131.785298][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.785337][ C1] buffer_io_error: 6 callbacks suppressed [ 131.785353][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.785695][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.785742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.785881][ T8053] loop6: unable to read partition table [ 131.785907][ T8053] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 131.791197][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 131.797279][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.797379][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.799551][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.799634][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.800008][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.800091][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.806048][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.806142][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.807215][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.807308][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.070429][ T8058] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.132868][ T8065] FAULT_INJECTION: forcing a failure. [ 132.132868][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 132.132895][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.1580 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.132923][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.132941][ T8065] Call Trace: [ 132.132949][ T8065] [ 132.132958][ T8065] __dump_stack+0x1d/0x30 [ 132.133032][ T8065] dump_stack_lvl+0x95/0xd0 [ 132.133064][ T8065] dump_stack+0x15/0x1b [ 132.133129][ T8065] should_fail_ex+0x259/0x270 [ 132.133159][ T8065] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 132.133273][ T8065] should_failslab+0x8c/0xb0 [ 132.133307][ T8065] __kmalloc_node_noprof+0xb8/0x4d0 [ 132.133438][ T8065] ? __get_vm_area_node+0x1bc/0x1f0 [ 132.133545][ T8065] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 132.133599][ T8065] __vmalloc_node_range_noprof+0x442/0x10e0 [ 132.133723][ T8065] ? __account_obj_stock+0x27f/0x2d0 [ 132.133772][ T8065] ? write_ldt+0x30f/0x470 [ 132.133854][ T8065] ? write_ldt+0x342/0x470 [ 132.133887][ T8065] __vmalloc_noprof+0xa4/0xf0 [ 132.133968][ T8065] ? write_ldt+0x342/0x470 [ 132.134043][ T8065] write_ldt+0x342/0x470 [ 132.134148][ T8065] __se_sys_modify_ldt+0x6c/0x260 [ 132.134182][ T8065] x64_sys_call+0x26b/0x2550 [ 132.134224][ T8065] do_syscall_64+0x112/0x360 [ 132.134282][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.134314][ T8065] RIP: 0033:0x7f581bb4fb19 [ 132.134334][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.134354][ T8065] RSP: 002b:00007f581a5a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 132.134437][ T8065] RAX: ffffffffffffffda RBX: 00007f581bdd5fa0 RCX: 00007f581bb4fb19 [ 132.134459][ T8065] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 0000000000000001 [ 132.134477][ T8065] RBP: 00007f581bbe7b70 R08: 0000000000000000 R09: 0000000000000000 [ 132.134496][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.134518][ T8065] R13: 00007f581bdd6038 R14: 00007f581bdd5fa0 R15: 00007ffc6636c128 [ 132.134571][ T8065] [ 132.196399][ T8063] macvlan2: entered promiscuous mode [ 132.196461][ T8063] bridge0: entered promiscuous mode [ 132.372533][ T29] audit: type=1400 audit(1793762129.106:1331): avc: denied { read } for pid=8067 comm="syz.1.1581" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 132.372819][ T8068] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 132.493442][ T8076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1585'. [ 132.590181][ T8087] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1588'. [ 132.674201][ T317] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.748082][ T8101] macvlan4: entered promiscuous mode [ 132.748126][ T8101] bridge0: entered promiscuous mode [ 132.940957][ T8109] loop6: detected capacity change from 0 to 128 [ 132.952092][ T8110] Format for adding new port is "id [perm_addr]" (uint MAC). [ 132.960230][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 132.960249][ T29] audit: type=1400 audit(1793762129.686:1334): avc: denied { watch } for pid=8108 comm="syz.6.1601" path="/60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop6" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 133.005347][ T8114] syzkaller1: entered promiscuous mode [ 133.005405][ T8114] syzkaller1: entered allmulticast mode [ 133.055010][ T8116] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1603'. [ 133.163713][ T8132] wg2: Caught tx_queue_len zero misconfig [ 133.723855][ T8149] loop1: detected capacity change from 0 to 512 [ 133.724233][ T8149] EXT4-fs: Ignoring removed oldalloc option [ 133.755229][ T8149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.776249][ T29] audit: type=1400 audit(1793762130.506:1335): avc: denied { watch } for pid=8147 comm="syz.1.1615" path="/332/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.829732][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.037363][ T8168] loop1: detected capacity change from 0 to 2048 [ 134.055988][ T8168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.075857][ T29] audit: type=1400 audit(1793762130.806:1336): avc: denied { write } for pid=8167 comm="syz.1.1627" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.134897][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.198133][ T29] audit: type=1400 audit(1793762130.926:1337): avc: denied { write } for pid=8182 comm="syz.0.1632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.279300][ T29] audit: type=1326 audit(1793762131.006:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.1.1635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f581bb4fb19 code=0x0 [ 134.326712][ T8189] can0: slcan on ptm1. [ 134.391636][ T8188] can0 (unregistered): slcan off ptm1. [ 134.510601][ T29] audit: type=1400 audit(1793762131.236:1339): avc: denied { write } for pid=8191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.554212][ T29] audit: type=1400 audit(1793762131.286:1340): avc: denied { write } for pid=8207 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.660203][ T29] audit: type=1400 audit(1793762131.386:1341): avc: denied { write } for pid=8209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.705924][ T29] audit: type=1400 audit(1793762131.436:1342): avc: denied { write } for pid=8222 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.751568][ T3790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.912189][ T29] audit: type=1400 audit(1793762132.646:1343): avc: denied { write } for pid=8237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.929628][ T8270] FAULT_INJECTION: forcing a failure. [ 135.929628][ T8270] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.929717][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.7.1656 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.929868][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.929910][ T8270] Call Trace: [ 135.929978][ T8270] [ 135.930000][ T8270] __dump_stack+0x1d/0x30 [ 135.930098][ T8270] dump_stack_lvl+0x95/0xd0 [ 135.930145][ T8270] dump_stack+0x15/0x1b [ 135.930166][ T8270] should_fail_ex+0x259/0x270 [ 135.930267][ T8270] should_fail+0xb/0x20 [ 135.930359][ T8270] get_futex_key+0x12c/0xc40 [ 135.930452][ T8270] ? tick_program_event+0x79/0xc0 [ 135.930577][ T8270] futex_wake+0x89/0x400 [ 135.930679][ T8270] do_futex+0x3f8/0x460 [ 135.930771][ T8270] __se_sys_futex+0x2f6/0x370 [ 135.930876][ T8270] __x64_sys_futex+0x78/0x90 [ 135.930985][ T8270] x64_sys_call+0x22e2/0x2550 [ 135.931071][ T8270] do_syscall_64+0x112/0x360 [ 135.931192][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.931270][ T8270] RIP: 0033:0x7f1c1f0ffb19 [ 135.931315][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.931404][ T8270] RSP: 002b:00007f1c1db570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.931482][ T8270] RAX: ffffffffffffffda RBX: 00007f1c1f385fa8 RCX: 00007f1c1f0ffb19 [ 135.931527][ T8270] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c1f385fac [ 135.931577][ T8270] RBP: 00007f1c1f385fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 135.931627][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.931740][ T8270] R13: 00007f1c1f386038 R14: 00007fffbf146030 R15: 00007fffbf146118 [ 135.931803][ T8270] [ 136.488416][ T8312] syzkaller1: entered