last executing test programs: 6.343408648s ago: executing program 0 (id=551): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 6.155323771s ago: executing program 1 (id=555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, [0x7fffffff, 0x4566, 0x8, 0x5, 0x9, 0x1]}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x804}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x33}, 0x8, @in=@multicast2, 0x0, 0x2, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 6.068613242s ago: executing program 1 (id=556): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x10, 0x800000000004, @tid=r3}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000380)=0x8, 0x64) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/2, 0xffffffffffffff25}, 0xb9a5}, {{&(0x7f0000000740)=@ethernet={0x0, @local}, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/26}, {&(0x7f0000000800)=""/40}, {&(0x7f0000000840)=""/64}, {&(0x7f0000000880)=""/57}, {&(0x7f00000008c0)=""/82}]}, 0xfffffffd}], 0x1, 0x40002162, 0x0) syz_clone3(&(0x7f0000000480)={0x40000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x20}, &(0x7f00000001c0)=""/253, 0xfd, &(0x7f0000000300)=""/168, &(0x7f0000000400)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x5) 5.971478114s ago: executing program 4 (id=558): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00005e6000/0x1000)=nil, 0x1000) semget$private(0x0, 0x4000, 0x0) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x1004, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002aed8aa39e108"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 5.967525134s ago: executing program 0 (id=559): clock_getres(0x2, 0x0) 5.963816194s ago: executing program 1 (id=560): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x5574, 0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xa1018, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1f31, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x2, 0x0, 0x0) gettid() timer_create(0x6, 0x0, &(0x7f0000bbdffc)) r2 = dup2(r1, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r4 = eventfd(0x1f3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@usrjquota}, {@nogrpid}, {@block_validity}, {@debug}]}, 0x2, 0x5c1, &(0x7f0000000740)="$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") read$eventfd(r4, &(0x7f0000000040), 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000300)) 5.887823495s ago: executing program 0 (id=561): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x5574, 0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xa1018, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1f31, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x2, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = dup2(r1, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="baaa00120000d4210a8eb69851442178f058d9bec2148193c7c3865faab2be47b0ce0704cd3cf6fcc8e46193e8a110581024bf7abb0492741a2bbdcaf76f749ccc6573f53d56d91975772df6c37677e642cd514cda2c869ac25e7e8a34baa87a76dfae3cda97a5faa18ab127882c6b7960e811f92098932127f16132861a55bf2c51f0ff6754fa1c51ca8524a17d03b703adc9225f0fe0c67bbd6a98efc665c259479135577a2867d9974d51f231b06b61abcf02458736a810c2c08fec4ce16a2364d91a38fb6ac29105ae71476bb4ed56d4b5a6bf3a7536415bc0666cf6aa79ec6acc78f7ecd5a6cf15cfa595da14782844079904", @ANYRES32=r5, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x3, 0x2}]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) eventfd(0x1f3) socket$nl_generic(0x10, 0x3, 0x10) 5.559703301s ago: executing program 4 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030601030000000000000000000000000500010007000000f3709de9584bb93bd4bb6df0897754"], 0x1c}}, 0x2000000) 5.488107042s ago: executing program 3 (id=566): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6422, 0x0, 0x3) 5.415420132s ago: executing program 3 (id=567): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 5.398085363s ago: executing program 4 (id=568): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0xed, 0x7, 0xff, 0x0, 0x7ff, 0x374e4303869bb280, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x2, @perf_config_ext={0x2, 0x7}, 0x210, 0x2, 0x80000001, 0x1eec9a029ae91be4, 0x4, 0x6, 0x4, 0x0, 0x3, 0x0, 0x8001}, 0xffffffffffffffff, 0x7, r1, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0xb) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x200000000004, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xe, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0xd, 0x0, 0x445, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x20, 0x8, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x10, 0xa, 0xffffff88, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x0, 0x0, 0xa7}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x0, 0xe, 0x80, 0xffffffc0, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x80, 0x9, 0x80}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'xfrm0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x8001, 0x8, @local, @local, 0x8000, 0x0, 0x9, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1dabead84befbca0}, 0xc, &(0x7f0000000c80)={&(0x7f0000000780)={0x4e8, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x0, 0xa}, {0xf, 0x8, 0x9, 0x101}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xc7df, 0xaf, 0xfc, 0xfffffffe}, {0xff, 0x22, 0x40, 0x8}, {0xe6, 0x8, 0x2, 0x10}, {0x7, 0x9f, 0x2, 0x401}, {0x3, 0x5, 0x8, 0x6}, {0xdd13, 0xff, 0x7f, 0x8001}, {0x1, 0x2, 0x40, 0x6}, {0x4c8, 0x3, 0x7, 0x9}, {0x3, 0xff, 0x1, 0xff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x4e8}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="9e99194c", @ANYRES32=0xee00, @ANYBLOB="0c00008005000100980000"], 0x2c}], 0x1}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) clock_nanosleep(0x8, 0x1, 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x5453, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 5.119989897s ago: executing program 4 (id=569): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (fail_nth: 1) 4.148454753s ago: executing program 1 (id=570): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3c16a150685a41fd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 3.755746239s ago: executing program 2 (id=572): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18800000080000800200"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00'}, 0x2a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) 3.07965338s ago: executing program 2 (id=573): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) 2.113966666s ago: executing program 3 (id=574): socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x22) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) unshare(0x40000800) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x82a040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.682442943s ago: executing program 2 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) getrandom(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7214, &(0x7f0000000340)={0x0, 0xc89f, 0x800, 0x7, 0x16a}) fcntl$F_SET_RW_HINT(r1, 0x40c, 0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xffa, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00') sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x782}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdc00, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2c008000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b040000000000000000020000007165d55aa26fed7c38a63c26ffb3979f14000000110001000000000000000000f500000a"], 0x3c}}, 0x0) 1.468025266s ago: executing program 4 (id=576): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000740)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/236, 0xec}, {&(0x7f0000000440)=""/224, 0xe0}, {0x0}, {&(0x7f0000000600)=""/58, 0x3a}], 0x4}, 0x40010022) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) epoll_create1(0x80000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0xc001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000003c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 673.905519ms ago: executing program 3 (id=577): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001240)='./file2\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000040)=0x6) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) 654.271099ms ago: executing program 2 (id=578): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x20, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 603.93249ms ago: executing program 0 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = open(0x0, 0x80242, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x2007ffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}]}, @CTA_SYNPROXY={0x4}]}, 0x38}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa, 0xe) r5 = socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$nci(r7, 0x0, 0x0) readv(r5, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5c91efc37248fc3a, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) 603.26446ms ago: executing program 1 (id=580): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x7fffffffffffffff, 0x1fb}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009add34a5c683da9510eb2195487580a830ec7129e506000000b8402263e98ca194bffe65e9026fea432b94b20236cb703a844ec7960ac05d1b5b8040f5a1e39f8e7553b0cafe22a08e4e72508339212cc224a769eb80e2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) openat$hwrng(0xffffffffffffff9c, 0x0, 0x381040, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a31000000000800410073697700140033"], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 602.44789ms ago: executing program 2 (id=581): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)}, 0x10) umount2(&(0x7f0000000300)='./file0\x00', 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x1094c1) write$char_usb(r0, &(0x7f0000000380)="265f655e83075d11ff83187c6028f356ec991cca62520ed8037757615bff19cbbe6433e2ac942f1f077939e936fdbf27c68b7aa6499e7242b5b8561b6e1df8386a4b2e363de31e3f53a0b01f09809e2282d8559a6fa7b399bd75b06ce6eadf46b27168ce97d7827c04a90c548c5f0a9b5525a05534f1bb96d80ed73d4f44b9f4033617239602", 0x86) (async) write$char_usb(r0, &(0x7f0000000380)="265f655e83075d11ff83187c6028f356ec991cca62520ed8037757615bff19cbbe6433e2ac942f1f077939e936fdbf27c68b7aa6499e7242b5b8561b6e1df8386a4b2e363de31e3f53a0b01f09809e2282d8559a6fa7b399bd75b06ce6eadf46b27168ce97d7827c04a90c548c5f0a9b5525a05534f1bb96d80ed73d4f44b9f4033617239602", 0x86) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001440)={0x40, 0x6, 0x80, 0x4, 0x1000, 0xc4, &(0x7f0000000440)="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"}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, 0x140c, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41850}, 0x20008040) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, 0x140c, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41850}, 0x20008040) r2 = socket$can_bcm(0x1d, 0x2, 0x2) clock_adjtime(0x4, &(0x7f0000001580)={0x4, 0x7f6, 0x67, 0x7, 0xa57, 0xd6dd, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffff, 0x9, 0x3, 0x6, 0x5, 0x9b, 0x8, 0x4, 0xd178, 0x2, 0x1, 0x1, 0x0, 0x80, 0x9, 0x9, 0x81}) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg(r3, &(0x7f0000001d00)={&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0xbbd7, @private1, 0xc5, 0x1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001700)="ae7ff1d0a026bf8ebc5f904ccbd5ee60b7dc", 0x12}, {&(0x7f0000001740)="c08ffbeab9fb2ca48d7ee61c236456eacfafceb4b9ef8456bfcd47", 0x1b}, {&(0x7f0000001780)="36f41001253d7dc3dceb581ab7e7d26053362fecc13b5f16744a527a04ba6e6ce3303febcd3dfbd9925d59f71968112e03e829058b109694647a71b373ff083ef72a9e6df0bfc539bed6170c95274ee0e44389bbf6761f84d85d515fcb9a62798e32cc5721298d42c907e92cd7e7706513af3e86b3fcb049b8a726468ed7d2ef692aaf031ac7ce7ea63dde0317b5a447f62c289d794a8b6599d0725ee1a759e53d2f9311766a612b53256da44cc2715c7c43045e31e6", 0xb6}, {&(0x7f0000001840)="ec4f87574695efd00e1792334b5f11ab83068d67705ca3c4d21675c89408db87b09b105113a268", 0x27}, {&(0x7f0000001880)="299b9d850aa254628d9056d2d496ca7a733802d5f4b4798590dd0c2406", 0x1d}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="09d8f2a9c2c36bd517a87407b48a9fb1f1b47da3cdbf7dfc18a3b2b30cbb2b9f0ae1e812ce6e7b7b364fd4f9b8618f3846ee69e07fc226ee97869d233ce102a664e2836a18c2cfb858ceac13b28a2d53085feaac6a25ea8461c63a27847131b7a7f27c5d7307316085678a0274266766d18a601affb52a683502d22b10f2383cda7886775a70bba89219956ba07c8d9cfe9a106cb3391537ef5df6795b5827c8e3a296e204ebb0", 0xa7}, {&(0x7f00000019c0)="6b9242d6a62cb74e2f4551258025abf5916b59a4334da889b9d46d3c37c7ee107d939bfcb820e9a920b929bc1837fe62a4f6caadcc1798cc5c511b97c33de04a11bfa5febb8c9445c9b0443684fce9e83035a5ce3a81e863aec8f52fa063fb27af686a00d7c29a6399bc6d0b8cad4e56602bdbb96d9f195242089bdf6efcede843d8739a778b3056adbd012f255749686b9589b34b49347292f75e66df4a53ee706dd20b95bc95e83842385f62916e8fc3bd15d8c7ab17e54b43c6210dbce5b5fd691346ac91cd1b3dcfd778c29fcc6898c9ed4264633f64e8b9", 0xda}, {&(0x7f0000001ac0)="3c9638eafb319b03ced13ff3f72ace70c4e68a4334d8903c53d5bc702778", 0x1e}], 0x9, &(0x7f0000001bc0)=[{0xd0, 0x29, 0x1, "ffe842d086131b5b0d38ea63ff346e80561872290df08abfa4cff10da1e3966131df1afb130ab7583a2d97b5c3869e90e7ffbd4072bd7ff48fcd9443f8577c319dcfaffc3e1d221d7aa4d01b681db8e86b365491f9f659652c3593d7b543730f4ffe4f4d763553cb36c7fb9e4b36d446e79f49d57be950122976a1a44d767ba103de19edf21164e02961010e37fd96d3ab104a9285f82cdf32e509c2b6213ee8ec17883c720350d8129c46acb29f948892fb06a335793ae2967748b4"}, {0x38, 0x88, 0x4, "5f97690a253fe5b772b52e0b3e52f4f8efa162502b7d7bab52a844677c3807b6c2345b26dc"}], 0x108}, 0x4000040) (async) sendmsg(r3, &(0x7f0000001d00)={&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0xbbd7, @private1, 0xc5, 0x1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001700)="ae7ff1d0a026bf8ebc5f904ccbd5ee60b7dc", 0x12}, {&(0x7f0000001740)="c08ffbeab9fb2ca48d7ee61c236456eacfafceb4b9ef8456bfcd47", 0x1b}, {&(0x7f0000001780)="36f41001253d7dc3dceb581ab7e7d26053362fecc13b5f16744a527a04ba6e6ce3303febcd3dfbd9925d59f71968112e03e829058b109694647a71b373ff083ef72a9e6df0bfc539bed6170c95274ee0e44389bbf6761f84d85d515fcb9a62798e32cc5721298d42c907e92cd7e7706513af3e86b3fcb049b8a726468ed7d2ef692aaf031ac7ce7ea63dde0317b5a447f62c289d794a8b6599d0725ee1a759e53d2f9311766a612b53256da44cc2715c7c43045e31e6", 0xb6}, {&(0x7f0000001840)="ec4f87574695efd00e1792334b5f11ab83068d67705ca3c4d21675c89408db87b09b105113a268", 0x27}, {&(0x7f0000001880)="299b9d850aa254628d9056d2d496ca7a733802d5f4b4798590dd0c2406", 0x1d}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="09d8f2a9c2c36bd517a87407b48a9fb1f1b47da3cdbf7dfc18a3b2b30cbb2b9f0ae1e812ce6e7b7b364fd4f9b8618f3846ee69e07fc226ee97869d233ce102a664e2836a18c2cfb858ceac13b28a2d53085feaac6a25ea8461c63a27847131b7a7f27c5d7307316085678a0274266766d18a601affb52a683502d22b10f2383cda7886775a70bba89219956ba07c8d9cfe9a106cb3391537ef5df6795b5827c8e3a296e204ebb0", 0xa7}, {&(0x7f00000019c0)="6b9242d6a62cb74e2f4551258025abf5916b59a4334da889b9d46d3c37c7ee107d939bfcb820e9a920b929bc1837fe62a4f6caadcc1798cc5c511b97c33de04a11bfa5febb8c9445c9b0443684fce9e83035a5ce3a81e863aec8f52fa063fb27af686a00d7c29a6399bc6d0b8cad4e56602bdbb96d9f195242089bdf6efcede843d8739a778b3056adbd012f255749686b9589b34b49347292f75e66df4a53ee706dd20b95bc95e83842385f62916e8fc3bd15d8c7ab17e54b43c6210dbce5b5fd691346ac91cd1b3dcfd778c29fcc6898c9ed4264633f64e8b9", 