last executing test programs: 1m9.114360696s ago: executing program 2 (id=3): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) capset(&(0x7f0000000f40)={0x20071026}, &(0x7f0000000f80)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) syz_mount_image$ext4(&(0x7f0000000fc0)='ext4\x00', &(0x7f0000001000)='./file0\x00', 0x1000410, &(0x7f0000001040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001080)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001580)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000015c0)={0x2, 0x1, 0xc7, 0x4000f, 0x2, 0xc5, 0x4, 0x0, 0x9d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1m8.95305165s ago: executing program 2 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) 1m8.838215722s ago: executing program 2 (id=7): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10, 0x0}, 0x24060840) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m8.369065254s ago: executing program 2 (id=9): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./proc\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x7f6, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) 1m8.253040827s ago: executing program 2 (id=17): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) r2 = memfd_create(&(0x7f0000000640)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) fcntl$addseals(r2, 0x409, 0x8) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1m7.243897821s ago: executing program 2 (id=40): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f00000001c0)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0x1, 0x9, 0x5, 0x1, 0x32, 'fG\x00', 0x7f, 0x2}) 1m7.204463832s ago: executing program 32 (id=40): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f00000001c0)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0x1, 0x9, 0x5, 0x1, 0x32, 'fG\x00', 0x7f, 0x2}) 54.862252911s ago: executing program 4 (id=399): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x1, 0x200000006c832, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x4a8e) 54.49936282s ago: executing program 4 (id=417): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e64, 0x2eb, @dev={0xfe, 0x80, '\x00', 0xc}, 0xc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) pselect6(0x40, &(0x7f0000000100)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 53.643374431s ago: executing program 4 (id=425): socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) 53.614895001s ago: executing program 4 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 53.112983553s ago: executing program 4 (id=436): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) close(0x4) 52.84437317s ago: executing program 4 (id=452): r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 52.84426212s ago: executing program 33 (id=452): r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 34.208482551s ago: executing program 3 (id=830): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f00000001c0)={[{}]}, 0x82, 0x499, &(0x7f00000008c0)="$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") bind$can_raw(r0, &(0x7f0000000e80), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000ec0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 34.123480023s ago: executing program 3 (id=832): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a40)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a80)=0x17) 33.284079653s ago: executing program 3 (id=841): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x15}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 33.222654835s ago: executing program 3 (id=842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000011c0)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "870600", 0x14, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4}}}}}}}, 0x0) 33.203733886s ago: executing program 3 (id=843): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000019980)="$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") open(&(0x7f0000019f00)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000019f40)=@loop={'/dev/loop', 0x0}, &(0x7f0000019f80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000019fc0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000001a000)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc_mnt\x00', 0x1ff) 33.060195879s ago: executing program 3 (id=844): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8518}, 0x10000, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x58, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x20040010) socket$nl_netfilter(0x10, 0x3, 0xc) 22.994866083s ago: executing program 5 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 22.972511403s ago: executing program 5 (id=1064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 22.956973454s ago: executing program 5 (id=1066): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$unix(0x1, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfe33) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1802, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1, 0x600], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 22.933724464s ago: executing program 5 (id=1069): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@nogrpid}]}, 0x1, 0x513, &(0x7f0000001000)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) 22.843651217s ago: executing program 5 (id=1072): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x210000, &(0x7f0000000780), 0xfc, 0x56f, &(0x7f0000001040)="$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") r0 = open(&(0x7f00000015c0)='./file1\x00', 0x4827e, 0x20) r1 = open(&(0x7f0000001600)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000001640)=[{&(0x7f0000001680)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x129042, 0x15) sendfile(r2, r0, 0x0, 0xd64e) 22.649479241s ago: executing program 5 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006900)='.\x00', &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) 22.637699692s ago: executing program 34 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006900)='.\x00', &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) 18.032551733s ago: executing program 35 (id=844): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8518}, 0x10000, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x58, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x20040010) socket$nl_netfilter(0x10, 0x3, 0xc) 1.918048063s ago: executing program 8 (id=1353): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1.850169295s ago: executing program 8 (id=1356): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x6, 0x4, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.807957816s ago: executing program 6 (id=1358): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000340)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000380)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.733324468s ago: executing program 0 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000700)='7', 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) 1.698811799s ago: executing program 0 (id=1361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = getpid() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x81, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x0, 0xc}, 0x8000, 0x0, 0x0, 0x8, 0x3fe, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 965.319127ms ago: executing program 8 (id=1362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c01000010000104000000000000000000000000000000000000000000000001faff00000000000000000000000000f311341231000000000a00000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d233000000fe8000000000000000000000000000aaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d6163287368613129"], 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97) 924.094457ms ago: executing program 8 (id=1365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 892.607688ms ago: executing program 8 (id=1366): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x1) 884.526858ms ago: executing program 6 (id=1368): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f00000005c0)="f3", 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 856.338929ms ago: executing program 0 (id=1370): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xa0, 0xfffffea7) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 814.09768ms ago: executing program 6 (id=1372): write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0xf, {"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", 0x1000}}, 0x1006) 744.609852ms ago: executing program 7 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x16, &(0x7f00000000c0)={0xa, 0x5000, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 657.088404ms ago: executing program 6 (id=1375): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 643.422154ms ago: executing program 1 (id=1376): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x6000000d}) close_range(r0, 0xffffffffffffffff, 0x0) 613.182015ms ago: executing program 7 (id=1377): r0 = inotify_init1(0x800) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 585.447725ms ago: executing program 7 (id=1378): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x8, 0x120, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000040f0000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000640), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e40)={r3, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000002ec0)="b90103606989068c3c2700406558009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000002f00)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000003040)}, 0x28) 566.741896ms ago: executing program 1 (id=1379): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x28020480) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 531.530077ms ago: executing program 6 (id=1380): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000840)='\t', 0x1}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x24004880}, 0x4000080) 433.478249ms ago: executing program 6 (id=1381): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) 368.917151ms ago: executing program 7 (id=1382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/140, 0x8c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 266.521243ms ago: executing program 1 (id=1383): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") open(0x0, 0x24842, 0x1a6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be04fd05060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 220.607424ms ago: executing program 1 (id=1384): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 187.013615ms ago: executing program 1 (id=1385): perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0) socket$xdp(0x2c, 0x3, 0x0) 140.675346ms ago: executing program 7 (id=1386): r0 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xc9f0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 137.940826ms ago: executing program 0 (id=1387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1b, 0x4, 0xb, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x5, 0xf989, "fa"}, @timestamp={0x8, 0xa, 0x800, 0x7f}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x5, 0x3}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0x6, "39cda44d"}, @sack={0x5, 0xa, [0x5, 0x3]}, @timestamp={0x8, 0xa, 0xd9a6, 0x9}, @mss={0x2, 0x4, 0x6}, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 119.557057ms ago: executing program 7 (id=1388): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x9f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4t\xca\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\xf4\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xfe\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000700)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000740)='4', 0x1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 118.363047ms ago: executing program 1 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000200)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r1, &(0x7f0000000280), 0x1000) 30.398169ms ago: executing program 8 (id=1389): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) fcntl$setstatus(r2, 0x4, 0x2400) write(r0, &(0x7f0000000040), 0xffffff4a) 27.819099ms ago: executing program 0 (id=1400): socketpair(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r2, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001780)=0x100000b3, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001740)={r3, &(0x7f0000001780), 0x0}, 0x20) 0s ago: executing program 0 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/mapper/control\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x6000000d}) kernel console output (not intermixed with test programs): 2151815.275:2388): avc: denied { write } for pid=5749 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.201080][ T5710] loop3: detected capacity change from 0 to 764 [ 67.262418][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.280590][ T5710] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.451280][ T29] audit: type=1326 audit(1792151815.565:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.0.774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 67.495087][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 67.656542][ T5790] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 67.714572][ T5790] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 67.715049][ T5790] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 67.722450][ T5790] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 67.722497][ T5790] pci 0000:00:05.0: vgaarb: bridge control possible [ 67.722512][ T5790] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 67.723175][ T5790] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 67.883659][ T5804] loop1: detected capacity change from 0 to 164 [ 67.886112][ T5804] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 67.886708][ T5804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 67.945196][ T5804] team0 (unregistering): Port device team_slave_0 removed [ 67.950612][ T5804] team0 (unregistering): Port device team_slave_1 removed [ 68.001492][ T5810] syzkaller1: entered allmulticast mode [ 68.885614][ T5804] syz.1.791 (5804) used greatest stack depth: 9792 bytes left [ 69.075787][ T5819] bond3: entered allmulticast mode [ 69.078685][ T5819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.107645][ T5851] batadv_slave_1: entered promiscuous mode [ 69.108058][ T5850] batadv_slave_1: left promiscuous mode [ 69.350039][ T5869] FAULT_INJECTION: forcing a failure. [ 69.350039][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 69.350158][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.6.817 