promiscuous mode [ 136.488438][ T8312] syzkaller1: entered allmulticast mode [ 136.716441][ T8335] loop7: detected capacity change from 0 to 128 [ 136.844999][ T8346] netlink: 'syz.7.1673': attribute type 39 has an invalid length. [ 136.946587][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.946737][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.043799][ T8372] can0: slcan on ptm0. [ 137.081077][ T8374] loop0: detected capacity change from 0 to 512 [ 137.091886][ T8371] can0 (unregistered): slcan off ptm0. [ 137.129083][ T8374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.167021][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.178593][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.178723][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.254842][ T8389] loop0: detected capacity change from 0 to 1024 [ 137.310681][ T8389] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 137.323918][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.325117][ T8389] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 137.393973][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.433577][ T8395] loop0: detected capacity change from 0 to 512 [ 137.448636][ T8395] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1691: iget: bad i_size value: 38620345925642 [ 137.448686][ T8395] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.448874][ T8395] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1691: couldn't read orphan inode 15 (err -117) [ 137.448907][ T8395] loop0: lost filesystem error report for type 5 error -117 [ 137.449566][ T8395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.461881][ T8395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1691: bg 0: block 5: invalid block bitmap [ 137.462553][ T8395] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 137.462665][ T8395] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.462665][ T8395] [ 137.462724][ T8395] EXT4-fs (loop0): Total free blocks count 0 [ 137.462803][ T8395] EXT4-fs (loop0): Free/Dirty block details [ 137.462853][ T8395] EXT4-fs (loop0): free_blocks=0 [ 137.462915][ T8395] EXT4-fs (loop0): dirty_blocks=1 [ 137.462956][ T8395] EXT4-fs (loop0): Block reservation details [ 137.462988][ T8395] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 137.536172][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.611200][ T8398] loop0: detected capacity change from 0 to 512 [ 137.613900][ T8398] EXT4-fs: Ignoring removed oldalloc option [ 137.626392][ T8398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.675417][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.809657][ T8406] loop6: detected capacity change from 0 to 2048 [ 137.844787][ T8406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.895457][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.966511][ T8430] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.998373][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 137.998388][ T29] audit: type=1400 audit(1793762134.716:1361): avc: denied { getopt } for pid=8423 comm="syz.8.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.063789][ T8437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.351103][ T8461] loop8: detected capacity change from 0 to 512 [ 138.353072][ T8461] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 138.353121][ T8461] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 138.358347][ T8461] EXT4-fs (loop8): 1 truncate cleaned up [ 138.359693][ T8461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.369421][ T29] audit: type=1400 audit(1793762135.096:1362): avc: denied { write } for pid=8460 comm="syz.8.1720" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.716849][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.067946][ T8493] loop7: detected capacity change from 0 to 512 [ 139.106261][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.106288][ T8493] FAT-fs (loop7): Filesystem has been set read-only [ 139.106428][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.106688][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.106823][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.106973][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.107096][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.108812][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.108955][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.109208][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.109370][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.109566][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.109722][ T8493] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 139.128427][ T8496] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.188563][ T8493] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 139.188761][ T8493] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 139.196586][ T8493] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 139.273212][ T29] audit: type=1400 audit(1793762136.006:1363): avc: denied { search } for pid=8498 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.273249][ T29] audit: type=1400 audit(1793762136.006:1364): avc: denied { read write } for pid=8498 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 139.273320][ T29] audit: type=1400 audit(1793762136.006:1365): avc: denied { open } for pid=8498 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 139.273356][ T29] audit: type=1400 audit(1793762136.006:1366): avc: denied { lock } for pid=8498 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 139.275716][ T29] audit: type=1400 audit(1793762136.006:1367): avc: denied { read } for pid=8498 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 139.538983][ T8510] loop6: detected capacity change from 0 to 512 [ 139.551170][ T8510] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.557938][ T8510] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.558387][ T8510] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1738: bg 0: block 248: padding at end of block bitmap is not set [ 139.558472][ T8510] loop6: lost filesystem error report for type 5 error -117 [ 139.558961][ T8510] Quota error (device loop6): write_blk: dquota write failed [ 139.559014][ T8510] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 139.559112][ T8510] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.1738: Failed to acquire dquot type 1 [ 139.559189][ T8510] loop6: lost filesystem error report for type 5 error -28 [ 139.560487][ T8510] EXT4-fs (loop6): 1 truncate cleaned up [ 139.561516][ T8510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 139.606095][ T29] audit: type=1326 audit(1793762136.336:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.0.1740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ca18fb19 code=0x0 [ 139.779251][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 139.863415][ T8530] FAULT_INJECTION: forcing a failure. [ 139.863415][ T8530] name fail_futex, interval 1, probability 0, space 0, times 0 [ 139.863457][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.1.1747 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.863492][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.863509][ T8530] Call Trace: [ 139.863584][ T8530] [ 139.863595][ T8530] __dump_stack+0x1d/0x30 [ 139.863726][ T8530] dump_stack_lvl+0x95/0xd0 [ 139.863751][ T8530] dump_stack+0x15/0x1b [ 139.863773][ T8530] should_fail_ex+0x259/0x270 [ 139.863840][ T8530] should_fail+0xb/0x20 [ 139.863905][ T8530] get_futex_key+0x12c/0xc40 [ 139.863939][ T8530] futex_wake+0x89/0x400 [ 139.863983][ T8530] do_futex+0x3f8/0x460 [ 139.864029][ T8530] __se_sys_futex+0x2f6/0x370 [ 139.864067][ T8530] __x64_sys_futex+0x78/0x90 [ 139.864161][ T8530] x64_sys_call+0x22e2/0x2550 [ 139.864199][ T8530] do_syscall_64+0x112/0x360 [ 139.864240][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.864263][ T8530] RIP: 0033:0x7f581bb4fb19 [ 139.864285][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.864312][ T8530] RSP: 002b:00007f581a5a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.864349][ T8530] RAX: ffffffffffffffda RBX: 00007f581bdd5fa8 RCX: 00007f581bb4fb19 [ 139.864364][ T8530] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f581bdd5fac [ 139.864377][ T8530] RBP: 00007f581bdd5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 139.864464][ T8530] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 139.864477][ T8530] R13: 00007f581bdd6038 R14: 