0xda}, {&(0x7f0000001ac0)="3c9638eafb319b03ced13ff3f72ace70c4e68a4334d8903c53d5bc702778", 0x1e}], 0x9, &(0x7f0000001bc0)=[{0xd0, 0x29, 0x1, "ffe842d086131b5b0d38ea63ff346e80561872290df08abfa4cff10da1e3966131df1afb130ab7583a2d97b5c3869e90e7ffbd4072bd7ff48fcd9443f8577c319dcfaffc3e1d221d7aa4d01b681db8e86b365491f9f659652c3593d7b543730f4ffe4f4d763553cb36c7fb9e4b36d446e79f49d57be950122976a1a44d767ba103de19edf21164e02961010e37fd96d3ab104a9285f82cdf32e509c2b6213ee8ec17883c720350d8129c46acb29f948892fb06a335793ae2967748b4"}, {0x38, 0x88, 0x4, "5f97690a253fe5b772b52e0b3e52f4f8efa162502b7d7bab52a844677c3807b6c2345b26dc"}], 0x108}, 0x4000040) chdir(&(0x7f0000001d40)='./file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x7c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd929}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4002050) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x7c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd929}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4002050) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001f00), &(0x7f0000001f40)=0x6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001fc0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x84) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000020c0)={0x8, @multicast1, 0x4e21, 0x1, 'lc\x00', 0x0, 0x9f8, 0x3e}, 0x2c) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x78, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3799}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x31f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5e5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23d78840}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000}, 0x80) setns(r0, 0x8000000) close_range(r2, r2, 0x0) (async) close_range(r2, r2, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000002240)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000022c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002280), 0x111, 0x6}}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x20401, 0xc0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x20401, 0xc0) syz_emit_ethernet(0xeb, &(0x7f0000002340)={@broadcast, @random="a81cd9495b0c", @void, {@x25={0x805, {0x3, 0x8, 0x13, "a09396e832e9463be26af2ad37e6b1d2a6936b6fd3c855e5929025884322a5c499328cefd91d343993fa29f0e3fbc7969eee341dd26570a7362df7943cbdde198b05652e85a9dcc06da9788d512f3e33316bf584f25a1cf249eb44527fae89d474346b054b3114b3a4e2eb30d7236560e6600051bdfa4cb52fd70e77b4258d22bbbdd77e1a68628cfff0bc3bed1d0c5dd6c3681191ee8eed521ddd6068d047cefe0436a740687e920748c6e989d5e38470822cc6554c5529ec18697ff766d5899e3f4e85031efbb1bba2589fdda2c102ce124be9a2f382110de8"}}}}, &(0x7f0000002440)={0x1, 0x3, [0x5a1, 0x26a, 0xbfe, 0xdec]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002480)={0x0, 0x80000}, &(0x7f00000024c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002500)={r6, 0xffff, 0x1, 0x1, 0xfb9f, 0x77afebce}, &(0x7f0000002540)=0x14) 574.82503ms ago: executing program 4 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000001200)={'syz', 0x2}, &(0x7f0000001240)='syz2\x00', 0xfffffffffffffffc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x18bc8ef2, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/157, 0x9d}], &(0x7f0000000540), 0x3}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5000000001b543060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000080800024000000007140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x5, 0x0, 0xa, 0x50014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x4000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x103, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0xfffffff8, 0xfffb, 0x4, 0x5, 0xa, [0xe, 0xfb]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000feff0000050000000900010073797a300000000064000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000080005400000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 533.930301ms ago: executing program 2 (id=583): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800088}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008001}, 0x20004814) 334.968044ms ago: executing program 1 (id=584): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) preadv2(r2, 0x0, 0x0, 0x8000, 0xe6, 0x4) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000180)) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000210001002cbd7000fddbdf250a800000ff000000040001001400010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000f000000b708000000000000dbaaf8fff1000000b5080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006a000000950000000000000009bf482c94dab949dd5d7d1e0e4d56375c2534d9e6c03bb5f008003e8c264e3896559b6e718138f34696350302aa5bf471024f3bae3017c2a03a4fcaafff348cd44d908fcc79885ed8469706ee2395f82bf63c67a47e95fe456ead7aedeb2830066dc0"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 334.634114ms ago: executing program 3 (id=585): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) 324.948714ms ago: executing program 0 (id=586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180e00000200000000000000fc00dcdf"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) getdents64(r0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001780)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000440)={r3, 0xfffffffffffffff3, 0x6, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={r3, 0x8, 0x27}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r3, 0x7ff, 0x6, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r3, "2b8f46d009a28c9dae77f2b8b69f7e4f"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x0, 0x0, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r6 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 77.997229ms ago: executing program 3 (id=587): r0 = socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0xffffff8c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x2, 0xa, 0x300) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0xfffffffffffffffe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00', {0x4}, 0x1ff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 0s ago: executing program 0 (id=588): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x260000, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1001, 0xd, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x40, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0xfff4}, {0xfff2, 0xfff2}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000110) kernel console output (not intermixed with test programs): permissive=1 [ 58.627352][ T3829] loop3: detected capacity change from 0 to 128 [ 58.715997][ T3831] FAULT_INJECTION: forcing a failure. [ 58.715997][ T3831] name failslab, interval 1, probability 0, space 0, times 1 [ 58.750535][ T3831] CPU: 0 UID: 0 PID: 3831 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.750644][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.750659][ T3831] Call Trace: [ 58.750666][ T3831] [ 58.750675][ T3831] __dump_stack+0x1d/0x30 [ 58.750741][ T3831] dump_stack_lvl+0x95/0xd0 [ 58.750764][ T3831] dump_stack+0x15/0x1b [ 58.750789][ T3831] should_fail_ex+0x25e/0x270 [ 58.750817][ T3831] ? nf_tables_newchain+0x1292/0x1610 [ 58.750896][ T3831] should_failslab+0x8c/0xb0 [ 58.750921][ T3831] __kmalloc_cache_noprof+0x7b/0x3d0 [ 58.751014][ T3831] ? nf_tables_newchain+0x1292/0x1610 [ 58.751038][ T3831] nf_tables_newchain+0x1292/0x1610 [ 58.751063][ T3831] ? ktime_get+0x212/0x240 [ 58.751149][ T3831] ? __hrtimer_rearm_deferred+0x571/0x650 [ 58.751223][ T3831] nfnetlink_rcv+0xbf7/0x1740 [ 58.751269][ T3831] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 58.751296][ T3831] netlink_unicast+0x5a7/0x680 [ 58.751407][ T3831] netlink_sendmsg+0x5be/0x6f0 [ 58.751433][ T3831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.751458][ T3831] ____sys_sendmsg+0x532/0x580 [ 58.751490][ T3831] ___sys_sendmsg+0x195/0x1e0 [ 58.751602][ T3831] __x64_sys_sendmsg+0xd4/0x160 [ 58.751637][ T3831] x64_sys_call+0x194c/0x3020 [ 58.751728][ T3831] do_syscall_64+0x136/0x3c0 [ 58.751755][ T3831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.751782][ T3831] RIP: 0033:0x7f812d88ce59 [ 58.751805][ T3831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.751825][ T3831] RSP: 002b:00007f812c2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.751871][ T3831] RAX: ffffffffffffffda RBX: 00007f812db05fa0 RCX: 00007f812d88ce59 [ 58.751886][ T3831] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 58.751902][ T3831] RBP: 00007f812c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.751915][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.751927][ T3831] R13: 00007f812db06038 R14: 00007f812db05fa0 R15: 00007ffe3c396258 [ 58.751982][ T3831] [ 59.246477][ T3833] loop3: detected capacity change from 0 to 512 [ 59.257627][ T3833] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 59.274344][ T3833] loop3: detected capacity change from 0 to 164 [ 59.293491][ T3833] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 59.309616][ T3833] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 59.340785][ T3837] loop4: detected capacity change from 0 to 1024 [ 59.348750][ T3837] EXT4-fs: Ignoring removed nobh option [ 59.354509][ T3837] EXT4-fs: Ignoring removed i_version option [ 59.362716][ T3833] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 59.375169][ T3833] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.395060][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 59.404312][ T3833] tipc: Started in network mode [ 59.409444][ T3833] tipc: Node identity 61616107, cluster identity 4711 [ 59.416380][ T3833] tipc: Node number set to 1633771783 [ 59.508476][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.531240][ T3837] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 59.545839][ T3837] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.558250][ T3837] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.558250][ T3837] [ 59.568057][ T3837] EXT4-fs (loop4): Total free blocks count 0 [ 59.574178][ T3837] EXT4-fs (loop4): Free/Dirty block details [ 59.580215][ T3837] EXT4-fs (loop4): free_blocks=20480 [ 59.585562][ T3837] EXT4-fs (loop4): dirty_blocks=16 [ 59.591222][ T3837] EXT4-fs (loop4): Block reservation details [ 59.597335][ T3837] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 59.626461][ T28] audit: type=1400 audit(1782403327.363:292): avc: denied { write } for pid=3834 comm="syz.4.82" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.877179][ T28] audit: type=1400 audit(1782403327.523:293): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.502608][ T28] audit: type=1400 audit(1782403328.333:294): avc: denied { write } for pid=3843 comm="syz.3.84" name="ip_tables_names" dev="proc" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.630512][ T28] audit: type=1400 audit(1782403328.393:295): avc: denied { ioctl } for pid=3843 comm="syz.3.84" path="socket:[5642]" dev="sockfs" ino=5642 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.749585][ T28] audit: type=1400 audit(1782403328.503:296): avc: denied { create } for pid=3845 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.778095][ T3847] loop3: detected capacity change from 0 to 512 [ 60.794222][ T3847] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.85: inode has both inline data and extents flags [ 60.843894][ T28] audit: type=1400 audit(1782403328.513:297): avc: denied { setopt } for pid=3845 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.862911][ T3847] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.864331][ T3847] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.85: couldn't read orphan inode 15 (err -117) [ 60.873491][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.873508][ C1] EXT4-fs (loop3): initial error at time 1782403328: ext4_orphan_get:1399: inode 15 [ 60.873538][ C1] EXT4-fs (loop3): last error at time 1782403328: ext4_orphan_get:1399: inode 15 [ 60.875042][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 60.885223][ T3847] loop3: lost filesystem error report for type 5 error -117 [ 60.921936][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.938838][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.955523][ T3847] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 13: comm syz.3.85: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.987638][ T3847] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.3.85: error -EUCLEAN reading directory block [ 61.217685][ T3862] can0: slcan on ptm0. [ 61.416611][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 61.416625][ T28] audit: type=1400 audit(1782403329.253:301): avc: denied { write } for pid=3866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.484589][ T28] audit: type=1400 audit(1782403329.303:302): avc: denied { write } for pid=3878 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.575869][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.930275][ T3893] loop0: detected capacity change from 0 to 512 [ 61.943518][ T3893] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 61.972651][ T3893] loop0: detected capacity change from 0 to 164 [ 61.982839][ T3893] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 61.995777][ T3893] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 62.008487][ T3893] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 62.017843][ T3856] can0 (unregistered): slcan off ptm0. [ 62.029190][ T3893] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.029658][ T28] audit: type=1400 audit(1782403329.853:303): avc: denied { write } for pid=3894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.128559][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 62.135942][ T28] audit: type=1400 audit(1782403329.953:304): avc: denied { write } for pid=3908 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.138179][ T3893] tipc: Started in network mode [ 62.164704][ T3893] tipc: Node identity 61616107, cluster identity 4711 [ 62.171696][ T3893] tipc: Node number set to 1633771783 [ 62.354576][ T3934] capability: warning: `syz.3.103' uses deprecated v2 capabilities in a way that may be insecure [ 62.383343][ T28] audit: type=1400 audit(1782403330.213:305): avc: denied { ioctl } for pid=3933 comm="syz.3.103" path="socket:[5751]" dev="sockfs" ino=5751 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.459667][ T28] audit: type=1400 audit(1782403330.213:306): avc: denied { write } for pid=3912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.506822][ T28] audit: type=1400 audit(1782403330.243:307): avc: denied { bind } for pid=3933 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.540857][ T28] audit: type=1400 audit(1782403330.273:308): avc: denied { write } for pid=3939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.664947][ T3946] 9p: Bad value for 'rfdno' [ 63.941047][ T3952] loop0: detected capacity change from 0 to 1024 [ 63.947906][ T3952] EXT4-fs: Ignoring removed nobh option [ 63.953475][ T3952] EXT4-fs: Ignoring removed i_version option [ 64.102935][ T3952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.129628][ T28] audit: type=1400 audit(1782403331.953:309): avc: denied { write } for pid=3949 comm="syz.0.107" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.233244][ T3957] loop2: detected capacity change from 0 to 512 [ 64.327439][ T28] audit: type=1400 audit(1782403331.953:310): avc: denied { write } for pid=3949 comm="syz.0.107" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.350214][ T3957] EXT4-fs: inline encryption not supported [ 64.584293][ T3957] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 64.637000][ T3957] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.108: corrupted in-inode xattr: e_value size too large [ 64.676317][ T3961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.109'. [ 64.725437][ T3957] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.726092][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 64.741688][ C1] EXT4-fs (loop2): initial error at time 1782403332: ext4_iget_extra_inode:5180: inode 15 [ 64.751631][ C1] EXT4-fs (loop2): last error at time 1782403332: ext4_iget_extra_inode:5180: inode 15 [ 64.765525][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.108: couldn't read orphan inode 15 (err -117) [ 64.806140][ T3957] loop2: lost filesystem error report for type 5 error -117 [ 64.818414][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.921004][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 65.003631][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.177212][ T3967] macsec0: entered promiscuous mode [ 65.210592][ T3966] macsec0: left promiscuous mode [ 65.559582][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.627423][ T3975] syzkaller0: entered promiscuous mode [ 65.648868][ T3975] syzkaller0: entered allmulticast mode [ 65.701508][ T3979] loop2: detected capacity change from 0 to 1024 [ 65.748903][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.817513][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.912406][ T3990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 66.103827][ T3998] loop0: detected capacity change from 0 to 512 [ 66.116517][ T3998] EXT4-fs: inline encryption not supported [ 66.149045][ T3998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 66.166331][ T3998] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.122: corrupted in-inode xattr: e_value size too large [ 66.223896][ T4004] FAULT_INJECTION: forcing a failure. [ 66.223896][ T4004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.227499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.239264][ T3998] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.274290][ T3998] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.122: couldn't read orphan inode 15 (err -117) [ 66.283475][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 66.283498][ C1] EXT4-fs (loop0): initial error at time 1782403334: ext4_iget_extra_inode:5180: inode 15 [ 66.283530][ C1] EXT4-fs (loop0): last error at time 1782403334: ext4_iget_extra_inode:5180: inode 15 [ 66.329218][ T4004] CPU: 1 UID: 0 PID: 4004 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.329248][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.329260][ T4004] Call Trace: [ 66.329341][ T4004] [ 66.329351][ T4004] __dump_stack+0x1d/0x30 [ 66.329400][ T4004] dump_stack_lvl+0x95/0xd0 [ 66.329425][ T4004] dump_stack+0x15/0x1b [ 66.329447][ T4004] should_fail_ex+0x25e/0x270 [ 66.329477][ T4004] should_fail+0xb/0x20 [ 66.329499][ T4004] should_fail_usercopy+0x1a/0x20 [ 66.329534][ T4004] _copy_from_iter+0xcc/0xe70 [ 66.329567][ T4004] ? lockref_put_return+0xf7/0x130 [ 66.329601][ T4004] ? __rcu_read_unlock+0x4e/0x70 [ 66.329677][ T4004] ? __rcu_read_unlock+0x4e/0x70 [ 66.329708][ T4004] tun_get_user+0x14e/0x2820 [ 66.329737][ T4004] ? _parse_integer_limit+0x177/0x1a0 [ 66.329767][ T4004] ? _parse_integer+0x27/0x40 [ 66.329791][ T4004] ? ref_tracker_alloc+0x1eb/0x2f0 [ 66.329832][ T4004] tun_chr_write_iter+0x15a/0x210 [ 66.329889][ T4004] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 66.329939][ T4004] vfs_write+0x57d/0x990 [ 66.329960][ T4004] ksys_write+0xdc/0x1a0 [ 66.330010][ T4004] __x64_sys_write+0x40/0x50 [ 66.330032][ T4004] x64_sys_call+0x27e1/0x3020 [ 66.330155][ T4004] do_syscall_64+0x136/0x3c0 [ 66.330184][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.330206][ T4004] RIP: 0033:0x7f98c17ace59 [ 66.330301][ T4004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.330318][ T4004] RSP: 002b:00007f98c01ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.330342][ T4004] RAX: ffffffffffffffda RBX: 00007f98c1a25fa0 RCX: 00007f98c17ace59 [ 66.330359][ T4004] RDX: 0000000000000046 RSI: 0000200000001340 RDI: 0000000000000003 [ 66.330374][ T4004] RBP: 00007f98c01ff090 R08: 0000000000000000 R09: 0000000000000000 [ 66.330390][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.330447][ T4004] R13: 00007f98c1a26038 R14: 00007f98c1a25fa0 R15: 00007ffcd91d2a88 [ 66.330464][ T4004] [ 66.347567][ T3998] loop0: lost filesystem error report for type 5 error -117 [ 66.586504][ T3998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.621840][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 66.621855][ T28] audit: type=1400 audit(1782403334.453:315): avc: denied { write } for pid=3995 comm="syz.0.122" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.665086][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 66.722711][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.828304][ T28] audit: type=1400 audit(1782403334.653:316): avc: denied { connect } for pid=4014 comm="syz.1.129" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.884894][ T4017] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 66.916072][ T4017] bond1 (unregistering): Released all slaves [ 66.941817][ T28] audit: type=1400 audit(1782403334.773:317): avc: denied { cpu } for pid=4014 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.261926][ T28] audit: type=1400 audit(1782403335.093:318): avc: denied { setopt } for pid=4025 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.621653][ T4038] loop2: detected capacity change from 0 to 256 [ 67.639552][ T4038] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.677922][ T28] audit: type=1400 audit(1782403335.513:319): avc: denied { getopt } for pid=4039 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.705543][ T4038] netlink: 92 bytes leftover after parsing attributes in process `syz.2.137'. [ 67.730166][ T28] audit: type=1400 audit(1782403335.533:320): avc: denied { create } for pid=4037 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.740718][ T4038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 67.757877][ T28] audit: type=1400 audit(1782403335.533:321): avc: denied { connect } for pid=4037 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.778656][ T28] audit: type=1400 audit(1782403335.533:322): avc: denied { perfmon } for pid=4037 comm="syz.2.137" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.799578][ T28] audit: type=1400 audit(1782403335.613:323): avc: denied { bpf } for pid=4039 comm="syz.0.138" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.870428][ T28] audit: type=1400 audit(1782403335.703:324): avc: denied { create } for pid=4039 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.894842][ T4044] loop4: detected capacity change from 0 to 512 [ 67.901658][ T4044] EXT4-fs: inline encryption not supported [ 67.914391][ T4044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 67.940909][ T4044] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.139: corrupted in-inode xattr: e_value size too large [ 68.011227][ T4049] loop2: detected capacity change from 0 to 256 [ 68.030050][ T4044] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.036840][ T4049] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.046037][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 68.047400][ T4044] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 68.056742][ C1] EXT4-fs (loop4): initial error at time 1782403335: ext4_iget_extra_inode:5180: inode 15 [ 68.056775][ C1] EXT4-fs (loop4): last error at time 1782403335: ext4_iget_extra_inode:5180: inode 15 [ 68.108057][ T4044] loop4: lost filesystem error report for type 5 error -117 [ 68.113743][ T4044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.320211][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 71.503662][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.565502][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 71.650869][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 71.650883][ T28] audit: type=1400 audit(1782403339.483:334): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.788084][ T4086] capability: warning: `syz.4.153' uses 32-bit capabilities (legacy support in use) [ 71.857014][ T28] audit: type=1400 audit(1782403339.683:335): avc: denied { name_bind } for pid=4085 comm="syz.4.153" src=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 71.950427][ T28] audit: type=1400 audit(1782403339.723:336): avc: denied { connect } for pid=4090 comm="syz.3.155" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.050914][ T28] audit: type=1400 audit(1782403339.723:337): avc: denied { name_connect } for pid=4090 comm="syz.3.155" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.209331][ T4098] loop4: detected capacity change from 0 to 256 [ 72.230307][ T4098] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.343716][ T4112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=4112 comm=syz.0.161 [ 72.403766][ T4113] can0: slcan on ptm0. [ 72.493833][ T28] audit: type=1400 audit(1782403340.323:338): avc: denied { setopt } for pid=4123 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.503264][ T4122] tipc: Enabled bearer , priority 0 [ 72.528929][ T4122] syzkaller0: entered promiscuous mode [ 72.538404][ T4122] syzkaller0: entered allmulticast mode [ 72.554891][ T4122] syzkaller0: mtu less than device minimum [ 72.571851][ T4121] tipc: Resetting bearer [ 72.579201][ T28] audit: type=1400 audit(1782403340.413:339): avc: denied { write } for pid=4117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.615870][ T4121] tipc: Disabling bearer [ 72.666888][ T28] audit: type=1400 audit(1782403340.463:340): avc: denied { getopt } for pid=4137 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.711132][ T28] audit: type=1400 audit(1782403340.463:341): avc: denied { lock } for pid=4137 comm="syz.0.166" path="socket:[6918]" dev="sockfs" ino=6918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.760295][ T4150] loop1: detected capacity change from 0 to 512 [ 72.781324][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.785972][ T28] audit: type=1400 audit(1782403340.473:342): avc: denied { write } for pid=4136 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.821120][ T4150] skbuff: bad partial csum: csum=65535/127 headroom=146 headlen=65664 [ 72.836221][ T28] audit: type=1400 audit(1782403340.483:343): avc: denied { remount } for pid=4139 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.940985][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.063665][ T4156] loop1: detected capacity change from 0 to 256 [ 73.101491][ T4156] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.157131][ T4104] can0 (unregistered): slcan off ptm0. [ 73.745590][ T4210] loop3: detected capacity change from 0 to 256 [ 73.794079][ T4210] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.098691][ T4212] loop0: detected capacity change from 0 to 128 [ 74.245400][ T4212] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.278032][ T4212] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.342484][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.176134][ T4245] loop1: detected capacity change from 0 to 256 [ 75.281257][ T4245] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.361138][ T4249] loop4: detected capacity change from 0 to 1024 [ 75.369029][ T4249] EXT4-fs: Ignoring removed nobh option [ 75.374778][ T4249] EXT4-fs: Ignoring removed i_version option [ 75.440006][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.801032][ T4255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.197'. [ 75.910375][ T4255] netlink: 48 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.261640][ T4274] loop2: detected capacity change from 0 to 512 [ 77.323847][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.338926][ T4274] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.202: inode has both inline data and extents flags [ 77.368201][ T4274] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.368353][ T4274] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.202: couldn't read orphan inode 15 (err -117) [ 77.377556][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.377575][ C0] EXT4-fs (loop2): initial error at time 1782403345: ext4_orphan_get:1399: inode 15 [ 77.377608][ C0] EXT4-fs (loop2): last error at time 1782403345: ext4_orphan_get:1399: inode 15 [ 77.498561][ T4274] loop2: lost filesystem error report for type 5 error -117 [ 77.499151][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.595956][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.622659][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 77.622675][ T28] audit: type=1400 audit(1782403345.453:365): avc: denied { connect } for pid=4278 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.667247][ T28] audit: type=1400 audit(1782403345.453:366): avc: denied { write } for pid=4278 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.712607][ T4287] loop2: detected capacity change from 0 to 164 [ 77.723801][ T28] audit: type=1400 audit(1782403345.533:367): avc: denied { name_bind } for pid=4278 comm="syz.0.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.754703][ T4287] Symlink component flag not implemented [ 77.767959][ T4287] Symlink component flag not implemented (7) [ 77.781797][ T28] audit: type=1400 audit(1782403345.533:368): avc: denied { node_bind } for pid=4278 comm="syz.0.