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.350191][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.350209][ T5869] Call Trace: [ 69.350217][ T5869] [ 69.350225][ T5869] __dump_stack+0x1d/0x30 [ 69.350255][ T5869] dump_stack_lvl+0x95/0xd0 [ 69.350277][ T5869] dump_stack+0x15/0x1b [ 69.350312][ T5869] should_fail_ex+0x262/0x280 [ 69.350346][ T5869] should_failslab+0x8c/0xb0 [ 69.350382][ T5869] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 69.350481][ T5869] ? security_context_to_sid_core+0x62/0x420 [ 69.350526][ T5869] ? security_context_to_sid_core+0x62/0x420 [ 69.350556][ T5869] kmemdup_nul+0x36/0xc0 [ 69.350589][ T5869] security_context_to_sid_core+0x62/0x420 [ 69.350622][ T5869] security_context_to_sid+0x2e/0x40 [ 69.350670][ T5869] selinux_lsm_setattr+0x2cc/0x650 [ 69.350697][ T5869] selinux_setselfattr+0x33/0x50 [ 69.350731][ T5869] security_setselfattr+0x22a/0x260 [ 69.350841][ T5869] __x64_sys_lsm_set_self_attr+0xa0/0xe0 [ 69.350873][ T5869] x64_sys_call+0x1de6/0x2550 [ 69.350922][ T5869] do_syscall_64+0x112/0x360 [ 69.350961][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.351047][ T5869] RIP: 0033:0x7fc9c922e559 [ 69.351069][ T5869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.351092][ T5869] RSP: 002b:00007fc9c7c87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 69.351117][ T5869] RAX: ffffffffffffffda RBX: 00007fc9c94b5fa0 RCX: 00007fc9c922e559 [ 69.351187][ T5869] RDX: 0000000000000021 RSI: 0000200000000640 RDI: 0000000000000066 [ 69.351204][ T5869] RBP: 00007fc9c92c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 69.351220][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.351235][ T5869] R13: 00007fc9c94b6038 R14: 00007fc9c94b5fa0 R15: 00007fff49f29c18 [ 69.351271][ T5869] [ 69.661142][ T5882] bond4: entered allmulticast mode [ 69.663412][ T5882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 69.741646][ T5898] loop3: detected capacity change from 0 to 512 [ 69.750840][ T5898] EXT4-fs (loop3): 1 truncate cleaned up [ 69.751582][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.779695][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.085169][ T5926] bond3: entered allmulticast mode [ 70.085639][ T5926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.750441][ T5938] loop3: detected capacity change from 0 to 1024 [ 70.759905][ T5938] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.781667][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.829097][ T5938] loop3: detected capacity change from 1024 to 64 [ 70.840080][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.840326][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.851687][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.851923][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.852207][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.852386][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.852611][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.852854][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.853136][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 70.853371][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 71.055485][ T5930] syz.1.840 (5930) used greatest stack depth: 9552 bytes left [ 71.905176][ T5825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.909299][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 71.913906][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 71.917126][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 71.920665][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 71.924525][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 71.988615][ T5952] FAULT_INJECTION: forcing a failure. [ 71.988615][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 71.988770][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.6.850 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.988794][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.988809][ T5952] Call Trace: [ 71.988816][ T5952] [ 71.988869][ T5952] __dump_stack+0x1d/0x30 [ 71.988894][ T5952] dump_stack_lvl+0x95/0xd0 [ 71.988972][ T5952] dump_stack+0x15/0x1b [ 71.988995][ T5952] should_fail_ex+0x262/0x280 [ 71.989052][ T5952] ? sctp_auth_shkey_create+0x65/0x110 [ 71.989119][ T5952] should_failslab+0x8c/0xb0 [ 71.989157][ T5952] __kmalloc_cache_noprof+0x7a/0x400 [ 71.989196][ T5952] ? sctp_auth_shkey_create+0x65/0x110 [ 71.989267][ T5952] sctp_auth_shkey_create+0x65/0x110 [ 71.989457][ T5952] sctp_endpoint_new+0x2cc/0x560 [ 71.989488][ T5952] sctp_init_sock+0x619/0x6f0 [ 71.989511][ T5952] sctp_v6_init_sock+0x16/0x60 [ 71.989611][ T5952] inet6_create+0x7f2/0x860 [ 71.989644][ T5952] __sock_create+0x2e5/0x580 [ 71.989681][ T5952] __sys_socket+0xaf/0x180 [ 71.989771][ T5952] __x64_sys_socket+0x3f/0x50 [ 71.989903][ T5952] x64_sys_call+0x246e/0x2550 [ 71.990000][ T5952] do_syscall_64+0x112/0x360 [ 71.990027][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.990050][ T5952] RIP: 0033:0x7fc9c922e559 [ 71.990131][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.990152][ T5952] RSP: 002b:00007fc9c7c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 71.990174][ T5952] RAX: ffffffffffffffda RBX: 00007fc9c94b5fa0 RCX: 00007fc9c922e559 [ 71.990188][ T5952] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 71.990203][ T5952] RBP: 00007fc9c92c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 71.990216][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.990228][ T5952] R13: 00007fc9c94b6038 R14: 00007fc9c94b5fa0 R15: 00007fff49f29c18 [ 71.990246][ T5952] [ 72.052916][ T5960] FAULT_INJECTION: forcing a failure. [ 72.052916][ T5960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.052947][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.5.852 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.053047][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.053060][ T5960] Call Trace: [ 72.053068][ T5960] [ 72.053076][ T5960] __dump_stack+0x1d/0x30 [ 72.053167][ T5960] dump_stack_lvl+0x95/0xd0 [ 72.053261][ T5960] dump_stack+0x15/0x1b [ 72.053295][ T5960] should_fail_ex+0x262/0x280 [ 72.053325][ T5960] should_fail+0xb/0x20 [ 72.053352][ T5960] get_futex_key+0x12d/0xb10 [ 72.053472][ T5960] futex_wake+0x89/0x400 [ 72.053525][ T5960] do_futex+0x3f8/0x460 [ 72.053560][ T5960] __se_sys_futex+0x2f6/0x370 [ 72.053602][ T5960] __x64_sys_futex+0x78/0x90 [ 72.053637][ T5960] x64_sys_call+0x22e2/0x2550 [ 72.053706][ T5960] do_syscall_64+0x112/0x360 [ 72.053737][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.053793][ T5960] RIP: 0033:0x7fe5562ee559 [ 72.053810][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.053906][ T5960] RSP: 002b:00007fe554d470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.053929][ T5960] RAX: ffffffffffffffda RBX: 00007fe556575fa8 RCX: 00007fe5562ee559 [ 72.053989][ T5960] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe556575fac [ 72.054006][ T5960] RBP: 00007fe556575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 72.054022][ T5960] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.054044][ T5960] R13: 00007fe556576038 R14: 00007ffc2eb458b0 R15: 00007ffc2eb45998 [ 72.054066][ T5960] [ 72.120110][ T5964] ip_tables: iptables: counters copy to user failed while replacing table [ 72.147131][ T5968] ip_tables: iptables: counters copy to user failed while replacing table [ 72.252096][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.252295][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.266027][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.266063][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.266249][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.266275][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.266481][ T5974] bridge0: entered promiscuous mode [ 72.266553][ T5974] bridge0: entered allmulticast mode [ 72.324247][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 72.324262][ T29] audit: type=1326 audit(1792151820.435:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5562ee559 code=0x7ffc0000 [ 72.325003][ T29] audit: type=1326 audit(1792151820.435:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5562ee559 code=0x7ffc0000 [ 72.325138][ T29] audit: type=1326 audit(1792151820.435:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5562ee559 code=0x7ffc0000 [ 72.327677][ T29] audit: type=1326 audit(1792151820.435:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe5562ee559 code=0x7ffc0000 [ 72.371562][ T5980] loop6: detected capacity change from 0 to 1024 [ 72.377833][ T29] audit: type=1326 audit(1792151820.485:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.384073][ T29] audit: type=1326 audit(1792151820.495:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.387463][ T29] audit: type=1326 audit(1792151820.495:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.390933][ T5980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.394614][ T29] audit: type=1326 audit(1792151820.505:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.400300][ T29] audit: type=1326 audit(1792151820.515:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.402605][ T29] audit: type=1326 audit(1792151820.515:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.5.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5562aed8e code=0x7ffc0000 [ 72.549544][ T5989] xt_NFQUEUE: number of total queues is 0 [ 72.729463][ T5993] FAULT_INJECTION: forcing a failure. [ 72.729463][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 72.729494][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.5.866 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.729522][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.729536][ T5993] Call Trace: [ 72.729542][ T5993] [ 72.729550][ T5993] __dump_stack+0x1d/0x30 [ 72.729577][ T5993] dump_stack_lvl+0x95/0xd0 [ 72.729655][ T5993] dump_stack+0x15/0x1b [ 72.729679][ T5993] should_fail_ex+0x262/0x280 [ 72.729713][ T5993] should_failslab+0x8c/0xb0 [ 72.729797][ T5993] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 72.729837][ T5993] ? nf_conntrack_pernet_init+0x8b/0x5d0 [ 72.729906][ T5993] ? nf_conntrack_pernet_init+0x8b/0x5d0 [ 72.729988][ T5993] ? ops_init+0x4b/0x2e0 [ 72.730008][ T5993] kmemdup_noprof+0x2b/0x70 [ 72.730037][ T5993] nf_conntrack_pernet_init+0x8b/0x5d0 [ 72.730075][ T5993] ops_init+0x22a/0x2e0 [ 72.730097][ T5993] setup_net+0x9f/0x230 [ 72.730144][ T5993] copy_net_ns+0x333/0x490 [ 72.730249][ T5993] create_new_namespaces+0x1f6/0x420 [ 72.730285][ T5993] unshare_nsproxy_namespaces+0x115/0x150 [ 72.730322][ T5993] ksys_unshare+0x3fd/0x6f0 [ 72.730416][ T5993] __x64_sys_unshare+0x1f/0x30 [ 72.730446][ T5993] x64_sys_call+0x1e33/0x2550 [ 72.730474][ T5993] do_syscall_64+0x112/0x360 [ 72.730601][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.730621][ T5993] RIP: 0033:0x7fe5562ee559 [ 72.730638][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.730658][ T5993] RSP: 002b:00007fe554d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 72.730680][ T5993] RAX: ffffffffffffffda RBX: 00007fe556576090 RCX: 00007fe5562ee559 [ 72.730696][ T5993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 72.730739][ T5993] RBP: 00007fe5563858b0 R08: 0000000000000000 R09: 0000000000000000 [ 72.730754][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.730767][ T5993] R13: 00007fe556576128 R14: 00007fe556576090 R15: 00007ffc2eb45998 [ 72.730827][ T5993] [ 72.899287][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.943725][ T5994] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 73.003297][ T6000] FAULT_INJECTION: forcing a failure. [ 73.003297][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 73.003330][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.0.870 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.003364][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.003457][ T6000] Call Trace: [ 73.003463][ T6000] [ 73.003470][ T6000] __dump_stack+0x1d/0x30 [ 73.003495][ T6000] dump_stack_lvl+0x95/0xd0 [ 73.003555][ T6000] dump_stack+0x15/0x1b [ 73.003650][ T6000] should_fail_ex+0x262/0x280 [ 73.003691][ T6000] ? bm_register_write+0x87/0xb80 [ 73.003714][ T6000] should_failslab+0x8c/0xb0 [ 73.003751][ T6000] __kmalloc_noprof+0xd0/0x4d0 [ 73.003795][ T6000] ? futex_wait+0x18f/0x1c0 [ 73.003816][ T6000] ? bm_register_write+0x87/0xb80 [ 73.003843][ T6000] bm_register_write+0x87/0xb80 [ 73.003873][ T6000] ? __pfx_bm_register_write+0x10/0x10 [ 73.003899][ T6000] vfs_write+0x254/0x9a0 [ 73.003934][ T6000] ? __fget_files+0x184/0x1c0 [ 73.004013][ T6000] ? mutex_lock+0x57/0x90 [ 73.004035][ T6000] ksys_write+0xdc/0x1a0 [ 73.004068][ T6000] __x64_sys_write+0x40/0x50 [ 73.004139][ T6000] x64_sys_call+0x154e/0x2550 [ 73.004184][ T6000] do_syscall_64+0x112/0x360 [ 73.004214][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.004239][ T6000] RIP: 0033:0x7f0a7193e559 [ 73.004314][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.004334][ T6000] RSP: 002b:00007f0a70397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.004362][ T6000] RAX: ffffffffffffffda RBX: 00007f0a71bc5fa0 RCX: 00007f0a7193e559 [ 73.004379][ T6000] RDX: 0000000000000112 RSI: 00002000000003c0 RDI: 0000000000000003 [ 73.004395][ T6000] RBP: 00007f0a719d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.004468][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.004482][ T6000] R13: 00007f0a71bc6038 R14: 00007f0a71bc5fa0 R15: 00007ffebc6a8988 [ 73.004511][ T6000] [ 73.019695][ T6002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.871'. [ 73.257152][ T6019] SELinux: ebitmap: truncated map [ 73.257168][ T6019] SELinux: invalid class [ 73.257451][ T6019] SELinux: failed to load policy [ 73.345993][ T6037] syz_tun: entered allmulticast mode [ 73.351772][ T6037] dvmrp6: entered allmulticast mode [ 73.358725][ T6037] dvmrp6: left allmulticast mode [ 73.411318][ T6036] syz_tun: left allmulticast mode [ 73.562524][ T6051] loop5: detected capacity change from 0 to 512 [ 73.566304][ T6051] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 73.566331][ T6051] FAT-fs (loop5): Filesystem has been set read-only [ 73.608923][ T6053] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 73.608936][ T6050] SELinux: ebitmap: truncated map [ 73.609002][ T6050] SELinux: invalid class [ 73.626900][ T6053] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 73.627375][ T6053] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 73.633697][ T6053] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 73.633721][ T6053] pci 0000:00:05.0: vgaarb: bridge control possible [ 73.633787][ T6053] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 73.635744][ T6053] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 73.650864][ T6050] SELinux: failed to load policy [ 74.080389][ T6077] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 74.092037][ T6079] ip_tables: iptables: counters copy to user failed while replacing table [ 74.115154][ T6077] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 74.115495][ T6077] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 74.117454][ T6077] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 74.117476][ T6077] pci 0000:00:05.0: vgaarb: bridge control possible [ 74.117490][ T6077] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 74.118244][ T6077] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 74.465157][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.465304][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.525043][ T6106] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 74.555243][ T6106] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 74.555677][ T6106] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 74.557946][ T6106] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 74.558022][ T6106] pci 0000:00:05.0: vgaarb: bridge control possible [ 74.558035][ T6106] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 74.558671][ T6106] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 74.615467][ T6108] SELinux: failed to load policy [ 75.600206][ T6137] FAULT_INJECTION: forcing a failure. [ 75.600206][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 75.600248][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.600326][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.600347][ T6137] Call Trace: [ 75.600356][ T6137] [ 75.600444][ T6137] __dump_stack+0x1d/0x30 [ 75.600485][ T6137] dump_stack_lvl+0x95/0xd0 [ 75.600509][ T6137] dump_stack+0x15/0x1b [ 75.600560][ T6137] should_fail_ex+0x262/0x280 [ 75.600602][ T6137] ? __register_sysctl_table+0x7a0/0xbe0 [ 75.600627][ T6137] should_failslab+0x8c/0xb0 [ 75.600660][ T6137] __kmalloc_noprof+0xd0/0x4d0 [ 75.600773][ T6137] ? drop_sysctl_table+0x57/0x270 [ 75.600797][ T6137] ? __register_sysctl_table+0x7a0/0xbe0 [ 75.600829][ T6137] __register_sysctl_table+0x7a0/0xbe0 [ 75.600920][ T6137] setup_mq_sysctls+0x398/0x3e0 [ 75.600957][ T6137] copy_ipcs+0x28b/0x460 [ 75.601055][ T6137] create_new_namespaces+0x121/0x420 [ 75.601147][ T6137] unshare_nsproxy_namespaces+0x115/0x150 [ 75.601253][ T6137] ksys_unshare+0x3fd/0x6f0 [ 75.601286][ T6137] __x64_sys_unshare+0x1f/0x30 [ 75.601312][ T6137] x64_sys_call+0x1e33/0x2550 [ 75.601385][ T6137] do_syscall_64+0x112/0x360 [ 75.601421][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.601447][ T6137] RIP: 0033:0x7fd430dde559 [ 75.601465][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.601528][ T6137] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 75.601547][ T6137] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 75.601564][ T6137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 75.601580][ T6137] RBP: 00007fd430e758b0 R08: 0000000000000000 R09: 0000000000000000 [ 75.601676][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.601762][ T6137] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 75.601782][ T6137] [ 75.601813][ T6137] sysctl could not get directory: /fs/mqueue -12 [ 75.799207][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 75.799207][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 75.799347][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 75.799364][ T5939] EXT4-fs error (device loop3): kmmpd:181: comm kmmpd-loop3: Error writing to MMP block [ 75.890443][ T6143] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 75.916210][ T6143] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 75.916610][ T6143] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 75.937209][ T6143] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 75.937239][ T6143] pci 0000:00:05.0: vgaarb: bridge control possible [ 75.937262][ T6143] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 75.937945][ T6143] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 76.001749][ T6154] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 76.074428][ T6158] syz_tun: entered allmulticast mode [ 76.082170][ T6156] syz_tun: left allmulticast mode [ 76.083549][ T6160] loop0: detected capacity change from 0 to 1024 [ 76.114142][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.383307][ T6180] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 76.411031][ T6180] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 76.411494][ T6180] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 76.413073][ T6180] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 76.413095][ T6180] pci 0000:00:05.0: vgaarb: bridge control possible [ 76.413111][ T6180] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 76.413578][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.413709][ T6180] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 76.630855][ T6203] FAULT_INJECTION: forcing a failure. [ 76.630855][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 76.630884][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.630900][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.630915][ T6203] Call Trace: [ 76.630920][ T6203] [ 76.630951][ T6203] __dump_stack+0x1d/0x30 [ 76.630968][ T6203] dump_stack_lvl+0x95/0xd0 [ 76.630990][ T6203] dump_stack+0x15/0x1b [ 76.631002][ T6203] should_fail_ex+0x262/0x280 [ 76.631019][ T6203] should_failslab+0x8c/0xb0 [ 76.631094][ T6203] __kvmalloc_node_noprof+0x168/0x5c0 [ 76.631110][ T6203] ? nf_hook_entries_grow+0x1cb/0x460 [ 76.631128][ T6203] ? nf_hook_entries_grow+0x1cb/0x460 [ 76.631144][ T6203] nf_hook_entries_grow+0x1cb/0x460 [ 76.631161][ T6203] __nf_register_net_hook+0x187/0x480 [ 76.631236][ T6203] ? __account_obj_stock+0x43d/0x720 [ 76.631253][ T6203] nf_register_net_hook+0x88/0x130 [ 76.631268][ T6203] nf_register_net_hooks+0x44/0x150 [ 76.631302][ T6203] nf_defrag_ipv4_enable+0x6e/0xc0 [ 76.631316][ T6203] nf_ct_netns_do_get+0x13c/0x3a0 [ 76.631397][ T6203] nf_ct_netns_get+0xf1/0x2c0 [ 76.631474][ T6203] synproxy_tg4_check+0xca/0x160 [ 76.631494][ T6203] xt_check_target+0x3c2/0x5d0 [ 76.631595][ T6203] ? mutex_unlock+0x4e/0x90 [ 76.631613][ T6203] ? xt_find_target+0x204/0x240 [ 76.631626][ T6203] translate_table+0xd32/0x1120 [ 76.631647][ T6203] do_ipt_set_ctl+0x735/0x970 [ 76.631736][ T6203] ? _raw_spin_lock_bh+0x57/0xb0 [ 76.631756][ T6203] nf_setsockopt+0x199/0x1b0 [ 76.631780][ T6203] ip_setsockopt+0x102/0x110 [ 76.631833][ T6203] tcp_setsockopt+0x98/0xb0 [ 76.631851][ T6203] sock_common_setsockopt+0x69/0x80 [ 76.631937][ T6203] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.632005][ T6203] __sys_setsockopt+0x184/0x200 [ 76.632175][ T6203] __x64_sys_setsockopt+0x64/0x80 [ 76.632190][ T6203] x64_sys_call+0x248f/0x2550 [ 76.632206][ T6203] do_syscall_64+0x112/0x360 [ 76.632222][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.632281][ T6203] RIP: 0033:0x7f0a7193e559 [ 76.632295][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.632306][ T6203] RSP: 002b:00007f0a70397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.632319][ T6203] RAX: ffffffffffffffda RBX: 00007f0a71bc5fa0 RCX: 00007f0a7193e559 [ 76.632422][ T6203] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 76.632430][ T6203] RBP: 00007f0a719d58b0 R08: 00000000000002c0 R09: 0000000000000000 [ 76.632506][ T6203] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.632515][ T6203] R13: 00007f0a71bc6038 R14: 00007f0a71bc5fa0 R15: 00007ffebc6a8988 [ 76.632526][ T6203] [ 77.125274][ T6227] tipc: Started in network mode [ 77.125310][ T6227] tipc: Node identity ac1414aa, cluster identity 4711 [ 77.125474][ T6227] tipc: New replicast peer: 172.20.20.187 [ 77.125690][ T6227] tipc: Enabled bearer , priority 10 [ 77.329335][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 77.329351][ T29] audit: type=1326 audit(1792151825.445:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.330965][ T29] audit: type=1326 audit(1792151825.445:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.332587][ T29] audit: type=1326 audit(1792151825.445:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.334268][ T29] audit: type=1326 audit(1792151825.445:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.335819][ T29] audit: type=1326 audit(1792151825.445:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.337375][ T29] audit: type=1400 audit(1792151825.445:2985): avc: denied { create } for pid=6251 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.337400][ T29] audit: type=1326 audit(1792151825.445:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.338936][ T29] audit: type=1326 audit(1792151825.445:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9c91eed8e code=0x7ffc0000 [ 77.345354][ T29] audit: type=1400 audit(1792151825.455:2988): avc: denied { bind } for pid=6251 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.345457][ T29] audit: type=1400 audit(1792151825.455:2989): avc: denied { read } for pid=6251 comm="syz.1.982" path="socket:[13139]" dev="sockfs" ino=13139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.496114][ T6252] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 77.593487][ T6262] netlink: 'syz.5.984': attribute type 6 has an invalid length. [ 77.821467][ T6278] FAULT_INJECTION: forcing a failure. [ 77.821467][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 77.821497][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.6.992 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.821632][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.821644][ T6278] Call Trace: [ 77.821650][ T6278] [ 77.821656][ T6278] __dump_stack+0x1d/0x30 [ 77.821680][ T6278] dump_stack_lvl+0x95/0xd0 [ 77.821777][ T6278] dump_stack+0x15/0x1b [ 77.821802][ T6278] should_fail_ex+0x262/0x280 [ 77.821834][ T6278] ? __proc_create+0x3f1/0x6b0 [ 77.821868][ T6278] should_failslab+0x8c/0xb0 [ 77.821995][ T6278] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 77.822034][ T6278] ? __proc_create+0x3f1/0x6b0 [ 77.822086][ T6278] __proc_create+0x3f1/0x6b0 [ 77.822136][ T6278] proc_create_reg+0x87/0xe0 [ 77.822186][ T6278] proc_create_net_data+0x59/0x100 [ 77.822250][ T6278] nfnl_log_net_init+0xa4/0x140 [ 77.822282][ T6278] ops_init+0x22a/0x2e0 [ 77.822305][ T6278] setup_net+0x9f/0x230 [ 77.822417][ T6278] copy_net_ns+0x333/0x490 [ 77.822455][ T6278] create_new_namespaces+0x1f6/0x420 [ 77.822495][ T6278] unshare_nsproxy_namespaces+0x115/0x150 [ 77.822566][ T6278] ksys_unshare+0x3fd/0x6f0 [ 77.822601][ T6278] __x64_sys_unshare+0x1f/0x30 [ 77.822688][ T6278] x64_sys_call+0x1e33/0x2550 [ 77.822752][ T6278] do_syscall_64+0x112/0x360 [ 77.822835][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.822859][ T6278] RIP: 0033:0x7fc9c922e559 [ 77.822878][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.822965][ T6278] RSP: 002b:00007fc9c7c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.822989][ T6278] RAX: ffffffffffffffda RBX: 00007fc9c94b5fa0 RCX: 00007fc9c922e559 [ 77.823006][ T6278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 77.823022][ T6278] RBP: 00007fc9c92c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 77.823038][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.823132][ T6278] R13: 00007fc9c94b6038 R14: 00007fc9c94b5fa0 R15: 00007fff49f29c18 [ 77.823153][ T6278] [ 78.119119][ T24] tipc: Node number set to 2886997162 [ 78.175575][ T6293] sd 0:0:1:0: PR command failed: 1026 [ 78.175595][ T6293] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 78.175635][ T6293] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 78.227317][ T6300] loop1: detected capacity change from 0 to 512 [ 78.583795][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 78.915317][ T6320] loop6: detected capacity change from 0 to 512 [ 79.293275][ T6347] loop6: detected capacity change from 0 to 512 [ 79.293642][ T6347] EXT4-fs: Ignoring removed i_version option [ 79.296285][ T6347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.306642][ T6347] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 79.306685][ T6347] loop6: lost filesystem error report for type 5 error -117 [ 79.306938][ T6347] EXT4-fs (loop6): 2 truncates cleaned up [ 79.307449][ T6347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.310844][ T6347] EXT4-fs error (device loop6): ext4_get_parent:1834: inode #11: comm syz.6.1019: bad parent inode number: 3 [ 79.375733][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 79.411482][ T6363] FAULT_INJECTION: forcing a failure. [ 79.411482][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.411516][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.411548][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.411562][ T6363] Call Trace: [ 79.411570][ T6363] [ 79.411579][ T6363] __dump_stack+0x1d/0x30 [ 79.411615][ T6363] dump_stack_lvl+0x95/0xd0 [ 79.411681][ T6363] dump_stack+0x15/0x1b [ 79.411704][ T6363] should_fail_ex+0x262/0x280 [ 79.411735][ T6363] should_fail+0xb/0x20 [ 79.411762][ T6363] should_fail_usercopy+0x1a/0x20 [ 79.411811][ T6363] _copy_to_user+0x20/0xa0 [ 79.411915][ T6363] bpf_log_attr_finalize+0xa7/0x100 [ 79.411941][ T6363] btf_new_fd+0x34a/0x6a0 [ 79.411964][ T6363] bpf_btf_load+0x116/0x130 [ 79.412062][ T6363] __sys_bpf+0xbce/0xc30 [ 79.412095][ T6363] ? do_futex+0x3e0/0x460 [ 79.412200][ T6363] __x64_sys_bpf+0x69/0x80 [ 79.412265][ T6363] x64_sys_call+0xf26/0x2550 [ 79.412327][ T6363] do_syscall_64+0x112/0x360 [ 79.412358][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.412408][ T6363] RIP: 0033:0x7fe5562ee559 [ 79.412427][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.412448][ T6363] RSP: 002b:00007fe554d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.412471][ T6363] RAX: ffffffffffffffda RBX: 00007fe556575fa0 RCX: 00007fe5562ee559 [ 79.412567][ T6363] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 79.412580][ T6363] RBP: 00007fe5563858b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.412595][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.412616][ T6363] R13: 00007fe556576038 R14: 00007fe556575fa0 R15: 00007ffc2eb45998 [ 79.412634][ T6363] [ 79.456908][ T6369] ip_tables: iptables: counters copy to user failed while replacing table [ 79.533416][ T6371] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 79.551530][ T6371] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 79.563582][ T6374] ip6gre1: entered promiscuous mode [ 79.563600][ T6374] ip6gre1: entered allmulticast mode [ 79.597305][ T6376] FAULT_INJECTION: forcing a failure. [ 79.597305][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 