00007ffc6636c040 R15: 00007ffc6636c128 [ 139.864498][ T8530] [ 140.103850][ T8542] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.252183][ T8556] loop6: detected capacity change from 0 to 512 [ 140.267739][ T8556] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.289942][ T8556] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4221: comm syz.6.1758: Allocating blocks 41-42 which overlap fs metadata [ 140.290063][ T8556] loop6: lost filesystem error report for type 5 error -117 [ 140.290309][ T8556] EXT4-fs (loop6): Remounting filesystem read-only [ 140.290505][ T8556] EXT4-fs (loop6): 1 truncate cleaned up [ 140.290973][ T8556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.343675][ T8556] EXT4-fs (loop6): shut down requested (2) [ 141.148021][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.194650][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.239999][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.277025][ T8584] gretap0: entered promiscuous mode [ 141.277808][ T8584] macvlan4: left promiscuous mode [ 141.315427][ T8585] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.315579][ T8585] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.366281][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.136348][ T8593] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.229796][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.229901][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.461046][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.461237][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.517857][ T8634] set_capacity_and_notify: 2 callbacks suppressed [ 142.517878][ T8634] loop7: detected capacity change from 0 to 512 [ 142.518359][ T8634] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 142.518375][ T8634] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 142.563258][ T8634] EXT4-fs (loop7): 1 truncate cleaned up [ 142.563738][ T8634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.897087][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.927548][ T8641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.024619][ T8655] loop1: detected capacity change from 0 to 512 [ 143.029298][ T8655] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.045403][ T8647] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.049172][ T8655] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 143.052997][ T8655] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.053323][ T8655] EXT4-fs (loop1): too many log groups per flexible block group [ 143.053492][ T8655] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 143.053605][ T8655] EXT4-fs (loop1): mount failed [ 143.268220][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 143.268240][ T29] audit: type=1400 audit(1793762139.996:1381): avc: denied { write } for pid=8673 comm="syz.8.1810" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 syzkaller syzkaller login: [ 143.437181][ T8684] loop8: detected capacity change from 0 to 512 [ 143.448255][ T8684] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.450508][ T8684] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.450733][ T8684] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1814: bg 0: block 248: padding at end of block bitmap is not set [ 143.450820][ T8684] loop8: lost filesystem error report for type 5 error -117 [ 143.451147][ T8684] Quota error (device loop8): write_blk: dquota write failed [ 143.451169][ T8684] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 143.451195][ T8684] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.1814: Failed to acquire dquot type 1 [ 143.451219][ T8684] loop8: lost filesystem error report for type 5 error -28 [ 143.452565][ T8684] EXT4-fs (loop8): 1 truncate cleaned up [ 143.453033][ T8684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 143.688127][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 143.832844][ T8698] netlink: 'syz.8.1819': attribute type 6 has an invalid length. [ 143.833698][ T29] audit: type=1400 audit(1793762140.566:1382): avc: denied { write } for pid=8697 comm="syz.8.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.858037][ T8705] loop7: detected capacity change from 0 to 512 [ 143.876566][ T8705] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.888549][ T8702] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.901184][ T8705] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4221: comm syz.7.1822: Allocating blocks 41-42 which overlap fs metadata [ 143.901221][ T8705] loop7: lost filesystem error report for type 5 error -117 [ 143.901360][ T8705] EXT4-fs (loop7): Remounting filesystem read-only [ 143.901404][ T8705] Quota error (device loop7): write_blk: dquota write failed [ 143.901457][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 143.901530][ C0] EXT4-fs (loop7): initial error at time 1793762140: ext4_mb_mark_diskspace_used:4221 [ 143.901620][ C0] EXT4-fs (loop7): last error at time 1793762140: ext4_mb_mark_diskspace_used:4221 [ 143.901715][ T8705] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 143.901918][ T8705] Quota error (device loop7): write_blk: dquota write failed [ 143.901994][ T8705] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 143.902092][ T8705] EXT4-fs (loop7): 1 truncate cleaned up [ 143.906670][ T8705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.923737][ T8705] EXT4-fs (loop7): shut down requested (2) [ 144.017970][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.104582][ T8718] loop7: detected capacity change from 0 to 1024 [ 144.117682][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.125559][ T8718] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.141290][ T8721] loop0: detected capacity change from 0 to 512 [ 144.154230][ T8718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.159714][ T8721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.176575][ T29] audit: type=1400 audit(1793762140.896:1383): avc: denied { write } for pid=8717 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 144.202451][ T8721] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.1837: Allocating blocks 41-42 which overlap fs metadata [ 144.202549][ T8721] loop0: lost filesystem error report for type 5 error -117 [ 144.203105][ T8721] EXT4-fs (loop0): Remounting filesystem read-only [ 144.203253][ T8721] Quota error (device loop0): write_blk: dquota write failed [ 144.203609][ T8721] EXT4-fs (loop0): 1 truncate cleaned up [ 144.210653][ T8721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.263592][ T8721] EXT4-fs (loop0): shut down requested (2) [ 144.292282][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.352862][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.489382][ T8737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.489544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.688159][ T8754] loop0: detected capacity change from 0 to 512 [ 144.703369][ T8754] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 144.703387][ T8754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.704664][ T8756] loop7: detected capacity change from 0 to 512 [ 144.710032][ T8754] EXT4-fs (loop0): 1 truncate cleaned up [ 144.710958][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.751349][ T8756] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1840: iget: bad i_size value: 38620345925642 [ 144.751384][ T8756] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.751451][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 144.751474][ C1] EXT4-fs (loop7): initial error at time 1793762141: ext4_orphan_get:1404: inode 15 [ 144.751507][ C1] EXT4-fs (loop7): last error at time 1793762141: ext4_orphan_get:1404: inode 15 [ 144.764497][ T8756] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1840: couldn't read orphan inode 15 (err -117) [ 144.764534][ T8756] loop7: lost filesystem error report for type 5 error -117 [ 144.799635][ T8756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.842968][ T8758] loop1: detected capacity change from 0 to 1024 [ 144.845289][ T8758] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.856451][ T8758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.868799][ T8756] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.1840: bg 0: block 5: invalid block bitmap [ 144.869103][ T8756] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.869142][ T8756] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.869142][ T8756] [ 