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.839437][ T28] audit: type=1400 audit(1782403345.673:369): avc: denied { connect } for pid=4286 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.897292][ T4292] netlink: 'syz.4.209': attribute type 13 has an invalid length. [ 77.910528][ T4292] netlink: 'syz.4.209': attribute type 17 has an invalid length. [ 77.925476][ T28] audit: type=1400 audit(1782403345.753:370): avc: denied { ioctl } for pid=4295 comm="syz.2.210" path="socket:[7507]" dev="sockfs" ino=7507 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.120297][ T4304] loop1: detected capacity change from 0 to 2048 [ 78.173922][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.343790][ T28] audit: type=1400 audit(1782403346.173:371): avc: denied { read write } for pid=4303 comm="syz.1.211" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.493086][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.332141][ T28] audit: type=1400 audit(1782403346.173:372): avc: denied { open } for pid=4303 comm="syz.1.211" path="/43/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.355119][ T28] audit: type=1400 audit(1782403346.263:373): avc: denied { execute } for pid=4310 comm="syz.2.213" name="cgroup" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 80.122073][ T28] audit: type=1326 audit(1782403346.733:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cd19ce59 code=0x7ffc0000 [ 80.268722][ T4343] loop0: detected capacity change from 0 to 1024 [ 80.294596][ T4340] macsec0: entered promiscuous mode [ 80.326925][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 80.443255][ T4340] veth1_macvtap: left promiscuous mode [ 80.588883][ T4354] loop4: detected capacity change from 0 to 512 [ 80.614346][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.628474][ T4354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.693196][ T4340] macsec0 (unregistering): left promiscuous mode [ 80.708965][ T4354] EXT4-fs (loop4): 1 truncate cleaned up [ 80.719563][ T4354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.542795][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 81.857710][ T4376] loop0: detected capacity change from 0 to 256 [ 82.032252][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.086619][ T4376] FAT-fs (loop0): Directory bread(block 64) failed [ 82.133650][ T4376] FAT-fs (loop0): Directory bread(block 65) failed [ 82.171937][ T4376] FAT-fs (loop0): Directory bread(block 66) failed [ 82.208297][ T4376] FAT-fs (loop0): Directory bread(block 67) failed [ 82.252506][ T4376] FAT-fs (loop0): Directory bread(block 68) failed [ 82.291053][ T4376] FAT-fs (loop0): Directory bread(block 69) failed [ 82.342334][ T4376] FAT-fs (loop0): Directory bread(block 70) failed [ 82.377279][ T4376] FAT-fs (loop0): Directory bread(block 71) failed [ 82.412303][ T4376] FAT-fs (loop0): Directory bread(block 72) failed [ 82.444635][ T4376] FAT-fs (loop0): Directory bread(block 73) failed [ 82.636682][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 82.636705][ T28] audit: type=1326 audit(1782403350.473:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 82.747716][ T4376] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 82.790778][ T4376] FAT-fs (loop0): Filesystem has been set read-only [ 82.839749][ T28] audit: type=1326 audit(1782403350.513:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 82.877477][ T4376] syz.0.231: attempt to access beyond end of device [ 82.877477][ T4376] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 83.003679][ T4376] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 83.085975][ T4376] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 83.102294][ T28] audit: type=1326 audit(1782403350.523:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.214047][ T4376] syz.0.231: attempt to access beyond end of device [ 83.214047][ T4376] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 83.299546][ T28] audit: type=1326 audit(1782403350.533:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.434387][ T28] audit: type=1326 audit(1782403350.553:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.578112][ T28] audit: type=1326 audit(1782403350.573:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.612629][ T28] audit: type=1326 audit(1782403350.593:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.638283][ T28] audit: type=1326 audit(1782403350.603:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.673196][ T28] audit: type=1326 audit(1782403350.613:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.727463][ T28] audit: type=1326 audit(1782403350.613:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.1.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 83.804953][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 83.967432][ T4419] loop1: detected capacity change from 0 to 512 [ 84.039564][ T4420] loop1: detected capacity change from 0 to 512 [ 84.048828][ T4420] msdos: Unknown parameter 'time_ïffset' [ 84.070889][ T4420] loop1: detected capacity change from 0 to 256 [ 84.077746][ T4420] vfat: Unknown parameter 'nodots' [ 84.120301][ T4422] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 84.217664][ T4429] loop4: detected capacity change from 0 to 512 [ 84.234657][ T4429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.249682][ T4429] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.250: bad orphan inode 131083 [ 84.261342][ T4429] loop4: lost filesystem error report for type 5 error -117 [ 84.261921][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.327552][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.650255][ T4445] loop3: detected capacity change from 0 to 512 [ 84.696549][ T4445] EXT4-fs: inline encryption not supported [ 84.712608][ T4445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 84.722671][ T4445] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.255: corrupted in-inode xattr: e_value size too large [ 84.740169][ T4445] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.740586][ T4445] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.255: couldn't read orphan inode 15 (err -117) [ 84.749834][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.749861][ C0] EXT4-fs (loop3): initial error at time 1782403352: ext4_iget_extra_inode:5180: inode 15 [ 84.749894][ C0] EXT4-fs (loop3): last error at time 1782403352: ext4_iget_extra_inode:5180: inode 15 [ 84.789161][ T4445] loop3: lost filesystem error report for type 5 error -117 [ 84.791732][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.911401][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.468848][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.001551][ T4466] loop2: detected capacity change from 0 to 8192 [ 86.059354][ T4466] loop2: p1 < > p2 p4 < p5 > [ 86.064133][ T4466] loop2: partition table partially beyond EOD, truncated [ 86.076390][ T4466] loop2: p1 start 134217728 is beyond EOD, truncated [ 86.093860][ T4466] loop2: p2 size 591360 extends beyond EOD, truncated [ 86.102150][ T4466] loop2: p5 size 591360 extends beyond EOD, truncated [ 86.173804][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4475 comm=syz.0.267 [ 86.245556][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 86.308979][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 86.329302][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 87.185304][ T4490] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 87.847797][ T4509] loop2: detected capacity change from 0 to 1024 [ 87.854652][ T4509] EXT4-fs: Ignoring removed nobh option [ 87.860318][ T4509] EXT4-fs: Ignoring removed i_version option [ 87.885944][ T4509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.898937][ T28] kauditd_printk_skb: 273 callbacks suppressed [ 87.899009][ T28] audit: type=1400 audit(1782403355.733:770): avc: denied { write } for pid=4506 comm="syz.2.275" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.927887][ T4509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 87.942233][ T4509] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 87.954452][ T4509] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.954452][ T4509] [ 87.964162][ T4509] EXT4-fs (loop2): Total free blocks count 0 [ 87.970166][ T4509] EXT4-fs (loop2): Free/Dirty block details [ 87.976092][ T4509] EXT4-fs (loop2): free_blocks=20480 [ 87.981381][ T4509] EXT4-fs (loop2): dirty_blocks=16 [ 87.986628][ T4509] EXT4-fs (loop2): Block reservation details [ 87.992609][ T4509] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 89.492468][ T4524] loop4: detected capacity change from 0 to 1024 [ 89.611062][ T4524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.816413][ T28] audit: type=1400 audit(1782403357.463:771): avc: denied { write } for pid=4520 comm="syz.4.280" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.999150][ T28] audit: type=1400 audit(1782403357.643:772): avc: denied { write } for pid=4520 comm="syz.4.280" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.915549][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.963616][ T4549] netlink: 220 bytes leftover after parsing attributes in process `syz.4.285'. [ 90.978811][ T4549] tc_dump_action: action bad kind [ 90.988282][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.005755][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.051985][ T4549] loop4: detected capacity change from 0 to 512 [ 91.085376][ T4549] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 91.638202][ T4571] FAULT_INJECTION: forcing a failure. [ 91.638202][ T4571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.653805][ T4571] CPU: 0 UID: 0 PID: 4571 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.653837][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.653852][ T4571] Call Trace: [ 91.653866][ T4571] [ 91.653874][ T4571] __dump_stack+0x1d/0x30 [ 91.653983][ T4571] dump_stack_lvl+0x95/0xd0 [ 91.654003][ T4571] dump_stack+0x15/0x1b [ 91.654021][ T4571] should_fail_ex+0x25e/0x270 [ 91.654052][ T4571] should_fail+0xb/0x20 [ 91.654076][ T4571] should_fail_usercopy+0x1a/0x20 [ 91.654173][ T4571] _copy_from_user+0x1c/0xb0 [ 91.654235][ T4571] bpf_test_init+0xb9/0x130 [ 91.654353][ T4571] bpf_prog_test_run_skb+0x271/0x11b0 [ 91.654387][ T4571] ? _parse_integer_limit+0x177/0x1a0 [ 91.654419][ T4571] ? __rcu_read_unlock+0x4e/0x70 [ 91.654449][ T4571] ? __fget_files+0x184/0x1c0 [ 91.654491][ T4571] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 91.654573][ T4571] bpf_prog_test_run+0x208/0x340 [ 91.654613][ T4571] __sys_bpf+0x8da/0xc30 [ 91.654649][ T4571] ? vfs_write+0x770/0x990 [ 91.654732][ T4571] __x64_sys_bpf+0x69/0x80 [ 91.654763][ T4571] x64_sys_call+0x10cb/0x3020 [ 91.654852][ T4571] do_syscall_64+0x136/0x3c0 [ 91.654895][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.654921][ T4571] RIP: 0033:0x7fd42f0ece59 [ 91.655012][ T4571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.655029][ T4571] RSP: 002b:00007fd42db3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.655049][ T4571] RAX: ffffffffffffffda RBX: 00007fd42f365fa0 RCX: 00007fd42f0ece59 [ 91.655062][ T4571] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 91.655075][ T4571] RBP: 00007fd42db3f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.655087][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.655099][ T4571] R13: 00007fd42f366038 R14: 00007fd42f365fa0 R15: 00007ffe77dac348 [ 91.655149][ T4571] [ 91.862975][ T3305] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 91.883644][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.909799][ T4578] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 91.925476][ T4580] loop2: detected capacity change from 0 to 512 [ 91.937985][ T4580] EXT4-fs: inline encryption not supported [ 91.960378][ T4580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 91.972764][ T4580] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.293: corrupted in-inode xattr: e_value size too large [ 92.012158][ T4580] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.012433][ T4580] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.293: couldn't read orphan inode 15 (err -117) [ 92.021704][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 92.021728][ C0] EXT4-fs (loop2): initial error at time 1782403359: ext4_iget_extra_inode:5180: inode 15 [ 92.021760][ C0] EXT4-fs (loop2): last error at time 1782403359: ext4_iget_extra_inode:5180: inode 15 [ 92.108899][ T4580] loop2: lost filesystem error report for type 5 error -117 [ 92.110168][ T4580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.219989][ T28] audit: type=1400 audit(1782403360.043:773): avc: denied { write } for pid=4579 comm="syz.2.293" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.248412][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 92.318637][ T4588] loop1: detected capacity change from 0 to 512 [ 92.329728][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.383910][ T4588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.408268][ T4588] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.430317][ T4588] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.297: iget: bad i_size value: 2533274857506816 [ 92.493926][ T4596] loop0: detected capacity change from 0 to 1024 [ 92.509325][ T4599] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.297: iget: bad i_size value: 2533274857506816 [ 92.538898][ T4596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.566116][ T4596] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.587016][ T4588] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.297: iget: bad i_size value: 2533274857506816 [ 92.598667][ T28] audit: type=1400 audit(1782403360.433:774): avc: denied { map } for pid=4595 comm="syz.0.300" path="/82/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.625309][ T4599] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.297'. [ 92.660825][ T28] audit: type=1400 audit(1782403360.463:775): avc: denied { write } for pid=4595 comm="syz.0.300" path="socket:[8803]" dev="sockfs" ino=8803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.717494][ T28] audit: type=1400 audit(1782403360.553:776): avc: denied { ioctl } for pid=4595 comm="syz.0.300" path="/82/file1/file2" dev="loop0" ino=16 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.764890][ T28] audit: type=1400 audit(1782403360.563:777): avc: denied { append } for pid=4603 comm="syz.4.302" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.944019][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.974975][ T4609] loop2: detected capacity change from 0 to 1024 [ 92.991803][ T4609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.006772][ T4609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.027390][ T4609] EXT4-fs: inline encryption not supported [ 93.108508][ T4609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.137055][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.149625][ T4609] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.171971][ T28] audit: type=1400 audit(1782403361.003:778): avc: denied { write } for pid=4607 comm="syz.2.304" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.287587][ T4618] loop0: detected capacity change from 0 to 512 [ 93.423292][ T28] audit: type=1400 audit(1782403361.003:779): avc: denied { append } for pid=4607 comm="syz.2.304" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.589840][ T28] audit: type=1400 audit(1782403361.193:780): avc: denied { write } for pid=4607 comm="syz.2.304" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.810828][ T4618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.851126][ T4618] EXT4-fs (loop0): 1 truncate cleaned up [ 93.862683][ T4618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.885123][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.932240][ T4619] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.304: reserved inode found cleared - inode=1 [ 94.021279][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.106826][ T4629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.311'. [ 94.119465][ T28] audit: type=1400 audit(1782403361.953:781): avc: denied { associate } for pid=4628 comm="syz.3.311" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.583897][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 94.950674][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.077846][ T28] audit: type=1400 audit(1782403362.903:782): avc: denied { accept } for pid=4652 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.174033][ T28] audit: type=1400 audit(1782403362.903:783): avc: denied { write } for pid=4652 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.206326][ T4662] loop3: detected capacity change from 0 to 512 [ 95.238182][ T28] audit: type=1400 audit(1782403362.903:784): avc: denied { read } for pid=4652 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.259667][ T4662] EXT4-fs: inline encryption not supported [ 95.303291][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.318236][ T28] audit: type=1400 audit(1782403363.103:785): avc: denied { write } for pid=4658 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.339460][ T4662] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.367957][ T4662] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 95.382198][ T28] audit: type=1400 audit(1782403363.113:786): avc: denied { ioctl } for pid=4658 comm="syz.0.317" path="socket:[8109]" dev="sockfs" ino=8109 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.416476][ T4662] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.320: Failed to acquire dquot type 1 [ 95.438020][ T4662] loop3: lost filesystem error report for type 5 error -5 [ 95.438425][ T4662] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 95.459664][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 95.459691][ C0] EXT4-fs (loop3): initial error at time 1782403363: ext4_acquire_dquot:7041 [ 95.459717][ C0] EXT4-fs (loop3): last error at time 1782403363: ext4_acquire_dquot:7041 [ 95.502858][ T4661] loop4: detected capacity change from 0 to 1024 [ 95.539043][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.320: corrupted inode contents [ 95.562937][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.563133][ T4662] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #12: comm syz.3.320: mark_inode_dirty error [ 95.585019][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.585194][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.320: corrupted inode contents [ 95.613974][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.614134][ T4662] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.320: mark_inode_dirty error [ 95.634799][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.634957][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.320: corrupted inode contents [ 95.656208][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.656434][ T4662] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 95.675562][ T4662] loop3: lost filesystem error report for type 5 error -117 [ 95.675726][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.320: corrupted inode contents [ 95.695092][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.695254][ T4662] EXT4-fs error (device loop3): ext4_truncate:4691: inode #12: comm syz.3.320: mark_inode_dirty error [ 95.718343][ T4662] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.718483][ T4662] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 95.737002][ T4662] loop3: lost filesystem error report for type 5 error -117 [ 95.737184][ T4662] EXT4-fs (loop3): 1 truncate cleaned up [ 95.751040][ T4662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.775102][ T4671] netlink: 52 bytes leftover after parsing attributes in process `syz.4.322'. [ 95.800802][ T4671] vlan2: entered promiscuous mode [ 95.807838][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.817009][ T4671] bridge0: entered promiscuous mode [ 95.945265][ T4682] netlink: 'syz.3.326': attribute type 9 has an invalid length. [ 95.971703][ T4680] can0: slcan on ptm0. [ 96.757107][ T4680] can0 (unregistered): slcan off ptm0. [ 96.851446][ T4767] loop4: detected capacity change from 0 to 8192 [ 96.876333][ T4767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.025896][ T4804] loop3: detected capacity change from 0 to 512 [ 97.034794][ T4804] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 97.054252][ T4804] loop3: detected capacity change from 0 to 164 [ 97.065617][ T4804] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 97.078232][ T4804] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 97.092870][ T4804] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.101808][ T4804] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 97.111395][ T4804] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 97.120407][ T4804] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.163359][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 97.362230][ T4846] loop4: detected capacity change from 0 to 512 [ 97.394588][ T4846] EXT4-fs: Ignoring removed i_version option [ 97.404086][ T4846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.426050][ T4846] EXT4-fs (loop4): 1 truncate cleaned up [ 97.448662][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.503734][ T4845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 97.550371][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.565978][ T4853] can0: slcan on ptm0. [ 97.797049][ T4871] loop4: detected capacity change from 0 to 1024 [ 97.804215][ T4871] EXT4-fs: Ignoring removed nobh option [ 97.809842][ T4871] EXT4-fs: Ignoring removed i_version option [ 97.875686][ T4871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.226306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.376248][ T4853] can0 (unregistered): slcan off ptm0. [ 98.505787][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 98.505805][ T28] audit: type=1400 audit(2000000002.279:816): avc: denied { write } for pid=4878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.574511][ T28] audit: type=1400 audit(2000000002.339:817): avc: denied { write } for pid=4892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.674423][ T28] audit: type=1400 audit(2000000002.449:818): avc: denied { write } for pid=4895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.766977][ T28] audit: type=1400 audit(2000000002.509:819): avc: denied { write } for pid=4906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.962029][ T28] audit: type=1400 audit(2000000002.739:820): avc: denied { write } for pid=4908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.200123][ T28] audit: type=1400 audit(2000000002.959:821): avc: denied { connect } for pid=4934 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.290085][ T28] audit: type=1400 audit(2000000002.959:822): avc: denied { bind } for pid=4934 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.310626][ T28] audit: type=1400 audit(2000000002.959:823): avc: denied { setopt } for pid=4934 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.331958][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.341886][ T28] audit: type=1400 audit(2000000002.979:824): avc: denied { write } for pid=4935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.406472][ T4949] can0: slcan on ptm0. [ 99.412149][ T28] audit: type=1400 audit(2000000003.189:825): avc: denied { ioctl } for pid=4952 comm="syz.4.357" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.614599][ T4970] xt_HMARK: proto mask must be zero with L3 mode [ 99.781251][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 99.810549][ T4983] gretap0: entered promiscuous mode [ 99.815981][ T4983] macvtap1: entered promiscuous mode [ 99.821866][ T4983] macvtap1: entered allmulticast mode [ 99.827564][ T4983] gretap0: entered allmulticast mode [ 99.847599][ T4981] syzkaller0: entered promiscuous mode [ 99.853530][ T4981] syzkaller0: entered allmulticast mode [ 99.920476][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 99.937030][ T4987] loop3: detected capacity change from 0 to 1024 [ 100.168210][ T4944] can0 (unregistered): slcan off ptm0. [ 100.200586][ T5008] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.370'. [ 100.220493][ T5008] openvswitch: netlink: Message has 41214 unknown bytes. [ 100.236365][ T5006] loop3: detected capacity change from 0 to 1024 [ 100.243132][ T5006] EXT4-fs: Ignoring removed nobh option [ 100.248820][ T5006] EXT4-fs: Ignoring removed i_version option [ 100.268985][ T5006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.019668][ T5043] loop4: detected capacity change from 0 to 8192 [ 101.062805][ T5043] msdos: Unknown parameter '0x0000000000000000ÿÿÿÿÿÿÿÿ' [ 102.518859][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.677929][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.685216][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.715760][ T5049] loop4: detected capacity change from 0 to 512 [ 102.760942][ T5049] EXT4-fs (loop4): #clusters per group too big: 131071 [ 102.799392][ T5052] loop0: detected capacity change from 0 to 4096 [ 102.829307][ T5052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.884457][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.893250][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.911858][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.934995][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.108119][ T4800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.119902][ T4796] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.148064][ T4796] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.160467][ T4796] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.178071][ T5065] random: crng reseeded on system resumption [ 103.314708][ T5076] can0: slcan on ptm0. [ 103.512065][ T28] kauditd_printk_skb: 247 callbacks suppressed [ 103.512081][ T28] audit: type=1326 audit(2000000007.289:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.609380][ T28] audit: type=1326 audit(2000000007.319:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.676264][ T28] audit: type=1326 audit(2000000007.329:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.769707][ T28] audit: type=1326 audit(2000000007.339:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.796613][ T5096] loop4: detected capacity change from 0 to 1024 [ 103.820848][ T5096] EXT4-fs: Ignoring removed nobh option [ 103.849992][ T28] audit: type=1326 audit(2000000007.349:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.877050][ T5096] EXT4-fs: Ignoring removed i_version option [ 103.900774][ T28] audit: type=1326 audit(2000000007.349:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 103.948102][ T5096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.971967][ T28] audit: type=1326 audit(2000000007.359:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 104.031116][ T5096] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 104.047405][ T5066] can0 (unregistered): slcan off ptm0. [ 104.068696][ T28] audit: type=1400 audit(2000000007.369:1080): avc: denied { write } for pid=5081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.117140][ T5096] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 104.127548][ T5103] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 104.154871][ T5096] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.154871][ T5096] [ 104.168863][ T28] audit: type=1326 audit(2000000007.369:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 104.211892][ T5096] EXT4-fs (loop4): Total free blocks count 0 [ 104.227317][ T5096] EXT4-fs (loop4): Free/Dirty block details [ 104.233649][ T5096] EXT4-fs (loop4): free_blocks=20480 [ 104.239174][ T5096] EXT4-fs (loop4): dirty_blocks=16 [ 104.250957][ T5096] EXT4-fs (loop4): Block reservation details [ 104.255275][ T28] audit: type=1326 audit(2000000007.369:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.1.386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56cd15d68e code=0x7ffc0000 [ 104.291132][ T5096] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 104.305735][ T5119] loop2: detected capacity change from 0 to 512 [ 104.312735][ T5119] EXT4-fs: inline encryption not supported [ 104.384704][ T5119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 104.405332][ T5129] loop3: detected capacity change from 0 to 128 [ 104.425620][ T5119] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.388: corrupted in-inode xattr: e_value size too large [ 104.496654][ T5129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.515831][ T5119] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.516079][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 104.532369][ C0] EXT4-fs (loop2): initial error at time 2000000008: ext4_iget_extra_inode:5180: inode 15 [ 104.542662][ C0] EXT4-fs (loop2): last error at time 2000000008: ext4_iget_extra_inode:5180: inode 15 [ 104.559008][ T5119] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.388: couldn't read orphan inode 15 (err -117) [ 104.596070][ T5119] loop2: lost filesystem error report for type 5 error -117 [ 104.597394][ T5119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.648091][ T5129] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.669406][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 104.745715][ T5110] bond1: (slave veth3): Enslaving as an active interface with a down link [ 104.817488][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.834691][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.856116][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.899146][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.918563][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.940130][ T5116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.996683][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.010420][ T5116] veth1_vlan: left promiscuous mode [ 105.018039][ T5116] veth0_vlan: left promiscuous mode [ 105.031879][ T5116] veth0_vlan: entered promiscuous mode [ 105.047478][ T5116] veth1_vlan: entered promiscuous mode [ 105.069143][ T5116] veth1_macvtap: left promiscuous mode [ 105.082246][ T5116] veth0_macvtap: left promiscuous mode [ 105.096559][ T5116] veth0_macvtap: entered promiscuous mode [ 105.108089][ T5116] veth1_macvtap: entered promiscuous mode [ 105.127857][ T5116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.136074][ T5116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.158854][ T5116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.178698][ T5116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.190084][ T5116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.211916][ T5120] bond1: (slave dummy0): making interface the new active one [ 105.237403][ T5120] dummy0: entered promiscuous mode [ 105.242696][ T5120] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 105.292646][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.299750][ T4794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.311067][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.317759][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.335483][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.342587][ T4794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.410374][ T4800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.419239][ T4800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439092][ T4800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.450494][ T4800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.460351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.486271][ T4356] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 105.500996][ T5148] loop3: detected capacity change from 0 to 8192 [ 105.521648][ T5148] vfat: Unknown parameter 'vfat' [ 105.676207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.694351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.914112][ T5164] can0: slcan on ptm0. [ 106.038122][ T5159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'. [ 106.051466][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.195467][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 106.197029][ T5185] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 106.361606][ T5197] loop0: detected capacity change from 0 to 512 [ 106.371755][ T5197] EXT4-fs: inline encryption not supported [ 106.395903][ T5197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 106.404765][ T5197] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.402: corrupted in-inode xattr: e_value size too large [ 106.419038][ T5197] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.419292][ T5197] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.402: couldn't read orphan inode 15 (err -117) [ 106.428449][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 106.428467][ C1] EXT4-fs (loop0): initial error at time 2000000010: ext4_iget_extra_inode:5180: inode 15 [ 106.428494][ C1] EXT4-fs (loop0): last error at time 2000000010: ext4_iget_extra_inode:5180: inode 15 [ 106.469507][ T5197] loop0: lost filesystem error report for type 5 error -117 [ 106.470696][ T5197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.518863][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 106.544719][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 106.557129][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.567969][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.582579][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 106.615646][ T5202] loop0: detected capacity change from 0 to 256 [ 106.630253][ T5202] vfat: Unknown parameter 'un[!Eate' [ 106.707947][ T5157] can0 (unregistered): slcan off ptm0. [ 106.743855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.760777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.069409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.261125][ T5248] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 107.285804][ T5248] bond2 (unregistering): Released all slaves [ 107.705772][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.715523][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.724852][ T5264] loop4: detected capacity change from 0 to 256 [ 107.827823][ T5264] FAT-fs (loop4): Directory bread(block 64) failed [ 107.844813][ T5264] FAT-fs (loop4): Directory bread(block 65) failed [ 107.870319][ T5264] FAT-fs (loop4): Directory bread(block 66) failed [ 107.881303][ T5256] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 107.892061][ T5264] FAT-fs (loop4): Directory bread(block 67) failed [ 107.903469][ T4356] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.907290][ T5264] FAT-fs (loop4): Directory bread(block 68) failed [ 107.927427][ T5264] FAT-fs (loop4): Directory bread(block 69) failed [ 107.951523][ T5264] FAT-fs (loop4): Directory bread(block 70) failed [ 107.968166][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.975277][ T5261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.980973][ T5264] FAT-fs (loop4): Directory bread(block 71) failed [ 107.985585][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.996160][ T5261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.010148][ T5264] FAT-fs (loop4): Directory bread(block 72) failed [ 108.027172][ T5277] loop1: detected capacity change from 0 to 1024 [ 108.039009][ T5264] FAT-fs (loop4): Directory bread(block 73) failed [ 108.051367][ T5261] vlan2: left promiscuous mode [ 108.056275][ T5261] bridge0: left promiscuous mode [ 108.060406][ T5277] EXT4-fs: Ignoring removed nobh option [ 108.104372][ T5276] can0: slcan on ptm1. [ 108.113832][ T5277] EXT4-fs: Ignoring removed i_version option [ 108.134836][ T5283] loop0: detected capacity change from 0 to 512 [ 108.157464][ T5277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.225408][ T5290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 108.232002][ T5290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.267801][ T5277] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 108.295805][ T5290] vhci_hcd vhci_hcd.0: Device attached [ 108.303188][ T5298] syz.4.415: attempt to access beyond end of device [ 108.303188][ T5298] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 108.321770][ T5277] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 108.335646][ T5292] vhci_hcd: connection closed [ 108.335927][ T4356] vhci_hcd vhci_hcd.0: stop threads [ 108.346134][ T4356] vhci_hcd vhci_hcd.0: release socket [ 108.352646][ T5298] syz.4.415: attempt to access beyond end of device [ 108.352646][ T5298] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 108.369569][ T4356] vhci_hcd vhci_hcd.0: disconnect device [ 108.374872][ T5277] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.374872][ T5277] [ 108.379828][ T5298] syz.4.415: attempt to access beyond end of device [ 108.379828][ T5298] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 108.399506][ T5298] syz.4.415: attempt to access beyond end of device [ 108.399506][ T5298] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 108.411651][ T5277] EXT4-fs (loop1): Total free blocks count 0 [ 108.414463][ T5298] syz.4.415: attempt to access beyond end of device [ 108.414463][ T5298] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 108.440166][ T5277] EXT4-fs (loop1): Free/Dirty block details [ 108.448779][ T5277] EXT4-fs (loop1): free_blocks=20480 [ 108.454152][ T5277] EXT4-fs (loop1): dirty_blocks=16 [ 108.459607][ T5277] EXT4-fs (loop1): Block reservation details [ 108.465814][ T5277] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 108.676522][ T5267] can0 (unregistered): slcan off ptm1. [ 108.761622][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 108.761637][ T28] audit: type=1400 audit(2000000012.539:1176): avc: denied { write } for pid=5304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.819893][ T28] audit: type=1400 audit(2000000012.569:1177): avc: denied { write } for pid=5318 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.903646][ T28] audit: type=1400 audit(2000000012.649:1178): avc: denied { create } for pid=5325 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.085280][ T28] audit: type=1400 audit(2000000012.859:1179): avc: denied { write } for pid=5322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.357273][ T28] audit: type=1400 audit(2000000012.939:1180): avc: denied { connect } for pid=5325 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.536061][ T28] audit: type=1400 audit(2000000013.159:1181): avc: denied { write } for pid=5345 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.916101][ T5272] Bluetooth: hci0: command 0x1003 tx timeout [ 109.956160][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.038880][ T5349] 9p: Bad value for 'rfdno' [ 110.040043][ T28] audit: type=1400 audit(2000000013.819:1182): avc: denied { mounton } for pid=5347 comm="syz.0.425" path="/107/file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.176094][ T28] audit: type=1400 audit(2000000013.949:1183): avc: denied { allowed } for pid=5350 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.280589][ T28] audit: type=1400 audit(2000000014.039:1184): avc: denied { bind } for pid=5353 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.323955][ T5357] loop0: detected capacity change from 0 to 512 [ 110.329799][ T5356] FAULT_INJECTION: forcing a failure. [ 110.329799][ T5356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.345466][ T5357] EXT4-fs warning (device loop0): read_mmp_block:110: Error -74 while reading MMP block 17 [ 110.356611][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.2.428 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.356637][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.356650][ T5356] Call Trace: [ 110.356658][ T5356] [ 110.356704][ T5356] __dump_stack+0x1d/0x30 [ 110.356728][ T5356] dump_stack_lvl+0x95/0xd0 [ 110.356753][ T5356] dump_stack+0x15/0x1b [ 110.356776][ T5356] should_fail_ex+0x25e/0x270 [ 110.356841][ T5356] should_fail+0xb/0x20 [ 110.356883][ T5356] should_fail_usercopy+0x1a/0x20 [ 110.356980][ T5356] _copy_from_user+0x1c/0xb0 [ 110.357049][ T5356] __sys_bpf+0x1e2/0xc30 [ 110.357167][ T5356] __x64_sys_bpf+0x69/0x80 [ 110.357198][ T5356] x64_sys_call+0x10cb/0x3020 [ 110.357222][ T5356] do_syscall_64+0x136/0x3c0 [ 110.357295][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.357318][ T5356] RIP: 0033:0x7f98c17ace59 [ 110.357335][ T5356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.357352][ T5356] RSP: 002b:00007f98c01ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.357398][ T5356] RAX: ffffffffffffffda RBX: 00007f98c1a25fa0 RCX: 00007f98c17ace59 [ 110.357414][ T5356] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 110.357430][ T5356] RBP: 00007f98c01ff090 R08: 0000000000000000 R09: 0000000000000000 [ 110.357445][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.357460][ T5356] R13: 00007f98c1a26038 R14: 00007f98c1a25fa0 R15: 00007ffcd91d2a88 [ 110.357487][ T5356] [ 110.755170][ T4796] kworker/u8:10: attempt to access beyond end of device [ 110.755170][ T4796] loop4: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 110.794239][ T4796] kworker/u8:10: attempt to access beyond end of device [ 110.794239][ T4796] loop4: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 110.849226][ T4796] kworker/u8:10: attempt to access beyond end of device [ 110.849226][ T4796] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 110.873707][ T4796] kworker/u8:10: attempt to access beyond end of device [ 110.873707][ T4796] loop4: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 110.887668][ T4796] kworker/u8:10: attempt to access beyond end of device [ 110.887668][ T4796] loop4: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 110.941038][ T28] audit: type=1400 audit(2000000014.719:1185): avc: denied { getopt } for pid=5367 comm="syz.3.432" lport=47369 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 111.036213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.040096][ T5373] loop0: detected capacity change from 0 to 256 [ 111.063980][ T5373] FAT-fs (loop0): Directory bread(block 64) failed [ 111.065557][ T5370] can0: slcan on ptm0. [ 111.079277][ T5373] FAT-fs (loop0): Directory bread(block 65) failed [ 111.086548][ T5373] FAT-fs (loop0): Directory bread(block 66) failed [ 111.093236][ T5373] FAT-fs (loop0): Directory bread(block 67) failed [ 111.100090][ T5373] FAT-fs (loop0): Directory bread(block 68) failed [ 111.106915][ T5373] FAT-fs (loop0): Directory bread(block 69) failed [ 111.117437][ T5373] FAT-fs (loop0): Directory bread(block 70) failed [ 111.130422][ T5373] FAT-fs (loop0): Directory bread(block 71) failed [ 111.137195][ T5373] FAT-fs (loop0): Directory bread(block 72) failed [ 111.143822][ T5373] FAT-fs (loop0): Directory bread(block 73) failed [ 111.169531][ T5380] FAULT_INJECTION: forcing a failure. [ 111.169531][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 111.190671][ T5380] CPU: 0 UID: 0 PID: 5380 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.190698][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.190710][ T5380] Call Trace: [ 111.190717][ T5380] [ 111.190803][ T5380] __dump_stack+0x1d/0x30 [ 111.190831][ T5380] dump_stack_lvl+0x95/0xd0 [ 111.190854][ T5380] dump_stack+0x15/0x1b [ 111.190935][ T5380] should_fail_ex+0x25e/0x270 [ 111.190961][ T5380] should_failslab+0x8c/0xb0 [ 111.190982][ T5380] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 111.191051][ T5380] ? __d_alloc+0x34/0x320 [ 111.191078][ T5380] ? __d_alloc+0x34/0x320 [ 111.191108][ T5380] __d_alloc+0x34/0x320 [ 111.191199][ T5380] d_alloc+0x2e/0x100 [ 111.191225][ T5380] lookup_one_qstr_excl+0x95/0x240 [ 111.191264][ T5380] start_dirop+0x3e/0x70 [ 111.191376][ T5380] simple_start_creating+0xa2/0xd0 [ 111.191408][ T5380] debugfs_start_creating+0xda/0x150 [ 111.191435][ T5380] __debugfs_create_file+0x70/0x2b0 [ 111.191610][ T5380] debugfs_create_file_full+0x3f/0x60 [ 111.191634][ T5380] ? __pfx_vlan_setup+0x10/0x10 [ 111.191666][ T5380] ref_tracker_dir_debugfs+0x10e/0x220 [ 111.191708][ T5380] alloc_netdev_mqs+0x1a9/0xa60 [ 111.191843][ T5380] rtnl_create_link+0x239/0x720 [ 111.191871][ T5380] rtnl_newlink_create+0x175/0x650 [ 111.191919][ T5380] ? security_capable+0x7b/0x90 [ 111.191939][ T5380] ? __dev_get_by_name+0x34/0xe0 [ 111.191969][ T5380] rtnl_newlink+0x1181/0x1400 [ 111.191995][ T5380] ? should_fail_ex+0xd9/0x270 [ 111.192079][ T5380] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 111.192107][ T5380] ? __rcu_read_unlock+0x4e/0x70 [ 111.192137][ T5380] ? avc_has_perm_noaudit+0xa3/0x120 [ 111.192165][ T5380] ? cred_has_capability+0x224/0x2a0 [ 111.192205][ T5380] ? selinux_capable+0x31/0x40 [ 111.192234][ T5380] ? security_capable+0x7b/0x90 [ 111.192272][ T5380] ? ns_capable+0x80/0xb0 [ 111.192307][ T5380] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.192411][ T5380] rtnetlink_rcv_msg+0x64b/0x720 [ 111.192450][ T5380] netlink_rcv_skb+0x11e/0x220 [ 111.192548][ T5380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.192585][ T5380] rtnetlink_rcv+0x1c/0x30 [ 111.192618][ T5380] netlink_unicast+0x5a7/0x680 [ 111.192667][ T5380] netlink_sendmsg+0x5be/0x6f0 [ 111.192689][ T5380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.192708][ T5380] ____sys_sendmsg+0x532/0x580 [ 111.192786][ T5380] ___sys_sendmsg+0x195/0x1e0 [ 111.192828][ T5380] __x64_sys_sendmsg+0xd4/0x160 [ 111.192857][ T5380] x64_sys_call+0x194c/0x3020 [ 111.192953][ T5380] do_syscall_64+0x136/0x3c0 [ 111.192987][ T5380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.193034][ T5380] RIP: 0033:0x7fd42f0ece59 [ 111.193069][ T5380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.193155][ T5380] RSP: 002b:00007fd42db3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.193179][ T5380] RAX: ffffffffffffffda RBX: 00007fd42f365fa0 RCX: 00007fd42f0ece59 [ 111.193193][ T5380] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 111.193209][ T5380] RBP: 00007fd42db3f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.193302][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.193314][ T5380] R13: 00007fd42f366038 R14: 00007fd42f365fa0 R15: 00007ffe77dac348 [ 111.193336][ T5380] [ 111.825259][ T5387] usb usb1: usbfs: process 5387 (syz.2.436) did not claim interface 0 before use [ 111.837044][ T5370] can0 (unregistered): slcan off ptm0. [ 111.908324][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 112.052001][ T5410] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 112.627279][ T5441] syzkaller0: entered promiscuous mode [ 112.627301][ T5441] syzkaller0: entered allmulticast mode [ 112.705097][ T3296] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 112.705623][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.829631][ T5443] loop4: detected capacity change from 0 to 512 [ 112.860246][ T5443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.907908][ T5443] EXT4-fs (loop4): 1 truncate cleaned up [ 112.921464][ T5447] loop2: detected capacity change from 0 to 1024 [ 112.922102][ T5447] EXT4-fs: Ignoring removed oldalloc option [ 112.952561][ T5443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.991510][ T5447] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 