79.597374][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.597470][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.597502][ T6376] Call Trace: [ 79.597509][ T6376] [ 79.597566][ T6376] __dump_stack+0x1d/0x30 [ 79.597593][ T6376] dump_stack_lvl+0x95/0xd0 [ 79.597621][ T6376] dump_stack+0x15/0x1b [ 79.597722][ T6376] should_fail_ex+0x262/0x280 [ 79.597764][ T6376] ? __request_module+0x1c4/0x3c0 [ 79.597789][ T6376] should_failslab+0x8c/0xb0 [ 79.597827][ T6376] __kmalloc_cache_noprof+0x7a/0x400 [ 79.597872][ T6376] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 79.597968][ T6376] ? __request_module+0x1c4/0x3c0 [ 79.597994][ T6376] ? dev_load+0xa3/0xc0 [ 79.598024][ T6376] __request_module+0x1c4/0x3c0 [ 79.598092][ T6376] dev_load+0xa3/0xc0 [ 79.598122][ T6376] devinet_ioctl+0x8c/0xfa0 [ 79.598152][ T6376] inet_ioctl+0x27c/0x3a0 [ 79.598194][ T6376] packet_ioctl+0x248/0x280 [ 79.598227][ T6376] sock_do_ioctl+0x73/0x230 [ 79.598330][ T6376] sock_ioctl+0x439/0x610 [ 79.598380][ T6376] ? __pfx_sock_ioctl+0x10/0x10 [ 79.598441][ T6376] __se_sys_ioctl+0xce/0x140 [ 79.598552][ T6376] __x64_sys_ioctl+0x43/0x50 [ 79.598660][ T6376] x64_sys_call+0x239d/0x2550 [ 79.598689][ T6376] do_syscall_64+0x112/0x360 [ 79.598759][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.598784][ T6376] RIP: 0033:0x7fd430dde559 [ 79.598802][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.598876][ T6376] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.598903][ T6376] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 79.598920][ T6376] RDX: 0000200000000180 RSI: 000000000000891b RDI: 0000000000000003 [ 79.598936][ T6376] RBP: 00007fd430e758b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.598987][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.599001][ T6376] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 79.599022][ T6376] [ 79.844854][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.882959][ T6387] loop0: detected capacity change from 0 to 512 [ 79.898441][ T6384] loop5: detected capacity change from 0 to 512 [ 79.940265][ T6384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.940723][ T6384] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.977583][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.015230][ T6399] FAULT_INJECTION: forcing a failure. [ 80.015230][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 80.015262][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.1.1041 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.015291][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.015306][ T6399] Call Trace: [ 80.015313][ T6399] [ 80.015320][ T6399] __dump_stack+0x1d/0x30 [ 80.015413][ T6399] dump_stack_lvl+0x95/0xd0 [ 80.015434][ T6399] dump_stack+0x15/0x1b [ 80.015455][ T6399] should_fail_ex+0x262/0x280 [ 80.015490][ T6399] ? ops_init+0x4b/0x2e0 [ 80.015511][ T6399] should_failslab+0x8c/0xb0 [ 80.015549][ T6399] __kmalloc_noprof+0xd0/0x4d0 [ 80.015651][ T6399] ? ops_init+0x4b/0x2e0 [ 80.015672][ T6399] ? __rcu_read_unlock+0x4e/0x70 [ 80.015811][ T6399] ops_init+0x4b/0x2e0 [ 80.015841][ T6399] setup_net+0x9f/0x230 [ 80.015927][ T6399] copy_net_ns+0x333/0x490 [ 80.015962][ T6399] create_new_namespaces+0x1f6/0x420 [ 80.016001][ T6399] unshare_nsproxy_namespaces+0x115/0x150 [ 80.016044][ T6399] ksys_unshare+0x3fd/0x6f0 [ 80.016071][ T6399] __x64_sys_unshare+0x1f/0x30 [ 80.016096][ T6399] x64_sys_call+0x1e33/0x2550 [ 80.016236][ T6399] do_syscall_64+0x112/0x360 [ 80.016262][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.016284][ T6399] RIP: 0033:0x7fd430dde559 [ 80.016303][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.016384][ T6399] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 80.016405][ T6399] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 80.016421][ T6399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 80.016433][ T6399] RBP: 00007fd430e758b0 R08: 0000000000000000 R09: 0000000000000000 [ 80.016446][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.016470][ T6399] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 80.016492][ T6399] [ 80.063213][ T6403] FAULT_INJECTION: forcing a failure. [ 80.063213][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 80.063242][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.6.1042 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.063287][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.063301][ T6403] Call Trace: [ 80.063308][ T6403] [ 80.063315][ T6403] __dump_stack+0x1d/0x30 [ 80.063344][ T6403] dump_stack_lvl+0x95/0xd0 [ 80.063369][ T6403] dump_stack+0x15/0x1b [ 80.063415][ T6403] should_fail_ex+0x262/0x280 [ 80.063524][ T6403] ? __kernfs_new_node+0x70/0x440 [ 80.063550][ T6403] should_failslab+0x8c/0xb0 [ 80.063622][ T6403] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 80.063713][ T6403] ? __kernfs_new_node+0x70/0x440 [ 80.063740][ T6403] __kernfs_new_node+0x70/0x440 [ 80.063764][ T6403] ? rb_insert_color+0x26f/0x2a0 [ 80.063789][ T6403] ? __rcu_read_unlock+0x4e/0x70 [ 80.063856][ T6403] ? __rcu_read_unlock+0x4e/0x70 [ 80.063896][ T6403] ? kernfs_activate_one+0x10c/0x140 [ 80.063924][ T6403] ? __rcu_read_unlock+0x4e/0x70 [ 80.064028][ T6403] ? up_write+0x19/0x60 [ 80.064064][ T6403] kernfs_new_node+0xcf/0xf0 [ 80.064148][ T6403] __kernfs_create_file+0x4b/0x180 [ 80.064179][ T6403] ? __pfx_dev_attr_show+0x10/0x10 [ 80.064201][ T6403] ? __pfx_dev_attr_store+0x10/0x10 [ 80.064222][ T6403] sysfs_add_file_mode_ns+0x132/0x1b0 [ 80.064313][ T6403] sysfs_merge_group+0xed/0x1c0 [ 80.064337][ T6403] dpm_sysfs_add+0xaf/0x1e0 [ 80.064372][ T6403] device_add+0x3bc/0x790 [ 80.064414][ T6403] netdev_register_kobject+0x127/0x240 [ 80.064443][ T6403] register_netdevice+0xaf7/0x11a0 [ 80.064473][ T6403] ipip6_tunnel_create+0x113/0x2b0 [ 80.064500][ T6403] ipip6_tunnel_locate+0x356/0x4c0 [ 80.064534][ T6403] ? selinux_capable+0x31/0x40 [ 80.064571][ T6403] ipip6_tunnel_ctl+0x889/0xc60 [ 80.064660][ T6403] ip_tunnel_siocdevprivate+0x77/0xe0 [ 80.064691][ T6403] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 80.064717][ T6403] ? full_name_hash+0x92/0xe0 [ 80.064745][ T6403] ? strcmp+0x22/0x50 [ 80.064877][ T6403] dev_ifsioc+0x8f5/0xfc0 [ 80.064911][ T6403] dev_ioctl+0x78c/0x960 [ 80.064942][ T6403] sock_ioctl+0x58f/0x610 [ 80.064975][ T6403] ? __pfx_sock_ioctl+0x10/0x10 [ 80.065072][ T6403] __se_sys_ioctl+0xce/0x140 [ 80.065180][ T6403] __x64_sys_ioctl+0x43/0x50 [ 80.065214][ T6403] x64_sys_call+0x239d/0x2550 [ 80.065287][ T6403] do_syscall_64+0x112/0x360 [ 80.065316][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.065341][ T6403] RIP: 0033:0x7fc9c922e559 [ 80.065425][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.065455][ T6403] RSP: 002b:00007fc9c7c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.065478][ T6403] RAX: ffffffffffffffda RBX: 00007fc9c94b5fa0 RCX: 00007fc9c922e559 [ 80.065494][ T6403] RDX: 0000200000000180 RSI: 00000000000089f1 RDI: 0000000000000004 [ 80.065508][ T6403] RBP: 00007fc9c92c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 80.065523][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.065568][ T6403] R13: 00007fc9c94b6038 R14: 00007fc9c94b5fa0 R15: 00007fff49f29c18 [ 80.065589][ T6403] [ 80.433274][ T6419] loop0: detected capacity change from 0 to 512 [ 80.447946][ T6419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.453082][ T6419] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1049: iget: bad i_size value: 38620345925642 [ 80.453115][ T6419] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.453331][ T6419] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1049: couldn't read orphan inode 15 (err -117) [ 80.453457][ T6419] loop0: lost filesystem error report for type 5 error -117 [ 80.453943][ T6419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.516729][ T6425] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1049: bg 0: block 5: invalid block bitmap [ 80.526060][ T6425] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 80.526150][ T6425] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.526150][ T6425] [ 80.526165][ T6425] EXT4-fs (loop0): Total free blocks count 0 [ 80.526242][ T6425] EXT4-fs (loop0): Free/Dirty block details [ 80.526255][ T6425] EXT4-fs (loop0): free_blocks=0 [ 80.526273][ T6425] EXT4-fs (loop0): dirty_blocks=65 [ 80.526286][ T6425] EXT4-fs (loop0): Block reservation details [ 80.526344][ T6425] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 80.527302][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 80.567579][ T6427] loop1: detected capacity change from 0 to 512 [ 80.567906][ T6427] EXT4-fs: Ignoring removed oldalloc option [ 80.568317][ T6427] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 80.568349][ T6427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.571104][ T6427] EXT4-fs (loop1): 1 truncate cleaned up [ 80.571501][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.766263][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.829559][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 80.829559][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 80.829612][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 80.880759][ T6444] netlink: 'syz.6.1059': attribute type 1 has an invalid length. [ 80.886298][ T6444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 80.887787][ T6449] loop0: detected capacity change from 0 to 512 [ 80.925218][ T6449] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 80.925302][ T6449] FAT-fs (loop0): Filesystem has been set read-only [ 80.996027][ T6463] xt_NETMAP: bad rangesize 6146. [ 81.016351][ T6468] loop5: detected capacity change from 0 to 512 [ 81.027689][ T6468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.027832][ T6468] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.072565][ T6468] EXT4-fs warning (device loop5): ext4_read_inode_bitmap:150: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 81.271263][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.282171][ T173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.312573][ T173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.352235][ T173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.392706][ T173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.404774][ T6477] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.492256][ T173] bridge_slave_1: left allmulticast mode [ 81.492285][ T173] bridge_slave_1: left promiscuous mode [ 81.492500][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.493087][ T173] bridge_slave_0: left allmulticast mode [ 81.493098][ T173] bridge_slave_0: left promiscuous mode [ 81.493194][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.551813][ T173] bond0 (unregistering): Released all slaves [ 81.586479][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.586527][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.586575][ T6477] bridge_slave_0: entered allmulticast mode [ 81.587203][ T6477] bridge_slave_0: entered promiscuous mode [ 81.593159][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.593191][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.593329][ T6477] bridge_slave_1: entered allmulticast mode [ 81.593850][ T6477] bridge_slave_1: entered promiscuous mode [ 81.609842][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.611063][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.622921][ T6477] team0: Port device team_slave_0 added [ 81.623986][ T6477] team0: Port device team_slave_1 added [ 81.635333][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.635346][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.635444][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.635986][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.635998][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.636027][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.655172][ T6477] hsr_slave_0: entered promiscuous mode [ 81.655629][ T6477] hsr_slave_1: entered promiscuous mode [ 81.656098][ T6477] debugfs: 'hsr0' already exists in 'hsr' [ 81.656112][ T6477] Cannot create hsr debugfs directory [ 81.751437][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.751456][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.762541][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.762557][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.772361][ T173] veth1_macvtap: left promiscuous mode [ 81.772421][ T173] veth0_macvtap: left promiscuous mode [ 81.772471][ T173] veth1_vlan: left promiscuous mode [ 81.772520][ T173] veth0_vlan: left promiscuous mode [ 81.838758][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.868891][ T173] team0 (unregistering): Port device team_slave_1 removed [ 81.876542][ T173] team0 (unregistering): Port device team_slave_0 removed [ 82.032391][ T6503] set_capacity_and_notify: 1 callbacks suppressed [ 82.032403][ T6503] loop0: detected capacity change from 0 to 2048 [ 82.050674][ T6503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.058397][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.145676][ T6513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6513 comm=syz.0.1083 [ 83.788337][ T6430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.789428][ T6477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.808210][ T6477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.811446][ T6477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.826097][ T6477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.826851][ T6477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.834685][ T6477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.838472][ T6477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.853959][ T6477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.866201][ T6533] loop1: detected capacity change from 0 to 164 [ 83.869111][ T6495] Bluetooth: hci0: command 0x1003 tx timeout [ 83.869121][ T3725] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.888318][ T6533] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.918801][ T6533] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.919752][ T6533] rock: directory entry would overflow storage [ 83.919761][ T6533] rock: sig=0x4f50, size=4, remaining=3 [ 83.919779][ T6533] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 83.951244][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.957204][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.968704][ T6546] FAULT_INJECTION: forcing a failure. [ 83.968704][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 83.968734][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.0.1091 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.968874][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.968888][ T6546] Call Trace: [ 83.968895][ T6546] [ 83.968904][ T6546] __dump_stack+0x1d/0x30 [ 83.968931][ T6546] dump_stack_lvl+0x95/0xd0 [ 83.968956][ T6546] dump_stack+0x15/0x1b [ 83.969055][ T6546] should_fail_ex+0x262/0x280 [ 83.969118][ T6546] should_failslab+0x8c/0xb0 [ 83.969153][ T6546] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 83.969187][ T6546] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 83.969225][ T6546] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 83.969257][ T6546] ? resv_map_alloc+0x57/0x190 [ 83.969282][ T6546] hugetlbfs_alloc_inode+0xbc/0x100 [ 83.969315][ T6546] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 83.969390][ T6546] alloc_inode+0x40/0x170 [ 83.969415][ T6546] new_inode+0x1d/0xe0 [ 83.969440][ T6546] hugetlbfs_get_inode+0x7b/0x330 [ 83.969468][ T6546] ? xfd_validate_state+0x45/0xf0 [ 83.969681][ T6546] hugetlb_file_setup+0x192/0x3d0 [ 83.969709][ T6546] ksys_mmap_pgoff+0x13f/0x310 [ 83.969768][ T6546] x64_sys_call+0x23b3/0x2550 [ 83.969796][ T6546] do_syscall_64+0x112/0x360 [ 83.969851][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.969876][ T6546] RIP: 0033:0x7f0a7193e559 [ 83.969972][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.969993][ T6546] RSP: 002b:00007f0a70397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.970015][ T6546] RAX: ffffffffffffffda RBX: 00007f0a71bc5fa0 RCX: 00007f0a7193e559 [ 83.970031][ T6546] RDX: 0000000002000009 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 83.970046][ T6546] RBP: 00007f0a719d58b0 R08: ffffffffffffffff R09: 0000000000000000 [ 83.970062][ T6546] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 83.970122][ T6546] R13: 00007f0a71bc6038 R14: 00007f0a71bc5fa0 R15: 00007ffebc6a8988 [ 83.970143][ T6546] [ 83.983164][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.983198][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.986195][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.986232][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.100699][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 84.100714][ T29] audit: type=1400 audit(1792151832.205:3668): avc: denied { write } for pid=6524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.141797][ T29] audit: type=1400 audit(1792151832.255:3669): avc: denied { write } for pid=6559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.184432][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9 [ 84.280302][ T29] audit: type=1326 audit(1792151832.395:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.280875][ T29] audit: type=1326 audit(1792151832.395:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.287491][ T29] audit: type=1326 audit(1792151832.395:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.288397][ T29] audit: type=1326 audit(1792151832.395:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.288563][ T29] audit: type=1326 audit(1792151832.395:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.288794][ T29] audit: type=1326 audit(1792151832.395:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.341164][ T29] audit: type=1326 audit(1792151832.435:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.341219][ T29] audit: type=1326 audit(1792151832.435:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.0.1095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7193e559 code=0x7ffc0000 [ 84.395458][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.544536][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10 [ 84.700443][ T6477] veth0_vlan: entered promiscuous mode [ 84.704160][ T6477] veth1_vlan: entered promiscuous mode [ 84.733463][ T6477] veth0_macvtap: entered promiscuous mode [ 84.735330][ T6477] veth1_macvtap: entered promiscuous mode [ 84.755767][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.763531][ T6625] loop1: detected capacity change from 0 to 512 [ 84.779012][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.790600][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.790830][ T6625] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.820400][ T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820511][ T42] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820647][ T42] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820724][ T42] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828131][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11 [ 84.837866][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.909708][ T6621] loop6: detected capacity change from 0 to 512 [ 84.942209][ T6621] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1103: bg 0: block 385: padding at end of block bitmap is not set [ 84.942350][ T6621] loop6: lost filesystem error report for type 5 error -117 [ 84.942823][ T6621] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 84.942866][ T6621] loop6: lost filesystem error report for type 5 error -117 [ 84.946677][ T6621] EXT4-fs (loop6): 2 truncates cleaned up [ 84.954867][ T6621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.088475][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12 [ 85.197275][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.272387][ T6677] loop1: detected capacity change from 0 to 512 [ 85.302867][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.302936][ T6677] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.493674][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.496299][ T6694] loop0: detected capacity change from 0 to 512 [ 85.496537][ T6694] EXT4-fs: Ignoring removed oldalloc option [ 85.496779][ T6694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 85.496850][ T6694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.510121][ T6694] EXT4-fs (loop0): 1 truncate cleaned up [ 85.510564][ T6694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.630796][ T11] asus 0005:0B05:8502.0002: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 85.668007][ T6703] fido_id[6703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.692585][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.879378][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 85.879378][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 85.879506][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 85.996352][ T6720] pim6reg1: entered promiscuous mode [ 85.996371][ T6720] pim6reg1: entered allmulticast mode [ 86.075525][ T6719] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.184219][ T6739] FAULT_INJECTION: forcing a failure. [ 86.184219][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 86.184320][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.184409][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.184423][ T6739] Call Trace: [ 86.184429][ T6739] [ 86.184436][ T6739] __dump_stack+0x1d/0x30 [ 86.184459][ T6739] dump_stack_lvl+0x95/0xd0 [ 86.184493][ T6739] dump_stack+0x15/0x1b [ 86.184518][ T6739] should_fail_ex+0x262/0x280 [ 86.184588][ T6739] should_failslab+0x8c/0xb0 [ 86.184621][ T6739] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 86.184668][ T6739] ? __d_alloc+0x34/0x320 [ 86.184699][ T6739] ? __d_alloc+0x34/0x320 [ 86.184726][ T6739] __d_alloc+0x34/0x320 [ 86.184751][ T6739] ? d_alloc_pseudo+0x13/0x80 [ 86.184819][ T6739] d_alloc_pseudo+0x1e/0x80 [ 86.184934][ T6739] alloc_path_pseudo+0xa4/0x140 [ 86.184965][ T6739] alloc_file_pseudo+0x55/0x120 [ 86.185061][ T6739] aio_setup_ring+0x119/0x710 [ 86.185081][ T6739] ? ioctx_alloc+0x273/0x480 [ 86.185103][ T6739] ioctx_alloc+0x296/0x480 [ 86.185124][ T6739] __se_sys_io_setup+0x6b/0x1b0 [ 86.185159][ T6739] __x64_sys_io_setup+0x31/0x40 [ 86.185249][ T6739] x64_sys_call+0x1a9f/0x2550 [ 86.185273][ T6739] do_syscall_64+0x112/0x360 [ 86.185371][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.185445][ T6739] RIP: 0033:0x7fd430dde559 [ 86.185462][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.185490][ T6739] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 86.185530][ T6739] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 86.185544][ T6739] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000002 [ 86.185564][ T6739] RBP: 00007fd430e758b0 R08: 0000000000000000 R09: 0000000000000000 [ 86.185576][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.185637][ T6739] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 86.185657][ T6739] [ 86.202624][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.202656][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.202722][ T6719] bridge_slave_0: entered allmulticast mode [ 86.203073][ T6719] bridge_slave_0: entered promiscuous mode [ 86.203859][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.203888][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.204059][ T6719] bridge_slave_1: entered allmulticast mode [ 86.204577][ T6719] bridge_slave_1: entered promiscuous mode [ 86.218383][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.223000][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.233780][ T6719] team0: Port device team_slave_0 added [ 86.234591][ T6719] team0: Port device team_slave_1 added [ 86.247553][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.247566][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.247602][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.248015][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.248027][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.248056][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.273090][ T6719] hsr_slave_0: entered promiscuous mode [ 86.273454][ T6719] hsr_slave_1: entered promiscuous mode [ 86.273742][ T6719] debugfs: 'hsr0' already exists in 'hsr' [ 86.273755][ T6719] Cannot create hsr debugfs directory [ 86.405435][ T6719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 86.448568][ T6719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.450295][ T6719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 86.454095][ T6719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.454816][ T6719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 86.463303][ T6719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.463985][ T6719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 86.484350][ T6719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.506325][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.506427][ T6719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.506581][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.506612][ T6719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.566158][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.582505][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.586732][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.627559][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.643232][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.643265][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.648022][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.648053][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.730530][ T6757] ip_tables: iptables: counters copy to user failed while replacing table [ 86.932570][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.126737][ T6719] veth0_vlan: entered promiscuous mode [ 87.134760][ T6719] veth1_vlan: entered promiscuous mode [ 87.147282][ T6719] veth0_macvtap: entered promiscuous mode [ 87.152278][ T6719] veth1_macvtap: entered promiscuous mode [ 87.162435][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.163991][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.186708][ T378] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.186802][ T378] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.186842][ T378] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.186879][ T378] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.187620][ T6802] loop6: detected capacity change from 0 to 256 [ 87.193832][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 87.267901][ T6800] team0: Port device team_slave_0 removed [ 87.295008][ T6807] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.295024][ T6807] block device autoloading is deprecated and will be removed. [ 87.422910][ T6821] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.491134][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 87.493760][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 87.585054][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.585243][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.966972][ T6849] loop6: detected capacity change from 0 to 256 [ 87.996026][ T6849] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.065907][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 88.065934][ T6853] FAT-fs (loop6): Filesystem has been set read-only [ 88.066092][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.066113][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.066149][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.066173][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.066254][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.066279][ T6853] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 88.089982][ T6852] FAULT_INJECTION: forcing a failure. [ 88.089982][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 88.090012][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.7.1163 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.090079][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.090094][ T6852] Call Trace: [ 88.090151][ T6852] [ 88.090159][ T6852] __dump_stack+0x1d/0x30 [ 88.090186][ T6852] dump_stack_lvl+0x95/0xd0 [ 88.090211][ T6852] dump_stack+0x15/0x1b [ 88.090298][ T6852] should_fail_ex+0x262/0x280 [ 88.090327][ T6852] ? skb_clone+0x151/0x1f0 [ 88.090384][ T6852] should_failslab+0x8c/0xb0 [ 88.090419][ T6852] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 88.090510][ T6852] ? skb_clone+0x151/0x1f0 [ 88.090539][ T6852] skb_clone+0x151/0x1f0 [ 88.090566][ T6852] bpf_clone_redirect+0xed/0x280 [ 88.090662][ T6852] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 88.090684][ T6852] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 88.090718][ T6852] ? hrtimer_start_range_ns+0x108/0x120 [ 88.090743][ T6852] ? _raw_spin_unlock+0x9/0x30 [ 88.090848][ T6852] ? finish_task_switch+0x121/0x340 [ 88.090876][ T6852] ? __schedule+0x79e/0xd20 [ 88.090908][ T6852] ? is_bpf_text_address+0x141/0x160 [ 88.091005][ T6852] ? preempt_schedule_common+0x12/0x40 [ 88.091039][ T6852] ? preempt_schedule_thunk+0x16/0x40 [ 88.091074][ T6852] ? bpf_test_timer_continue+0xac/0x350 [ 88.091147][ T6852] bpf_test_run+0x29b/0x620 [ 88.091198][ T6852] ? __list_add_valid_or_report+0x38/0xe0 [ 88.091221][ T6852] ? bpf_test_run+0x198/0x620 [ 88.091248][ T6852] bpf_prog_test_run_skb+0xe67/0x11b0 [ 88.091333][ T6852] ? __rcu_read_unlock+0x4e/0x70 [ 88.091369][ T6852] ? __fget_files+0x184/0x1c0 [ 88.091397][ T6852] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 88.091461][ T6852] bpf_prog_test_run+0x208/0x340 [ 88.091493][ T6852] __sys_bpf+0x8da/0xc30 [ 88.091523][ T6852] ? do_futex+0x2e0/0x460 [ 88.091635][ T6852] __x64_sys_bpf+0x69/0x80 [ 88.091661][ T6852] x64_sys_call+0xf26/0x2550 [ 88.091691][ T6852] do_syscall_64+0x112/0x360 [ 88.091736][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.091761][ T6852] RIP: 0033:0x7fb51072e559 [ 88.091778][ T6852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.091799][ T6852] RSP: 002b:00007fb50f187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.091828][ T6852] RAX: ffffffffffffffda RBX: 00007fb5109b5fa0 RCX: 00007fb51072e559 [ 88.091844][ T6852] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 88.091873][ T6852] RBP: 00007fb5107c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 88.091888][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.091902][ T6852] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 88.091922][ T6852] [ 88.898607][ T6872] loop7: detected capacity change from 0 to 512 [ 88.917936][ T6872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.918044][ T6872] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.961809][ T6879] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 88.994244][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.007978][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.025077][ T6879] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 89.042183][ T6881] ip_tables: iptables: counters copy to user failed while replacing table [ 89.043913][ T6879] bond0 (unregistering): Released all slaves [ 89.126739][ T6883] loop6: detected capacity change from 0 to 512 [ 89.136222][ T6477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.143476][ T6883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.143601][ T6883] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.190129][ T6887] FAULT_INJECTION: forcing a failure. [ 89.190129][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 89.190157][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.7.1175 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.190184][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.190198][ T6887] Call Trace: [ 89.190205][ T6887] [ 89.190213][ T6887] __dump_stack+0x1d/0x30 [ 89.190238][ T6887] dump_stack_lvl+0x95/0xd0 [ 89.190265][ T6887] dump_stack+0x15/0x1b [ 89.190284][ T6887] should_fail_ex+0x262/0x280 [ 89.190312][ T6887] ? __mpol_dup+0x42/0x1c0 [ 89.190340][ T6887] should_failslab+0x8c/0xb0 [ 89.190371][ T6887] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 89.190406][ T6887] ? __mpol_dup+0x42/0x1c0 [ 89.190434][ T6887] __mpol_dup+0x42/0x1c0 [ 89.190461][ T6887] mpol_set_shared_policy+0x83/0x800 [ 89.190486][ T6887] ? __rcu_read_unlock+0x4e/0x70 [ 89.190517][ T6887] shmem_set_policy+0x3d/0x50 [ 89.190547][ T6887] mbind_range+0x240/0x430 [ 89.190575][ T6887] __se_sys_mbind+0x8b5/0xdd0 [ 89.190606][ T6887] __x64_sys_mbind+0x78/0x90 [ 89.190626][ T6887] x64_sys_call+0x1d78/0x2550 [ 89.190651][ T6887] do_syscall_64+0x112/0x360 [ 89.190682][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.190703][ T6887] RIP: 0033:0x7fb51072e559 [ 89.190717][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.190734][ T6887] RSP: 002b:00007fb50f187028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 89.190753][ T6887] RAX: ffffffffffffffda RBX: 00007fb5109b5fa0 RCX: 00007fb51072e559 [ 89.190767][ T6887] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 89.190782][ T6887] RBP: 00007fb5107c58b0 R08: 0000000000000008 R09: 0000000000000000 [ 89.190797][ T6887] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 89.190809][ T6887] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 89.190825][ T6887] [ 89.300273][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.186141][ T6900] netlink: 'syz.7.1178': attribute type 3 has an invalid length. [ 90.186161][ T6900] netlink: 'syz.7.1178': attribute type 1 has an invalid length. [ 90.186186][ T6900] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1178'. [ 90.312360][ T6914] loop6: detected capacity change from 0 to 1024 [ 90.323371][ T6914] EXT4-fs: Ignoring removed bh option [ 90.323878][ T6903] loop1: detected capacity change from 0 to 512 [ 90.336652][ T6914] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.340988][ T6914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.370714][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 90.370729][ T29] audit: type=1400 audit(1792151838.475:4005): avc: denied { write } for pid=6913 comm="syz.6.1188" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.376144][ T6903] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1184: bg 0: block 385: padding at end of block bitmap is not set [ 90.376204][ T6903] loop1: lost filesystem error report for type 5 error -117 [ 90.377313][ T6903] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 90.377355][ T6903] loop1: lost filesystem error report for type 5 error -117 [ 90.379100][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 90.379130][ C0] EXT4-fs (loop1): initial error at time 1792151838: ext4_validate_block_bitmap:445 [ 90.379247][ C0] EXT4-fs (loop1): last error at time 1792151838: ext4_mb_clear_bb:6680 [ 90.413182][ T6903] EXT4-fs (loop1): 2 truncates cleaned up [ 90.417413][ T6903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.474444][ T6922] Format for deleting device is "id" (uint). [ 90.478203][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.518562][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.544271][ T29] audit: type=1400 audit(1792151838.655:4006): avc: denied { getopt } for pid=6923 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.624978][ T29] audit: type=1400 audit(1792151838.735:4007): avc: denied { append } for pid=6936 comm="syz.6.1198" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.705097][ T6943] loop1: detected capacity change from 0 to 512 [ 90.717696][ T6943] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 90.717714][ T6943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 90.717751][ T6943] System zones: 0-1, 15-15, 18-18, 34-34 [ 90.717976][ T6943] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.718012][ T6943] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 90.718061][ T6943] EXT4-fs warning (device loop1): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.718088][ T6943] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 90.718450][ T6943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1199: bg 0: block 40: padding at end of block bitmap is not set [ 90.718475][ T6943] loop1: lost filesystem error report for type 5 error -117 [ 90.718579][ T6943] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 90.718705][ T6943] loop1: lost filesystem error report for type 5 error -117 [ 90.718895][ T6943] EXT4-fs (loop1): 1 truncate cleaned up [ 90.819408][ T6943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.849601][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.856749][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1200'. [ 90.868053][ T6947] vlan2: entered allmulticast mode [ 90.910507][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 90.910507][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 90.910537][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 91.053754][ T6951] loop8: detected capacity change from 0 to 512 [ 91.095759][ T6951] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1202: bg 0: block 385: padding at end of block bitmap is not set [ 91.095861][ T6951] loop8: lost filesystem error report for type 5 error -117 [ 91.096154][ T6951] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 91.096190][ T6951] loop8: lost filesystem error report for type 5 error -117 [ 91.099116][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 91.099157][ C1] EXT4-fs (loop8): initial error at time 1792151839: ext4_validate_block_bitmap:445 [ 91.099256][ C1] EXT4-fs (loop8): last error at time 1792151839: ext4_mb_clear_bb:6680 [ 91.143595][ T6962] FAULT_INJECTION: forcing a failure. [ 91.143595][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 91.143696][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.7.1205 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.143774][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.143788][ T6962] Call Trace: [ 91.143795][ T6962] [ 91.143803][ T6962] __dump_stack+0x1d/0x30 [ 91.143830][ T6962] dump_stack_lvl+0x95/0xd0 [ 91.143895][ T6962] dump_stack+0x15/0x1b [ 91.143918][ T6962] should_fail_ex+0x262/0x280 [ 91.143949][ T6962] should_failslab+0x8c/0xb0 [ 91.144063][ T6962] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 91.144102][ T6962] ? kstrdup_const+0x3e/0x50 [ 91.144129][ T6962] ? kstrdup_const+0x3e/0x50 [ 91.144207][ T6962] ? widen_string+0x42/0x210 [ 91.144230][ T6962] kstrdup+0x3e/0xd0 [ 91.144265][ T6962] kstrdup_const+0x3e/0x50 [ 91.144291][ T6962] __kernfs_new_node+0x42/0x440 [ 91.144317][ T6962] ? vsnprintf+0x857/0x8c0 [ 91.144355][ T6962] kernfs_new_node+0xcf/0xf0 [ 91.144396][ T6962] __kernfs_create_file+0x4b/0x180 [ 91.144429][ T6962] cgroup_addrm_files+0x50e/0x660 [ 91.144471][ T6962] css_populate_dir+0x9f/0x230 [ 91.144494][ T6962] cgroup_apply_control_enable+0x468/0x9c0 [ 91.144566][ T6962] cgroup_mkdir+0xbfd/0xcb0 [ 91.144596][ T6962] ? __pfx_cgroup_mkdir+0x10/0x10 [ 91.144647][ T6962] kernfs_iop_mkdir+0x11e/0x1c0 [ 91.144680][ T6962] vfs_mkdir+0x291/0x3e0 [ 91.144701][ T6962] filename_mkdirat+0x138/0x300 [ 91.144775][ T6962] __se_sys_mkdirat+0x32/0xf0 [ 91.144820][ T6962] __x64_sys_mkdirat+0x43/0x50 [ 91.144840][ T6962] x64_sys_call+0x368/0x2550 [ 91.144869][ T6962] do_syscall_64+0x112/0x360 [ 91.144913][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.145006][ T6962] RIP: 0033:0x7fb51072e559 [ 91.145023][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.145043][ T6962] RSP: 002b:00007fb50f187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 91.145090][ T6962] RAX: ffffffffffffffda RBX: 00007fb5109b5fa0 RCX: 00007fb51072e559 [ 91.145106][ T6962] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.145121][ T6962] RBP: 00007fb5107c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 91.145136][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.145150][ T6962] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 91.145171][ T6962] [ 91.145238][ T6962] cgroup: cgroup_addrm_files: failed to add prio.class, err=-12 [ 91.155121][ T6951] EXT4-fs (loop8): 2 truncates cleaned up [ 91.177603][ T6951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.270664][ T6965] ip_tables: iptables: counters copy to user failed while replacing table [ 91.321008][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.560213][ T6986] loop1: detected capacity change from 0 to 512 [ 91.585451][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.585510][ T6986] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.617254][ T29] audit: type=1400 audit(1792151839.725:4008): avc: denied { write } for pid=6985 comm="syz.1.1217" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.705472][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.873825][ T7009] loop1: detected capacity change from 0 to 256 [ 92.057810][ T6999] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1221: bg 0: block 385: padding at end of block bitmap is not set [ 92.058027][ T6999] loop0: lost filesystem error report for type 5 error -117 [ 92.059063][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 92.059083][ C1] EXT4-fs (loop0): initial error at time 1792151840: ext4_validate_block_bitmap:445 [ 92.059132][ C1] EXT4-fs (loop0): last error at time 1792151840: ext4_validate_block_bitmap:445 [ 92.106942][ T6999] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 92.107090][ T6999] loop0: lost filesystem error report for type 5 error -117 [ 92.131515][ T6999] EXT4-fs (loop0): 2 truncates cleaned up [ 92.134579][ T6999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.248279][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.599494][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ce54600: rx timeout, send abort [ 92.599555][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ce54600: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.634437][ T7022] FAULT_INJECTION: forcing a failure. [ 92.634437][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.634592][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.7.1229 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.634622][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.634716][ T7022] Call Trace: [ 92.634734][ T7022] [ 92.634744][ T7022] __dump_stack+0x1d/0x30 [ 92.634772][ T7022] dump_stack_lvl+0x95/0xd0 [ 92.634797][ T7022] dump_stack+0x15/0x1b [ 92.634824][ T7022] should_fail_ex+0x262/0x280 [ 92.634882][ T7022] should_fail+0xb/0x20 [ 92.634943][ T7022] should_fail_usercopy+0x1a/0x20 [ 92.634982][ T7022] strncpy_from_user+0x27/0x250 [ 92.635068][ T7022] strncpy_from_user_nofault+0x67/0xf0 [ 92.635103][ T7022] bpf_probe_read_user_str+0x2a/0x70 [ 92.635179][ T7022] ? 