144.869157][ T8756] EXT4-fs (loop7): Total free blocks count 0 [ 144.869172][ T8756] EXT4-fs (loop7): Free/Dirty block details [ 144.869267][ T8756] EXT4-fs (loop7): free_blocks=0 [ 144.869373][ T8756] EXT4-fs (loop7): dirty_blocks=1 [ 144.869420][ T8756] EXT4-fs (loop7): Block reservation details [ 144.869473][ T8756] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 145.023794][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.025815][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.120463][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.142340][ T8776] loop8: detected capacity change from 0 to 512 [ 145.153804][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.174054][ T8776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.174171][ T8776] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.211740][ T8782] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.286757][ T8791] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1854: iget: bad i_size value: 38620345925642 [ 145.286833][ T8791] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.288512][ T8791] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1854: couldn't read orphan inode 15 (err -117) [ 145.288563][ T8791] loop1: lost filesystem error report for type 5 error -117 [ 145.289021][ T8791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.320588][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.379387][ T8791] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1854: bg 0: block 5: invalid block bitmap [ 145.379665][ T8791] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 145.379694][ T8791] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.379694][ T8791] [ 145.379729][ T8791] EXT4-fs (loop1): Total free blocks count 0 [ 145.379744][ T8791] EXT4-fs (loop1): Free/Dirty block details [ 145.379758][ T8791] EXT4-fs (loop1): free_blocks=0 [ 145.379774][ T8791] EXT4-fs (loop1): dirty_blocks=1 [ 145.379789][ T8791] EXT4-fs (loop1): Block reservation details [ 145.379804][ T8791] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 145.482776][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.482800][ T8800] FAT-fs (loop8): Filesystem has been set read-only [ 145.482921][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.484717][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.484826][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.485055][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.485207][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.485567][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.485713][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.485897][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.489532][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.489894][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.489996][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.490228][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.490361][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.490498][ T8800] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 145.490592][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.494780][ T8800] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 145.649317][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.193825][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.212369][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.318309][ T8809] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.383574][ T8810] loop6: p2 < > p3 < p5 > p4 [ 146.383590][ T8810] loop6: partition table partially beyond EOD, truncated [ 146.383748][ T8810] loop6: p2 start 4278190080 is beyond EOD, truncated [ 146.407480][ T8810] loop6: p4 size 8192 extends beyond EOD, truncated [ 146.408512][ T8810] loop6: p5 size 8192 extends beyond EOD, truncated [ 146.707884][ T8832] netlink: 'syz.7.1881': attribute type 6 has an invalid length. [ 146.819909][ T8841] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.228316][ T8885] mmap: syz.8.1893 (8885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.231800][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.251398][ T8887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.547320][ T8904] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.553096][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.834554][ T1047] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 147.835403][ T1047] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.977498][ T8944] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.272890][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.891291][ T8961] set_capacity_and_notify: 3 callbacks suppressed [ 148.891309][ T8961] loop1: detected capacity change from 0 to 128 [ 148.896379][ T8961] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.898431][ T8961] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.919987][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 148.920042][ T29] audit: type=1400 audit(1793762145.646:1401): avc: denied { remount } for pid=8960 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 148.920184][ T317] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.055905][ T8967] loop7: detected capacity change from 0 to 512 [ 149.057158][ T8967] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.059830][ T8967] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 149.087566][ T8967] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 149.087726][ T8967] EXT4-fs (loop7): too many log groups per flexible block group [ 149.087883][ T8967] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 149.087927][ T8967] EXT4-fs (loop7): mount failed [ 149.266733][ T29] audit: type=1326 audit(1793762145.996:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.267192][ T29] audit: type=1326 audit(1793762145.996:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.267289][ T29] audit: type=1326 audit(1793762145.996:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.267414][ T29] audit: type=1326 audit(1793762145.996:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.267624][ T29] audit: type=1326 audit(1793762145.996:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.267992][ T29] audit: type=1326 audit(1793762145.996:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.268348][ T29] audit: type=1326 audit(1793762145.996:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 149.321723][ T1047] net_ratelimit: 4 callbacks suppressed [ 149.321827][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.552951][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.625097][ T8995] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.632000][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.705512][ T29] audit: type=1326 audit(1793762146.436:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.6.1933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f62f1b4fb19 code=0x7ffc0000 [ 150.078867][ T29] audit: type=1326 audit(1793762146.806:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.7.1951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f0ffb19 code=0x7ffc0000 [ 150.167879][ T9033] loop6: detected capacity change from 0 to 512 [ 150.230464][ T9033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.230570][ T9033] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.353485][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.391050][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 150.402487][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.450206][ T9057] loop6: detected capacity change from 0 to 128 [ 150.450764][ T9057] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.469986][ T9057] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.497536][ T38] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.517698][ T9063] loop7: detected capacity change from 0 to 16384 [ 150.673318][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.695939][ T9078] loop6: detected capacity change from 0 to 512 [ 150.696286][ T9078] EXT4-fs: Ignoring removed nobh option [ 150.740605][ T9078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.740723][ T9078] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.790082][ T7133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.858961][ T9089] FAULT_INJECTION: forcing a failure. [ 150.858961][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.859000][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.6.1974 