last executing test programs: 3.746515941s ago: executing program 1 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.652085983s ago: executing program 1 (id=1318): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xd) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x1, 0x2, 0x5b, 0xffff676c, 0x0}) socket$kcm(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000300), 0x3, 0x42f, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 3.441880628s ago: executing program 4 (id=1321): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 3.433307739s ago: executing program 1 (id=1322): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0) pwrite64(r1, &(0x7f0000000140), 0x0, 0xe7c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 3.088805847s ago: executing program 1 (id=1332): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) capget(&(0x7f00000005c0)={0x19980330, r2}, &(0x7f0000000600)={0xb3, 0xff, 0x3, 0x6, 0x8, 0xffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x6, 0x8169, 0x7fff, 0x6, 0xb, "938934a715d83383"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000c311000010010000950000000000000002a759c741efb00472705d4042ab3ce91c9f41f40108e1c2474cb196c6fee4cb529b49282fe04d83a9cde299237610bdd37fd8260a71855cbc31e09eb1b57e3947726c7432ed7a1a1033a1bbeead78c25fe62848ce87af0b27340ed2ecd7bef42c86527c6dc5bc4cd46391da966b01"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000780)={[{@errors_remount}, {@inlinecrypt}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@data_err_ignore}, {@dax_never}, {@journal_async_commit}, {@orlov}, {@noauto_da_alloc}]}, 0x1, 0x588, &(0x7f0000000d00)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) shutdown(r3, 0x0) r5 = io_uring_setup(0xbed, &(0x7f0000000000)={0x0, 0x82606, 0x800, 0x100002, 0x2a0}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f0000000080)={0xd33e, 0xaca3, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000006c0)={0x5, &(0x7f0000000140)=[{0x100, 0xa2, 0x5, 0x3}, {0x4, 0x1, 0x3, 0x8001}, {0x7, 0x1, 0xfa}, {0x3, 0x5, 0x9, 0x400000}, {0x2, 0x5, 0x2, 0x9}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000640)) ioctl$TCSBRK(r1, 0x5409, 0x0) 3.032308728s ago: executing program 3 (id=1333): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0xe0000526) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") pread64(r2, &(0x7f0000002200)=""/87, 0x57, 0xfffd) open(&(0x7f0000000180)='./bus\x00', 0x149cc2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESET(r4, 0xc00c5512) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{}]}) r7 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r7, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x7, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 3.022858178s ago: executing program 4 (id=1334): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2.352107464s ago: executing program 3 (id=1338): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.09550436s ago: executing program 4 (id=1340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001800)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x12, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x34, 0x71, 0x425, 0x5070bd28, 0x7e, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 1.971059793s ago: executing program 0 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.879961785s ago: executing program 4 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x5000201a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00001e1000/0x2000)=nil, 0x2000, 0x13) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) socket(0x3, 0x6, 0x7f) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x77c34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x4, 0x2}, 0x10ecc8, 0x1, 0x0, 0x6, 0xd, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = semget(0x0, 0x1, 0x8) semctl$IPC_RMID(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000041) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000340)='./sys\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/225, 0xe1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0000:00:07.0', 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffc}}, 0xc7, 0x4, 0x0, 0x0, 0x54, 0x6}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 1.868511685s ago: executing program 0 (id=1345): socket$inet(0x2, 0x80001, 0x84) eventfd(0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.717717269s ago: executing program 1 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 1.617827811s ago: executing program 4 (id=1347): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000100)={r0, 0x0, 0x5, 0x7, 0xffffffff, 0x2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x201, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000800000800000049c56e32dd5ee3af000000000095000000000000000c93188ded4c062ae68bed7160e69aa310290b01f69dafc0e7708fcba0c58a0974e83b16f2773fef81e49c5ec59a1084e5e7bfd1dfacb175166810376d980b8ad93fa580dc70ccd0df8c4ee50c76e928a81f0974cf06d8d838efe1157c6d2bd098f9a75611e0180e0b0ae904195c7b214302ec3883a2bc8d526bbe0c0feab647e26ca423c5c11cc896e81ede9d492480c9945fd587b66553d5236225fac36f3478be0b122cbaea5fe4645ce6a87b525b01d7e6fc9b1933b81b7f150cf9d46317bae422fef0b205b4ff3f2d9eacba8a358212c8928ef50d8471a4833cb2e4b505c3604ee9290c2c062ca453338c19d43d60f66b56a42e966c900e9a4340a1d203086fd7f0d9581441af2c0bcb9b1095b05378bc4a5a2bdc92df1501c7aa670a024866d48e4c09c40c5294e8d7d74f5c96124302820bb9f2d435be3586ea60f799fb74b15fca0902289073bb8fe36eca785794d29efc956dc9d5899d7859f2d009fcade912a8055746795b23d2ca73256875f4a7e164149593c07c48d42f93a9d4d0c0e5543bd01856ff96f10018248a2d8e"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x0, r4, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1.558982443s ago: executing program 2 (id=1348): r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0xc, 0x28d, 0x9, 0x8}) 1.428019496s ago: executing program 2 (id=1349): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x407}], 0x1}, 0x0) 1.353135297s ago: executing program 2 (id=1350): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x51ba, 0x64344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x40008000}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x100000, 0x0, 0x9}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x1010, 0xffffffffffffffff, 0xffffc000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x40, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x4, 0x10}, 0xe) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/255) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x9000000d}) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) io_submit(0x0, 0x0, 0x0) get_mempolicy(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000ffa000/0x3000)=nil, 0x4) 1.199874391s ago: executing program 2 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.157353382s ago: executing program 3 (id=1352): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xd) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socket$kcm(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000300), 0x3, 0x42f, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 1.055508985s ago: executing program 2 (id=1353): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xd) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socket$kcm(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000300), 0x3, 0x42f, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 970.741566ms ago: executing program 4 (id=1354): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2e, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) write(r2, &(0x7f0000000140)='0', 0x1) 949.110317ms ago: executing program 0 (id=1355): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x2000c1, &(0x7f0000000140)={@align=0x1, {0x2, 0xff, 0x9, 0x100}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x400}) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000280), 0x4001) setpgid(0x0, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='c\"u\t~0&&\t') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) tkill(r2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x1, r6, 0x6, {0xffffffffffffffff, 0x6}, 0x9}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write$P9_RCLUNK(r7, &(0x7f00000000c0)={0x30, 0x79, 0x1}, 0x7) fcntl$getown(r1, 0x9) readv(r5, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) sendmmsg$unix(r1, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000049c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x44010}}], 0x1, 0x40800) 896.905158ms ago: executing program 3 (id=1356): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x40, 0x255fdbfb, {0xa, 0x0, 0x80}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x14504, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0xb}, 0x800, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x9) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 712.424833ms ago: executing program 0 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x5000201a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00001e1000/0x2000)=nil, 0x2000, 0x13) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) socket(0x3, 0x6, 0x7f) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x77c34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x4, 0x2}, 0x10ecc8, 0x1, 0x0, 0x6, 0xd, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = semget(0x0, 0x1, 0x8) semctl$IPC_RMID(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000041) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000340)='./sys\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/225, 0xe1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0000:00:07.0', 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffc}}, 0xc7, 0x4, 0x0, 0x0, 0x54, 0x6}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 699.695043ms ago: executing program 2 (id=1358): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x8000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) connect(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001014010025bd7000fcdbdf2508", @ANYRES8=0x0, @ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) 643.745125ms ago: executing program 3 (id=1359): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40), 0x0, 0x0) 478.690519ms ago: executing program 0 (id=1360): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000100)={r0, 0x0, 0x5, 0x7, 0xffffffff, 0x2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x201, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x0, r4, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 280.642413ms ago: executing program 0 (id=1361): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x51ba, 0x64344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x40008000}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x100000, 0x0, 0x9}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x40, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x4, 0x10}, 0xe) shutdown(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000100)=""/255) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x9000000d}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) io_submit(0x0, 0x0, 0x0) get_mempolicy(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000ffa000/0x3000)=nil, 0x4) 354.64µs ago: executing program 1 (id=1362): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0xc02063a1, 0x0) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, 0xf24, 0x9) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) write(r6, &(0x7f0000000300)='\x00', 0x1) ftruncate(r3, 0x80079a0) 0s ago: executing program 3 (id=1363): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xec, 0x81, 0x7, 0xe, 0x0, 0x7, 0x6000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x100c01, 0xf, 0x5, 0x4, 0xfffffffffffff000, 0x7, 0xc62, 0x0, 0x33b9, 0x0, 0xd}, 0x0, 0xd, 0xffffffffffffffff, 0x5) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x66, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, r0, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): em using the ext4 subsystem [ 95.350411][ T5760] EXT4-fs (loop2): 1 truncate cleaned up [ 95.515490][ T5774] loop3: detected capacity change from 0 to 512 [ 95.551041][ T5774] EXT4-fs: inline encryption not supported [ 95.562030][ T5774] EXT4-fs: dax option not supported [ 95.946930][ T5809] loop3: detected capacity change from 0 to 512 [ 95.956035][ T5809] EXT4-fs: Ignoring removed bh option [ 95.962057][ T5809] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 95.973933][ T5809] EXT4-fs (loop3): 1 truncate cleaned up [ 96.055564][ T5817] loop1: detected capacity change from 0 to 512 [ 96.071610][ T5817] EXT4-fs: Ignoring removed bh option [ 96.081036][ T5819] loop2: detected capacity change from 0 to 512 [ 96.108108][ T5817] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 96.133149][ T5819] EXT4-fs: Ignoring removed bh option [ 96.143670][ T5817] EXT4-fs (loop1): 1 truncate cleaned up [ 96.169117][ T5826] loop3: detected capacity change from 0 to 512 [ 96.175898][ T5826] EXT4-fs: Ignoring removed bh option [ 96.181625][ T5826] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 96.199550][ T5826] EXT4-fs (loop3): 1 truncate cleaned up [ 96.217940][ T5819] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 96.330180][ T5819] EXT4-fs (loop2): 1 truncate cleaned up [ 96.616110][ T5842] loop1: detected capacity change from 0 to 512 [ 96.633610][ T5842] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.804: corrupted in-inode xattr: e_value out of bounds [ 96.659308][ T5842] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.662760][ T5842] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.804: couldn't read orphan inode 15 (err -117) [ 96.679219][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.690431][ C1] EXT4-fs (loop1): initial error at time 1786813571: ext4_iget_extra_inode:5180: inode 15 [ 96.690812][ T5842] loop1: lost