0xffffffffa04009d8 [ 92.635196][ T7022] bpf_prog_8f682f9b13dc690e+0x46/0x4c [ 92.635217][ T7022] bpf_dispatcher_xdp_func+0x25/0x30 [ 92.635298][ T7022] bpf_test_run+0x231/0x620 [ 92.635325][ T7022] ? bpf_test_run+0x198/0x620 [ 92.635351][ T7022] bpf_prog_test_run_xdp+0x587/0x9e0 [ 92.635392][ T7022] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.635417][ T7022] bpf_prog_test_run+0x208/0x340 [ 92.635452][ T7022] __sys_bpf+0x8da/0xc30 [ 92.635490][ T7022] ? do_futex+0x2e0/0x460 [ 92.635554][ T7022] __x64_sys_bpf+0x69/0x80 [ 92.635582][ T7022] x64_sys_call+0xf26/0x2550 [ 92.635613][ T7022] do_syscall_64+0x112/0x360 [ 92.635644][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.635665][ T7022] RIP: 0033:0x7fb51072e559 [ 92.635680][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.635698][ T7022] RSP: 002b:00007fb50f187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.635720][ T7022] RAX: ffffffffffffffda RBX: 00007fb5109b5fa0 RCX: 00007fb51072e559 [ 92.635757][ T7022] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 92.635772][ T7022] RBP: 00007fb5107c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.635788][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.635803][ T7022] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 92.635855][ T7022] [ 92.820222][ T7024] set_capacity_and_notify: 1 callbacks suppressed [ 92.820238][ T7024] loop0: detected capacity change from 0 to 1024 [ 92.835634][ T7024] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.882505][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.885216][ T29] audit: type=1400 audit(1792151840.995:4009): avc: denied { write } for pid=7023 comm="syz.0.1231" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.988716][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.009139][ T29] audit: type=1400 audit(1792151841.115:4010): avc: denied { read } for pid=7032 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.120845][ T7036] loop0: detected capacity change from 0 to 4096 [ 93.132644][ T7036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.168763][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.210508][ T7041] netlink: 71 bytes leftover after parsing attributes in process `syz.6.1236'. [ 93.245183][ T29] audit: type=1326 audit(1792151841.355:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.6.1238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 93.245371][ T29] audit: type=1326 audit(1792151841.355:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.6.1238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 93.245563][ T29] audit: type=1326 audit(1792151841.355:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.6.1238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 94.032962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811cc12000: rx timeout, send abort [ 94.033022][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811cc12000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 94.145235][ T7051] loop0: detected capacity change from 0 to 512 [ 94.163708][ T7051] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 94.173078][ T7051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.173113][ T7051] block device autoloading is deprecated and will be removed. [ 94.177273][ T7051] EXT4-fs (loop0): couldn't read superblock of external journal [ 94.228992][ T7055] loop0: detected capacity change from 0 to 256 [ 94.744348][ T6998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.772932][ T7074] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.773021][ T7074] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 94.781297][ T7072] netlink: 'syz.6.1248': attribute type 6 has an invalid length. [ 94.962013][ T7090] loop7: detected capacity change from 0 to 512 [ 94.987823][ T7090] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1255: bg 0: block 385: padding at end of block bitmap is not set [ 94.987920][ T7090] loop7: lost filesystem error report for type 5 error -117 [ 94.988733][ T7090] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 94.988762][ T7090] loop7: lost filesystem error report for type 5 error -117 [ 94.989164][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 94.989214][ C1] EXT4-fs (loop7): initial error at time 1792151843: ext4_validate_block_bitmap:445 [ 94.989324][ C1] EXT4-fs (loop7): last error at time 1792151843: ext4_mb_clear_bb:6680 [ 94.992031][ T7090] EXT4-fs (loop7): 2 truncates cleaned up [ 94.996172][ T7090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.074732][ T6477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.089139][ T7100] ip_tables: iptables: counters copy to user failed while replacing table [ 95.103561][ T7103] loop7: detected capacity change from 0 to 256 [ 95.345307][ T7119] loop8: detected capacity change from 0 to 512 [ 95.377388][ T7119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.377495][ T7119] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.460370][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.518657][ T7135] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1275'. [ 95.564797][ T7130] loop6: detected capacity change from 0 to 512 [ 95.590161][ T7143] FAULT_INJECTION: forcing a failure. [ 95.590161][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 95.590180][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 95.590194][ T29] audit: type=1400 audit(1792151843.705:4039): avc: denied { mounton } for pid=7142 comm="syz.8.1277" path="/20/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.590191][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.8.1277 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.590221][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.590234][ T7143] Call Trace: [ 95.590240][ T7143] [ 95.590247][ T7143] __dump_stack+0x1d/0x30 [ 95.590282][ T7143] dump_stack_lvl+0x95/0xd0 [ 95.590309][ T7143] dump_stack+0x15/0x1b [ 95.590334][ T7143] should_fail_ex+0x262/0x280 [ 95.590370][ T7143] should_failslab+0x8c/0xb0 [ 95.590413][ T7130] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1273: bg 0: block 385: padding at end of block bitmap is not set [ 95.590463][ T7143] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 95.590474][ T7130] loop6: lost filesystem error report for type 5 error -117 [ 95.590498][ T7143] ? proc_alloc_inode+0x34/0x90 [ 95.590599][ T7143] ? proc_alloc_inode+0x34/0x90 [ 95.590631][ T7143] ? __pfx_proc_alloc_inode+0x10/0x10 [ 95.590710][ T7143] proc_alloc_inode+0x34/0x90 [ 95.590741][ T7143] alloc_inode+0x40/0x170 [ 95.590825][ T7143] new_inode+0x1d/0xe0 [ 95.590851][ T7143] proc_get_inode+0x21/0x370 [ 95.590882][ T7143] proc_fill_super+0x2ea/0x3c0 [ 95.590973][ T7143] ? __pfx_proc_fill_super+0x10/0x10 [ 95.591003][ T7143] get_tree_nodev+0x83/0x100 [ 95.591034][ T7143] proc_get_tree+0x1c/0x30 [ 95.591075][ T7143] vfs_get_tree+0x57/0x1d0 [ 95.591179][ T7143] do_new_mount+0x288/0x730 [ 95.591201][ T7143] ? security_capable+0x7b/0x90 [ 95.591227][ T7143] path_mount+0x4ad/0xb90 [ 95.591248][ T7143] __se_sys_mount+0x28c/0x2e0 [ 95.591273][ T7143] __x64_sys_mount+0x67/0x80 [ 95.591351][ T7143] x64_sys_call+0xc3b/0x2550 [ 95.591412][ T7143] do_syscall_64+0x112/0x360 [ 95.591439][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.591517][ T7143] RIP: 0033:0x7fafe630e559 [ 95.591532][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.591567][ T7143] RSP: 002b:00007fafe4d67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.591586][ T7143] RAX: ffffffffffffffda RBX: 00007fafe6595fa0 RCX: 00007fafe630e559 [ 95.591602][ T7143] RDX: 00002000000008c0 RSI: 0000200000000880 RDI: 0000000000000000 [ 95.591618][ T7143] RBP: 00007fafe63a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 95.591634][ T7143] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 95.591665][ T7143] R13: 00007fafe6596038 R14: 00007fafe6595fa0 R15: 00007ffecbb5cf28 [ 95.591687][ T7143] [ 95.591854][ T7143] proc_fill_super: get root inode failed [ 95.592202][ T7130] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 95.592233][ T7130] loop6: lost filesystem error report for type 5 error -117 [ 95.594409][ T7130] EXT4-fs (loop6): 2 truncates cleaned up [ 95.597286][ T7130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.641881][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.748850][ T7151] ip_tables: iptables: counters copy to user failed while replacing table [ 95.782315][ T7153] FAULT_INJECTION: forcing a failure. [ 95.782315][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 95.782409][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.7.1282 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.782434][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.782455][ T7153] Call Trace: [ 95.782461][ T7153] [ 95.782470][ T7153] __dump_stack+0x1d/0x30 [ 95.782498][ T7153] dump_stack_lvl+0x95/0xd0 [ 95.782527][ T7153] dump_stack+0x15/0x1b [ 95.782578][ T7153] should_fail_ex+0x262/0x280 [ 95.782610][ T7153] should_failslab+0x8c/0xb0 [ 95.782657][ T7153] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 95.782701][ T7153] ? __d_alloc+0x34/0x320 [ 95.782731][ T7153] ? __d_alloc+0x34/0x320 [ 95.782761][ T7153] __d_alloc+0x34/0x320 [ 95.782812][ T7153] ? d_alloc_pseudo+0x13/0x80 [ 95.782844][ T7153] d_alloc_pseudo+0x1e/0x80 [ 95.782879][ T7153] alloc_path_pseudo+0xa4/0x140 [ 95.782908][ T7153] alloc_file_pseudo+0x55/0x120 [ 95.782937][ T7153] sock_alloc_file+0x9c/0x1e0 [ 95.783006][ T7153] __sys_socket+0x118/0x180 [ 95.783027][ T7153] __x64_sys_socket+0x3f/0x50 [ 95.783111][ T7153] x64_sys_call+0x246e/0x2550 [ 95.783218][ T7153] do_syscall_64+0x112/0x360 [ 95.783259][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.783285][ T7153] RIP: 0033:0x7fb51072e559 [ 95.783302][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.783366][ T7153] RSP: 002b:00007fb50f186fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.783467][ T7153] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb51072e559 [ 95.783483][ T7153] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 95.783497][ T7153] RBP: 00007fb5107c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 95.783511][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.783526][ T7153] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 95.783547][ T7153] [ 95.904621][ T7162] tipc: Started in network mode [ 95.904650][ T7162] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 95.904683][ T7162] tipc: Enabled bearer , priority 0 [ 95.905064][ T7162] tipc: Disabling bearer [ 95.952479][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 95.952479][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 95.952510][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 96.029350][ T7170] loop7: detected capacity change from 0 to 512 [ 96.040937][ T7170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.041001][ T7170] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.073432][ T29] audit: type=1400 audit(1792151844.185:4040): avc: denied { write } for pid=7154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.164733][ T6477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.232375][ T7179] loop1: detected capacity change from 0 to 256 [ 96.240707][ T7179] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.258466][ T7179] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 96.258490][ T7179] FAT-fs (loop1): Filesystem has been set read-only [ 96.258686][ T7179] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 96.315716][ T29] audit: type=1400 audit(1792151844.425:4041): avc: denied { write } for pid=7177 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.330800][ T7183] EXT4-fs: Ignoring removed bh option [ 96.330848][ T7183] ext4: Unknown parameter 'fsuuid' [ 96.488942][ T29] audit: type=1400 audit(1792151844.595:4042): avc: denied { write } for pid=7186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.524220][ T7184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1289: bg 0: block 385: padding at end of block bitmap is not set [ 96.524390][ T7184] loop0: lost filesystem error report for type 5 error -117 [ 96.524909][ T7184] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 96.524939][ T7184] loop0: lost filesystem error report for type 5 error -117 [ 96.526942][ T7184] EXT4-fs (loop0): 2 truncates cleaned up [ 96.541715][ T7184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.592990][ T29] audit: type=1400 audit(1792151844.705:4043): avc: denied { write } for pid=7199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.658036][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.733916][ T7213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.745351][ T1002] team_slave_1: entered promiscuous mode [ 96.754555][ T7221] batadv_slave_1: entered promiscuous mode [ 96.754851][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1296'. [ 96.754962][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.765961][ T7221] batadv_slave_1 (unregistering): left promiscuous mode [ 96.766008][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.809989][ T7213] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 96.849566][ T29] audit: type=1400 audit(1792151844.965:4044): avc: denied { write } for pid=7205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.905773][ T29] audit: type=1400 audit(1792151845.015:4045): avc: denied { write } for pid=7236 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.936589][ T7234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.936729][ T7234] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.068601][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.171080][ T7244] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1301: bg 0: block 385: padding at end of block bitmap is not set [ 97.171208][ T7244] loop7: lost filesystem error report for type 5 error -117 [ 97.173174][ T7244] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 97.173275][ T7244] loop7: lost filesystem error report for type 5 error -117 [ 97.174918][ T29] audit: type=1400 audit(1792151845.285:4046): avc: denied { write } for pid=7243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.176957][ T7244] EXT4-fs (loop7): 2 truncates cleaned up [ 97.180997][ T7244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.212969][ T29] audit: type=1400 audit(1792151845.325:4047): avc: denied { write } for pid=7271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.293971][ T7275] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1307'. [ 97.313451][ T6477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.363593][ T7286] FAULT_INJECTION: forcing a failure. [ 97.363593][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 97.363698][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.7.1309 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.363727][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.363742][ T7286] Call Trace: [ 97.363748][ T7286] [ 97.363755][ T7286] __dump_stack+0x1d/0x30 [ 97.363780][ T7286] dump_stack_lvl+0x95/0xd0 [ 97.363863][ T7286] dump_stack+0x15/0x1b [ 97.363887][ T7286] should_fail_ex+0x262/0x280 [ 97.363919][ T7286] ? mqueue_init_fs_context+0x38/0x2c0 [ 97.363953][ T7286] should_failslab+0x8c/0xb0 [ 97.363995][ T7286] __kmalloc_cache_noprof+0x7a/0x400 [ 97.364039][ T7286] ? mqueue_init_fs_context+0x38/0x2c0 [ 97.364146][ T7286] mqueue_init_fs_context+0x38/0x2c0 [ 97.364181][ T7286] alloc_fs_context+0x490/0x570 [ 97.364211][ T7286] fs_context_for_mount+0x22/0x30 [ 97.364239][ T7286] mq_init_ns+0xac/0x370 [ 97.364336][ T7286] copy_ipcs+0x26d/0x460 [ 97.364368][ T7286] create_new_namespaces+0x121/0x420 [ 97.364399][ T7286] unshare_nsproxy_namespaces+0x115/0x150 [ 97.364431][ T7286] ksys_unshare+0x3fd/0x6f0 [ 97.364508][ T7286] __x64_sys_unshare+0x1f/0x30 [ 97.364534][ T7286] x64_sys_call+0x1e33/0x2550 [ 97.364624][ T7286] do_syscall_64+0x112/0x360 [ 97.364652][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.364686][ T7286] RIP: 0033:0x7fb51072e559 [ 97.364749][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.364768][ T7286] RSP: 002b:00007fb50f187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.364792][ T7286] RAX: ffffffffffffffda RBX: 00007fb5109b5fa0 RCX: 00007fb51072e559 [ 97.364885][ T7286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 97.364901][ T7286] RBP: 00007fb5107c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.364918][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.364977][ T7286] R13: 00007fb5109b6038 R14: 00007fb5109b5fa0 R15: 00007fffcc1c3918 [ 97.365000][ T7286] [ 97.371133][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 97.567825][ T29] audit: type=1326 audit(1792151845.685:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.6.1316" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 97.622204][ T7301] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1318'. [ 100.698443][ T7316] netlink: 'syz.8.1325': attribute type 19 has an invalid length. [ 100.698463][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1325'. [ 100.703448][ T7319] ip_tables: iptables: counters copy to user failed while replacing table [ 100.706432][ T7316] netlink: 'syz.8.1325': attribute type 19 has an invalid length. [ 100.706448][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1325'. [ 100.720097][ T42] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.720160][ T42] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.720195][ T42] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.720266][ T42] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.804437][ T7324] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1329'. [ 100.804920][ T7324] tipc: Enabled bearer , priority 10 [ 100.989105][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 100.989105][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 100.989136][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 101.055803][ T7343] FAULT_INJECTION: forcing a failure. [ 101.055803][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.055835][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.6.1337 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.055892][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.055906][ T7343] Call Trace: [ 101.055912][ T7343] [ 101.055919][ T7343] __dump_stack+0x1d/0x30 [ 101.055949][ T7343] dump_stack_lvl+0x95/0xd0 [ 101.055970][ T7343] dump_stack+0x15/0x1b [ 101.055994][ T7343] should_fail_ex+0x262/0x280 [ 101.056087][ T7343] should_fail+0xb/0x20 [ 101.056117][ T7343] should_fail_usercopy+0x1a/0x20 [ 101.056153][ T7343] _copy_from_user+0x1c/0xb0 [ 101.056192][ T7343] bpf_vlog_reverse_ubuf+0xed/0x360 [ 101.056217][ T7343] bpf_vlog_finalize+0x147/0x200 [ 101.056244][ T7343] bpf_log_attr_finalize+0x33/0x100 [ 101.056273][ T7343] btf_new_fd+0x34a/0x6a0 [ 101.056325][ T7343] bpf_btf_load+0x116/0x130 [ 101.056360][ T7343] __sys_bpf+0xbce/0xc30 [ 101.056386][ T7343] ? do_futex+0x2e0/0x460 [ 101.056433][ T7343] __x64_sys_bpf+0x69/0x80 [ 101.056463][ T7343] x64_sys_call+0xf26/0x2550 [ 101.056494][ T7343] do_syscall_64+0x112/0x360 [ 101.056596][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.056623][ T7343] RIP: 0033:0x7fc9c922e559 [ 101.056638][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.056702][ T7343] RSP: 002b:00007fc9c7c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.056775][ T7343] RAX: ffffffffffffffda RBX: 00007fc9c94b5fa0 RCX: 00007fc9c922e559 [ 101.056789][ T7343] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 101.056802][ T7343] RBP: 00007fc9c92c58b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.056819][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.056833][ T7343] R13: 00007fc9c94b6038 R14: 00007fc9c94b5fa0 R15: 00007fff49f29c18 [ 101.056856][ T7343] [ 101.066324][ T7345] FAULT_INJECTION: forcing a failure. [ 101.066324][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.066413][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: syz.1.1338 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.066459][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.066473][ T7345] Call Trace: [ 101.066481][ T7345] [ 101.066489][ T7345] __dump_stack+0x1d/0x30 [ 101.066595][ T7345] dump_stack_lvl+0x95/0xd0 [ 101.066619][ T7345] dump_stack+0x15/0x1b [ 101.066642][ T7345] should_fail_ex+0x262/0x280 [ 101.066733][ T7345] should_fail+0xb/0x20 [ 101.066787][ T7345] should_fail_usercopy+0x1a/0x20 [ 101.066820][ T7345] _copy_from_user+0x1c/0xb0 [ 101.066912][ T7345] udp_lib_setsockopt+0x148/0x470 [ 101.066946][ T7345] udpv6_setsockopt+0x67/0xa0 [ 101.066977][ T7345] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 101.067012][ T7345] sock_common_setsockopt+0x69/0x80 [ 101.067106][ T7345] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.067143][ T7345] __sys_setsockopt+0x184/0x200 [ 101.067171][ T7345] __x64_sys_setsockopt+0x64/0x80 [ 101.067204][ T7345] x64_sys_call+0x248f/0x2550 [ 101.067234][ T7345] do_syscall_64+0x112/0x360 [ 101.067262][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.067287][ T7345] RIP: 0033:0x7fd430dde559 [ 101.067304][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.067330][ T7345] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.067403][ T7345] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 101.067420][ T7345] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000003 [ 101.067434][ T7345] RBP: 00007fd430e758b0 R08: 0000000000000004 R09: 0000000000000000 [ 101.067481][ T7345] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 101.067496][ T7345] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 101.067517][ T7345] [ 101.168607][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 101.168622][ T29] audit: type=1326 audit(1792151849.275:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.7.1342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51072e559 code=0x0 [ 101.323148][ T7361] FAULT_INJECTION: forcing a failure. [ 101.323148][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.323190][ T7361] CPU: 0 UID: 0 PID: 7361 Comm: syz.1.1345 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.323217][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.323235][ T7361] Call Trace: [ 101.323242][ T7361] [ 101.323250][ T7361] __dump_stack+0x1d/0x30 [ 101.323279][ T7361] dump_stack_lvl+0x95/0xd0 [ 101.323303][ T7361] dump_stack+0x15/0x1b [ 101.323326][ T7361] should_fail_ex+0x262/0x280 [ 101.323357][ T7361] should_fail+0xb/0x20 [ 101.323391][ T7361] should_fail_usercopy+0x1a/0x20 [ 101.323453][ T7361] _copy_to_user+0x20/0xa0 [ 101.323539][ T7361] bpf_verifier_vlog+0x3c5/0x5a0 [ 101.323566][ T7361] __btf_verifier_log+0x7f/0xb0 [ 101.323673][ T7361] btf_verifier_log_vsi+0x13a/0x1f0 [ 101.323699][ T7361] btf_datasec_check_meta+0x57f/0x640 [ 101.323807][ T7361] ? sort+0x6c/0xa0 [ 101.323841][ T7361] btf_parse_type_sec+0x291/0x1520 [ 101.323865][ T7361] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 101.323889][ T7361] ? btf_parse_hdr+0x43a/0x440 [ 101.323986][ T7361] ? btf_parse_str_sec+0x1ae/0x1b0 [ 101.324010][ T7361] btf_new_fd+0x2ec/0x6a0 [ 101.324092][ T7361] bpf_btf_load+0x116/0x130 [ 101.324125][ T7361] __sys_bpf+0xbce/0xc30 [ 101.324156][ T7361] ? do_futex+0x2e0/0x460 [ 101.324244][ T7361] __x64_sys_bpf+0x69/0x80 [ 101.324269][ T7361] x64_sys_call+0xf26/0x2550 [ 101.324297][ T7361] do_syscall_64+0x112/0x360 [ 101.324327][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.324377][ T7361] RIP: 0033:0x7fd430dde559 [ 101.324458][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.324479][ T7361] RSP: 002b:00007fd42f837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.324502][ T7361] RAX: ffffffffffffffda RBX: 00007fd431065fa0 RCX: 00007fd430dde559 [ 101.324518][ T7361] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 101.324587][ T7361] RBP: 00007fd430e758b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.324602][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.324695][ T7361] R13: 00007fd431066038 R14: 00007fd431065fa0 R15: 00007ffff9628058 [ 101.324717][ T7361] [ 101.534515][ T29] audit: type=1400 audit(1792151849.645:4727): avc: denied { write } for pid=7367 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.617256][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.617347][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.698593][ T7370] set_capacity_and_notify: 5 callbacks suppressed [ 101.698657][ T7370] loop6: detected capacity change from 0 to 256 [ 101.919164][ T11] tipc: Node number set to 43690 [ 102.057319][ T29] audit: type=1400 audit(1792151850.165:4728): avc: denied { write } for pid=7385 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.224882][ T7396] FAULT_INJECTION: forcing a failure. [ 102.224882][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 102.224921][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.0.1360 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.224949][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.224961][ T7396] Call Trace: [ 102.224968][ T7396] [ 102.224975][ T7396] __dump_stack+0x1d/0x30 [ 102.225045][ T7396] dump_stack_lvl+0x95/0xd0 [ 102.225073][ T7396] dump_stack+0x15/0x1b [ 102.225113][ T7396] should_fail_ex+0x262/0x280 [ 102.225142][ T7396] ? sk_prot_alloc+0x3f/0x180 [ 102.225234][ T7396] should_failslab+0x8c/0xb0 [ 102.225271][ T7396] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 102.225319][ T7396] ? sk_prot_alloc+0x3f/0x180 [ 102.225349][ T7396] sk_prot_alloc+0x3f/0x180 [ 102.225449][ T7396] sk_alloc+0x34/0x3e0 [ 102.225471][ T7396] rds_create+0x68/0x310 [ 102.225500][ T7396] __sock_create+0x2e5/0x580 [ 102.225541][ T7396] __sys_socket+0xaf/0x180 [ 102.225626][ T7396] __x64_sys_socket+0x3f/0x50 [ 102.225653][ T7396] x64_sys_call+0x246e/0x2550 [ 102.225678][ T7396] do_syscall_64+0x112/0x360 [ 102.225703][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.225728][ T7396] RIP: 0033:0x7f0a7193e559 [ 102.225750][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.225773][ T7396] RSP: 002b:00007f0a70397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.225795][ T7396] RAX: ffffffffffffffda RBX: 00007f0a71bc5fa0 RCX: 00007f0a7193e559 [ 102.225810][ T7396] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 102.225822][ T7396] RBP: 00007f0a719d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 102.225860][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.225875][ T7396] R13: 00007f0a71bc6038 R14: 00007f0a71bc5fa0 R15: 00007ffebc6a8988 [ 102.225944][ T7396] [ 103.150567][ T29] audit: type=1400 audit(1792151851.265:4729): avc: denied { write } for pid=7419 comm="syz.0.1370" path="socket:[18029]" dev="sockfs" ino=18029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.211159][ T7430] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.338705][ T29] audit: type=1400 audit(1792151851.445:4730): avc: denied { watch } for pid=7437 comm="syz.7.1377" path="/proc/128/task" dev="proc" ino=18074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 103.515428][ T29] audit: type=1326 audit(2000000000.119:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.6.1381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 103.516273][ T29] audit: type=1326 audit(2000000000.119:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.6.1381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 103.516563][ T29] audit: type=1326 audit(2000000000.119:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.6.1381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 103.518095][ T29] audit: type=1326 audit(2000000000.119:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.6.1381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 103.518746][ T29] audit: type=1326 audit(2000000000.119:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.6.1381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c922e559 code=0x7ffc0000 [ 103.691125][ T7452] netlink: 'syz.1.1383': attribute type 4 has an invalid length. [ 103.691142][ T7452] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1383'. [ 103.730529][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 103.922010][ T7462] ================================================================== [ 103.922043][ T7462] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 103.922078][ T7462] [ 103.922085][ T7462] read-write to 0xffffc90000ef7cc0 of 8 bytes by task 7466 on cpu 1: [ 103.922105][ T7462] shmem_writeout+0x2eb/0x8f0 [ 103.922138][ T7462] shrink_folio_list+0x1a81/0x26f0 [ 103.922168][ T7462] evict_folios+0x1c6e/0x2830 [ 103.922191][ T7462] try_to_shrink_lruvec+0x8fd/0xb30 [ 103.922218][ T7462] shrink_lruvec+0x252/0x1d40 [ 103.922235][ T7462] shrink_node+0x67c/0x2000 [ 103.922259][ T7462] do_try_to_free_pages+0x408/0xca0 [ 103.922276][ T7462] try_to_free_mem_cgroup_pages+0x201/0x420 [ 103.922299][ T7462] mem_cgroup_resize_max+0x13d/0x290 [ 103.922335][ T7462] mem_cgroup_write+0x132/0x1c0 [ 103.922362][ T7462] cgroup_file_write+0x197/0x350 [ 103.922391][ T7462] kernfs_fop_write_iter+0x1d2/0x2e0 [ 103.922417][ T7462] vfs_write+0x57f/0x9a0 [ 103.922448][ T7462] ksys_write+0xdc/0x1a0 [ 103.922482][ T7462] __x64_sys_write+0x40/0x50 [ 103.922515][ T7462] x64_sys_call+0x154e/0x2550 [ 103.922543][ T7462] do_syscall_64+0x112/0x360 [ 103.922565][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.922588][ T7462] [ 103.922593][ T7462] read to 0xffffc90000ef7cc0 of 8 bytes by task 7462 on cpu 0: [ 103.922608][ T7462] shmem_fallocate+0x5cb/0x8d0 [ 103.922632][ T7462] vfs_fallocate+0x3ac/0x400 [ 103.922650][ T7462] file_ioctl+0x4e1/0x5b0 [ 103.922687][ T7462] do_vfs_ioctl+0x7c4/0xe50 [ 103.922725][ T7462] __se_sys_ioctl+0x82/0x140 [ 103.922759][ T7462] __x64_sys_ioctl+0x43/0x50 [ 103.922789][ T7462] x64_sys_call+0x239d/0x2550 [ 103.922819][ T7462] do_syscall_64+0x112/0x360 [ 103.922847][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.922867][ T7462] [ 103.922870][ T7462] value changed: 0x0000000000000282 -> 0x0000000000000287 [ 103.922881][ T7462] [ 103.922885][ T7462] Reported by Kernel Concurrency Sanitizer on: [ 103.922895][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.7.1388 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.922925][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.922939][ T7462] ================================================================== [ 106.029128][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 106.029128][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 106.029195][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 111.069350][ T5939] kmmpd-loop3: attempt to access beyond end of device [ 111.069350][ T5939] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 111.069383][ T5939] Buffer I/O error on dev loop3, logical block 64, lost sync page write