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.859043][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.859075][ T9089] Call Trace: [ 150.859085][ T9089] [ 150.859097][ T9089] __dump_stack+0x1d/0x30 [ 150.859134][ T9089] dump_stack_lvl+0x95/0xd0 [ 150.859160][ T9089] dump_stack+0x15/0x1b [ 150.859212][ T9089] should_fail_ex+0x259/0x270 [ 150.859255][ T9089] should_fail+0xb/0x20 [ 150.859358][ T9089] should_fail_usercopy+0x1a/0x20 [ 150.859398][ T9089] _copy_from_user+0x1c/0xb0 [ 150.859442][ T9089] __x64_sys_timer_create+0x7c/0xe0 [ 150.859483][ T9089] x64_sys_call+0x2248/0x2550 [ 150.859563][ T9089] do_syscall_64+0x112/0x360 [ 150.859610][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.859643][ T9089] RIP: 0033:0x7f62f1b4fb19 [ 150.859666][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.859688][ T9089] RSP: 002b:00007f62f05a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 150.859710][ T9089] RAX: ffffffffffffffda RBX: 00007f62f1dd5fa0 RCX: 00007f62f1b4fb19 [ 150.859731][ T9089] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 150.859755][ T9089] RBP: 00007f62f1be7b70 R08: 0000000000000000 R09: 0000000000000000 [ 150.859775][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.859792][ T9089] R13: 00007f62f1dd6038 R14: 00007f62f1dd5fa0 R15: 00007ffe52a3a148 [ 150.859820][ T9089] [ 151.076602][ T9096] loop7: detected capacity change from 0 to 512 [ 151.093129][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.093155][ T9096] FAT-fs (loop7): Filesystem has been set read-only [ 151.093310][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.093529][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.093661][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.093896][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.093990][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.099170][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.099579][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.100080][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.100359][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.104956][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.105358][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.105882][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.109648][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.109907][ T9096] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 151.110244][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.132797][ T9096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 151.391615][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.534619][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1988'. [ 151.633132][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.679458][ T9127] batadv_slave_0: entered promiscuous mode [ 151.680136][ T9126] batadv_slave_0: left promiscuous mode [ 151.711579][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.814295][ T9135] IPVS: persistence engine module ip_vs_pe_À not found [ 152.048032][ T9163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.088465][ T9167] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2010'. [ 152.105038][ T9147] loop8: detected capacity change from 0 to 1024 [ 152.134464][ T9147] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 152.165576][ T9147] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 2: comm syz.8.2003: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.165705][ T9147] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.166436][ T9147] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 48: comm syz.8.2003: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.166657][ T9147] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.167114][ T9170] loop0: detected capacity change from 0 to 1024 [ 152.167177][ T9147] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.2003: Failed to acquire dquot type 0 [ 152.167265][ T9147] loop8: lost filesystem error report for type 5 error -117 [ 152.167410][ T9170] EXT4-fs: Ignoring removed oldalloc option [ 152.167509][ T9170] EXT4-fs: Ignoring removed orlov option [ 152.171466][ C0] EXT4-fs (loop8): error count since last fsck: 3 [ 152.171485][ C0] EXT4-fs (loop8): initial error at time 1793762148: ext4_map_blocks:867: inode 3: block 2 [ 152.171540][ C0] EXT4-fs (loop8): last error at time 1793762148: ext4_acquire_dquot:7120 [ 152.275216][ T9147] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 152.275483][ T9147] loop8: lost filesystem error report for type 5 error -117 [ 152.280290][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.289607][ T9147] EXT4-fs error (device loop8): ext4_evict_inode:336: inode #11: comm syz.8.2003: mark_inode_dirty error [ 152.289740][ T9147] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.298991][ T9147] EXT4-fs warning (device loop8): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 152.299103][ T9147] EXT4-fs (loop8): 1 orphan inode deleted [ 152.309928][ T9170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.316094][ T9147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.317323][ T53] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.326727][ T53] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 152.401852][ T9147] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm syz.8.2003: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.404641][ T9147] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.2003: Failed to acquire dquot type 0 [ 152.408760][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.456194][ T3398] kernel write not supported for file /uhid (pid: 3398 comm: kworker/1:5) [ 152.474110][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.484206][ T7497] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 152.484245][ T7497] loop8: lost filesystem error report for type 5 error -117 [ 152.484343][ T7497] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 152.484363][ T7497] loop8: lost filesystem error report for type 5 error -117 [ 152.484453][ T7497] EXT4-fs error (device loop8): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 152.484541][ T7497] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.484628][ T7497] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 152.484659][ T7497] loop8: lost filesystem error report for type 5 error -117 [ 152.680118][ T9205] wg0: Caught tx_queue_len zero misconfig [ 152.854701][ T9214] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 152.854723][ T9214] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2029'. [ 152.964490][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2034'. [ 153.591964][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2051'. [ 153.592781][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2051'. [ 153.708768][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2059'. [ 153.849054][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 153.896961][ T9308] loop7: detected capacity change from 0 to 512 [ 153.897246][ T9308] EXT4-fs: Ignoring removed nobh option [ 153.942080][ T9308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.942216][ T9308] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.945243][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 153.945258][ T29] audit: type=1400 audit(1793762150.676:1425): avc: denied { write } for pid=9307 comm="syz.7.2069" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.020649][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.223465][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2082'. [ 154.265787][ T29] audit: type=1400 audit(1793762150.996:1426): avc: denied { listen } for pid=9344 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.293341][ T29] audit: type=1400 audit(1793762151.026:1427): avc: denied { accept } for pid=9344 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.345652][ T9355] loop8: detected capacity change from 0 to 512 [ 154.352068][ T9355] EXT4-fs: Ignoring removed nobh option [ 154.377218][ T9355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.377281][ T9355] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.404607][ T29] audit: type=1400 audit(1793762151.126:1428): avc: denied { write } for pid=9354 comm="syz.8.2085" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.441251][ T7497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.515036][ T3398] net_ratelimit: 5 callbacks suppressed [ 154.515098][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.518966][ T9368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.565040][ T29] audit: type=1400 audit(1793762151.296:1429): avc: denied { ioctl } for pid=9371 comm="syz.0.2094" path="/434/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 154.604098][ T9376] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 154.671833][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.800322][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.800421][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.800580][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.806315][ T9393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.806540][ T9393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.844093][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.863493][ T9398] wg0: Caught tx_queue_len zero misconfig [ 154.950651][ T9411] loop7: detected capacity change from 0 to 1024 [ 154.951044][ T9411] EXT4-fs: Ignoring removed oldalloc option [ 154.951067][ T9411] EXT4-fs: Ignoring removed orlov option [ 154.985056][ T9411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.989408][ T29] audit: type=1400 audit(1793762151.716:1430): avc: denied { write } for pid=9410 comm="syz.7.2112" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.063552][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.355212][ T9451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.358924][ T9451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.407691][ T9455] __nla_validate_parse: 4 callbacks suppressed [ 155.407711][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2129'. [ 155.463565][ T9459] loop0: detected capacity change from 0 to 512 [ 155.468475][ T9459] EXT4-fs: Ignoring removed nobh option [ 155.498285][ T9459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.498399][ T9459] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.544218][ T29] audit: type=1400 audit(1793762152.276:1431): avc: denied { write } for pid=9457 comm="syz.0.2141" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.553197][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.589365][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2132'. [ 155.589462][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2132'. [ 155.589488][ T9466] netlink: 'syz.7.2132': attribute type 6 has an invalid length. [ 155.596115][ T9466] vxlan0: entered promiscuous mode [ 155.612244][ T317] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.612743][ T317] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.612928][ T317] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.613041][ T317] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.661984][ T9469] FAULT_INJECTION: forcing a failure. [ 155.661984][ T9469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.662022][ T9469] CPU: 1 UID: 0 PID: 9469 Comm: syz.7.2134 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.662101][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.662115][ T9469] Call Trace: [ 155.662122][ T9469] [ 155.662132][ T9469] __dump_stack+0x1d/0x30 [ 155.662227][ T9469] dump_stack_lvl+0x95/0xd0 [ 155.662258][ T9469] dump_stack+0x15/0x1b [ 155.662283][ T9469] should_fail_ex+0x259/0x270 [ 155.662370][ T9469] should_fail+0xb/0x20 [ 155.662481][ T9469] should_fail_usercopy+0x1a/0x20 [ 155.662582][ T9469] _copy_from_user+0x1c/0xb0 [ 155.662619][ T9469] __x64_sys_timer_create+0x7c/0xe0 [ 155.662649][ T9469] x64_sys_call+0x2248/0x2550 [ 155.662705][ T9469] do_syscall_64+0x112/0x360 [ 155.662747][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.662775][ T9469] RIP: 0033:0x7f1c1f0ffb19 [ 155.662892][ T9469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.662928][ T9469] RSP: 002b:00007f1c1db57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 155.662952][ T9469] RAX: ffffffffffffffda RBX: 00007f1c1f385fa0 RCX: 00007f1c1f0ffb19 [ 155.662973][ T9469] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 155.663049][ T9469] RBP: 00007f1c1f197b70 R08: 0000000000000000 R09: 0000000000000000 [ 155.663067][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.663081][ T9469] R13: 00007f1c1f386038 R14: 00007f1c1f385fa0 R15: 00007fffbf146118 [ 155.663110][ T9469] [ 155.705537][ T3293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.789916][ T9471] FAULT_INJECTION: forcing a failure. [ 155.789916][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.789964][ T9471] CPU: 1 UID: 0 PID: 9471 Comm: syz.6.2136 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.790119][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.790178][ T9471] Call Trace: [ 155.790202][ T9471] [ 155.790232][ T9471] __dump_stack+0x1d/0x30 [ 155.790327][ T9471] dump_stack_lvl+0x95/0xd0 [ 155.790398][ T9471] dump_stack+0x15/0x1b [ 155.790501][ T9471] should_fail_ex+0x259/0x270 [ 155.790608][ T9471] should_fail+0xb/0x20 [ 155.790769][ T9471] should_fail_usercopy+0x1a/0x20 [ 155.790905][ T9471] _copy_from_user+0x1c/0xb0 [ 155.791017][ T9471] ioctl_fssetxattr+0x84/0x250 [ 155.791176][ T9471] do_vfs_ioctl+0x5bd/0xe50 [ 155.791300][ T9471] ? selinux_file_ioctl+0x333/0x3b0 [ 155.791365][ T9471] ? __fget_files+0x184/0x1c0 [ 155.791507][ T9471] __se_sys_ioctl+0x82/0x140 [ 155.791673][ T9471] __x64_sys_ioctl+0x43/0x50 [ 155.791790][ T9471] x64_sys_call+0x239d/0x2550 [ 155.791895][ T9471] do_syscall_64+0x112/0x360 [ 155.792064][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.792140][ T9471] RIP: 0033:0x7f62f1b4fb19 [ 155.792201][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.792267][ T9471] RSP: 002b:00007f62f05a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.792342][ T9471] RAX: ffffffffffffffda RBX: 00007f62f1dd5fa0 RCX: 00007f62f1b4fb19 [ 155.792392][ T9471] RDX: 0000000000000000 RSI: 00000000401c5820 RDI: 0000000000000003 [ 155.792435][ T9471] RBP: 00007f62f1be7b70 R08: 0000000000000000 R09: 0000000000000000 [ 155.792556][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.792600][ T9471] R13: 00007f62f1dd6038 R14: 00007f62f1dd5fa0 R15: 00007ffe52a3a148 [ 155.792672][ T9471] [ 155.899903][ T29] audit: type=1400 audit(1793762152.626:1432): avc: denied { create } for pid=9473 comm="syz.0.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.922875][ T29] audit: type=1400 audit(1793762152.646:1433): avc: denied { connect } for pid=9473 comm="syz.0.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.042065][ T9475] batadv_slave_0: entered promiscuous mode [ 156.044761][ T9472] batadv_slave_0: left promiscuous mode [ 156.065775][ T9481] lo: entered allmulticast mode [ 156.073574][ T9478] lo: left allmulticast mode [ 156.121472][ T29] audit: type=1326 audit(1793762152.846:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.8.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473918fb19 code=0x7ffc0000 [ 156.224732][ T9495] loop8: detected capacity change from 0 to 128 [ 156.463173][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2155'. [ 156.868314][ T9565] loop1: detected capacity change from 0 to 1024 [ 156.868570][ T9565] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.868603][ T9565] EXT4-fs: Ignoring removed oldalloc option [ 156.894902][ T9565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.895008][ T9565] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.896774][ T9565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2175: bg 0: block 112: padding at end of block bitmap is not set [ 156.951929][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.053311][ T9577] loop7: detected capacity change from 0 to 512 [ 157.066355][ T9577] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.2180: inode has both inline data and extents flags [ 157.066388][ T9577] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.066542][ T9577] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2180: couldn't read orphan inode 15 (err -117) [ 157.066569][ T9577] loop7: lost filesystem error report for type 5 error -117 [ 157.067100][ T9577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.070375][ T9577] EXT4-fs (loop7): shut down requested (0) [ 157.110668][ T6615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.211384][ T9583] loop1: detected capacity change from 0 to 1024 [ 157.223118][ T9583] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 157.238797][ T9583] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.2182: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.238837][ T9583] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.239350][ T9583] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 48: comm syz.1.2182: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.239435][ T9583] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.239696][ T9583] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.2182: Failed to acquire dquot type 0 [ 157.239746][ T9583] loop1: lost filesystem error report for type 5 error -117 [ 157.240124][ T9583] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 157.240165][ T9583] loop1: lost filesystem error report for type 5 error -117 [ 157.240405][ T9583] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.2182: mark_inode_dirty error [ 157.240444][ T9583] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.240815][ T9583] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 157.240985][ T9583] EXT4-fs (loop1): 1 orphan inode deleted [ 157.255775][ T317] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.264691][ T317] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 157.266153][ T9583] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm syz.1.2182: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.267280][ T9583] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.2182: Failed to acquire dquot type 0 [ 157.364041][ T3300] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 157.364155][ T3300] loop1: lost filesystem error report for type 5 error -117 [ 157.365591][ T3300] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 157.365655][ T3300] loop1: lost filesystem error report for type 5 error -117 [ 157.367388][ T3300] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 157.367472][ T3300] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.367752][ T3300] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 157.367883][ T3300] loop1: lost filesystem error report for type 5 error -117 [ 157.538669][ T9595] loop0: detected capacity change from 0 to 512 [ 157.547417][ T9595] ext4: Bad value for 'journal_dev' [ 157.646671][ T9589] loop6: detected capacity change from 0 to 1024 [ 157.670363][ T9595] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2198'. [ 157.738200][ T9589] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 157.813884][ T9589] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 2: comm syz.6.2194: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.813993][ T9589] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.822270][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 157.822333][ C1] EXT4-fs (loop6): initial error at time 1793762154: ext4_map_blocks:867: inode 3: block 2 [ 157.822457][ C1] EXT4-fs (loop6): last error at time 1793762154: ext4_map_blocks:867: inode 3: block 2 [ 157.831801][ T9589] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 48: comm syz.6.2194: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.832357][ T9589] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.836996][ T9589] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.2194: Failed to acquire dquot type 0 [ 157.837086][ T9589] loop6: lost filesystem error report for type 5 error -117 [ 157.837669][ T9589] EXT4-fs error (device loop6) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 157.837732][ T9589] loop6: lost filesystem error report for type 5 error -117 [ 157.838382][ T9589] EXT4-fs error (device loop6): ext4_evict_inode:336: inode #11: comm syz.6.2194: mark_inode_dirty error [ 157.838472][ T9589] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.839217][ T9589] EXT4-fs warning (device loop6): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 157.839622][ T9589] EXT4-fs (loop6): 1 orphan inode deleted [ 157.864217][ T12] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.864664][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 0 [ 157.919016][ T9589] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm syz.6.2194: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.920040][ T9589] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.2194: Failed to acquire dquot type 0 [ 158.033554][ T7133] EXT4-fs error (device loop6): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.033590][ T7133] loop6: lost filesystem error report for type 5 error -117 [ 158.033726][ T7133] EXT4-fs error (device loop6) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 158.033745][ T7133] loop6: lost filesystem error report for type 5 error -117 [ 158.035007][ T7133] EXT4-fs error (device loop6): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 158.035043][ T7133] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.035124][ T7133] EXT4-fs error (device loop6): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.035227][ T7133] loop6: lost filesystem error report for type 5 error -117 [ 158.136601][ T9625] lo: entered allmulticast mode [ 158.137265][ T9620] lo: left allmulticast mode [ 158.141400][ T9624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.210451][ T9628] bridge0: port 3(veth0_vlan) entered blocking state [ 158.210494][ T9628] bridge0: port 3(veth0_vlan) entered disabled state [ 158.210683][ T9628] veth0_vlan: entered allmulticast mode [ 158.211086][ T9628] veth0_vlan: left allmulticast mode [ 158.404242][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'. [ 158.455352][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.460581][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.528851][ T9671] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 158.546335][ T9671] EXT4-fs (loop8): 1 truncate cleaned up [ 158.662640][ T9688] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.664556][ T9688] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.758039][ T9699] vcan0: tx address claim with dest, not broadcast [ 158.979103][ T9719] set_capacity_and_notify: 4 callbacks suppressed [ 158.979125][ T9719] loop8: detected capacity change from 0 to 512 [ 159.001246][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 159.013813][ T9719] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.2240: inode has both inline data and extents flags [ 159.013846][ T9719] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.014008][ T9719] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.2240: couldn't read orphan inode 15 (err -117) [ 159.058815][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 159.058835][ T29] audit: type=1400 audit(1793762155.786:1458): avc: denied { write } for pid=9717 comm="syz.8.2240" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.060383][ T9719] EXT4-fs (loop8): shut down requested (0) [ 159.351161][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2259'. [ 159.351183][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2259'. [ 159.471360][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.499243][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.533155][ T9767] lo: entered allmulticast mode [ 159.533688][ T9766] lo: left allmulticast mode [ 159.598480][ T9777] loop7: detected capacity change from 0 to 16384 [ 159.712143][ T3398] net_ratelimit: 124 callbacks suppressed [ 159.712163][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.717173][ T9789] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 159.791794][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.846122][ T9797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.869022][ T9797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.960050][ T9801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.960218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.960382][ T9801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.960608][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.961524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.966586][ T9800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.966800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.032890][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.061640][ T9809] loop7: detected capacity change from 0 to 512 [ 160.065010][ T9809] ext4: Bad value for 'journal_dev' [ 160.121024][ T9809] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2282'. [ 160.215877][ T9825] vcan0: tx address claim with dest, not broadcast [ 160.236662][ T9828] loop7: detected capacity change from 0 to 16384 [ 160.245427][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.264425][ T9829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.436634][ T9847] loop8: detected capacity change from 0 to 512 [ 160.442954][ T9847] ext4: Bad value for 'journal_dev' [ 