filesystem error report for type 5 error -117 [ 96.700402][ C1] EXT4-fs (loop1): last error at time 1786813571: ext4_iget_extra_inode:5180: inode 15 [ 96.811862][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.827749][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.972051][ T5859] loop2: detected capacity change from 0 to 512 [ 97.011206][ T5859] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.809: corrupted in-inode xattr: e_value out of bounds [ 97.092358][ T5859] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.099065][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.114827][ C0] EXT4-fs (loop2): initial error at time 1786813572: ext4_iget_extra_inode:5180: inode 15 [ 97.122288][ T5859] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.809: couldn't read orphan inode 15 (err -117) [ 97.124863][ C0] EXT4-fs (loop2): last error at time 1786813572: ext4_iget_extra_inode:5180: inode 15 [ 97.138090][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 97.189158][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 97.192094][ T5883] FAULT_INJECTION: forcing a failure. [ 97.192094][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 97.222220][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.0.815 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.222280][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.222335][ T5883] Call Trace: [ 97.222344][ T5883] [ 97.222353][ T5883] __dump_stack+0x1d/0x30 [ 97.222384][ T5883] dump_stack_lvl+0x95/0xd0 [ 97.222475][ T5883] dump_stack+0x15/0x1b [ 97.222500][ T5883] should_fail_ex+0x25e/0x270 [ 97.222592][ T5883] should_failslab+0x8c/0xb0 [ 97.222664][ T5883] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 97.222692][ T5883] ? __alloc_skb+0x2db/0x6f0 [ 97.222746][ T5883] ? __alloc_skb+0x2db/0x6f0 [ 97.222801][ T5883] __alloc_skb+0x2db/0x6f0 [ 97.222880][ T5883] ? __alloc_skb+0x205/0x6f0 [ 97.222913][ T5883] netlink_alloc_large_skb+0xbf/0xf0 [ 97.222998][ T5883] netlink_sendmsg+0x40c/0x6f0 [ 97.223075][ T5883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.223113][ T5883] ____sys_sendmsg+0x532/0x580 [ 97.223138][ T5883] ___sys_sendmsg+0x195/0x1e0 [ 97.223203][ T5883] __x64_sys_sendmsg+0xd4/0x160 [ 97.223305][ T5883] x64_sys_call+0x194c/0x3020 [ 97.223336][ T5883] do_syscall_64+0x136/0x3c0 [ 97.223371][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.223399][ T5883] RIP: 0033:0x7fd6e774e0d9 [ 97.223420][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.223528][ T5883] RSP: 002b:00007fd6e61a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.223553][ T5883] RAX: ffffffffffffffda RBX: 00007fd6e79d5fa0 RCX: 00007fd6e774e0d9 [ 97.223617][ T5883] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 97.223633][ T5883] RBP: 00007fd6e61a7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.223649][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.223665][ T5883] R13: 00007fd6e79d6038 R14: 00007fd6e79d5fa0 R15: 00007ffc61744198 [ 97.223768][ T5883] [ 97.239220][ T5859] loop2: lost filesystem error report for type 5 error -117 [ 97.260091][ T5886] loop4: detected capacity change from 0 to 512 [ 97.435774][ T5886] EXT4-fs: Ignoring removed bh option [ 97.442246][ T5886] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 97.454117][ T5886] EXT4-fs (loop4): 1 truncate cleaned up [ 97.568019][ T5859] FAULT_INJECTION: forcing a failure. [ 97.568019][ T5859] name failslab, interval 1, probability 0, space 0, times 0 [ 97.581860][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz.2.809 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.581923][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.581936][ T5859] Call Trace: [ 97.581944][ T5859] [ 97.581954][ T5859] __dump_stack+0x1d/0x30 [ 97.581980][ T5859] dump_stack_lvl+0x95/0xd0 [ 97.582063][ T5859] dump_stack+0x15/0x1b [ 97.582090][ T5859] should_fail_ex+0x25e/0x270 [ 97.582132][ T5859] should_failslab+0x8c/0xb0 [ 97.582161][ T5859] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 97.582202][ T5859] ? sidtab_sid2str_get+0xa0/0x130 [ 97.582229][ T5859] ? sidtab_sid2str_get+0xa0/0x130 [ 97.582254][ T5859] kmemdup_noprof+0x2b/0x70 [ 97.582324][ T5859] sidtab_sid2str_get+0xa0/0x130 [ 97.582446][ T5859] security_sid_to_context_core+0x1eb/0x2e0 [ 97.582495][ T5859] security_sid_to_context+0x27/0x40 [ 97.582605][ T5859] avc_audit_post_callback+0x10f/0x520 [ 97.582667][ T5859] ? audit_log_lsm_data+0x7ea/0xbb0 [ 97.582724][ T5859] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 97.582751][ T5859] common_lsm_audit+0x1ba/0x230 [ 97.582794][ T5859] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 97.582890][ T5859] slow_avc_audit+0x14c/0x190 [ 97.583111][ T5859] audit_inode_permission+0x119/0x160 [ 97.583186][ T5859] selinux_inode_permission+0x66e/0x740 [ 97.583247][ T5859] security_inode_permission+0x69/0xa0 [ 97.583278][ T5859] inode_permission+0x1da/0x3b0 [ 97.583317][ T5859] may_create_dentry+0x199/0x1f0 [ 97.583421][ T5859] vfs_mkdir+0x59/0x3e0 [ 97.583447][ T5859] ? filename_mkdirat+0x9e/0x300 [ 97.583516][ T5859] filename_mkdirat+0x138/0x300 [ 97.583551][ T5859] __se_sys_mkdirat+0x32/0xf0 [ 97.583580][ T5859] __x64_sys_mkdirat+0x43/0x50 [ 97.583609][ T5859] x64_sys_call+0x2c4e/0x3020 [ 97.583657][ T5859] do_syscall_64+0x136/0x3c0 [ 97.583694][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.583733][ T5859] RIP: 0033:0x7faa754acf47 [ 97.583767][ T5859] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.583868][ T5859] RSP: 002b:00007faa73f06e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 97.583894][ T5859] RAX: ffffffffffffffda RBX: 00007faa73f06ee0 RCX: 00007faa754acf47 [ 97.583913][ T5859] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 97.583930][ T5859] RBP: 0000200000000340 R08: 0000200000000080 R09: 0000000000000000 [ 97.584022][ T5859] R10: 0000200000000340 R11: 0000000000000246 R12: 0000200000000100 [ 97.584040][ T5859] R13: 00007faa73f06ea0 R14: 0000000000000000 R15: 0000000000000000 [ 97.584067][ T5859] [ 97.587757][ T5897] loop1: detected capacity change from 0 to 4096 [ 98.099709][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 98.111515][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 98.133480][ T5919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.160278][ T5919] EXT4-fs (loop3): 1 truncate cleaned up [ 98.538854][ T5934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.561294][ T5934] EXT4-fs (loop4): 1 truncate cleaned up [ 98.571356][ T28] kauditd_printk_skb: 418 callbacks suppressed [ 98.571371][ T28] audit: type=1400 audit(1786813573.668:8568): avc: denied { write } for pid=5933 comm="syz.4.829" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.892484][ T5949] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 98.937000][ T5949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.016365][ T5949] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.138411][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.169665][ T5958] EXT4-fs: Ignoring removed bh option [ 99.201807][ T5956] bond1: (slave batadv1): making interface the new active one [ 99.225802][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 99.237101][ T5958] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.248361][ T5961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5961 comm=syz.0.835 [ 99.261029][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 99.280587][ T5956] batadv1: entered promiscuous mode [ 99.290940][ T5958] EXT4-fs (loop2): 1 truncate cleaned up [ 99.299855][ T5956] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.346579][ T28] audit: type=1400 audit(1786813574.438:8569): avc: denied { create } for pid=5948 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.373460][ T5965] EXT4-fs: Ignoring removed bh option [ 99.393797][ T5965] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.405487][ T5961] bond1 (unregistering): (slave veth3): Releasing active interface [ 99.437849][ T5965] EXT4-fs (loop3): 1 truncate cleaned up [ 99.450567][ T28] audit: type=1400 audit(1786813574.458:8570): avc: denied { write } for pid=5948 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.487937][ T5961] bond1 (unregistering): (slave batadv1): Releasing active interface [ 99.526553][ T5961] bond1 (unregistering): Released all slaves [ 99.598974][ T28] audit: type=1326 audit(1786813574.688:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 99.639385][ T28] audit: type=1326 audit(1786813574.718:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 99.751670][ T28] audit: type=1326 audit(1786813574.718:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 99.826210][ T28] audit: type=1326 audit(1786813574.718:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 99.852414][ T28] audit: type=1326 audit(1786813574.718:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 99.978157][ T28] audit: type=1326 audit(1786813574.728:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 100.098228][ T28] audit: type=1326 audit(1786813574.728:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.4.832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3053e0d9 code=0x7ffc0000 [ 100.375426][ T6001] set_capacity_and_notify: 4 callbacks suppressed [ 100.375509][ T6001] loop2: detected capacity change from 0 to 512 [ 100.390889][ T6001] EXT4-fs: Ignoring removed bh option [ 100.401255][ T6001] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.417312][ T6001] EXT4-fs (loop2): 1 truncate cleaned up [ 100.490243][ T6007] loop2: detected capacity change from 0 to 512 [ 100.512127][ T6009] loop4: detected capacity change from 0 to 164 [ 100.557273][ T6007] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.850: corrupted in-inode xattr: e_value out of bounds [ 100.564218][ T6009] 9pnet_fd: p9_fd_create_unix (6009): problem connecting socket: ./file0: -111 [ 100.614837][ T6007] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.615057][ T6007] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.850: couldn't read orphan inode 15 (err -117) [ 100.624012][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 100.624325][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 100.624347][ C0] EXT4-fs (loop2): initial error at time 1786813575: ext4_iget_extra_inode:5180: inode 15 [ 100.624386][ C0] EXT4-fs (loop2): last error at time 1786813575: ext4_iget_extra_inode:5180: inode 15 [ 100.635091][ T6007] loop2: lost filesystem error report for type 5 error -117 [ 100.687649][ T6020] FAULT_INJECTION: forcing a failure. [ 100.687649][ T6020] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.708215][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.4.854 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.708248][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.708265][ T6020] Call Trace: [ 100.708306][ T6020] [ 100.708315][ T6020] __dump_stack+0x1d/0x30 [ 100.708347][ T6020] dump_stack_lvl+0x95/0xd0 [ 100.708374][ T6020] dump_stack+0x15/0x1b [ 100.708394][ T6020] should_fail_ex+0x25e/0x270 [ 100.708483][ T6020] should_fail+0xb/0x20 [ 100.708548][ T6020] should_fail_usercopy+0x1a/0x20 [ 100.708662][ T6020] _copy_to_user+0x20/0xa0 [ 100.708697][ T6020] bpf_prog_test_run_raw_tp+0x448/0x4c0 [ 100.708739][ T6020] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 100.708793][ T6020] bpf_prog_test_run+0x208/0x340 [ 100.708832][ T6020] __sys_bpf+0x8da/0xc30 [ 100.708871][ T6020] ? vfs_write+0x770/0x990 [ 100.708900][ T6020] __x64_sys_bpf+0x69/0x80 [ 100.708979][ T6020] x64_sys_call+0x10cb/0x3020 [ 100.709006][ T6020] do_syscall_64+0x136/0x3c0 [ 100.709043][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.709084][ T6020] RIP: 0033:0x7f1c3053e0d9 [ 100.709102][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.709122][ T6020] RSP: 002b:00007f1c2ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.709143][ T6020] RAX: ffffffffffffffda RBX: 00007f1c307c5fa0 RCX: 00007f1c3053e0d9 [ 100.709158][ T6020] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 100.709172][ T6020] RBP: 00007f1c2ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 100.709244][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.709257][ T6020] R13: 00007f1c307c6038 R14: 00007f1c307c5fa0 R15: 00007ffcd56e9e28 [ 100.709280][ T6020] [ 101.018862][ T6027] loop3: detected capacity change from 0 to 128 [ 101.058761][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.857'. [ 101.124247][ T6031] loop0: detected capacity change from 0 to 512 [ 101.148607][ T6031] EXT4-fs: Ignoring removed bh option [ 101.177386][ T3300] EXT4-fs unmount: 65 callbacks suppressed [ 101.177407][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.200252][ T6031] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 101.229352][ T6031] EXT4-fs (loop0): 1 truncate cleaned up [ 101.239921][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.310520][ T6036] capability: warning: `syz.4.861' uses deprecated v2 capabilities in a way that may be insecure [ 101.553775][ T6044] loop3: detected capacity change from 0 to 512 [ 101.581974][ T6044] EXT4-fs: Ignoring removed bh option [ 101.608150][ T6044] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.632233][ T6044] EXT4-fs (loop3): 1 truncate cleaned up [ 101.643211][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.744307][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.768326][ T6052] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 101.787027][ T6052] syz_tun: entered promiscuous mode [ 101.829894][ T6052] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.871713][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.232600][ T6071] loop0: detected capacity change from 0 to 512 [ 102.272454][ T6075] loop4: detected capacity change from 0 to 128 [ 102.341447][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 102.354529][ T6071] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 102.371649][ T6071] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 102.387545][ T6071] System zones: 0-1, 15-15, 18-18, 34-34 [ 102.399743][ T6071] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.414133][ T6071] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.444708][ T6071] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 102.444992][ T6071] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.871: bad orphan inode 16 [ 102.445102][ T6071] loop0: lost filesystem error report for type 5 error -117 [ 102.445376][ T6071] ext4_test_bit(bit=15, block=18) = 1 [ 102.445395][ T6071] is_bad_inode(inode)=0 [ 102.445405][ T6071] NEXT_ORPHAN(inode)=0 [ 102.445415][ T6071] max_ino=32 [ 102.445424][ T6071] i_nlink=2 [ 102.445897][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.488084][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.563589][ T6080] loop0: detected capacity change from 0 to 512 [ 102.564506][ T6080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.568588][ T6080] EXT4-fs (loop0): 1 truncate cleaned up [ 102.569448][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.911873][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.967337][ T6093] loop4: detected capacity change from 0 to 512 [ 102.967749][ T6093] EXT4-fs: Ignoring removed bh option [ 102.968063][ T6093] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.973774][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 102.974468][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.196697][ T6101] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 103.213055][ T6101] EXT4-fs (loop3): 1 truncate cleaned up [ 103.222135][ T6101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.238194][ T6101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.347215][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.863312][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.885'. [ 103.876131][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 103.876165][ T28] audit: type=1400 audit(1786813578.968:8727): avc: denied { read } for pid=23 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13412 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.963196][ T28] audit: type=1400 audit(1786813579.058:8728): avc: denied { kexec_image_load } for pid=6113 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 104.238923][ T6114] EXT4-fs: inline encryption not supported [ 104.263923][ T6114] EXT4-fs: Ignoring removed bh option [ 104.297192][ T6114] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 104.324708][ T6133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.355001][ T6133] EXT4-fs (loop4): 1 truncate cleaned up [ 104.356402][ T6138] EXT4-fs: inline encryption not supported [ 104.366901][ T6133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.401116][ T6142] EXT4-fs: Ignoring removed bh option [ 104.412289][ T28] audit: type=1400 audit(1786813579.498:8729): avc: denied { write } for pid=6132 comm="syz.4.889" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.437435][ T6138] EXT4-fs: Ignoring removed bh option [ 104.456555][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.460075][ T6142] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 104.477768][ T6138] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 104.478183][ T28] audit: type=1400 audit(1786813579.498:8730): avc: denied { add_name } for pid=6132 comm="syz.4.889" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.514853][ T6142] EXT4-fs (loop2): 1 truncate cleaned up [ 104.522013][ T6142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.523382][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.550126][ T6138] FAULT_INJECTION: forcing a failure. [ 104.550126][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 104.563054][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.3.892 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.563087][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.563106][ T6138] Call Trace: [ 104.563116][ T6138] [ 104.563129][ T6138] __dump_stack+0x1d/0x30 [ 104.563231][ T6138] dump_stack_lvl+0x95/0xd0 [ 104.563256][ T6138] dump_stack+0x15/0x1b [ 104.563293][ T6138] should_fail_ex+0x25e/0x270 [ 104.563347][ T6138] should_failslab+0x8c/0xb0 [ 104.563381][ T6138] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 104.563481][ T6138] ? security_inode_alloc+0x37/0x100 [ 104.563512][ T6138] ? security_inode_alloc+0x37/0x100 [ 104.563551][ T6138] security_inode_alloc+0x37/0x100 [ 104.563589][ T6138] inode_init_always_gfp+0x495/0x4e0 [ 104.563701][ T6138] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 104.563743][ T6138] alloc_inode+0x58/0x170 [ 104.563843][ T6138] iget_locked+0x101/0x440 [ 104.563884][ T6138] __ext4_iget+0x158/0x2400 [ 104.563948][ T6138] ? kmem_cache_alloc_lru_noprof+0x1f6/0x3d0 [ 104.563983][ T6138] ? __d_alloc+0x34/0x320 [ 104.564027][ T6138] ? __d_alloc+0x34/0x320 [ 104.564107][ T6138] ext4_lookup+0x173/0x3a0 [ 104.564158][ T6138] lookup_one_qstr_excl+0xc7/0x240 [ 104.564205][ T6138] __start_renaming+0xff/0x2a0 [ 104.564263][ T6138] filename_renameat2+0x2c1/0x6a0 [ 104.564316][ T6138] __se_sys_rename+0x4a/0x1c0 [ 104.564362][ T6138] __x64_sys_rename+0x31/0x40 [ 104.564403][ T6138] x64_sys_call+0x2b3/0x3020 [ 104.564509][ T6138] do_syscall_64+0x136/0x3c0 [ 104.564549][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.564575][ T6138] RIP: 0033:0x7fd6076de0d9 [ 104.564606][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.564631][ T6138] RSP: 002b:00007fd606137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 104.564658][ T6138] RAX: ffffffffffffffda RBX: 00007fd607965fa0 RCX: 00007fd6076de0d9 [ 104.564719][ T6138] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 104.564739][ T6138] RBP: 00007fd606137090 R08: 0000000000000000 R09: 0000000000000000 [ 104.564787][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.564801][ T6138] R13: 00007fd607966038 R14: 00007fd607965fa0 R15: 00007ffd9b482c98 [ 104.564831][ T6138] [ 104.803434][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.809457][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.822155][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.863041][ T6150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 104.871353][ T6150] System zones: 0-2, 18-18, 34-34 [ 104.877345][ T6150] EXT4-fs (loop4): 1 orphan inode deleted [ 104.883886][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.896638][ T6150] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.935660][ T6159] EXT4-fs: Ignoring removed bh option [ 104.976112][ T6159] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.987854][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.001532][ T6159] EXT4-fs (loop0): 1 truncate cleaned up [ 105.022436][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.060637][ T6165] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.106367][ T6165] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.129218][ T6165] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 105.132477][ T6170] FAULT_INJECTION: forcing a failure. [ 105.132477][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 105.148103][ T6165] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 105.152343][ T28] audit: type=1326 audit(1786813580.218:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.3.900" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 105.162910][ T6165] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.898: Failed to acquire dquot type 1 [ 105.200017][ T6165] loop4: lost filesystem error report for type 5 error -5 [ 105.200126][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.200240][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.200337][ T6170] Call Trace: [ 105.200345][ T6170] [ 105.200355][ T6170] __dump_stack+0x1d/0x30 [ 105.200387][ T6170] dump_stack_lvl+0x95/0xd0 [ 105.200455][ T6170] dump_stack+0x15/0x1b [ 105.200482][ T6170] should_fail_ex+0x25e/0x270 [ 105.200569][ T6170] should_failslab+0x8c/0xb0 [ 105.200600][ T6170] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 105.200670][ T6170] ? audit_log_start+0x34c/0x730 [ 105.200717][ T6170] ? audit_log_start+0x34c/0x730 [ 105.200775][ T6170] audit_log_start+0x34c/0x730 [ 105.200821][ T6170] audit_seccomp+0x49/0x110 [ 105.200859][ T6170] __seccomp_filter+0x905/0x1370 [ 105.200893][ T6170] ? __fget_files+0x184/0x1c0 [ 105.200984][ T6170] ? mutex_lock+0x57/0x90 [ 105.201023][ T6170] ? hrtimer_try_to_cancel+0xf5/0x3c0 [ 105.201100][ T6170] __secure_computing+0x7d/0x150 [ 105.201210][ T6170] do_syscall_64+0xd4/0x3c0 [ 105.201245][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.201275][ T6170] RIP: 0033:0x7fd60769e90e [ 105.201297][ T6170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.201321][ T6170] RSP: 002b:00007fd606136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.201418][ T6170] RAX: ffffffffffffffda RBX: 00007fd6061376c0 RCX: 00007fd60769e90e [ 105.201437][ T6170] RDX: 000000000000000f RSI: 00007fd6061370a0 RDI: 0000000000000004 [ 105.201454][ T6170] RBP: 00007fd606137090 R08: 0000000000000000 R09: 0000000000000000 [ 105.201471][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.201487][ T6170] R13: 00007fd607966038 R14: 00007fd607965fa0 R15: 00007ffd9b482c98 [ 105.201514][ T6170] [ 105.201601][ T6170] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 105.218016][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 105.218041][ C0] EXT4-fs (loop4): initial error at time 1786813580: ext4_acquire_dquot:7041 [ 105.218073][ C0] EXT4-fs (loop4): last error at time 1786813580: ext4_acquire_dquot:7041 [ 105.222272][ T28] audit: type=1326 audit(1786813580.218:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.3.900" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 105.239955][ T6165] EXT4-fs (loop4): Remounting filesystem read-only [ 105.243906][ T28] audit: type=1326 audit(1786813580.218:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.3.900" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 105.267737][ T6165] EXT4-fs (loop4): 1 truncate cleaned up [ 105.498527][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.514887][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.565941][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 105.585021][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.643266][ T6182] FAULT_INJECTION: forcing a failure. [ 105.643266][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 105.658269][ T6180] set_capacity_and_notify: 8 callbacks suppressed [ 105.658290][ T6180] loop3: detected capacity change from 0 to 512 [ 105.684732][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.2.903 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.684772][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.684786][ T6182] Call Trace: [ 105.684805][ T6182] [ 105.684813][ T6182] __dump_stack+0x1d/0x30 [ 105.684845][ T6182] dump_stack_lvl+0x95/0xd0 [ 105.684872][ T6182] dump_stack+0x15/0x1b [ 105.684897][ T6182] should_fail_ex+0x25e/0x270 [ 105.684953][ T6182] ? sctp_stream_init_ext+0x39/0x130 [ 105.684987][ T6182] should_failslab+0x8c/0xb0 [ 105.685016][ T6182] __kmalloc_cache_noprof+0x7b/0x3d0 [ 105.685051][ T6182] ? sctp_stream_init_ext+0x39/0x130 [ 105.685174][ T6182] sctp_stream_init_ext+0x39/0x130 [ 105.685219][ T6182] sctp_sched_set_value+0xec/0x110 [ 105.685250][ T6182] sctp_setsockopt_scheduler_value+0x2b2/0x340 [ 105.685333][ T6182] sctp_setsockopt+0x789/0xea0 [ 105.685361][ T6182] sock_common_setsockopt+0x69/0x80 [ 105.685402][ T6182] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.685442][ T6182] __sys_setsockopt+0x184/0x200 [ 105.685471][ T6182] __x64_sys_setsockopt+0x64/0x80 [ 105.685495][ T6182] x64_sys_call+0x2327/0x3020 [ 105.685582][ T6182] do_syscall_64+0x136/0x3c0 [ 105.685638][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.685676][ T6182] RIP: 0033:0x7faa754ae0d9 [ 105.685698][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.685719][ T6182] RSP: 002b:00007faa73f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.685747][ T6182] RAX: ffffffffffffffda RBX: 00007faa75735fa0 RCX: 00007faa754ae0d9 [ 105.685766][ T6182] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 105.685793][ T6182] RBP: 00007faa73f07090 R08: 0000000000000008 R09: 0000000000000000 [ 105.685808][ T6182] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 105.685821][ T6182] R13: 00007faa75736038 R14: 00007faa75735fa0 R15: 00007ffc3fc6ad78 [ 105.685862][ T6182] [ 105.690233][ T6180] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.806248][ T6185] loop0: detected capacity change from 0 to 512 [ 105.813862][ T6180] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 105.947111][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.956612][ T6185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.976771][ T6185] EXT4-fs (loop0): 1 truncate cleaned up [ 106.005476][ T6185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.052003][ T6193] loop3: detected capacity change from 0 to 128 [ 106.120254][ T6199] loop4: detected capacity change from 0 to 512 [ 106.129393][ T6199] EXT4-fs: Invalid want_extra_isize 1969 [ 106.135824][ T6193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.908'. [ 106.216109][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.253578][ T6208] raw_sendmsg: syz.2.912 forgot to set AF_INET. Fix it! [ 106.308430][ T6212] loop4: detected capacity change from 0 to 512 [ 106.316172][ T6212] EXT4-fs: Ignoring removed bh option [ 106.327998][ T6212] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.329294][ T6212] EXT4-fs (loop4): 1 truncate cleaned up [ 106.330545][ T6212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.550822][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.610212][ T6227] loop2: detected capacity change from 0 to 512 [ 106.621338][ T6227] EXT4-fs: inline encryption not supported [ 106.627483][ T6227] EXT4-fs: dax option not supported [ 106.718201][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.724518][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.731214][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.737888][ T6237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.748790][ T6237] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.785932][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.797416][ T6238] loop0: detected capacity change from 0 to 512 [ 106.804352][ T6238] EXT4-fs: inline encryption not supported [ 106.808863][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.811487][ T6238] EXT4-fs: dax option not supported [ 106.829832][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.836838][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.847474][ T6242] loop4: detected capacity change from 0 to 512 [ 106.854184][ T6237] gretap0 speed is unknown, defaulting to 1000 [ 106.865226][ T6242] EXT4-fs: Ignoring removed bh option [ 106.872170][ T6242] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.885098][ T6242] EXT4-fs (loop4): 1 truncate cleaned up [ 106.891705][ T6242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.933153][ T6245] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 106.955157][ T6248] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 106.964325][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.982799][ T6248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.002548][ T6245] bond1: (slave veth3): Enslaving as an active interface with a down link [ 107.024036][ T6248] bond1: (slave veth3): Enslaving as an active interface with a down link [ 107.028002][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.041392][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.062272][ T6251] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 107.070021][ T6245] bond1: (slave batadv1): making interface the new active one [ 107.086198][ T6245] batadv1: entered promiscuous mode [ 107.092055][ T6245] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 107.111261][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.128215][ T6248] bond1: (slave batadv1): making interface the new active one [ 107.137164][ T6248] batadv1: entered promiscuous mode [ 107.142939][ T6248] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 107.160379][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 107.202736][ T6251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.221184][ T6264] loop0: detected capacity change from 0 to 1024 [ 107.242681][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.259297][ T6264] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.311200][ T6256] bond1: (slave veth5): Enslaving as an active interface with a down link [ 107.395992][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.411384][ T6259] bond1: (slave batadv1): making interface the new active one [ 107.421004][ T6259] batadv1: entered promiscuous mode [ 107.426577][ T6259] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 107.559676][ T6284] loop1: detected capacity change from 0 to 512 [ 107.583025][ T6284] EXT4-fs: Ignoring removed bh option [ 107.601464][ T6284] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.606870][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 107.630436][ T6284] EXT4-fs (loop1): 1 truncate cleaned up [ 107.643753][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.662027][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'. [ 108.059954][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.069736][ T6304] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 108.114139][ T6304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.125191][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.159545][ T6307] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.177735][ T6308] bond2: (slave veth7): Enslaving as an active interface with a down link [ 108.186902][ T6307] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 108.218913][ T6312] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 108.235904][ T6312] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 108.246053][ T6312] FAT-fs (loop0): Filesystem has been set read-only [ 108.254581][ T6307] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.270098][ T6307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.299662][ T6307] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.336870][ T6314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.478686][ T6307] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 108.505231][ T6314] EXT4-fs (loop4): 1 truncate cleaned up [ 108.603078][ T6307] EXT4-fs (loop1): 1 truncate cleaned up [ 108.610761][ T6314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.685905][ T6307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.941844][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.974225][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.010819][ T6333] EXT4-fs: Ignoring removed bh option [ 109.034397][ T6333] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 109.173535][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 109.173551][ T28] audit: type=1400 audit(1786813584.268:8767): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.237871][ T6333] EXT4-fs (loop4): 1 truncate cleaned up [ 109.310518][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.323280][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.332911][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.353423][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.363096][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.380008][ T6338] loop7: unable to read partition table [ 109.428025][ T6338] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.544929][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.951'. [ 109.695477][ T6350] netlink: 'syz.2.953': attribute type 22 has an invalid length. [ 109.703812][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 109.720890][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.729242][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.737325][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.750612][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.758867][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.768969][ T6350] netlink: 'syz.2.953': attribute type 22 has an invalid length. [ 109.776963][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 109.779259][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.794745][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.803651][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.812615][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.847465][ T6353] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 109.870756][ T6353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.910663][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.942292][ T6358] bond2: (slave veth5): Enslaving as an active interface with a down link [ 109.950951][ T6362] EXT4-fs: Ignoring removed bh option [ 109.957491][ T6362] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 109.976577][ T6362] EXT4-fs (loop4): 1 truncate cleaned up [ 109.996253][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.035460][ T28] audit: type=1400 audit(1786813585.128:8768): avc: denied { write } for pid=6361 comm="syz.4.957" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.297371][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.591798][ T6387] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 110.620283][ T28] audit: type=1400 audit(1786813585.718:8769): avc: denied { connect } for pid=6386 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.656957][ T28] audit: type=1400 audit(1786813585.718:8770): avc: denied { getopt } for pid=6386 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.763771][ T6396] set_capacity_and_notify: 8 callbacks suppressed [ 110.763785][ T6394] loop4: detected capacity change from 0 to 512 [ 110.763792][ T6396] loop2: detected capacity change from 0 to 512 [ 110.776478][ T6396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.777790][ T6394] EXT4-fs: inline encryption not supported [ 110.802899][ T6394] EXT4-fs: dax option not supported [ 110.814976][ T6396] EXT4-fs (loop2): 1 truncate cleaned up [ 110.834992][ T6396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.855168][ T28] audit: type=1400 audit(1786813585.948:8771): avc: denied { write } for pid=6395 comm="syz.2.969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.920424][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.963270][ T6399] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 111.033270][ T6399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.060873][ T6399] bond3: (slave veth7): Enslaving as an active interface with a down link [ 111.616861][ T6419] loop3: detected capacity change from 0 to 512 [ 111.632905][ T6419] EXT4-fs: Ignoring removed bh option [ 111.659400][ T6419] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 111.682963][ T6421] loop2: detected capacity change from 0 to 512 [ 111.698413][ T6419] EXT4-fs (loop3): 1 truncate cleaned up [ 111.706628][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.725966][ T6421] EXT4-fs: Ignoring removed bh option [ 111.741481][ T6424] pimreg: entered allmulticast mode [ 111.747166][ T6421] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 111.761616][ T28] audit: type=1400 audit(1786813586.848:8772): avc: denied { ioctl } for pid=6423 comm="syz.0.979" path="socket:[14533]" dev="sockfs" ino=14533 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.790503][ T6423] pimreg: left allmulticast mode [ 111.802019][ T6421] EXT4-fs (loop2): 1 truncate cleaned up [ 111.810804][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.834926][ T28] audit: type=1400 audit(1786813586.848:8773): avc: denied { write } for pid=6423 comm="syz.0.979" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 111.950396][ T28] audit: type=1400 audit(1786813586.878:8774): avc: denied { write } for pid=6423 comm="syz.0.979" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.256126][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.365153][ T6434] loop0: detected capacity change from 0 to 512 [ 112.422015][ T6434] EXT4-fs: Ignoring removed bh option [ 112.444683][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.454456][ T6434] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 112.482123][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 112.499448][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.532060][ T28] audit: type=1326 audit(1786813587.628:8775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 112.649132][ T28] audit: type=1326 audit(1786813587.658:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6439 comm="syz.2.983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 112.728379][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.796868][ T6442] loop0: detected capacity change from 0 to 128 [ 112.844523][ T6442] loop7: detected capacity change from 0 to 7 [ 112.869618][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.879327][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 112.887994][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.897669][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 112.905791][ T6442] loop7: unable to read partition table [ 112.921200][ T6442] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 112.956268][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 112.976938][ T6442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 113.602597][ T6468] loop0: detected capacity change from 0 to 256 [ 113.695052][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 113.721653][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 113.739511][ T6470] siw: device registration error -23 [ 113.767920][ T6474] loop3: detected capacity change from 0 to 512 [ 113.790581][ T6474] EXT4-fs: inline encryption not supported [ 113.801485][ T6474] EXT4-fs: dax option not supported [ 113.838421][ T6466] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 113.880732][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 114.030376][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 114.039404][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 114.067641][ T6490] loop2: detected capacity change from 0 to 512 [ 114.074526][ T6490] EXT4-fs: Ignoring removed bh option [ 114.082713][ T6490] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 114.094903][ T6490] EXT4-fs (loop2): 1 truncate cleaned up [ 114.102257][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.221663][ T6498] EXT4-fs: Ignoring removed bh option [ 114.239575][ T6498] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 114.263176][ T6498] EXT4-fs (loop1): 1 truncate cleaned up [ 114.269488][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.297865][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.339501][ T6502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.352431][ T6502] EXT4-fs (loop3): 1 truncate cleaned up [ 114.376851][ T6502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.400980][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 114.400999][ T28] audit: type=1400 audit(1786813589.498:8945): avc: denied { write } for pid=6501 comm="syz.3.1003" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.440171][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.524739][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.178506][ T28] audit: type=1400 audit(1786813590.268:8946): avc: denied { setopt } for pid=6521 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.417596][ T6532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.461929][ T6532] EXT4-fs (loop1): 1 truncate cleaned up [ 115.487276][ T6532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.550143][ T28] audit: type=1400 audit(1786813590.638:8947): avc: denied { write } for pid=6531 comm="syz.1.1015" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.727761][ T6545] FAULT_INJECTION: forcing a failure. [ 115.727761][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 115.768542][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.4.1019 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.768630][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.768648][ T6545] Call Trace: [ 115.768658][ T6545] [ 115.768668][ T6545] __dump_stack+0x1d/0x30 [ 115.768706][ T6545] dump_stack_lvl+0x95/0xd0 [ 115.768732][ T6545] dump_stack+0x15/0x1b [ 115.768837][ T6545] should_fail_ex+0x25e/0x270 [ 115.768880][ T6545] ? sctp_add_bind_addr+0x71/0x1e0 [ 115.768967][ T6545] should_failslab+0x8c/0xb0 [ 115.768991][ T6545] __kmalloc_cache_noprof+0x7b/0x3d0 [ 115.769069][ T6545] ? sctp_add_bind_addr+0x71/0x1e0 [ 115.769099][ T6545] sctp_add_bind_addr+0x71/0x1e0 [ 115.769125][ T6545] sctp_copy_local_addr_list+0x1b4/0x250 [ 115.769235][ T6545] sctp_copy_one_addr+0x7f/0x280 [ 115.769333][ T6545] sctp_bind_addr_copy+0x79/0x290 [ 115.769384][ T6545] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 115.769424][ T6545] sctp_connect_new_asoc+0x1c3/0x3a0 [ 115.769465][ T6545] sctp_sendmsg+0x105f/0x1d00 [ 115.769575][ T6545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 115.769608][ T6545] inet_sendmsg+0xc5/0xd0 [ 115.769663][ T6545] ? __pfx_inet_sendmsg+0x10/0x10 [ 115.769684][ T6545] ____sys_sendmsg+0x4e8/0x580 [ 115.769716][ T6545] ___sys_sendmsg+0x195/0x1e0 [ 115.769743][ T6545] ? terminate_walk+0x1d5/0x200 [ 115.769934][ T6545] __sys_sendmmsg+0x185/0x320 [ 115.769984][ T6545] __x64_sys_sendmmsg+0x57/0x70 [ 115.770015][ T6545] x64_sys_call+0x27aa/0x3020 [ 115.770057][ T6545] do_syscall_64+0x136/0x3c0 [ 115.770164][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.770195][ T6545] RIP: 0033:0x7f1c3053e0d9 [ 115.770217][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.770242][ T6545] RSP: 002b:00007f1c2ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.770270][ T6545] RAX: ffffffffffffffda RBX: 00007f1c307c5fa0 RCX: 00007f1c3053e0d9 [ 115.770365][ T6545] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 115.770383][ T6545] RBP: 00007f1c2ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 115.770402][ T6545] R10: 0000000004008840 R11: 0000000000000246 R12: 0000000000000001 [ 115.770420][ T6545] R13: 00007f1c307c6038 R14: 00007f1c307c5fa0 R15: 00007ffcd56e9e28 [ 115.770448][ T6545] [ 116.018654][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.162106][ T6560] set_capacity_and_notify: 4 callbacks suppressed [ 116.162125][ T6560] loop0: detected capacity change from 0 to 512 [ 116.203124][ T6560] EXT4-fs: Ignoring removed bh option [ 116.209167][ T6560] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 116.218702][ T6560] EXT4-fs (loop0): 1 truncate cleaned up [ 116.226551][ T6560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.342325][ T28] audit: type=1326 audit(1786813591.438:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.441201][ T28] audit: type=1326 audit(1786813591.438:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.493283][ T28] audit: type=1326 audit(1786813591.438:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.533000][ T28] audit: type=1326 audit(1786813591.438:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.563880][ T28] audit: type=1326 audit(1786813591.438:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.673006][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.682635][ T6577] loop3: detected capacity change from 0 to 256 [ 116.756110][ T28] audit: type=1326 audit(1786813591.438:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 116.800678][ T6578] --map-set only usable from mangle table [ 116.838960][ T28] audit: type=1326 audit(1786813591.438:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.1026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86712e0d9 code=0x7ffc0000 [ 117.218997][ T6598] loop0: detected capacity change from 0 to 512 [ 117.219467][ T6598] EXT4-fs: inline encryption not supported [ 117.219534][ T6598] EXT4-fs: dax option not supported [ 117.242308][ T6597] loop1: detected capacity change from 0 to 164 [ 117.266402][ T6597] rock: directory entry would overflow storage [ 117.266417][ T6597] rock: sig=0x5252, size=5, remaining=3 [ 117.280754][ T6599] loop2: detected capacity change from 0 to 512 [ 117.281260][ T6599] EXT4-fs: inline encryption not supported [ 117.281314][ T6599] EXT4-fs: dax option not supported [ 117.331009][ T6597] netlink: 'syz.1.1036': attribute type 30 has an invalid length. [ 117.487404][ T6602] loop3: detected capacity change from 0 to 512 [ 117.487802][ T6602] EXT4-fs: Ignoring removed bh option [ 117.488542][ T6602] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 117.497779][ T6602] EXT4-fs (loop3): 1 truncate cleaned up [ 117.498269][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.845526][ T6608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1041'. [ 117.871849][ T6608] loop2: detected capacity change from 0 to 1024 [ 117.887577][ T6608] EXT4-fs: inline encryption not supported [ 117.896225][ T6608] EXT4-fs: Ignoring removed bh option [ 117.915142][ T6608] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 117.937278][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1039'. [ 118.063096][ T6619] loop0: detected capacity change from 0 to 512 [ 118.084258][ T6619] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 118.105392][ T6619] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 118.146692][ T6619] loop0: detected capacity change from 0 to 512 [ 118.181672][ T6619] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.210226][ T6619] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.217092][ T6619] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.232618][ T6619] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 118.240684][ T6619] EXT4-fs (loop0): 1 truncate cleaned up [ 118.326731][ T6635] gretap0 speed is unknown, defaulting to 1000 [ 118.374752][ T6640] loop4: detected capacity change from 0 to 128 [ 118.422531][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1050'. [ 118.873928][ T6645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1052'. [ 118.944310][ T6649] FAULT_INJECTION: forcing a failure. [ 118.944310][ T6649] name failslab, interval 1, probability 0, space 0, times 0 [ 118.972820][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.4.1054 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.972856][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.972874][ T6649] Call Trace: [ 118.972883][ T6649] [ 118.972962][ T6649] __dump_stack+0x1d/0x30 [ 118.972992][ T6649] dump_stack_lvl+0x95/0xd0 [ 118.973020][ T6649] dump_stack+0x15/0x1b [ 118.973058][ T6649] should_fail_ex+0x25e/0x270 [ 118.973100][ T6649] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 118.973139][ T6649] should_failslab+0x8c/0xb0 [ 118.973171][ T6649] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 118.973237][ T6649] ? shmem_alloc_inode+0x34/0x50 [ 118.973274][ T6649] ? shmem_alloc_inode+0x34/0x50 [ 118.973316][ T6649] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 118.973433][ T6649] shmem_alloc_inode+0x34/0x50 [ 118.973471][ T6649] alloc_inode+0x40/0x170 [ 118.973505][ T6649] new_inode+0x1d/0xe0 [ 118.973538][ T6649] shmem_get_inode+0x24e/0x7a0 [ 118.973593][ T6649] shmem_mknod+0x44/0x170 [ 118.973636][ T6649] shmem_create+0x34/0x50 [ 118.973676][ T6649] ? __pfx_shmem_create+0x10/0x10 [ 118.973736][ T6649] path_openat+0xcfb/0x2000 [ 118.973775][ T6649] do_file_open+0x16c/0x290 [ 118.973871][ T6649] do_sys_openat2+0xa0/0x130 [ 118.973914][ T6649] __x64_sys_open+0xe6/0x110 [ 118.974004][ T6649] x64_sys_call+0x14b9/0x3020 [ 118.974042][ T6649] do_syscall_64+0x136/0x3c0 [ 118.974148][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.974245][ T6649] RIP: 0033:0x7f1c3053e0d9 [ 118.974268][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.974293][ T6649] RSP: 002b:00007f1c2ef76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 118.974322][ T6649] RAX: ffffffffffffffda RBX: 00007f1c307c6090 RCX: 00007f1c3053e0d9 [ 118.974422][ T6649] RDX: 0000000000000000 RSI: 0000000000149cc2 RDI: 0000200000000180 [ 118.974443][ T6649] RBP: 00007f1c2ef76090 R08: 0000000000000000 R09: 0000000000000000 [ 118.974543][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.974561][ T6649] R13: 00007f1c307c6128 R14: 00007f1c307c6090 R15: 00007ffcd56e9e28 [ 118.974590][ T6649] [ 119.214359][ T6645] EXT4-fs: inline encryption not supported [ 119.220618][ T6645] EXT4-fs: Ignoring removed bh option [ 119.229077][ T49] batadv1: left promiscuous mode [ 119.247621][ T49] batadv1: left promiscuous mode [ 119.257144][ T6645] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 119.543330][ T6660] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.629274][ T6660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.655552][ T6660] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.723657][ T6660] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1055: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 119.807592][ T6660] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.807804][ T6660] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1055: couldn't read orphan inode 11 (err -117) [ 119.817309][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.817326][ C0] EXT4-fs (loop0): initial error at time 1786813594: ext4_ext_check_inode:521: inode 11 [ 119.817352][ C0] EXT4-fs (loop0): last error at time 1786813594: ext4_ext_check_inode:521: inode 11 [ 120.017581][ T6660] loop0: lost filesystem error report for type 5 error -117 [ 120.023808][ T28] kauditd_printk_skb: 282 callbacks suppressed [ 120.023827][ T28] audit: type=1400 audit(1786813595.118:9236): avc: denied { write } for pid=6655 comm="syz.0.1055" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.097002][ T6660] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1055: Invalid block bitmap block 0 in block_group 0 [ 120.102194][ T6648] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.127738][ T6660] Quota error (device loop0): write_blk: dquota write failed [ 120.138632][ T6660] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 120.151322][ T6660] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1055: Failed to acquire dquot type 0 [ 120.162726][ T6648] EXT4-fs (loop4): 1 truncate cleaned up [ 120.174594][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 120.230691][ T35] batadv1: left promiscuous mode [ 120.247105][ T6669] EXT4-fs: Ignoring removed bh option [ 120.254656][ T6669] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 120.303384][ T6675] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 120.311928][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1060'. [ 120.321845][ T6669] EXT4-fs (loop1): 1 truncate cleaned up [ 120.330136][ T28] audit: type=1326 audit(1786813595.428:9237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.366445][ T28] audit: type=1326 audit(1786813595.428:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.392712][ T28] audit: type=1326 audit(1786813595.428:9239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.394848][ T6675] ext2 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.418757][ T28] audit: type=1326 audit(1786813595.428:9240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.454156][ T28] audit: type=1326 audit(1786813595.428:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.480149][ T28] audit: type=1326 audit(1786813595.428:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.505945][ T28] audit: type=1326 audit(1786813595.428:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6076de0d9 code=0x7ffc0000 [ 120.548374][ T6675] EXT4-fs (loop4): resizing filesystem from 64 to 2 blocks [ 120.555752][ T6675] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 120.602626][ T6680] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 120.644180][ T6680] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 120.696788][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1063'. [ 120.732725][ T6680] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.744847][ T6680] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.751844][ T6680] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.767091][ T6680] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 120.775016][ T6680] EXT4-fs (loop2): 1 truncate cleaned up [ 120.870986][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'. [ 121.015203][ T6709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1073'. [ 121.022593][ T6711] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 121.061060][ T6713] EXT4-fs: Ignoring removed bh option [ 121.066974][ T6713] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 121.077390][ T6713] EXT4-fs (loop1): 1 truncate cleaned up [ 121.105201][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 121.134864][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 121.171618][ T6709] EXT4-fs: inline encryption not supported [ 121.179547][ T6709] EXT4-fs: Ignoring removed bh option [ 121.212513][ T6709] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.416637][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1082'. [ 121.477593][ T6736] set_capacity_and_notify: 10 callbacks suppressed [ 121.477613][ T6736] loop2: detected capacity change from 0 to 512 [ 121.505707][ T6736] EXT4-fs: Ignoring removed bh option [ 121.531888][ T6736] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 121.555325][ T6736] EXT4-fs (loop2): 1 truncate cleaned up [ 121.693423][ T6746] loop0: detected capacity change from 0 to 512 [ 121.716082][ T6746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.738378][ T6750] loop3: detected capacity change from 0 to 128 [ 121.746604][ T6746] EXT4-fs (loop0): 1 truncate cleaned up [ 121.750244][ T6726] loop1: detected capacity change from 0 to 1024 [ 121.797889][ T6726] EXT4-fs: inline encryption not supported [ 121.806551][ T6726] EXT4-fs: Ignoring removed bh option [ 121.832403][ T6726] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.847838][ T6750] loop7: detected capacity change from 0 to 7 [ 121.856290][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.865969][ C0] buffer_io_error: 4 callbacks suppressed [ 121.865987][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 121.883247][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.892926][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 121.904003][ T6750] loop7: unable to read partition table [ 121.918555][ T6750] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 121.933798][ T6752] loop2: detected capacity change from 0 to 256 [ 121.974047][ T6757] loop0: detected capacity change from 0 to 512 [ 121.984217][ T6757] EXT4-fs: Ignoring removed bh option [ 121.990904][ T3289] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.002434][ T3289] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.010851][ T3289] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.020492][ T6757] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 122.029344][ T3289] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.044237][ T6757] EXT4-fs (loop0): 1 truncate cleaned up [ 122.055607][ T3289] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.147311][ T6762] loop1: detected capacity change from 0 to 512 [ 122.204978][ T6762] EXT4-fs: inline encryption not supported [ 122.234824][ T6762] EXT4-fs: dax option not supported [ 122.291702][ T6770] loop0: detected capacity change from 0 to 512 [ 122.350326][ T6770] EXT4-fs: Ignoring removed bh option [ 122.362110][ T6770] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 122.445584][ T6770] EXT4-fs (loop0): 1 truncate cleaned up [ 122.816758][ T6787] loop1: detected capacity change from 0 to 512 [ 122.852740][ T6787] EXT4-fs: Ignoring removed bh option [ 122.880897][ T6787] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.924046][ T6787] EXT4-fs (loop1): 1 truncate cleaned up [ 123.099766][ T6802] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.254004][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.263727][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.275889][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.285813][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.293914][ T6806] loop7: unable to read partition table [ 123.302264][ T6806] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 123.321615][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.331611][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.340367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.351469][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.363375][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.373562][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 123.493752][ T6806] __nla_validate_parse: 9 callbacks suppressed [ 123.493773][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1111'. [ 123.535751][ T6812] EXT4-fs: Ignoring removed bh option [ 123.595576][ T6812] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 123.611293][ T6812] EXT4-fs (loop4): 1 truncate cleaned up [ 124.500599][ T6834] EXT4-fs: inline encryption not supported [ 124.523471][ T6834] EXT4-fs: dax option not supported [ 124.642258][ T6839] siw: device registration error -23 [ 124.664330][ T6836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1121'. [ 124.863008][ T6847] EXT4-fs: Ignoring removed bh option [ 124.868860][ T6847] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 124.874512][ T6836] EXT4-fs: inline encryption not supported [ 124.881977][ T6847] EXT4-fs (loop3): 1 truncate cleaned up [ 124.901280][ T6836] EXT4-fs: Ignoring removed bh option [ 124.936908][ T6845] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.976526][ T6836] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 124.996544][ T6845] EXT4-fs (loop2): 1 truncate cleaned up [ 125.141478][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.155354][ T6861] loop7: unable to read partition table [ 125.161327][ T6861] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 125.220305][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 125.824730][ T28] kauditd_printk_skb: 430 callbacks suppressed [ 125.824749][ T28] audit: type=1326 audit(1786813600.918:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 125.930764][ T6878] siw: device registration error -23 [ 125.967754][ T28] audit: type=1326 audit(1786813600.958:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.002490][ T6882] EXT4-fs: Ignoring removed bh option [ 126.012250][ T6882] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 126.066758][ T6882] EXT4-fs (loop0): 1 truncate cleaned up [ 126.076407][ T28] audit: type=1326 audit(1786813600.958:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.109570][ T28] audit: type=1326 audit(1786813600.958:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.135717][ T28] audit: type=1326 audit(1786813600.958:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.164824][ T28] audit: type=1326 audit(1786813600.958:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.191676][ T28] audit: type=1326 audit(1786813600.958:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.217411][ T28] audit: type=1326 audit(1786813600.958:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.243998][ T28] audit: type=1326 audit(1786813600.958:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.271283][ T28] audit: type=1326 audit(1786813600.958:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.2.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa754ae0d9 code=0x7ffc0000 [ 126.444994][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1138'. [ 126.569134][ T6898] set_capacity_and_notify: 12 callbacks suppressed [ 126.569156][ T6898] loop4: detected capacity change from 0 to 128 [ 126.631326][ T6898] loop7: detected capacity change from 0 to 7 [ 126.641168][ T6898] loop7: unable to read partition table [ 126.642669][ T6886] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1137: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 126.646902][ T6898] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 126.738142][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1140'. [ 126.752025][ T6905] loop2: detected capacity change from 0 to 128 [ 126.773802][ T6886] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1137: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 126.798232][ T6891] loop0: detected capacity change from 0 to 1024 [ 126.858466][ T6891] EXT4-fs: inline encryption not supported [ 126.885222][ T6891] EXT4-fs: Ignoring removed bh option [ 126.912504][ T6891] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 126.958366][ T6911] loop2: detected capacity change from 0 to 512 [ 126.966936][ T6911] EXT4-fs: inline encryption not supported [ 126.973333][ T6911] EXT4-fs: dax option not supported [ 127.045498][ T6917] siw: device registration error -23 [ 127.222535][ T6922] loop4: detected capacity change from 0 to 512 [ 127.272828][ T6922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.408710][ T6922] EXT4-fs (loop4): 1 truncate cleaned up [ 127.638694][ T6935] loop1: detected capacity change from 0 to 512 [ 127.677521][ T6935] EXT4-fs: Ignoring removed bh option [ 127.693726][ T6935] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 127.721995][ T6935] EXT4-fs (loop1): 1 truncate cleaned up [ 127.936141][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 128.078602][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1157'. [ 128.108880][ T6946] loop4: detected capacity change from 0 to 1024 [ 128.132165][ T6946] EXT4-fs: inline encryption not supported [ 128.154116][ T6946] EXT4-fs: Ignoring removed bh option [ 128.162043][ T6946] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 128.722343][ T6958] loop3: detected capacity change from 0 to 128 [ 128.743587][ T6961] loop1: detected capacity change from 0 to 512 [ 128.743912][ T6961] EXT4-fs: inline encryption not supported [ 128.744027][ T6961] EXT4-fs: dax option not supported [ 128.767513][ C0] blk_print_req_error: 8 callbacks suppressed [ 128.767536][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.767584][ C0] buffer_io_error: 18 callbacks suppressed [ 128.767608][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.768170][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.768223][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.768257][ T6958] loop7: unable to read partition table [ 128.768285][ T6958] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 128.813357][ T6965] EXT4-fs: inline encryption not supported [ 128.813472][ T6965] EXT4-fs: dax option not supported [ 128.819599][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.819766][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.820778][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1160'. [ 128.821702][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.821926][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.822018][ T6319] Buffer I/O error on dev loop7, logical block 0, async page read [ 128.986159][ T6968] EXT4-fs: Ignoring removed bh option [ 128.995798][ T6968] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 129.005774][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 129.022686][ T6968] EXT4-fs (loop2): 1 truncate cleaned up [ 129.023639][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 129.074497][ T6974] EXT4-fs: Ignoring removed bh option [ 129.085508][ T6974] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.097937][ T6974] EXT4-fs (loop1): 1 truncate cleaned up [ 129.126896][ T6976] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.144167][ T6976] EXT4-fs (loop0): 1 truncate cleaned up [ 129.218053][ T6986] FAULT_INJECTION: forcing a failure. [ 129.218053][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.240339][ T6990] netlink: 'syz.2.1171': attribute type 16 has an invalid length. [ 129.248383][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.1.1170 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.248417][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.248634][ T6986] Call Trace: [ 129.248641][ T6986] [ 129.248650][ T6986] __dump_stack+0x1d/0x30 [ 129.248679][ T6986] dump_stack_lvl+0x95/0xd0 [ 129.248758][ T6986] dump_stack+0x15/0x1b [ 129.248783][ T6986] should_fail_ex+0x25e/0x270 [ 129.248823][ T6986] should_fail+0xb/0x20 [ 129.248931][ T6986] should_fail_usercopy+0x1a/0x20 [ 129.248972][ T6986] _copy_from_user+0x1c/0xb0 [ 129.248999][ T6986] memdup_user+0x5e/0xd0 [ 129.249055][ T6986] strndup_user+0x68/0xb0 [ 129.249098][ T6986] __se_sys_add_key+0x132/0x360 [ 129.249128][ T6986] __x64_sys_add_key+0x67/0x80 [ 129.249151][ T6986] x64_sys_call+0xb39/0x3020 [ 129.249201][ T6986] do_syscall_64+0x136/0x3c0 [ 129.249298][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.249327][ T6986] RIP: 0033:0x7fe86712e0d9 [ 129.249427][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.249447][ T6986] RSP: 002b:00007fe865b87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 129.249492][ T6986] RAX: ffffffffffffffda RBX: 00007fe8673b5fa0 RCX: 00007fe86712e0d9 [ 129.249512][ T6986] RDX: 0000200000000080 RSI: 0000200000000400 RDI: 0000200000000040 [ 129.249531][ T6986] RBP: 00007fe865b87090 R08: fffffffffffffffb R09: 0000000000000000 [ 129.249549][ T6986] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 129.249567][ T6986] R13: 00007fe8673b6038 R14: 00007fe8673b5fa0 R15: 00007fff58895a58 [ 129.249608][ T6986] [ 129.418539][ T6990] netlink: 'syz.2.1171': attribute type 17 has an invalid length. [ 129.449120][ T6993] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 129.487171][ T6993] ext2 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.621788][ T7001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.647464][ T7001] EXT4-fs (loop1): 1 truncate cleaned up [ 129.783640][ T7014] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 129.823682][ T7014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.859283][ T35] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 129.890537][ T35] bond2: (slave veth5): making interface the new active one [ 129.915972][ T35] bond2: active interface up! [ 129.926001][ T7020] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.943561][ T49] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 129.957118][ T7020] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 129.965392][ T49] bond3: (slave veth7): making interface the new active one [ 129.991507][ T7020] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.994214][ T49] bond3: active interface up! [ 130.001461][ T7020] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.018475][ T7020] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.034401][ T30] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 130.045677][ T7020] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 130.052874][ T7023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.063916][ T7020] EXT4-fs (loop1): 1 truncate cleaned up [ 130.077167][ T7023] EXT4-fs (loop4): 1 truncate cleaned up [ 130.204051][ T7032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1186'. [ 130.227105][ T7034] siw: device registration error -23 [ 130.320481][ T7041] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.384637][ T7044] EXT4-fs: Ignoring removed bh option [ 130.423183][ T7044] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 130.452263][ T7044] EXT4-fs (loop2): 1 truncate cleaned up [ 130.602741][ T7050] EXT4-fs: inline encryption not supported [ 130.608887][ T7050] EXT4-fs: dax option not supported [ 130.637219][ T7032] EXT4-fs: inline encryption not supported [ 130.681684][ T7051] FAULT_INJECTION: forcing a failure. [ 130.681684][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 130.682344][ T7032] EXT4-fs: Ignoring removed bh option [ 130.725511][ T7032] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 130.741790][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.4.1193 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.741826][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.741844][ T7051] Call Trace: [ 130.741853][ T7051] [ 130.741937][ T7051] __dump_stack+0x1d/0x30 [ 130.741969][ T7051] dump_stack_lvl+0x95/0xd0 [ 130.741998][ T7051] dump_stack+0x15/0x1b [ 130.742087][ T7051] should_fail_ex+0x25e/0x270 [ 130.742182][ T7051] should_failslab+0x8c/0xb0 [ 130.742214][ T7051] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 130.742270][ T7051] ? do_getname+0x2e/0x1c0 [ 130.742299][ T7051] ? do_getname+0x2e/0x1c0 [ 130.742384][ T7051] do_getname+0x2e/0x1c0 [ 130.742419][ T7051] __se_sys_renameat2+0x38/0x1c0 [ 130.742456][ T7051] __x64_sys_renameat2+0x67/0x80 [ 130.742500][ T7051] x64_sys_call+0x2a12/0x3020 [ 130.742647][ T7051] do_syscall_64+0x136/0x3c0 [ 130.742733][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.742818][ T7051] RIP: 0033:0x7f1c3053e0d9 [ 130.742838][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.742929][ T7051] RSP: 002b:00007f1c2ef97028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 130.742957][ T7051] RAX: ffffffffffffffda RBX: 00007f1c307c5fa0 RCX: 00007f1c3053e0d9 [ 130.742976][ T7051] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 130.742994][ T7051] RBP: 00007f1c2ef97090 R08: 0000000000000005 R09: 0000000000000000 [ 130.743011][ T7051] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 130.743102][ T7051] R13: 00007f1c307c6038 R14: 00007f1c307c5fa0 R15: 00007ffcd56e9e28 [ 130.743183][ T7051] [ 131.157438][ T7069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.189692][ T7069] EXT4-fs (loop1): 1 truncate cleaned up [ 131.212104][ T7075] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.221445][ T7069] EXT4-fs mount: 77 callbacks suppressed [ 131.221459][ T7069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.245200][ T7075] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.259518][ T7075] __quota_error: 557 callbacks suppressed [ 131.259536][ T7075] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 131.275490][ T28] audit: type=1400 audit(1786813606.358:10239): avc: denied { write } for pid=7068 comm="syz.1.1198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.312470][ T7075] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.342362][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.352908][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 131.373502][ T7075] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 131.388970][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 131.426362][ T7075] EXT4-fs (loop2): 1 truncate cleaned up [ 131.446585][ T7075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.517941][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 131.525945][ T7089] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.577774][ T7089] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.604946][ T7108] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1211'. [ 131.622339][ T28] audit: type=1326 audit(1786813606.718:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.1213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 131.659065][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.672826][ T7109] set_capacity_and_notify: 18 callbacks suppressed [ 131.672847][ T7109] loop3: detected capacity change from 0 to 1024 [ 131.673969][ T7089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.683462][ T28] audit: type=1326 audit(1786813606.718:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.1213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 131.688988][ T7089] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 131.705092][ T28] audit: type=1326 audit(1786813606.718:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.1213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 131.743532][ T7089] audit: backlog limit exceeded [ 131.783552][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.799159][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 131.814960][ T28] audit: type=1326 audit(1786813606.718:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.1213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 131.843711][ T28] audit: type=1326 audit(1786813606.718:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.1213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 131.947786][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.957144][ T7103] loop1: detected capacity change from 0 to 1024 [ 132.013300][ T7103] EXT4-fs: inline encryption not supported [ 132.095106][ T7103] EXT4-fs: Ignoring removed bh option [ 132.151480][ T7103] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 132.202164][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'. [ 132.233387][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.278756][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.354662][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.794646][ T7151] FAULT_INJECTION: forcing a failure. [ 132.794646][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.836146][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.4.1229 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.836187][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.836208][ T7151] Call Trace: [ 132.836219][ T7151] [ 132.836234][ T7151] __dump_stack+0x1d/0x30 [ 132.836270][ T7151] dump_stack_lvl+0x95/0xd0 [ 132.836333][ T7151] dump_stack+0x15/0x1b [ 132.836363][ T7151] should_fail_ex+0x25e/0x270 [ 132.836428][ T7151] should_fail+0xb/0x20 [ 132.836518][ T7151] should_fail_usercopy+0x1a/0x20 [ 132.836568][ T7151] _copy_from_user+0x1c/0xb0 [ 132.836601][ T7151] io_register_zcrx+0x36b/0x980 [ 132.836669][ T7151] ? __fget_files+0x184/0x1c0 [ 132.836716][ T7151] __se_sys_io_uring_register+0x96b/0x1330 [ 132.836763][ T7151] ? fput+0x8f/0xc0 [ 132.836862][ T7151] ? ksys_write+0x194/0x1a0 [ 132.836887][ T7151] __x64_sys_io_uring_register+0x55/0x70 [ 132.837003][ T7151] x64_sys_call+0x2be0/0x3020 [ 132.837042][ T7151] do_syscall_64+0x136/0x3c0 [ 132.837120][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.837146][ T7151] RIP: 0033:0x7f1c3053e0d9 [ 132.837170][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.837198][ T7151] RSP: 002b:00007f1c2ef97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 132.837228][ T7151] RAX: ffffffffffffffda RBX: 00007f1c307c5fa0 RCX: 00007f1c3053e0d9 [ 132.837258][ T7151] RDX: 0000200000000000 RSI: 0000000000000020 RDI: 0000000000000003 [ 132.837278][ T7151] RBP: 00007f1c2ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 132.837297][ T7151] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 132.837312][ T7151] R13: 00007f1c307c6038 R14: 00007f1c307c5fa0 R15: 00007ffcd56e9e28 [ 132.837343][ T7151] [ 133.122257][ T7163] siw: device registration error -23 [ 133.216117][ T7172] loop3: detected capacity change from 0 to 128 [ 133.243535][ T7172] loop7: detected capacity change from 0 to 7 [ 133.255596][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.265290][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.273705][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.283368][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.291335][ T7172] loop7: unable to read partition table [ 133.298016][ T7172] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 133.317464][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.327166][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.347435][ T7176] loop2: detected capacity change from 0 to 2048 [ 133.385340][ T7183] loop1: detected capacity change from 0 to 128 [ 133.404723][ T7183] vfat: Bad value for 'check' [ 133.433651][ T7176] Alternate GPT is invalid, using primary GPT. [ 133.443245][ T7176] loop2: p2 p3 p7 [ 133.557477][ T7181] loop4: detected capacity change from 0 to 512 [ 133.647250][ T7191] loop2: detected capacity change from 0 to 128 [ 133.688701][ T7191] loop7: detected capacity change from 0 to 7 [ 133.694911][ T7181] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.709116][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.746954][ T7181] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.770989][ T7181] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1241: corrupted inode contents [ 133.784254][ T7181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.786028][ T7181] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.1241: mark_inode_dirty error [ 133.796063][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 133.796143][ C1] EXT4-fs (loop4): initial error at time 1786813608: ext4_do_update_inode:5742: inode 15 [ 133.796234][ C1] EXT4-fs (loop4): last error at time 1786813608: ext4_do_update_inode:5742: inode 15 [ 133.846261][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.856031][ C1] buffer_io_error: 5 callbacks suppressed [ 133.856061][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.871156][ T7191] loop7: unable to read partition table [ 133.878880][ T7191] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 133.893527][ T7181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.899568][ T7191] __nla_validate_parse: 3 callbacks suppressed [ 133.899600][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1245'. [ 133.925335][ T7181] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1241: corrupted inode contents [ 133.940610][ T7181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.942218][ T7181] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.1241: mark_inode_dirty error [ 133.968338][ T7181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.969903][ T7181] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.1241: mark inode dirty (error -117) [ 134.007187][ T7181] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.011679][ T7181] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 134.043949][ T7181] EXT4-fs (loop4): 1 orphan inode deleted [ 134.099305][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.310696][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.319412][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.326197][ T7181] batman_adv: batadv0: Adding interface: macvtap1 [ 134.337886][ T7181] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.338432][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.338610][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.338739][ T3859] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.409568][ T7181] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 134.430462][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.556362][ T7215] loop1: detected capacity change from 0 to 512 [ 134.563436][ T7215] EXT4-fs: Ignoring removed bh option [ 134.570984][ T7215] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 134.587940][ T7217] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 134.606275][ T7215] EXT4-fs (loop1): 1 truncate cleaned up [ 134.613013][ T7219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1256'. [ 134.623444][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.792566][ T7239] EXT4-fs: Ignoring removed bh option [ 134.800805][ T7239] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.802242][ T7239] EXT4-fs (loop4): 1 truncate cleaned up [ 134.819362][ T7239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.017418][ T7245] EXT4-fs: inline encryption not supported [ 135.098904][ T7245] EXT4-fs: dax option not supported [ 135.153792][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.393390][ T7252] macvlan0: entered promiscuous mode [ 135.404972][ T7252] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 135.413206][ T7252] netlink: 'syz.4.1267': attribute type 2 has an invalid length. [ 135.424050][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.469799][ T7254] FAULT_INJECTION: forcing a failure. [ 135.469799][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.486604][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.1.1268 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.486642][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.486660][ T7254] Call Trace: [ 135.486668][ T7254] [ 135.486676][ T7254] __dump_stack+0x1d/0x30 [ 135.486764][ T7254] dump_stack_lvl+0x95/0xd0 [ 135.486796][ T7254] dump_stack+0x15/0x1b [ 135.486822][ T7254] should_fail_ex+0x25e/0x270 [ 135.486866][ T7254] should_fail+0xb/0x20 [ 135.486903][ T7254] should_fail_usercopy+0x1a/0x20 [ 135.487006][ T7254] _copy_from_user+0x1c/0xb0 [ 135.487075][ T7254] sock_do_ioctl+0xe5/0x230 [ 135.487167][ T7254] sock_ioctl+0x439/0x610 [ 135.487199][ T7254] ? __sanitizer_cov_trace_const_cmp1+0x4/0x90 [ 135.487301][ T7254] ? __pfx_sock_ioctl+0x10/0x10 [ 135.487334][ T7254] __se_sys_ioctl+0xce/0x140 [ 135.487390][ T7254] __x64_sys_ioctl+0x43/0x50 [ 135.487440][ T7254] x64_sys_call+0x1563/0x3020 [ 135.487471][ T7254] do_syscall_64+0x136/0x3c0 [ 135.487506][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.487591][ T7254] RIP: 0033:0x7fe86712e0d9 [ 135.487608][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.487707][ T7254] RSP: 002b:00007fe865b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.487735][ T7254] RAX: ffffffffffffffda RBX: 00007fe8673b5fa0 RCX: 00007fe86712e0d9 [ 135.487834][ T7254] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000010 [ 135.487853][ T7254] RBP: 00007fe865b87090 R08: 0000000000000000 R09: 0000000000000000 [ 135.487870][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.487885][ T7254] R13: 00007fe8673b6038 R14: 00007fe8673b5fa0 R15: 00007fff58895a58 [ 135.487910][ T7254] [ 135.784617][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 135.863714][ T7267] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.875698][ T7267] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.918236][ T7267] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.980996][ T7267] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 136.029472][ T7267] EXT4-fs (loop1): 1 truncate cleaned up [ 136.038998][ T7286] EXT4-fs: Ignoring removed bh option [ 136.060776][ T7267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.081923][ T7286] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.091524][ T7284] EXT4-fs: inline encryption not supported [ 136.116199][ T7286] EXT4-fs (loop2): 1 truncate cleaned up [ 136.137418][ T7286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.150123][ T7284] EXT4-fs: Ignoring removed bh option [ 136.198336][ T7284] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 136.219508][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.255817][ T7284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.350028][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.377005][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.999724][ T7308] set_capacity_and_notify: 5 callbacks suppressed [ 136.999741][ T7308] loop0: detected capacity change from 0 to 512 [ 137.000084][ T7308] EXT4-fs: inline encryption not supported [ 137.000150][ T7308] EXT4-fs: dax option not supported [ 137.205797][ T7323] loop2: detected capacity change from 0 to 512 [ 137.220096][ T7323] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 137.228776][ T7323] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.235606][ T7323] __quota_error: 704 callbacks suppressed [ 137.235618][ T7323] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 137.251753][ T7323] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.269105][ T7323] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 137.277604][ T7323] EXT4-fs (loop2): 1 truncate cleaned up [ 137.283827][ T7323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.377203][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.398208][ T7330] loop4: detected capacity change from 0 to 512 [ 137.419132][ T28] audit: type=1326 audit(1786813612.508:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.450449][ T7330] EXT4-fs: Ignoring removed bh option [ 137.456761][ T7330] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.489961][ T7330] EXT4-fs (loop4): 1 truncate cleaned up [ 137.495033][ T7328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 137.501011][ T7330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.516329][ T28] audit: type=1326 audit(1786813612.508:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.547547][ T28] audit: type=1326 audit(1786813612.508:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.573869][ T28] audit: type=1326 audit(1786813612.508:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.682208][ T28] audit: type=1326 audit(1786813612.508:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.737691][ T7341] loop2: detected capacity change from 0 to 512 [ 137.746655][ T7341] EXT4-fs: Ignoring removed bh option [ 137.767802][ T28] audit: type=1326 audit(1786813612.508:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.771865][ T7328] loop3: detected capacity change from 0 to 1024 [ 137.820943][ T28] audit: type=1326 audit(1786813612.508:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.821007][ T28] audit: type=1326 audit(1786813612.508:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.821046][ T28] audit: type=1326 audit(1786813612.508:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.0.1294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e774e0d9 code=0x7ffc0000 [ 137.923963][ T7341] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 137.934571][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.938571][ T7328] EXT4-fs: inline encryption not supported [ 137.954210][ T7328] EXT4-fs: Ignoring removed bh option [ 137.954573][ T7341] EXT4-fs (loop2): 1 truncate cleaned up [ 137.955500][ T7341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.078638][ T7328] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 138.132369][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.349734][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.766082][ T7355] loop1: detected capacity change from 0 to 4096 [ 138.822421][ T7355] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 138.896277][ T7364] loop0: detected capacity change from 0 to 512 [ 138.923419][ T7355] EXT4-fs (loop1): mount failed [ 138.931159][ T7364] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 138.940211][ T7364] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.946908][ T7364] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.966413][ T7364] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 138.998059][ T7364] EXT4-fs (loop0): 1 truncate cleaned up [ 139.005775][ T7364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.066187][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.095531][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.122256][ T7369] loop2: detected capacity change from 0 to 512 [ 139.131860][ T7369] EXT4-fs: Ignoring removed bh option [ 139.145806][ T7369] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.155692][ T7369] EXT4-fs (loop2): 1 truncate cleaned up [ 139.162613][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.261935][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.819078][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 140.054262][ T7412] loop1: detected capacity change from 0 to 512 [ 140.082630][ T7412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.102928][ T7412] EXT4-fs (loop1): 1 truncate cleaned up [ 140.109340][ T7412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.213119][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.244687][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 140.254366][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1324'. [ 140.270713][ T7428] loop1: detected capacity change from 0 to 512 [ 140.287477][ T7428] EXT4-fs: Ignoring removed bh option [ 140.303829][ T7422] EXT4-fs: Ignoring removed bh option [ 140.325518][ T7428] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.336179][ T7422] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 140.345802][ T7428] EXT4-fs (loop1): 1 truncate cleaned up [ 140.356365][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.385112][ T7422] EXT4-fs (loop4): 1 truncate cleaned up [ 140.396337][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1327'. [ 140.404920][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.619804][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.634335][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.734272][ T7451] EXT4-fs: Ignoring removed bh option [ 140.778139][ T7451] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 140.788406][ T7451] EXT4-fs (loop0): 1 truncate cleaned up [ 140.804512][ T7451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.824968][ T7455] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.838934][ T7455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.863308][ T7455] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.889970][ T7455] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.1333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 140.928080][ T7455] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.928253][ T7455] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1333: couldn't read orphan inode 11 (err -117) [ 140.937496][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 140.937517][ C0] EXT4-fs (loop3): initial error at time 1786813616: ext4_ext_check_inode:521: inode 11 [ 140.937553][ C0] EXT4-fs (loop3): last error at time 1786813616: ext4_ext_check_inode:521: inode 11 [ 141.029409][ T7455] loop3: lost filesystem error report for type 5 error -117 [ 141.029947][ T7455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.120349][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.186677][ T7447] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1333: Invalid block bitmap block 0 in block_group 0 [ 141.219101][ T7447] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1333: Failed to acquire dquot type 0 [ 141.280511][ T7447] syz.3.1333 (7447) used greatest stack depth: 8896 bytes left [ 141.292192][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.580589][ T7470] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 141.599855][ T7466] EXT4-fs: inline encryption not supported [ 141.620996][ T7466] EXT4-fs: dax option not supported [ 141.645843][ T7470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.718348][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.822846][ T7480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.856400][ T7480] EXT4-fs (loop2): 1 truncate cleaned up [ 141.871683][ T7480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.053575][ T7493] set_capacity_and_notify: 6 callbacks suppressed [ 142.053596][ T7493] loop4: detected capacity change from 0 to 512 [ 142.085769][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.100378][ T7493] EXT4-fs: Ignoring removed bh option [ 142.112376][ T7493] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 142.126771][ T7493] EXT4-fs (loop4): 1 truncate cleaned up [ 142.156220][ T7493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.239274][ T28] kauditd_printk_skb: 639 callbacks suppressed [ 142.239290][ T28] audit: type=1326 audit(1786813617.338:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.328006][ T28] audit: type=1326 audit(1786813617.368:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.392381][ T28] audit: type=1326 audit(1786813617.368:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.459247][ T28] audit: type=1326 audit(1786813617.378:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.491559][ T28] audit: type=1326 audit(1786813617.378:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.523293][ T7506] loop3: detected capacity change from 0 to 512 [ 142.530785][ T28] audit: type=1326 audit(1786813617.378:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.531807][ T7506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.564185][ T28] audit: type=1326 audit(1786813617.378:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.594183][ T28] audit: type=1326 audit(1786813617.378:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.620296][ T7506] EXT4-fs (loop3): 1 truncate cleaned up [ 142.627285][ T7506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.656560][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.666728][ T28] audit: type=1326 audit(1786813617.388:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.703377][ T28] audit: type=1326 audit(1786813617.388:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.3.1338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd60769e90e code=0x7ffc0000 [ 142.727658][ T7513] loop2: detected capacity change from 0 to 512 [ 142.746070][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.770254][ T7513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.793120][ T7513] EXT4-fs (loop2): 1 truncate cleaned up [ 142.799503][ T7513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.828792][ T7519] loop3: detected capacity change from 0 to 128 [ 142.850535][ T7519] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 142.864355][ T7519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.876951][ T7519] ext2 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.966866][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.005759][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.165672][ T7525] loop0: detected capacity change from 0 to 512 [ 143.174450][ T7525] EXT4-fs: Ignoring removed bh option [ 143.187705][ T7525] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 143.198242][ T7525] EXT4-fs (loop0): 1 truncate cleaned up [ 143.204673][ T7525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.362445][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.633131][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1358'. [ 143.659112][ T2982] ================================================================== [ 143.667278][ T2982] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 143.674375][ T2982] [ 143.676759][ T2982] read-write to 0xffff88811c05b480 of 4 bytes by task 6319 on cpu 1: [ 143.684858][ T2982] d_delete+0x15a/0x180 [ 143.689075][ T2982] d_delete_notify+0x32/0x100 [ 143.693790][ T2982] vfs_unlink+0x287/0x490 [ 143.698156][ T2982] filename_unlinkat+0x1dc/0x410 [ 143.703125][ T2982] __se_sys_unlink+0x2b/0xe0 [ 143.707758][ T2982] __x64_sys_unlink+0x1f/0x30 [ 143.712484][ T2982] x64_sys_call+0x2eb6/0x3020 [ 143.717248][ T2982] do_syscall_64+0x136/0x3c0 [ 143.721886][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.727824][ T2982] [ 143.730183][ T2982] read to 0xffff88811c05b480 of 4 bytes by task 2982 on cpu 0: [ 143.737765][ T2982] step_into_slowpath+0x139/0x4c0 [ 143.742853][ T2982] path_lookupat+0x2eb/0x4c0 [ 143.747511][ T2982] filename_lookup+0x18f/0x390 [ 143.752325][ T2982] do_readlinkat+0x74/0x2f0 [ 143.756882][ T2982] __x64_sys_readlink+0x47/0x60 [ 143.761774][ T2982] x64_sys_call+0x2b51/0x3020 [ 143.766496][ T2982] do_syscall_64+0x136/0x3c0 [ 143.771121][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.777064][ T2982] [ 143.779402][ T2982] value changed: 0x00300080 -> 0x00004080 [ 143.785135][ T2982] [ 143.787485][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 143.793647][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 143.802528][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.812604][ T2982] ==================================================================