113.028001][ T5447] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 113.098809][ T5454] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 113.158766][ T5443] EXT4-fs error (device loop4): __ext4_iget:5533: inode #12: block 2: comm syz.4.442: invalid block [ 113.199014][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.477984][ T5468] syzkaller0: entered promiscuous mode [ 113.490919][ T5468] syzkaller0: entered allmulticast mode [ 114.069852][ T4796] bio_check_eod: 181 callbacks suppressed [ 114.069867][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.069867][ T4796] loop0: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 114.090137][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.090137][ T4796] loop0: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 114.104462][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.104462][ T4796] loop0: rw=1, sector=9968, nr_sectors = 24 limit=256 [ 114.128078][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.128078][ T4796] loop0: rw=1, sector=10024, nr_sectors = 32 limit=256 [ 114.143121][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.143121][ T4796] loop0: rw=1, sector=10088, nr_sectors = 32 limit=256 [ 114.176136][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.176136][ T4796] loop0: rw=1, sector=10152, nr_sectors = 32 limit=256 [ 114.181437][ T5478] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 114.190264][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.190264][ T4796] loop0: rw=1, sector=10216, nr_sectors = 32 limit=256 [ 114.211276][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.211276][ T4796] loop0: rw=1, sector=10280, nr_sectors = 32 limit=256 [ 114.233841][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.233841][ T4796] loop0: rw=1, sector=10344, nr_sectors = 32 limit=256 [ 114.234667][ T5477] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 114.247786][ T4796] kworker/u8:10: attempt to access beyond end of device [ 114.247786][ T4796] loop0: rw=1, sector=10408, nr_sectors = 32 limit=256 [ 114.295020][ T5482] tipc: Enabled bearer , priority 10 [ 114.360106][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 114.431095][ T5487] loop0: detected capacity change from 0 to 256 [ 114.444794][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 114.466469][ T5487] FAT-fs (loop0): data area starts beyond volume (32 > 0) [ 114.497493][ T5487] FAT-fs (loop0): Can't find a valid FAT filesystem [ 114.526060][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 114.526077][ T28] audit: type=1400 audit(2000000018.299:1199): avc: denied { read write } for pid=5486 comm="syz.0.451" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.540064][ T5490] loop2: detected capacity change from 0 to 256 [ 114.597853][ T28] audit: type=1400 audit(2000000018.299:1200): avc: denied { open } for pid=5486 comm="syz.0.451" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.624199][ T5490] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.755219][ T5492] loop4: detected capacity change from 0 to 512 [ 114.799612][ T5492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.901368][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.939557][ T5492] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.004644][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.113446][ T5510] random: crng reseeded on system resumption [ 115.140952][ T28] audit: type=1400 audit(2000000018.919:1201): avc: denied { execute } for pid=5507 comm="syz.4.463" path="/88/file1" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.170471][ T5514] netlink: 26 bytes leftover after parsing attributes in process `syz.0.464'. [ 115.202823][ T5512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.465'. [ 115.223197][ T28] audit: type=1400 audit(2000000018.989:1202): avc: denied { getopt } for pid=5515 comm="syz.1.466" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.258787][ T5516] loop1: detected capacity change from 0 to 1764 [ 115.269008][ T5516] iso9660: Bad value for 'sbsector' [ 115.286884][ T28] audit: type=1400 audit(2000000019.069:1203): avc: denied { map } for pid=5517 comm="syz.4.467" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.293742][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 115.313246][ T28] audit: type=1400 audit(2000000019.069:1204): avc: denied { read execute } for pid=5517 comm="syz.4.467" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.412063][ T28] audit: type=1400 audit(2000000019.189:1205): avc: denied { ioctl } for pid=5521 comm="syz.1.469" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.523046][ T5512] loop3: detected capacity change from 0 to 512 [ 115.564568][ T5525] loop4: detected capacity change from 0 to 256 [ 115.582039][ T5512] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.465: invalid block [ 115.624392][ T5525] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.628709][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.658997][ T5512] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.659817][ T5512] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.465: couldn't read orphan inode 11 (err -117) [ 115.669307][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 115.669387][ C0] EXT4-fs (loop3): initial error at time 2000000019: __ext4_iget:5533: inode 11: block 1 [ 115.669495][ C0] EXT4-fs (loop3): last error at time 2000000019: __ext4_iget:5533: inode 11: block 1 [ 115.711313][ T5512] loop3: lost filesystem error report for type 5 error -117 [ 115.714464][ T5532] bridge_slave_0 (unregistering): left allmulticast mode [ 115.718650][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.728610][ T5532] bridge_slave_0 (unregistering): left promiscuous mode [ 115.751443][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.770018][ T5537] loop1: detected capacity change from 0 to 512 [ 115.785109][ T5536] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 115.798493][ T5537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.827952][ T5537] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.474: bg 0: block 393: padding at end of block bitmap is not set [ 115.843841][ T28] audit: type=1400 audit(2000000019.609:1206): avc: denied { ioctl } for pid=5511 comm="syz.3.465" path="socket:[11131]" dev="sockfs" ino=11131 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.871913][ T5537] loop1: lost filesystem error report for type 5 error -117 [ 115.876105][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 115.889876][ C1] EXT4-fs (loop1): initial error at time 2000000019: ext4_validate_block_bitmap:441 [ 115.890145][ T5537] EXT4-fs (loop1): Remounting filesystem read-only [ 115.899284][ C1] EXT4-fs (loop1): last error at time 2000000019: ext4_validate_block_bitmap:441 [ 115.921739][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.978744][ T5537] EXT4-fs (loop1): 2 truncates cleaned up [ 116.010941][ T5537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.036957][ T5546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 116.060996][ T5546] bond0: (slave bond_slave_0): Releasing backup interface [ 116.115713][ T28] audit: type=1400 audit(2000000019.879:1207): avc: denied { append } for pid=5543 comm="syz.3.477" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.153568][ T5537] ucma_write: process 236 (syz.1.474) changed security contexts after opening file descriptor, this is not allowed. [ 116.173625][ T5546] bond_slave_0: entered promiscuous mode [ 116.188305][ T5546] bond_slave_0: entered allmulticast mode [ 116.436911][ T28] audit: type=1400 audit(2000000019.889:1208): avc: denied { bind } for pid=5543 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.459240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.596884][ T5560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 116.603428][ T5560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.612938][ T5542] loop2: detected capacity change from 0 to 512 [ 116.620469][ T5560] vhci_hcd vhci_hcd.0: Device attached [ 116.627248][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.680128][ T5564] vhci_hcd: connection closed [ 116.680862][ T49] vhci_hcd vhci_hcd.0: stop threads [ 116.692229][ T49] vhci_hcd vhci_hcd.0: release socket [ 116.712695][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 116.794870][ T5584] loop1: detected capacity change from 0 to 512 [ 116.812100][ T5584] EXT4-fs: Ignoring removed orlov option [ 116.822254][ T5584] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 116.828176][ T5588] futex_wake_op: syz.4.484 tries to shift op by 35; fix this program [ 116.863873][ T5584] loop1: detected capacity change from 0 to 1024 [ 116.910421][ T5584] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 116.932694][ T5592] loop3: detected capacity change from 0 to 1024 [ 116.943085][ T5592] ext4: Bad value for 'commit' [ 116.951144][ T5584] ip6_tunnel: non-ECT from fc00:f5ff:ffff:0000:0000:0000:0000:00fc with DS=0x1 [ 117.026779][ T5594] loop2: detected capacity change from 0 to 256 [ 117.041093][ T5594] /dev/loop2: Can't open blockdev [ 117.114576][ T5597] loop4: detected capacity change from 0 to 8192 [ 117.122616][ T5597] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.594874][ T5607] loop3: detected capacity change from 0 to 764 [ 117.632911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.974973][ T49] dummy0: left promiscuous mode [ 117.989654][ T5616] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 118.025527][ T5618] loop1: detected capacity change from 0 to 512 [ 118.050700][ T5618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.118847][ T5618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.795985][ T5628] loop2: detected capacity change from 0 to 2048 [ 118.962160][ T5628] loop2: p2 p3 p7 [ 119.145458][ T5615] loop4: detected capacity change from 0 to 512 [ 119.346247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.573666][ T5647] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.240217][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 120.240232][ T28] audit: type=1400 audit(131.238:1223): avc: denied { write } for pid=5655 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.266598][ T28] audit: type=1400 audit(131.268:1224): avc: denied { ioctl } for pid=5655 comm="syz.3.503" path="socket:[12361]" dev="sockfs" ino=12361 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.451645][ T5666] iso9660: Bad value for 'check' [ 120.825128][ T5680] EXT4-fs: Ignoring removed i_version option [ 120.832521][ T5680] EXT4-fs: Ignoring removed bh option [ 120.888408][ T5680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.910603][ T5680] mmap: syz.4.511 (5680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.283046][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.549589][ T5692] EXT4-fs: Ignoring removed i_version option [ 121.581120][ T5692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.612706][ T5692] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 121.774363][ T5701] set_capacity_and_notify: 4 callbacks suppressed [ 121.774382][ T5701] loop3: detected capacity change from 0 to 1024 [ 121.808506][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 121.882399][ T5698] loop1: detected capacity change from 0 to 256 [ 121.931855][ T5701] EXT4-fs: Ignoring removed nobh option [ 121.948468][ T5698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.973700][ T5701] EXT4-fs: Ignoring removed i_version option [ 122.035294][ T5701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.059145][ T28] audit: type=1400 audit(133.058:1225): avc: denied { write } for pid=5683 comm="syz.3.512" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.060044][ T5701] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 122.189343][ T5701] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.222635][ T5701] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.222635][ T5701] [ 122.266647][ T5712] loop1: detected capacity change from 0 to 1024 [ 122.274127][ T5701] EXT4-fs (loop3): Total free blocks count 0 [ 122.283596][ T5712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.292625][ T5701] EXT4-fs (loop3): Free/Dirty block details [ 122.295805][ T5712] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 122.299669][ T5701] EXT4-fs (loop3): free_blocks=20480 [ 122.306364][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.311188][ T5701] EXT4-fs (loop3): dirty_blocks=16 [ 122.327084][ T5701] EXT4-fs (loop3): Block reservation details [ 122.333495][ T5701] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 122.497159][ T5717] loop4: detected capacity change from 0 to 512 [ 122.523438][ T5717] EXT4-fs: inline encryption not supported [ 122.550850][ T5717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 122.554545][ T28] audit: type=1400 audit(133.548:1226): avc: denied { read } for pid=5719 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.588956][ T5717] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.523: corrupted in-inode xattr: e_value size too large [ 122.607630][ T5717] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.612557][ T5717] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.523: couldn't read orphan inode 15 (err -117) [ 122.621755][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.621776][ C1] EXT4-fs (loop4): initial error at time 133: ext4_iget_extra_inode:5180: inode 15 [ 122.621825][ C1] EXT4-fs (loop4): last error at time 133: ext4_iget_extra_inode:5180: inode 15 [ 122.662151][ T5717] loop4: lost filesystem error report for type 5 error -117 [ 122.664355][ T5717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.813687][ T28] audit: type=1400 audit(133.808:1227): avc: denied { write } for pid=5716 comm="syz.4.523" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.841907][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 122.927114][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.132666][ T5729] loop2: detected capacity change from 0 to 512 [ 123.171294][ T5729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.208877][ T5729] EXT4-fs (loop2): 1 truncate cleaned up [ 123.249656][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.360109][ T5736] loop4: detected capacity change from 0 to 256 [ 123.380587][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 123.418643][ T4796] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 123.435662][ T5736] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.451533][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.572412][ T5745] xt_hashlimit: size too large, truncated to 1048576 [ 123.603061][ T5745] xt_hashlimit: max too large, truncated to 1048576 [ 124.208351][ T5748] loop2: detected capacity change from 0 to 8192 [ 124.479035][ T28] audit: type=1400 audit(135.468:1228): avc: denied { read append } for pid=5739 comm="syz.0.530" name="file0" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.650261][ T5751] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 124.797772][ T5751] netlink: 228 bytes leftover after parsing attributes in process `syz.4.533'. [ 124.934289][ T5759] loop4: detected capacity change from 0 to 512 [ 124.949680][ T28] audit: type=1400 audit(135.938:1229): avc: denied { create } for pid=5755 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.984946][ T5759] ext4: Unknown parameter 'uid' [ 125.091124][ T28] audit: type=1400 audit(136.088:1230): avc: denied { create } for pid=5761 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 125.193720][ T28] audit: type=1400 audit(136.108:1231): avc: denied { write } for pid=5761 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 125.280682][ T28] audit: type=1400 audit(136.118:1232): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.346849][ T5767] program syz.2.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.440819][ T28] audit: type=1326 audit(136.438:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.468556][ T5771] loop2: detected capacity change from 0 to 2048 [ 125.487299][ T28] audit: type=1326 audit(136.438:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.538667][ T28] audit: type=1326 audit(136.438:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.614492][ T28] audit: type=1326 audit(136.438:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.689903][ T28] audit: type=1326 audit(136.438:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.740546][ T28] audit: type=1326 audit(136.438:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.799197][ T28] audit: type=1326 audit(136.438:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.867482][ T28] audit: type=1326 audit(136.438:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.916009][ T5762] loop0: detected capacity change from 0 to 2048 [ 125.941195][ T5762] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.948506][ T28] audit: type=1326 audit(136.438:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.4.540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812d88ce59 code=0x7ffc0000 [ 125.994835][ T5762] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.091181][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.264531][ T5785] EXT4-fs (loop2): unable to read superblock [ 126.440663][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 126.452495][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.544242][ T5795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.574092][ T5795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 126.586645][ T5795] System zones: 1-12 [ 126.692886][ T5795] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.720907][ T5793] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.730809][ T5795] EXT4-fs (loop3): 1 truncate cleaned up [ 126.734082][ T4356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 234: padding at end of block bitmap is not set [ 126.737094][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.760431][ T4356] EXT4-fs (loop0): Remounting filesystem read-only [ 126.784226][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.794328][ T5793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.847286][ T5793] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 126.872496][ T5807] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 126.881009][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.885943][ T5793] xt_hashlimit: size too large, truncated to 1048576 [ 126.935794][ T5807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.965145][ T5825] netlink: 52 bytes leftover after parsing attributes in process `syz.4.547'. [ 126.996860][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 127.043831][ T5822] bond2: (slave geneve2): making interface the new active one [ 127.053216][ T5822] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 127.200794][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.271509][ T5849] set_capacity_and_notify: 3 callbacks suppressed [ 127.271525][ T5849] loop3: detected capacity change from 0 to 512 [ 127.309731][ T5849] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 127.336293][ T5849] EXT4-fs (loop3): mount failed [ 127.369332][ T5849] netlink: 27 bytes leftover after parsing attributes in process `syz.3.562'. [ 127.419414][ T5841] loop1: detected capacity change from 0 to 1024 [ 127.439468][ T5847] loop4: detected capacity change from 0 to 512 [ 127.453312][ T5841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.490581][ T5841] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.506643][ T5841] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 127.520232][ T5841] EXT4-fs (loop1): invalid journal inode [ 127.556845][ T5864] loop3: detected capacity change from 0 to 4096 [ 127.565486][ T5864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.653844][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.756730][ T5878] loop3: detected capacity change from 0 to 256 [ 127.913000][ T5890] loop4: detected capacity change from 0 to 256 [ 128.549550][ T5894] FAULT_INJECTION: forcing a failure. [ 128.549550][ T5894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.563427][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.4.569 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.563497][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.563522][ T5894] Call Trace: [ 128.563531][ T5894] [ 128.563541][ T5894] __dump_stack+0x1d/0x30 [ 128.563564][ T5894] dump_stack_lvl+0x95/0xd0 [ 128.563585][ T5894] dump_stack+0x15/0x1b [ 128.563722][ T5894] should_fail_ex+0x25e/0x270 [ 128.563812][ T5894] should_fail+0xb/0x20 [ 128.563869][ T5894] should_fail_usercopy+0x1a/0x20 [ 128.563897][ T5894] _copy_from_user+0x1c/0xb0 [ 128.564001][ T5894] __sys_bpf+0x1e2/0xc30 [ 128.564036][ T5894] ? send_signal_locked+0x33c/0x3a0 [ 128.564083][ T5894] __x64_sys_bpf+0x69/0x80 [ 128.564111][ T5894] x64_sys_call+0x10cb/0x3020 [ 128.564141][ T5894] do_syscall_64+0x136/0x3c0 [ 128.564262][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.564288][ T5894] RIP: 0033:0x7f812d88ce59 [ 128.564303][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.564324][ T5894] RSP: 002b:00007f812c2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.564351][ T5894] RAX: ffffffffffffffda RBX: 00007f812db06180 RCX: 00007f812d88ce59 [ 128.564368][ T5894] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 128.564381][ T5894] RBP: 00007f812c2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.564403][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.564416][ T5894] R13: 00007f812db06218 R14: 00007f812db06180 R15: 00007ffe3c396258 [ 128.564435][ T5894] [ 128.917999][ T5896] loop1: detected capacity change from 0 to 256 [ 131.540718][ T5911] loop3: detected capacity change from 0 to 512 [ 131.563286][ T5911] ------------[ cut here ]------------ [ 131.568813][ T5911] EA inode 11 i_nlink=0 [ 131.568840][ T5911] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.3.574/5911 [ 131.583709][ T5911] Modules linked in: [ 131.587696][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.596971][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.607085][ T5911] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 131.613774][ T5911] Code: 26 d0 96 ff 49 8d 7e 40 4c 8d 2d db 8a 5a 05 e8 86 b0 b5 ff 49 8b 6e 40 4c 89 e7 e8 ba ab b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 f8 d8 03 90 90 90 90 90 90 90 [ 131.633436][ T5911] RSP: 0018:ffffc90011a57648 EFLAGS: 00010246 [ 131.639589][ T5911] RAX: ffff888104a2adb0 RBX: ffff888107ab3788 RCX: ffffffff81c2a736 [ 131.647568][ T5911] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3200 [ 131.655540][ T5911] RBP: 000000000000000b R08: 0001888107ab373b R09: 0000000000000000 [ 131.663548][ T5911] R10: ffffc90011a57578 R11: 0001c90011a57578 R12: ffff888107ab3738 [ 131.671595][ T5911] R13: ffffffff871d3200 R14: ffff888107ab36f0 R15: 0000000000000001 [ 131.679588][ T5911] FS: 00007fd42db3f6c0(0000) GS:ffff8882ae9d4000(0000) knlGS:0000000000000000 [ 131.688548][ T5911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.695189][ T5911] CR2: 00007fb916dfc000 CR3: 000000011ea4a000 CR4: 00000000003506f0 [ 131.703203][ T5911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.711188][ T5911] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 131.719179][ T5911] Call Trace: [ 131.722463][ T5911] [ 131.725469][ T5911] ext4_xattr_set_entry+0x78a/0x1050 [ 131.730863][ T5911] ext4_xattr_ibody_set+0x156/0x390 [ 131.736136][ T5911] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 131.741951][ T5911] __ext4_expand_extra_isize+0x246/0x280 [ 131.747612][ T5911] __ext4_mark_inode_dirty+0x290/0x3d0 [ 131.753082][ T5911] ext4_evict_inode+0x8b6/0xdf0 [ 131.757958][ T5911] ? __pfx_ext4_evict_inode+0x10/0x10 [ 131.763337][ T5911] evict+0x2a5/0x510 [ 131.767348][ T5911] iput+0x430/0x5a0 [ 131.771228][ T5911] ext4_process_orphan+0x1a4/0x1c0 [ 131.776363][ T5911] ext4_orphan_cleanup+0x6a6/0xa10 [ 131.781533][ T5911] ? ext4_register_li_request+0x14c/0x440 [ 131.787290][ T5911] ext4_fill_super+0x33ab/0x3760 [ 131.792239][ T5911] ? set_blocksize+0x14c/0x270 [ 131.797162][ T5911] ? __pfx_ext4_fill_super+0x10/0x10 [ 131.802543][ T5911] get_tree_bdev_flags+0x291/0x300 [ 131.807729][ T5911] ? __pfx_ext4_fill_super+0x10/0x10 [ 131.813091][ T5911] get_tree_bdev+0x1f/0x30 [ 131.817602][ T5911] ext4_get_tree+0x1c/0x30 [ 131.822061][ T5911] vfs_get_tree+0x57/0x1d0 [ 131.826500][ T5911] do_new_mount+0x288/0x8d0 [ 131.831017][ T5911] path_mount+0x4ad/0xb90 [ 131.835397][ T5911] __se_sys_mount+0x28c/0x2e0 [ 131.840177][ T5911] ? restore_fpregs_from_fpstate+0x61/0x110 [ 131.846125][ T5911] __x64_sys_mount+0x67/0x80 [ 131.850230][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 131.850245][ T28] audit: type=1326 audit(142.848:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 131.850913][ T5911] x64_sys_call+0x2d61/0x3020 [ 131.857285][ T28] audit: type=1326 audit(142.868:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 131.881681][ T5911] do_syscall_64+0x136/0x3c0 [ 131.881721][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.881744][ T5911] RIP: 0033:0x7fd42f0ee0ca [ 131.888436][ T28] audit: type=1326 audit(142.898:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 131.911202][ T5911] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.915819][ T28] audit: type=1326 audit(142.898:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 131.921659][ T5911] RSP: 002b:00007fd42db3ee58 EFLAGS: 00000246 [ 131.951290][ T28] audit: type=1326 audit(142.898:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 131.970211][ T5911] ORIG_RAX: 00000000000000a5 [ 131.970223][ T5911] RAX: ffffffffffffffda RBX: 00007fd42db3eee0 RCX: 00007fd42f0ee0ca [ 131.970239][ T5911] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fd42db3eea0 [ 132.000816][ T28] audit: type=1326 audit(142.898:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 132.001060][ T5911] RBP: 0000200000000180 R08: 00007fd42db3eee0 R09: 0000000000000000 [ 132.025954][ T28] audit: type=1326 audit(142.898:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 132.030410][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 132.039059][ T28] audit: type=1326 audit(142.898:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 132.046376][ T5911] R13: 00007fd42db3eea0 R14: 000000000000047a R15: 00002000000001c0 [ 132.072283][ T28] audit: type=1326 audit(142.898:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 132.079089][ T5911] [ 132.104602][ T28] audit: type=1326 audit(142.898:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c17ace59 code=0x7ffc0000 [ 132.111733][ T5911] ---[ end trace 0000000000000000 ]--- [ 132.113307][ T5911] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.574: bit already cleared for inode 11 [ 132.225291][ T5911] loop3: lost filesystem error report for type 5 error -117 [ 132.225843][ T5911] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 132.233234][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 132.233256][ C1] EXT4-fs (loop3): initial error at time 143: ext4_free_inode:356 [ 132.233280][ C1] EXT4-fs (loop3): last error at time 143: ext4_free_inode:356 [ 132.263815][ T5911] loop3: lost filesystem error report for type 5 error -117 [ 132.264042][ T5911] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 132.280101][ T5911] loop3: lost filesystem error report for type 5 error -117 [ 132.280340][ T5911] EXT4-fs (loop3): 1 orphan inode deleted [ 132.293838][ T5911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.317606][ T5911] EXT4-fs error (device loop3): __ext4_iget:5533: inode #14: block 1886221359: comm syz.3.574: invalid block [ 132.334072][ T5911] EXT4-fs error (device loop3): __ext4_iget:5533: inode #14: block 1886221359: comm syz.3.574: invalid block [ 132.375014][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.479332][ T5927] raw_sendmsg: syz.2.581 forgot to set AF_INET. Fix it! [ 132.499436][ T5930] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20001 [ 132.507260][ T5929] loop1: detected capacity change from 0 to 4096 [ 132.563996][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.582169][ T5926] loop3: detected capacity change from 0 to 8192 [ 132.707946][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.022983][ T3300] ================================================================== [ 133.031101][ T3300] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 133.039019][ T3300] [ 133.041344][ T3300] read-write to 0xffff888103f63e08 of 8 bytes by task 5949 on cpu 0: [ 133.049416][ T3300] shmem_add_to_page_cache+0x4b2/0x5b0 [ 133.054888][ T3300] shmem_get_folio_gfp+0x517/0xd90 [ 133.060011][ T3300] shmem_write_begin+0xfc/0x1f0 [ 133.064894][ T3300] generic_perform_write+0x186/0x490 [ 133.070193][ T3300] shmem_file_write_iter+0xc5/0xf0 [ 133.075329][ T3300] __kernel_write_iter+0x30f/0x590 [ 133.080462][ T3300] dump_user_range+0xa73/0xd00 [ 133.085235][ T3300] elf_core_dump+0x21c0/0x2340 [ 133.090000][ T3300] coredump_write+0xaf9/0xdd0 [ 133.094688][ T3300] vfs_coredump+0x2770/0x3290 [ 133.099373][ T3300] get_signal+0xd33/0xf10 [ 133.103710][ T3300] arch_do_signal_or_restart+0x96/0x480 [ 133.109253][ T3300] irqentry_exit+0x14d/0x610 [ 133.113836][ T3300] asm_exc_page_fault+0x26/0x30 [ 133.118675][ T3300] [ 133.120986][ T3300] read to 0xffff888103f63e08 of 8 bytes by task 3300 on cpu 1: [ 133.128514][ T3300] shmem_getattr+0x68/0x200 [ 133.133019][ T3300] vfs_getattr_nosec+0x146/0x1e0 [ 133.137953][ T3300] vfs_getattr+0x48/0x60 [ 133.142187][ T3300] vfs_statx_path+0x28/0x140 [ 133.146772][ T3300] vfs_statx+0xc4/0x170 [ 133.150923][ T3300] vfs_fstatat+0x118/0x170 [ 133.155330][ T3300] __se_sys_newfstatat+0x55/0x3e0 [ 133.160351][ T3300] __x64_sys_newfstatat+0x55/0x70 [ 133.165376][ T3300] x64_sys_call+0x2c64/0x3020 [ 133.170055][ T3300] do_syscall_64+0x136/0x3c0 [ 133.174643][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.180527][ T3300] [ 133.182835][ T3300] value changed: 0x000000000000083b -> 0x000000000000083e [ 133.189930][ T3300] [ 133.192253][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 133.198391][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 133.209416][ T3300] Tainted: [W]=WARN [ 133.213211][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.223254][ T3300] ================================================================== [ 133.233301][ T5957] loop3: detected capacity change from 0 to 256 [ 133.249577][ T5957] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.986397][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)