160.519409][ T9847] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.2303'. [ 160.569388][ T9856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9856 comm=syz.7.2307 [ 160.569432][ T9856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9856 comm=syz.7.2307 [ 160.762152][ T9862] loop8: detected capacity change from 0 to 1024 [ 160.765177][ T9862] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.765934][ T9862] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 160.766166][ T9862] EXT4-fs (loop8): orphan cleanup on readonly fs [ 160.767113][ T9862] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz.8.2311: Invalid inode table block 0 in block_group 0 [ 160.767599][ T9862] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 160.767700][ T9862] EXT4-fs error (device loop8): ext4_quota_write:7509: inode #3: comm syz.8.2311: mark_inode_dirty error [ 160.767728][ T9862] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.767865][ T9862] Quota error (device loop8): write_blk: dquota write failed [ 160.767888][ T9862] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 160.767911][ T9862] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.2311: Failed to acquire dquot type 0 [ 160.768009][ T9862] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz.8.2311: Invalid inode table block 0 in block_group 0 [ 160.768136][ T9862] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 160.768219][ T9862] EXT4-fs error (device loop8): ext4_ext_truncate:4565: inode #15: comm syz.8.2311: mark_inode_dirty error [ 160.768297][ T9862] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz.8.2311: Invalid inode table block 0 in block_group 0 [ 160.768375][ T9862] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 160.768519][ T9862] EXT4-fs error (device loop8) in ext4_orphan_del:304: Corrupt filesystem [ 160.769809][ T9862] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz.8.2311: Invalid inode table block 0 in block_group 0 [ 160.771464][ C0] EXT4-fs (loop8): error count since last fsck: 11 [ 160.771486][ C0] EXT4-fs (loop8): initial error at time 1793762157: __ext4_get_inode_loc:5733 [ 160.771514][ C0] EXT4-fs (loop8): last error at time 1793762157: __ext4_get_inode_loc:5733 [ 160.773547][ T9862] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 160.775105][ T9862] EXT4-fs error (device loop8): ext4_truncate:5538: inode #15: comm syz.8.2311: mark_inode_dirty error [ 160.775343][ T9862] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem [ 160.777319][ T9862] EXT4-fs (loop8): 1 truncate cleaned up [ 160.788195][ T9862] EXT4-fs (loop8): shut down requested (1) [ 161.023165][ T9873] loop0: detected capacity change from 0 to 512 [ 161.024533][ T9873] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 161.046213][ T9873] EXT4-fs (loop0): 1 truncate cleaned up [ 161.061240][ T29] audit: type=1400 audit(1793762157.786:1459): avc: denied { write } for pid=9871 comm="syz.0.2313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.087280][ T29] audit: type=1400 audit(1793762157.816:1460): avc: denied { write } for pid=9871 comm="syz.0.2313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.088263][ T29] audit: type=1400 audit(1793762157.816:1461): avc: denied { write } for pid=9871 comm="syz.0.2313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.090832][ T29] audit: type=1400 audit(1793762157.816:1462): avc: denied { write } for pid=9871 comm="syz.0.2313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.398473][ T9920] loop7: detected capacity change from 0 to 16384 [ 161.646911][ T9927] bridge0: port 3(veth0_vlan) entered blocking state [ 161.646971][ T9927] bridge0: port 3(veth0_vlan) entered disabled state [ 161.647092][ T9927] veth0_vlan: entered allmulticast mode [ 161.647721][ T9927] veth0_vlan: left allmulticast mode [ 161.650128][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2329'. [ 161.740290][ T12] IPVS: stopping estimator thread 0... [ 161.747970][ T12] IPVS: starting estimator thread 0... [ 161.822312][ T9956] loop1: detected capacity change from 0 to 512 [ 161.830613][ T9955] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 161.830639][ T9955] FAT-fs (loop1): Filesystem has been set read-only [ 161.846629][ T9943] IPVS: using max 2208 ests per chain, 110400 per kthread [ 161.921026][ T9966] loop7: detected capacity change from 0 to 16384 [ 162.100481][ T9965] ================================================================== [ 162.100514][ T9965] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 162.100542][ T9965] [ 162.100547][ T9965] read-write to 0xffff888106f77470 of 8 bytes by interrupt on cpu 0: [ 162.100568][ T9965] __xa_clear_mark+0xf5/0x1e0 [ 162.100594][ T9965] __folio_end_writeback+0xe7/0x530 [ 162.100633][ T9965] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 162.100659][ T9965] folio_end_writeback+0x72/0x110 [ 162.100685][ T9965] bh_end_async_write+0x18b/0x230 [ 162.100721][ T9965] bio_endio+0x390/0x570 [ 162.100754][ T9965] blk_update_request+0x33a/0x710 [ 162.100787][ T9965] blk_mq_end_request+0x26/0x50 [ 162.100816][ T9965] lo_complete_rq+0x98/0x130 [ 162.100836][ T9965] blk_done_softirq+0x77/0xb0 [ 162.100863][ T9965] handle_softirqs+0x109/0x310 [ 162.100893][ T9965] __irq_exit_rcu+0x40/0xf0 [ 162.100916][ T9965] sysvec_apic_timer_interrupt+0x74/0x80 [ 162.100947][ T9965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.100977][ T9965] _raw_spin_unlock_irq+0x12/0x30 [ 162.101004][ T9965] shmem_add_to_page_cache+0x3e6/0x5b0 [ 162.101038][ T9965] shmem_get_folio_gfp+0x47b/0xb90 [ 162.101065][ T9965] shmem_write_begin+0xfc/0x1f0 [ 162.101097][ T9965] generic_perform_write+0x186/0x490 [ 162.101126][ T9965] shmem_file_write_iter+0xc5/0xf0 [ 162.101165][ T9965] lo_rw_aio+0x6d4/0x780 [ 162.101186][ T9965] loop_process_work+0x569/0xac0 [ 162.101209][ T9965] loop_workfn+0x31/0x40 [ 162.101230][ T9965] process_scheduled_works+0x53f/0xa20 [ 162.101255][ T9965] worker_thread+0x56c/0x770 [ 162.101275][ T9965] kthread+0x223/0x270 [ 162.101323][ T9965] ret_from_fork+0x146/0x330 [ 162.101363][ T9965] ret_from_fork_asm+0x1a/0x30 [ 162.101390][ T9965] [ 162.101396][ T9965] read to 0xffff888106f77470 of 8 bytes by task 9965 on cpu 1: [ 162.101414][ T9965] xas_find_marked+0x211/0x650 [ 162.101441][ T9965] filemap_get_folios_tag+0xf7/0x400 [ 162.101471][ T9965] filemap_write_and_wait_range+0x1f5/0x370 [ 162.101517][ T9965] bdev_release+0xd4/0x3d0 [ 162.101557][ T9965] blkdev_release+0x15/0x20 [ 162.101575][ T9965] __fput+0x286/0x610 [ 162.101600][ T9965] fput_close_sync+0xad/0x190 [ 162.101632][ T9965] filp_close_sync+0x27/0x40 [ 162.101667][ T9965] __se_sys_close_range+0x915/0xa00 [ 162.101698][ T9965] __x64_sys_close_range+0x43/0x50 [ 162.101730][ T9965] x64_sys_call+0x2198/0x2550 [ 162.101764][ T9965] do_syscall_64+0x112/0x360 [ 162.101796][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.101817][ T9965] [ 162.101822][ T9965] value changed: 0xffffffffffffffc0 -> 0xffffffffffffff00 [ 162.101838][ T9965] [ 162.101843][ T9965] Reported by Kernel Concurrency Sanitizer on: [ 162.101857][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.6.2342 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.101883][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.101896][ T9965] ================================================================== [ 164.911581][ T1047] net_ratelimit: 214 callbacks suppressed [ 164.911600][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.911618][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.242378][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.711877][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.872008][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.951626][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.271640][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.991986][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.311610][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.952245][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.112661][ T1047] net_ratelimit: 6 callbacks suppressed [ 170.112731][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.431577][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.992833][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.151600][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.471647][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.962109][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog