last executing test programs: 3.872947469s ago: executing program 0 (id=1530): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x103042, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000180)="95", 0x1e, 0x800) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.004383196s ago: executing program 0 (id=1534): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000004c0)='./file0\x00', 0x4804, &(0x7f0000001400)=ANY=[@ANYBLOB='nojoliet,iide,mwp=acorn,check=relaxed,\x00'], 0x1, 0x52a, &(0x7f0000000a80)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_normal', 0x109480, 0x8d) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3}, 0x46, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$unix(0x1, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pwrite64(0xffffffffffffffff, &(0x7f0000000ac0)="e62eb1", 0x3, 0x1a) bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)) getdents64(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file1', [{0x20, '/dev/autofs\x00'}]}, 0x18) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 2.616621348s ago: executing program 2 (id=1542): r0 = socket$inet(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="f9a92b3c2be662f5aec6541ee50751ba58904eb8c508ef98778af27fcbd7208095370e9b7a606c17a9b2feff8a687ec6fff066d5a7aa16a66e3e795bc1133dc3d85721c9b422ce24ae826deb425834d99e678af66230a66decb31f1adb4ee2811ed6dfbbc3f75218a1a2d0b60925acbf13c93db5ce0cda4827", @ANYBLOB="010000000000000003000000000000000100000000000000fa000000008844a2e4e80200000009000000000000002f0d0000000000003c0008000000000000800000000000001cf1ffffffffffff81000000000000000b00000000000000070000000000000004000000b26b6e000101"], 0x19c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) munlockall() 2.56677136s ago: executing program 2 (id=1543): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xb4485, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000180)={0xd, 0x7f}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x4000814) mount(0x0, 0x0, 0x0, 0x80001, &(0x7f0000000640)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9b\xc5\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r9, 0x4) 2.547152631s ago: executing program 0 (id=1544): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x103042, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000180)="95", 0x1e, 0x800) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.493022162s ago: executing program 4 (id=1545): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x2, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x5}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg(r2, &(0x7f0000000300)={&(0x7f00000001c0)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="ec33e06097f58f81119838e1a9325a627cc1ecf82a9c8cb500673eb1913fb0e2f0f491a2b1c805813bccf9b5", 0x2c}], 0x1}, 0x24040085) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2b, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_open_procfs(0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@errors_continue}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") accept4$tipc(r4, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 2.413100475s ago: executing program 1 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.267407639s ago: executing program 1 (id=1548): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1) sendfile(r3, r3, 0x0, 0x400) fallocate(r2, 0x69, 0x37e9, 0x532) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="40dbdf25000100000000", @ANYRES32=0x0, @ANYBLOB="001000008f0e0000140003007465616d3000000000000000000000000a00010029b1d4c1053d0000"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000000d80)='./file0/file0\x00', &(0x7f0000001640)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) fstat(r1, &(0x7f0000000e40)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003200)) geteuid() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) fstat(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.963149569s ago: executing program 3 (id=1549): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x400005, 0x12) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 1.962098309s ago: executing program 0 (id=1550): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1) sendfile(r3, r3, 0x0, 0x400) fallocate(r2, 0x69, 0x37e9, 0x532) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="40dbdf25000100000000", @ANYRES32=0x0, @ANYBLOB="001000008f0e0000140003007465616d3000000000000000000000000a00010029b1d4c1053d0000"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000000d80)='./file0/file0\x00', &(0x7f0000001640)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) fstat(r1, &(0x7f0000000e40)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003200)) geteuid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003240)={'\x00', 0x400, 0xb8d2, 0x5, 0xd, 0x9, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.885048272s ago: executing program 3 (id=1551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000020000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.884552632s ago: executing program 3 (id=1552): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000040400000900000000000000", @ANYRES32], 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xc0, 0xffffff0c}, 0x40) 1.771245755s ago: executing program 3 (id=1553): r0 = socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) munlockall() 1.710447677s ago: executing program 3 (id=1554): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x7fffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0xf, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2818072, &(0x7f00000000c0), 0x1, 0x582, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0\x00', 0x181d49b, 0x0, 0x40, 0x0, &(0x7f0000000140)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x400000000000000}]) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0), 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$kcm(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r7 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0xa9525000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x6}, 0x20) 1.678778048s ago: executing program 2 (id=1555): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc00d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x104046, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4000800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x4, 0x0, 0x8, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1ff8000, 0x7fffffff}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x9, 0x8001, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xfff2}, {}, {0x9, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000014) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$inet_icmp(0x2, 0x2, 0x1) 1.628798909s ago: executing program 1 (id=1556): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 1.518916013s ago: executing program 2 (id=1557): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) bind$can_j1939(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000d0000000950019f7000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x7, 0x4e20, 0x6, 0x2, 0x0, 0x0, 0x6c, 0x0, r4}, {0x46ac, 0xffff, 0x8000000000000001, 0xbb, 0x5, 0x9, 0xffffffffffffe8cd}, {0x5, 0x6, 0x6, 0xffff}, 0x7fffffff, 0x7, 0x2, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3504, 0x4, 0x3, 0xfe, 0x1, 0x8, 0x7}}, 0xe8) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(r3) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000001"], 0x114}], 0x1}, 0x0) 1.239127712s ago: executing program 1 (id=1558): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440100000206010100000000000000000000000005000400000000000900020073797a3200000000050005000200000005000100759e1905dc0c3f748b060000000c000300686173683a69700032c48243181daed5b6ebb7"], 0x44}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28990000040601010000000000000000140000050500ab00070000000900020873797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 1.158517454s ago: executing program 4 (id=1559): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x1e2}, {&(0x7f0000000bc0)="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", 0x1ca}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3", 0x3e}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000052000100fcffffbf000000230200000007000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40806}, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f0000000bc0)=""/74, 0x4a}, {&(0x7f0000000840)=""/243, 0xf3}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, &(0x7f0000000000)="01", 0x1) r10 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendto(r10, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.081152616s ago: executing program 0 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x103042, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000180)="95", 0x1e, 0x800) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 852.291494ms ago: executing program 4 (id=1561): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x1e2}, {&(0x7f0000000bc0)="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", 0x1ca}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3", 0x3e}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000052000100fcffffbf000000230200000007000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40806}, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, &(0x7f0000000000)="01", 0x1) 645.75998ms ago: executing program 2 (id=1562): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x1e2}, {&(0x7f0000000bc0)="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", 0x1ca}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3", 0x3e}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000052000100fcffffbf000000230200000007000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40806}, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f0000000bc0)=""/74, 0x4a}, {&(0x7f0000000840)=""/243, 0xf3}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, &(0x7f0000000000)="01", 0x1) r10 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendto(r10, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 525.122664ms ago: executing program 2 (id=1563): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000004c0)='./file0\x00', 0x4804, &(0x7f0000001400)=ANY=[@ANYBLOB='nojoliet,iide,mwp=acorn,check=relaxed,\x00'], 0x1, 0x52a, &(0x7f0000000a80)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_normal', 0x109480, 0x8d) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3}, 0x46, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$unix(0x1, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pwrite64(0xffffffffffffffff, &(0x7f0000000ac0)="e62eb1", 0x3, 0x1a) bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)) getdents64(r0, 0x0, 0x0) unshare(0x28000600) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file1', [{0x20, '/dev/autofs\x00'}]}, 0x18) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 509.405444ms ago: executing program 4 (id=1564): r0 = socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) munlockall() 490.902885ms ago: executing program 0 (id=1565): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x4, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0x10, {0x100, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="cc000901b40300008602000000040000f40100000900000000000000000000001912945c626c04e551c9ce2a25c7b29de2cb28a7f61000003b871c6c560e2d9f6519db25f24fe81a5f3487ef2305ebfb89ee070dd4f29df26b2b761d69ad9622d842219d5b46f9272a0b0d0f00b1f414996462801ca7673ee2ed6ecfe88058fc0ca833e4b10800454dd75886531d8856bda6920263dc90ff16c64135e1f18fe2da91f4b831994724d7108720bece7343"], 0x40) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x9}, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x21df659f58d12e7e, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x52}, 0x28) syz_open_dev$evdev(0x0, 0x3, 0x181080) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 457.689566ms ago: executing program 4 (id=1566): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 385.021148ms ago: executing program 4 (id=1567): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1) sendfile(r3, r3, 0x0, 0x400) fallocate(r2, 0x69, 0x37e9, 0x532) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="40dbdf25000100000000", @ANYRES32=0x0, @ANYBLOB="001000008f0e0000140003007465616d3000000000000000000000000a00010029b1d4c1053d0000"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000000d80)='./file0/file0\x00', &(0x7f0000001640)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) fstat(r1, &(0x7f0000000e40)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003200)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) fstat(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 243.911923ms ago: executing program 1 (id=1568): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1) sendfile(r3, r3, 0x0, 0x400) fallocate(r2, 0x69, 0x37e9, 0x532) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="40dbdf25000100000000", @ANYRES32=0x0, @ANYBLOB="001000008f0e0000140003007465616d3000000000000000000000000a00010029b1d4c1053d0000"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000000d80)='./file0/file0\x00', &(0x7f0000001640)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) fstat(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003200)=0x0) r8 = geteuid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003240)={'\x00', 0x400, 0xb8d2, 0x5, 0xd, 0x9, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r11) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000003400)=[{{&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000900)="fbf64ec87af193e3b6f0ed15cad8ebccf4fb4a528e9d809414e7ed7d3857a1ec3663f57207986e46b1e53f07e915acb3239c123417ecf4fda52afa788211956cb62f857a6d171e2f", 0x48}, {&(0x7f0000000980)="93e102e71cef0c85dbc50f7c3785777e4a157a8bdcad42158d21785a150e5e1807ec968fd1c63e43bfb019d411d4b31ca643b3f86d731fecd5e69b49f47c008d0dd5ba9ba9260e8af2a0e18bf9cc385fc636aa055cfdd137372a41bb8468aca85220bc75d8209f2afeba65c10776e414d7d77ef4002e26a4152c2f87f2c57a0c8b2b2201788e3ba4985f926094cc4b33c532dc2d648bca6f8af907d5b238ed83674467036c90", 0xa6}, {&(0x7f0000000a40)="e9a871f6cfc8ec1676a7f7f965367f5307581c1c1684a26c810a0045", 0x1c}, {&(0x7f0000000a80)="ca2f2a0d774bc81b198ea45f370d9bfaaf5562059f4bca5778326494f9a8732cee0ba8178d7f61f68f0f201ce0a5d7264784e48aac3de6a13cb5a8844cee42ba84f372c4966f9ce8b8dc0bc8e2a1d7e7d824de23cb80d2dbc73a27b6ca30f8336eca3466410debee68f2bcee50c172d64f897bc33ac17c9463700718b6a22714a931c5a8167a8d6a946e766a6ebdcd355ecd2d61598def19873af97984ce163743eac67c05b5a0a991747f2dc190b1cde0e5c04b9751acb9da7b58195013971d10509d8f700ae6302e", 0xc9}, {&(0x7f0000001000)="8a58308cdfa014df9fc407205428318dd8251ddf74fad0b28b5c30759d7725d60dd583e5b3453709eaa5a0ccb9213b6c85718bc532e231e719d0dbda415dc7ffb945e6824bf69aafd26dd87d85dca4406c2a04b09fde1e271c87b36f2b615dc8a0995ae78178e6496a388f813ed5172192de7dd324927dcab6ca8baf54c6c1f180423d0a357687567b875db1b290c7d7bcddeb2a7676a47337b36d4f131fdc14ec2d256b3a06397b17274cf2d77e9e6f12ecd4a7ee3c7e796965bcf5177405", 0xbf}], 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES64, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000001800)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001880)="472e8b2d585d9af49c942ff3cade2866bad38a2b794b44473c0b68246290e2dee23d7d950a02acbc1c059b649cc1b768dc4a2cf3cc43ee552d9ac274ec0d85ff712e7cd29b2c5e504873ab2e78ffb86d360c6c2ca24cdbd0df6fb40d41c738cf20744832b88df6c03c2084382e324a4a79cebd734b47fef45b5cae13c83c247f0293f00cc0e6dd7d3b80c74bc189309e635902758d767db8bd6ca076d69a05ec1707a64afcb95bfc3a96ed0aa1414bf6e86ce53d5f47", 0xb6}, {&(0x7f0000001940)="74d5bd74a45035a72ef4b7c34e6e4824903d80440f808a23671fbbea419e1db785d2d58b969abc85a7dec82e74017f5368cf2c645f7a95ba5001435f2d179d313b34ceefddb9d48a2303449cab616cac242789dcfc484c2314adeccd2114d8a4488e32bde722e125b420d729876dbdf335b580b112b35747a2c53a16f1d5abb6124f4847ab3bc60b93abfb88952709b666b7a904253baacf5ddf3fa44c621544ef32eb5ab30572d9563f880a6821d6148ae6a44a9cf6ec6afaf747069f67f4ae185ff5dc62a5329b99a647f7add485203177afcd73", 0xd5}, {&(0x7f0000001a40)="9b6f64f7b06be9d021379a31950cce54d42f096016e47c8711fe71f63cb33822ed1c5eed217f920eb45158e6050d64cfde3ffbfd426864d286a3e3a7aac2729efa88b8b44b44a09b13de7649ed1609568fef45467d7530db420b262c555e8f362d6fdb17d3a46a73ef361734a44eb3cf9aaa4394a308150ccf121d5b73c4f84e556a34d65cb6c2f645e0a0ce1504e18d95161d96efc8676a269b4ae7f1c3ac4a694a4d244220b5aa83c2f5eb6e64c5c1368aab9de26a10af983cc25187ef12636718a12668d7d835900c7bd1dbdc82d85b8a389d3f", 0xd5}, {&(0x7f0000001b40)="73e2fcc98219bf466381b8d44fb05de27cae48342d7ad929e78f0249b25c83fa497cfcb794cb827cc88c738be6030120e3a564bc5272bf9d516e0b915601b35d7c50b09ae90343dac001d1553be6c3eb3c1e40382f0bd3ad6b1fd4ebe4e1bbb292ec808b305086328c528a43fc37c3c180996b1fcb29c5068f06489e92c88021635f9f00798c7a6359057cbcc435329c7cb9e1c032427697dc776b9572cfdf0060fad8587f9b3720b5d8", 0xaa}, {&(0x7f0000000ec0)="73dd89e18c872d8345a4da5334c62509000000000000005f340c80ec3cfc26e181ae4954283278c126e9d9b57f9c4ce4672ca00a5c793567abb54d87d484fc5c19e9781a2700978644585bb218a0e4ec000000000000008cb944a1c805e5de3355c72fd88c0ea3086c74b3fbfe6f2a8ac4ddb7e2f5ac02d3c802b40599b65b79c69cea444c2784c683385e25d4fe7ba7a964d8b44b59865a6429dd580576675f730022297aa7827153db0868c95156776cb371a9114aa9c26fc4d69dc22a23121c5f4c4f7f79b1f30a1787afeb8e913e81093b69dcb073f499314b517aae09cbde2b369dd1edb5fcfeeef1da156db84886fdf660f51760b2f2616ede5ee7b5454ff0c22139e151f7e1769f58fef4e784abe06cbbebc5615e9f1e5756da", 0x11d}, {&(0x7f0000001c80)="663bab40420ca39398fd605be784c17bef21a6f31f5e13964991c4a7f25ad61527c41508b3f0b968d78daa8af8fd421c7c901257f36c45a28f67ab639f5bdc991a490c397612fa4ed2e069dc2e1b75cea4b2257452d88fd31288c9e23062eb20d9d34938178258f4393067df6d3afe6075f3fef9", 0x74}, {&(0x7f0000001d00)="a259fd90350d48e04f92626592a040bd449bedaf1d746b6563b33b658d1405de9351b9e0dd66e46a1560b1d64cf2cd46632cc43431851e4866affac279c7e540ee31ab1012c658f6b838f1987ed464e8c2f863297c3f11e476c304494c669135635391e4cba319d3bac0050e8de1ca8c6c5e01c2a06403aacfa09b8211044acbcadcfce8ff7cfbb495ada4de472319820be2838c91a798aea8", 0x99}], 0x7, 0x0, 0x0, 0x4000}}, {{&(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001ec0)="0ce24c9604be3d2ec9ea7de08b254974535f85667ad69ea7b52d5298f216b8858c312d7d5fa23f1ad31d5be9d4f577fd1b14965608455c5ea6fcd8d0d6d3d8500e3f5daeb2dfb4ad4c5f2f3c19a23b9a9dedba512cd750ce818454fabcd916f309977a385023a15063b7a179642cf962db25df284819d0838826496ed0b87080d244112eed17f667ebf5d283b68ec6fd98e4005b4a24d76df89954424806a34dd1ab899f41bb50bdb4ae5cb30601647cd9245cbeb6a9c1ed2f99bc1c4591955e2ce96466da3a8892c9907701be546df9e6c4", 0x5e}, {&(0x7f0000001fc0)="2aecddcd1ec7b5de9dff9001ac379fa44361e6af031253a306bf0809650e3ff0edd6db377587b0d41430d67ce24fd2dfc30871f0737408fa7cf213feadeda8103a25e9e3177251648782635ecb79ad65125ce6ff0fdf6a7d394f5e26701d91bcd3087bc6135f688d688d755e76fc1a1784347e049a1b36e36c1d6a14b632b884c80778c255121ff5817ac94427e5b7944954e0e1d977c03f5f697d9e6c37d514ea3dea5c9d2db374b3fed9ccb754fa9e16bd82a8fc7922fea4cbf84ab57574190df1cab1240c55dbabc7f76577513a5a", 0xd0}, {&(0x7f00000020c0)="6bf1a2d0dcea5fa1dd06b8d27f904eb223474e9d704a9d522cf698c823195dfc53bcadc1fad9e34f3e0a4f49d1ef9a3a68158244472281322d18498d9237dae79f47e6adf5cdcfaaa0147390965d7b537e2dd7773c66fe223185a5202467b0db2483dc18e53868c1bb478569a699830e807d543f9567dbf3d59f12f052e0dbc06cf51bbc1c2e637f4c5d487462fbc001c44632f9ec891cd3eab718b63f6591bcdbb474561eb4be1a5e2c36a9600f8bce3d8df84c448f3f294c604d3676c2f6d1623f359d453ff6cd28ca8d", 0xcb}, {&(0x7f00000021c0)="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", 0x1000}], 0x4, &(0x7f0000003380)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="08800000"], 0x80, 0x890}}], 0x3, 0x20000010) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 238.280103ms ago: executing program 3 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000040)={0x0, 0x8, 0x170000}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setuid(0xee00) mq_open(&(0x7f0000000000)='[\x00', 0x40, 0x100, &(0x7f0000000040)={0x10, 0x710a, 0x9, 0x9}) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r7 = socket(0x10, 0x803, 0x0) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 0s ago: executing program 1 (id=1570): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) kernel console output (not intermixed with test programs): loc_cache_init+0x36/0xb0 [ 120.791507][ T6386] io_alloc_cache_init+0x36/0xb0 [ 120.791534][ T6386] io_ring_ctx_alloc+0x2c1/0x670 [ 120.791585][ T6386] io_uring_create+0x50/0x500 [ 120.791612][ T6386] ? memchr_inv+0x30/0x2f0 [ 120.791660][ T6386] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 120.791742][ T6386] __x64_sys_io_uring_setup+0x31/0x40 [ 120.791769][ T6386] x64_sys_call+0x2962/0x3020 [ 120.791910][ T6386] do_syscall_64+0x12c/0x3b0 [ 120.791948][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.791975][ T6386] RIP: 0033:0x7f848496ce59 [ 120.791998][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.792091][ T6386] RSP: 002b:00007f84833c6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 120.792168][ T6386] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f848496ce59 [ 120.792181][ T6386] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 0000000000005626 [ 120.792194][ T6386] RBP: 00007f84833c7090 R08: 0000000000000000 R09: 0000000000000101 [ 120.792226][ T6386] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000280 [ 120.792241][ T6386] R13: 0000200000000000 R14: 0000200000000100 R15: 00007ffc399d8598 [ 120.792327][ T6386] [ 120.797509][ T28] audit: type=1400 audit(2000000038.150:1496): avc: denied { write } for pid=6373 comm="syz.1.872" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.012077][ T6384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.024460][ T6384] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.056906][ T6401] syzkaller1: entered promiscuous mode [ 121.062577][ T6401] syzkaller1: entered allmulticast mode [ 121.128752][ T6408] 9p: Bad value for 'wfdno' [ 121.155886][ T6409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.165714][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.882'. [ 121.176197][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.224309][ T6415] loop1: detected capacity change from 0 to 512 [ 121.237521][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.252704][ T6415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.302053][ T6418] loop3: detected capacity change from 0 to 8192 [ 121.341237][ T6418] loop3: p1 < > p2 p4 < p5 > [ 121.346010][ T6418] loop3: partition table partially beyond EOD, truncated [ 121.353277][ T6418] loop3: p1 start 134217728 is beyond EOD, truncated [ 121.360014][ T6418] loop3: p2 size 591360 extends beyond EOD, truncated [ 121.368050][ T6418] loop3: p5 size 591360 extends beyond EOD, truncated [ 121.377750][ T28] audit: type=1400 audit(2000000038.740:1497): avc: denied { setopt } for pid=6412 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.399106][ T28] audit: type=1400 audit(2000000038.760:1498): avc: denied { accept } for pid=6412 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.795154][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 121.804073][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 121.813263][ T6427] netlink: 'syz.2.888': attribute type 11 has an invalid length. [ 121.825972][ T30] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.838346][ T30] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.848182][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.856921][ T30] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.399911][ T6458] loop1: detected capacity change from 0 to 4096 [ 122.407957][ T6458] EXT4-fs: Ignoring removed bh option [ 122.445118][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.904139][ T6461] syzkaller1: entered promiscuous mode [ 122.909676][ T6461] syzkaller1: entered allmulticast mode [ 122.974041][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.012602][ T6463] loop1: detected capacity change from 0 to 4096 [ 123.022257][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.035119][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 123.035133][ T28] audit: type=1400 audit(2000000040.400:1502): avc: denied { write } for pid=6462 comm="syz.1.899" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.053776][ T6463] forcing mempool usage for bio_alloc_bioset+0x39f/0x640 [ 123.085209][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.147128][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 123.156023][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 123.165411][ T6472] netlink: 'syz.1.902': attribute type 11 has an invalid length. [ 123.306037][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.356779][ T6478] loop1: detected capacity change from 0 to 512 [ 123.530905][ T28] audit: type=1326 audit(2000000040.890:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.579513][ T28] audit: type=1326 audit(2000000040.890:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.698974][ T28] audit: type=1326 audit(2000000040.890:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.724694][ T28] audit: type=1326 audit(2000000040.890:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.750305][ T28] audit: type=1326 audit(2000000040.900:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.776040][ T28] audit: type=1326 audit(2000000040.900:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.801802][ T28] audit: type=1326 audit(2000000040.900:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.827746][ T28] audit: type=1326 audit(2000000040.920:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 123.856633][ T28] audit: type=1326 audit(2000000040.920:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 124.070938][ T6491] loop4: detected capacity change from 0 to 164 [ 124.098169][ T6491] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 124.175638][ T6500] syzkaller1: entered promiscuous mode [ 124.181372][ T6500] syzkaller1: entered allmulticast mode [ 124.363583][ T6501] loop1: detected capacity change from 0 to 4096 [ 124.371554][ T6501] EXT4-fs: Ignoring removed bh option [ 124.426157][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.713001][ T6505] FAULT_INJECTION: forcing a failure. [ 124.713001][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 124.725747][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.4.913 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.725789][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.725805][ T6505] Call Trace: [ 124.725811][ T6505] [ 124.725819][ T6505] __dump_stack+0x1d/0x30 [ 124.725844][ T6505] dump_stack_lvl+0x95/0xd0 [ 124.725935][ T6505] dump_stack+0x15/0x1b [ 124.725957][ T6505] should_fail_ex+0x263/0x280 [ 124.725981][ T6505] should_failslab+0x8c/0xb0 [ 124.726072][ T6505] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 124.726127][ T6505] ? __alloc_skb+0x2d6/0x690 [ 124.726148][ T6505] __alloc_skb+0x2d6/0x690 [ 124.726233][ T6505] ? __alloc_skb+0x200/0x690 [ 124.726261][ T6505] netlink_alloc_large_skb+0xbf/0xf0 [ 124.726297][ T6505] netlink_sendmsg+0x40c/0x6f0 [ 124.726384][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.726501][ T6505] ____sys_sendmsg+0x563/0x5b0 [ 124.726531][ T6505] ___sys_sendmsg+0x195/0x1e0 [ 124.726592][ T6505] __x64_sys_sendmsg+0xd4/0x160 [ 124.726652][ T6505] x64_sys_call+0x194c/0x3020 [ 124.726683][ T6505] do_syscall_64+0x12c/0x3b0 [ 124.726792][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.726822][ T6505] RIP: 0033:0x7fd82d5fce59 [ 124.726843][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.726867][ T6505] RSP: 002b:00007fd82c04f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.726893][ T6505] RAX: ffffffffffffffda RBX: 00007fd82d875fa0 RCX: 00007fd82d5fce59 [ 124.726929][ T6505] RDX: 0000000004008840 RSI: 0000200000000340 RDI: 0000000000000005 [ 124.726946][ T6505] RBP: 00007fd82c04f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.726963][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.727029][ T6505] R13: 00007fd82d876038 R14: 00007fd82d875fa0 R15: 00007ffe7781a248 [ 124.727057][ T6505] [ 124.985352][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.167843][ T6506] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 125.194947][ T6517] random: crng reseeded on system resumption [ 125.196472][ T6506] bond2 (unregistering): Released all slaves [ 125.209280][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 125.218506][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 126.019857][ T6557] loop3: detected capacity change from 0 to 4096 [ 126.027586][ T6557] EXT4-fs: Ignoring removed bh option [ 126.042825][ T6557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.101786][ T6560] netlink: 1348 bytes leftover after parsing attributes in process `syz.1.930'. [ 126.412150][ T6560] loop1: detected capacity change from 0 to 512 [ 126.514286][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.528541][ T6560] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.618650][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.667684][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.737324][ T6574] syzkaller1: entered promiscuous mode [ 126.754119][ T6574] syzkaller1: entered allmulticast mode [ 126.944507][ T6585] loop1: detected capacity change from 0 to 164 [ 126.974689][ T6585] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 127.113004][ T6599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6599 comm=syz.2.944 [ 127.336096][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 127.341139][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 127.500546][ T6613] loop1: detected capacity change from 0 to 4096 [ 127.508073][ T6613] EXT4-fs: Ignoring removed bh option [ 127.541844][ T6613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.914386][ T6619] syzkaller1: entered promiscuous mode [ 127.922643][ T6619] syzkaller1: entered allmulticast mode [ 127.930058][ T6625] syzkaller1: entered promiscuous mode [ 127.935900][ T6625] syzkaller1: entered allmulticast mode [ 128.078419][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.122574][ T6629] loop4: detected capacity change from 0 to 512 [ 128.143450][ T6629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.157302][ T6629] EXT4-fs (loop4): 1 truncate cleaned up [ 128.170086][ T6629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.195169][ T6635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.248392][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 128.248421][ T28] audit: type=1400 audit(2000000002.810:1597): avc: denied { read } for pid=6641 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.591058][ T28] audit: type=1400 audit(2000000003.010:1598): avc: denied { connect } for pid=6644 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.693871][ T6658] syzkaller1: entered promiscuous mode [ 128.699466][ T6658] syzkaller1: entered allmulticast mode [ 128.720878][ T28] audit: type=1400 audit(2000000003.290:1599): avc: denied { create } for pid=6628 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.764113][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.882127][ T6667] syzkaller1: entered promiscuous mode [ 128.887864][ T6667] syzkaller1: entered allmulticast mode [ 129.033243][ T28] audit: type=1326 audit(2000000003.510:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 129.058942][ T28] audit: type=1326 audit(2000000003.510:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 129.978198][ T28] audit: type=1326 audit(2000000003.510:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 130.087390][ T6673] loop4: detected capacity change from 0 to 4096 [ 130.095729][ T6673] EXT4-fs: Ignoring removed bh option [ 130.114224][ T28] audit: type=1326 audit(2000000003.510:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 130.139748][ T28] audit: type=1326 audit(2000000003.510:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 130.165285][ T28] audit: type=1326 audit(2000000003.510:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 130.190951][ T28] audit: type=1326 audit(2000000003.510:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 130.199185][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.294406][ T6677] loop1: detected capacity change from 0 to 164 [ 130.320672][ T6677] /dev/loop1: Can't open blockdev [ 130.407029][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.611445][ T6701] 9pnet_fd: Insufficient options for proto=fd [ 130.652098][ T6701] loop4: detected capacity change from 0 to 164 [ 130.668290][ T6705] syzkaller1: entered promiscuous mode [ 130.691533][ T6703] Cannot find add_set index 2 as target [ 130.693795][ T6705] syzkaller1: entered allmulticast mode [ 130.713104][ T6686] loop3: detected capacity change from 0 to 8192 [ 130.925750][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 132.056900][ T6738] loop3: detected capacity change from 0 to 4096 [ 132.063826][ T6738] EXT4-fs: Ignoring removed bh option [ 132.751723][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.041475][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.055851][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 133.169735][ T6754] loop4: detected capacity change from 0 to 512 [ 133.216240][ T6754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.257442][ T6760] syzkaller1: entered promiscuous mode [ 133.267631][ T6760] syzkaller1: entered allmulticast mode [ 133.375393][ T6766] FAULT_INJECTION: forcing a failure. [ 133.375393][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 133.393005][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.1.998 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.393037][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.393054][ T6766] Call Trace: [ 133.393061][ T6766] [ 133.393070][ T6766] __dump_stack+0x1d/0x30 [ 133.393118][ T6766] dump_stack_lvl+0x95/0xd0 [ 133.393204][ T6766] dump_stack+0x15/0x1b [ 133.393296][ T6766] should_fail_ex+0x263/0x280 [ 133.393321][ T6766] ? sctp_association_new+0x71/0x1190 [ 133.393406][ T6766] should_failslab+0x8c/0xb0 [ 133.393442][ T6766] __kmalloc_cache_noprof+0x5f/0x400 [ 133.393484][ T6766] sctp_association_new+0x71/0x1190 [ 133.393511][ T6766] ? __ipv6_addr_type+0x1ed/0x210 [ 133.393541][ T6766] sctp_connect_new_asoc+0x1a8/0x3a0 [ 133.393577][ T6766] sctp_sendmsg+0x100f/0x1d60 [ 133.393607][ T6766] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.393661][ T6766] inet_sendmsg+0xc5/0xd0 [ 133.393689][ T6766] ? __pfx_inet_sendmsg+0x10/0x10 [ 133.393717][ T6766] ____sys_sendmsg+0x519/0x5b0 [ 133.393746][ T6766] ___sys_sendmsg+0x195/0x1e0 [ 133.393802][ T6766] __x64_sys_sendmsg+0xd4/0x160 [ 133.393830][ T6766] x64_sys_call+0x194c/0x3020 [ 133.393855][ T6766] do_syscall_64+0x12c/0x3b0 [ 133.393886][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.393949][ T6766] RIP: 0033:0x7fa07f77ce59 [ 133.393965][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.393989][ T6766] RSP: 002b:00007fa07e1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.394009][ T6766] RAX: ffffffffffffffda RBX: 00007fa07f9f5fa0 RCX: 00007fa07f77ce59 [ 133.394023][ T6766] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 133.394037][ T6766] RBP: 00007fa07e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.394129][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.394142][ T6766] R13: 00007fa07f9f6038 R14: 00007fa07f9f5fa0 R15: 00007ffc906750f8 [ 133.394163][ T6766] [ 133.426495][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.993'. [ 134.630638][ T6789] netlink: 'syz.2.1004': attribute type 4 has an invalid length. [ 134.732841][ T28] kauditd_printk_skb: 626 callbacks suppressed [ 134.732867][ T28] audit: type=1326 audit(2000000009.300:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 134.831910][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.015931][ T6795] syzkaller1: entered promiscuous mode [ 135.035971][ T28] audit: type=1326 audit(2000000009.330:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.063456][ T6795] syzkaller1: entered allmulticast mode [ 135.104307][ T28] audit: type=1326 audit(2000000009.330:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.146025][ T28] audit: type=1326 audit(2000000009.330:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.172421][ T28] audit: type=1326 audit(2000000009.330:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.199389][ T28] audit: type=1326 audit(2000000009.330:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.225309][ T28] audit: type=1326 audit(2000000009.330:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.252984][ T28] audit: type=1326 audit(2000000009.330:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.279058][ T28] audit: type=1326 audit(2000000009.370:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.1.1005" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa07f77ce59 code=0x7ffc0000 [ 135.306324][ T28] audit: type=1400 audit(2000000009.650:2242): avc: denied { watch } for pid=6796 comm="syz.3.1010" path="/89" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.556001][ T6807] SELinux: unknown common  [ 135.582196][ T6807] SELinux: failed to load policy [ 136.512509][ T6833] syzkaller1: entered promiscuous mode [ 136.553397][ T6833] syzkaller1: entered allmulticast mode [ 136.760482][ T6845] loop1: detected capacity change from 0 to 256 [ 136.804438][ T6845] vfat: Bad value for 'uid' [ 136.814897][ T6845] vfat: Bad value for 'uid' [ 136.869348][ T6845] loop1: detected capacity change from 0 to 512 [ 136.881592][ T6845] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 136.907815][ T6845] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 136.918912][ T6845] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1027: corrupted in-inode xattr: overlapping e_value [ 136.932959][ T6845] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.933221][ T6845] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1027: couldn't read orphan inode 15 (err -117) [ 136.942392][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 136.942413][ C1] EXT4-fs (loop1): initial error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 136.942459][ C1] EXT4-fs (loop1): last error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 137.093046][ T6858] loop4: detected capacity change from 0 to 512 [ 137.114399][ T6858] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.137615][ T6858] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 137.149606][ T6858] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1029: bad orphan inode 4 [ 137.161047][ T6858] loop4: lost filesystem error report for type 5 error -117 [ 137.162508][ T6858] EXT4-fs (loop4): 1 orphan inode deleted [ 137.170825][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 137.171064][ C1] EXT4-fs (loop4): initial error at time 2000000011: ext4_orphan_get:1423 [ 137.171283][ C1] EXT4-fs (loop4): last error at time 2000000011: ext4_orphan_get:1423 [ 137.215935][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.253226][ T6858] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.1029: lblock 0 mapped to illegal pblock 4 (length 1) [ 137.340205][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 137.341855][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.775545][ T6867] loop3: detected capacity change from 0 to 512 [ 137.793352][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.851690][ T6867] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1034: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 137.890830][ T6867] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 137.891150][ T6867] EXT4-fs (loop3): get root inode failed [ 137.905917][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 137.905932][ C1] EXT4-fs (loop3): initial error at time 2000000012: ext4_ext_check_inode:521: inode 2 [ 137.905964][ C1] EXT4-fs (loop3): last error at time 2000000012: ext4_ext_check_inode:521: inode 2 [ 137.992158][ T6867] EXT4-fs (loop3): mount failed [ 138.600084][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.626442][ T6880] loop1: detected capacity change from 0 to 512 [ 138.704096][ T6880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.765822][ T6880] EXT4-fs (loop1): 1 truncate cleaned up [ 138.819248][ T6880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.985086][ T6892] loop4: detected capacity change from 0 to 1024 [ 139.078644][ T6895] SET target dimension over the limit! [ 139.161680][ T6899] syzkaller1: entered promiscuous mode [ 139.207180][ T6899] syzkaller1: entered allmulticast mode [ 139.275457][ T6895] loop4: detected capacity change from 0 to 1024 [ 139.294408][ T6895] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.359633][ T6876] FAULT_INJECTION: forcing a failure. [ 139.359633][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 139.379156][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.379181][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.379235][ T6876] Call Trace: [ 139.379240][ T6876] [ 139.379247][ T6876] __dump_stack+0x1d/0x30 [ 139.379268][ T6876] dump_stack_lvl+0x95/0xd0 [ 139.379294][ T6876] dump_stack+0x15/0x1b [ 139.379310][ T6876] should_fail_ex+0x263/0x280 [ 139.379332][ T6876] should_failslab+0x8c/0xb0 [ 139.379404][ T6876] kmem_cache_alloc_noprof+0x66/0x3f0 [ 139.379435][ T6876] ? security_file_alloc+0x32/0xf0 [ 139.379508][ T6876] security_file_alloc+0x32/0xf0 [ 139.379526][ T6876] init_file+0x5b/0x1b0 [ 139.379602][ T6876] alloc_empty_file+0x85/0x1e0 [ 139.379629][ T6876] path_openat+0x65/0x2050 [ 139.379662][ T6876] ? perf_swevent_hrtimer+0x2e1/0x310 [ 139.379730][ T6876] ? rb_insert_color+0x71/0x2b0 [ 139.379762][ T6876] do_file_open+0x16c/0x290 [ 139.379913][ T6876] do_sys_openat2+0x94/0x130 [ 139.379943][ T6876] __x64_sys_openat+0xf2/0x120 [ 139.379971][ T6876] x64_sys_call+0x1e39/0x3020 [ 139.380002][ T6876] do_syscall_64+0x12c/0x3b0 [ 139.380077][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.380155][ T6876] RIP: 0033:0x7fa07f77ce59 [ 139.380170][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.380188][ T6876] RSP: 002b:00007fa07e1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.380262][ T6876] RAX: ffffffffffffffda RBX: 00007fa07f9f5fa0 RCX: 00007fa07f77ce59 [ 139.380297][ T6876] RDX: 000000000010ff81 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 139.380315][ T6876] RBP: 00007fa07e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.380334][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.380349][ T6876] R13: 00007fa07f9f6038 R14: 00007fa07f9f5fa0 R15: 00007ffc906750f8 [ 139.380373][ T6876] [ 139.581617][ T6895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.617858][ T6895] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.629700][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.729063][ T6895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.771126][ T6912] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1044'. [ 139.874291][ T6892] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 139.906842][ T6892] bond1 (unregistering): Released all slaves [ 140.110513][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 140.126151][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1049'. [ 140.289581][ T6932] loop4: detected capacity change from 0 to 736 [ 140.297128][ T6932] iso9660: Unknown parameter 'iide' [ 140.514824][ T6935] loop3: detected capacity change from 0 to 4096 [ 140.522460][ T6935] EXT4-fs: Ignoring removed bh option [ 140.539670][ T6935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.565486][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 140.565530][ T28] audit: type=1400 audit(2000000015.130:2250): avc: denied { write } for pid=6928 comm="syz.3.1050" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.888956][ T6942] netlink: 'syz.1.1053': attribute type 20 has an invalid length. [ 140.903846][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 140.926176][ T28] audit: type=1400 audit(2000000015.480:2251): avc: denied { connect } for pid=6940 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.001937][ T6897] Set syz1 is full, maxelem 65536 reached [ 141.079478][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.212160][ T28] audit: type=1400 audit(2000000015.780:2252): avc: denied { read write } for pid=6952 comm="syz.0.1058" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.214380][ T3379] hid_parser_main: 5 callbacks suppressed [ 141.214430][ T3379] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.273996][ T6954] syzkaller1: entered promiscuous mode [ 141.282912][ T3379] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.293179][ T6948] loop4: detected capacity change from 0 to 164 [ 141.305420][ T28] audit: type=1400 audit(2000000015.780:2253): avc: denied { open } for pid=6952 comm="syz.0.1058" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.308299][ T6954] syzkaller1: entered allmulticast mode [ 141.391174][ T6948] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 141.482327][ T28] audit: type=1400 audit(2000000016.050:2254): avc: denied { nlmsg_write } for pid=6952 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 141.513918][ T6958] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1058'. [ 141.527598][ T6960] loop4: detected capacity change from 0 to 2048 [ 141.579793][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.602922][ T28] audit: type=1400 audit(2000000016.170:2255): avc: denied { write } for pid=6959 comm="syz.4.1059" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.625161][ T6960] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.667441][ T6960] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 141.728436][ T6960] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.728436][ T6960] [ 141.741473][ T6960] EXT4-fs (loop4): Total free blocks count 0 [ 141.747694][ T6960] EXT4-fs (loop4): Free/Dirty block details [ 141.757351][ T6960] EXT4-fs (loop4): free_blocks=2415919104 [ 141.776449][ T6971] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 141.805405][ T6960] EXT4-fs (loop4): dirty_blocks=80 [ 141.816995][ T6960] EXT4-fs (loop4): Block reservation details [ 141.826148][ T6973] loop3: detected capacity change from 0 to 512 [ 141.839056][ T6971] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.839056][ T6971] [ 141.849571][ T6973] ext4: Unknown parameter 'smackfstransmute' [ 141.919474][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 141.975781][ T6979] iso9660: Unknown parameter 'iide' [ 142.019607][ T28] audit: type=1400 audit(2000000016.580:2256): avc: denied { bind } for pid=6975 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.080198][ T28] audit: type=1400 audit(2000000016.580:2257): avc: denied { name_bind } for pid=6975 comm="syz.2.1064" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 142.124473][ T28] audit: type=1400 audit(2000000016.580:2258): avc: denied { node_bind } for pid=6975 comm="syz.2.1064" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 142.179114][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1066'. [ 142.514044][ T28] audit: type=1400 audit(2000000017.070:2259): avc: denied { ioctl } for pid=6993 comm="syz.0.1070" path="socket:[17693]" dev="sockfs" ino=17693 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.640252][ T6998] set_capacity_and_notify: 1 callbacks suppressed [ 142.640338][ T6998] loop4: detected capacity change from 0 to 4096 [ 142.654108][ T6998] EXT4-fs: Ignoring removed bh option [ 142.707902][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.044025][ T7005] syzkaller1: entered promiscuous mode [ 143.050698][ T7005] syzkaller1: entered allmulticast mode [ 143.070074][ T7003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 143.154548][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.414361][ T7012] loop4: detected capacity change from 0 to 164 [ 143.617361][ T7012] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 143.629424][ T7025] FAULT_INJECTION: forcing a failure. [ 143.629424][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.654445][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.3.1080 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.654478][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.654513][ T7025] Call Trace: [ 143.654521][ T7025] [ 143.654529][ T7025] __dump_stack+0x1d/0x30 [ 143.654581][ T7025] dump_stack_lvl+0x95/0xd0 [ 143.654608][ T7025] dump_stack+0x15/0x1b [ 143.654632][ T7025] should_fail_ex+0x263/0x280 [ 143.654689][ T7025] should_fail+0xb/0x20 [ 143.654709][ T7025] should_fail_usercopy+0x1a/0x20 [ 143.654735][ T7025] _copy_from_user+0x1c/0xb0 [ 143.654816][ T7025] do_sock_getsockopt+0x122/0x570 [ 143.654857][ T7025] __x64_sys_getsockopt+0x11d/0x1a0 [ 143.654893][ T7025] x64_sys_call+0x2dcf/0x3020 [ 143.654924][ T7025] do_syscall_64+0x12c/0x3b0 [ 143.655019][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.655041][ T7025] RIP: 0033:0x7f848496ce59 [ 143.655056][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.655156][ T7025] RSP: 002b:00007f84833c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 143.655181][ T7025] RAX: ffffffffffffffda RBX: 00007f8484be5fa0 RCX: 00007f848496ce59 [ 143.655195][ T7025] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 143.655214][ T7025] RBP: 00007f84833c7090 R08: 00002000000000c0 R09: 0000000000000000 [ 143.655302][ T7025] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 143.655319][ T7025] R13: 00007f8484be6038 R14: 00007f8484be5fa0 R15: 00007ffc399d8598 [ 143.655340][ T7025] [ 144.110031][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 144.164352][ T7048] geneve3: entered promiscuous mode [ 144.169624][ T7048] geneve3: entered allmulticast mode [ 144.388762][ T7058] syzkaller1: entered promiscuous mode [ 144.394443][ T7058] syzkaller1: entered allmulticast mode [ 144.568180][ T7060] loop3: detected capacity change from 0 to 4096 [ 144.575405][ T7060] EXT4-fs: Ignoring removed bh option [ 144.672859][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.062841][ T7074] loop1: detected capacity change from 0 to 764 [ 145.143735][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.233202][ T7089] syzkaller1: entered promiscuous mode [ 145.238994][ T7089] syzkaller1: entered allmulticast mode [ 145.301661][ T7095] netlink: 'syz.3.1105': attribute type 83 has an invalid length. [ 145.698304][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 145.831774][ T7115] loop3: detected capacity change from 0 to 4096 [ 145.839897][ T7115] EXT4-fs: Ignoring removed bh option [ 145.881035][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 145.894826][ T7111] loop4: detected capacity change from 0 to 128 [ 145.901635][ T7111] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.916213][ T7111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.986817][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.010723][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 146.172151][ T28] audit: type=1400 audit(2000000020.570:2263): avc: denied { write } for pid=7106 comm="syz.3.1109" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.332921][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.404578][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.970256][ T7161] SELinux: security_context_str_to_sid (}) failed with errno=-22 [ 147.835088][ T7181] loop3: detected capacity change from 0 to 512 [ 147.851785][ T7181] EXT4-fs (loop3): bad s_min_extra_isize: 2304 [ 147.862863][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 147.982844][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 148.106916][ T28] audit: type=1400 audit(2000000022.670:2264): avc: denied { setopt } for pid=7190 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.123055][ T7199] loop1: detected capacity change from 0 to 164 [ 148.196120][ T7207] syzkaller1: entered promiscuous mode [ 148.201812][ T7207] syzkaller1: entered allmulticast mode [ 148.210730][ T7199] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 148.362408][ T7216] loop4: detected capacity change from 0 to 512 [ 148.377860][ T7216] EXT4-fs: test_dummy_encryption option not supported [ 148.451278][ T28] audit: type=1400 audit(2000000023.010:2265): avc: denied { ioctl } for pid=7223 comm="syz.4.1149" path="socket:[18508]" dev="sockfs" ino=18508 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.650968][ T7234] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1147'. [ 149.066128][ T7228] loop1: detected capacity change from 0 to 4096 [ 149.073001][ T7228] EXT4-fs: Ignoring removed bh option [ 149.475807][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.556362][ T28] audit: type=1400 audit(2000000024.100:2266): avc: denied { write } for pid=7222 comm="syz.1.1148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.762171][ T28] audit: type=1400 audit(2000000024.320:2267): avc: denied { map } for pid=7245 comm="syz.2.1153" path="pipe:[18536]" dev="pipefs" ino=18536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 149.878384][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.906993][ T28] audit: type=1400 audit(2000000024.320:2268): avc: denied { execute } for pid=7245 comm="syz.2.1153" path="pipe:[18536]" dev="pipefs" ino=18536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 150.250492][ T7256] syzkaller1: entered promiscuous mode [ 150.283826][ T7256] syzkaller1: entered allmulticast mode [ 150.304507][ T7258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7258 comm=syz.2.1158 [ 150.317125][ T7260] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 150.449924][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 150.470492][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'. [ 150.555875][ T28] audit: type=1326 audit(2000000025.110:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d5fce59 code=0x7ffc0000 [ 150.615739][ T28] audit: type=1326 audit(2000000025.110:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d5fce59 code=0x7ffc0000 [ 150.645163][ T28] audit: type=1326 audit(2000000025.110:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d5fce59 code=0x7ffc0000 [ 150.671527][ T28] audit: type=1326 audit(2000000025.110:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d5fce59 code=0x7ffc0000 [ 150.946830][ T7285] loop1: detected capacity change from 0 to 736 [ 150.955259][ T7285] iso9660: Unknown parameter 'iide' [ 151.082952][ T7286] loop3: detected capacity change from 0 to 4096 [ 151.090827][ T7286] EXT4-fs: Ignoring removed bh option [ 151.161624][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 151.161694][ T28] audit: type=1326 audit(2000000025.580:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.287222][ T28] audit: type=1326 audit(2000000025.580:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.442055][ T28] audit: type=1326 audit(2000000025.580:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.498702][ T28] audit: type=1326 audit(2000000025.670:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.525103][ T28] audit: type=1326 audit(2000000025.670:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.550661][ T28] audit: type=1326 audit(2000000025.680:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.596880][ T28] audit: type=1326 audit(2000000025.680:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.622812][ T28] audit: type=1326 audit(2000000025.680:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.649847][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.662824][ T28] audit: type=1326 audit(2000000025.680:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.689051][ T28] audit: type=1326 audit(2000000025.680:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd82d5bd68e code=0x7ffc0000 [ 151.719841][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 151.733232][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 151.742334][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 151.772776][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.835188][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1172'. [ 151.895768][ T7314] loop1: detected capacity change from 0 to 256 [ 151.969344][ T7320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7320 comm=syz.4.1172 [ 152.002978][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.138672][ T7329] loop3: detected capacity change from 0 to 736 [ 152.174755][ T7329] iso9660: Unknown parameter 'iide' [ 152.370982][ T7345] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1177'. [ 152.433866][ T7355] netlink: 'syz.0.1187': attribute type 22 has an invalid length. [ 152.441966][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 152.540720][ T7362] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1190'. [ 152.606913][ T7365] tipc: Can't bind to reserved service type 0 [ 152.649977][ T7362] loop3: detected capacity change from 0 to 512 [ 152.754999][ T7366] loop1: detected capacity change from 0 to 4096 [ 152.763449][ T7366] EXT4-fs: Ignoring removed bh option [ 152.970138][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.037994][ T7362] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1190: inode has both inline data and extents flags [ 153.138840][ T7362] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.140951][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 153.158552][ C1] EXT4-fs (loop3): initial error at time 2000000027: ext4_orphan_get:1397: inode 15 [ 153.170313][ C1] EXT4-fs (loop3): last error at time 2000000027: ext4_orphan_get:1397: inode 15 [ 153.210128][ T7362] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1190: couldn't read orphan inode 15 (err -117) [ 153.225353][ T7362] loop3: lost filesystem error report for type 5 error -117 [ 153.250204][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.287645][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.300105][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 153.333092][ T7379] FAULT_INJECTION: forcing a failure. [ 153.333092][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.346452][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.3.1195 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.346492][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.346510][ T7379] Call Trace: [ 153.346517][ T7379] [ 153.346525][ T7379] __dump_stack+0x1d/0x30 [ 153.346629][ T7379] dump_stack_lvl+0x95/0xd0 [ 153.346654][ T7379] dump_stack+0x15/0x1b [ 153.346679][ T7379] should_fail_ex+0x263/0x280 [ 153.346701][ T7379] should_fail+0xb/0x20 [ 153.346721][ T7379] should_fail_usercopy+0x1a/0x20 [ 153.346775][ T7379] _copy_from_user+0x1c/0xb0 [ 153.346841][ T7379] ___sys_sendmsg+0xc1/0x1e0 [ 153.346888][ T7379] __x64_sys_sendmsg+0xd4/0x160 [ 153.346922][ T7379] x64_sys_call+0x194c/0x3020 [ 153.346945][ T7379] do_syscall_64+0x12c/0x3b0 [ 153.347024][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.347047][ T7379] RIP: 0033:0x7f848496ce59 [ 153.347067][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.347090][ T7379] RSP: 002b:00007f84833c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.347114][ T7379] RAX: ffffffffffffffda RBX: 00007f8484be5fa0 RCX: 00007f848496ce59 [ 153.347132][ T7379] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000006 [ 153.347234][ T7379] RBP: 00007f84833c7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.347248][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.347262][ T7379] R13: 00007f8484be6038 R14: 00007f8484be5fa0 R15: 00007ffc399d8598 [ 153.347282][ T7379] [ 153.545609][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.582761][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105a57400: rx timeout, send abort [ 153.629778][ T7394] x_tables: duplicate underflow at hook 1 [ 153.635971][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 153.757128][ T7388] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1199'. [ 154.082786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105a56c00: rx timeout, send abort [ 154.091287][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105a57400: abort rx timeout. Force session deactivation [ 154.169987][ T7422] loop4: detected capacity change from 0 to 4096 [ 154.178093][ T7422] EXT4-fs: Ignoring removed bh option [ 154.198107][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.575087][ T7430] FAULT_INJECTION: forcing a failure. [ 154.575087][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 154.587888][ T7430] CPU: 1 UID: 0 PID: 7430 Comm: syz.1.1211 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.587917][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.587932][ T7430] Call Trace: [ 154.587938][ T7430] [ 154.587946][ T7430] __dump_stack+0x1d/0x30 [ 154.587973][ T7430] dump_stack_lvl+0x95/0xd0 [ 154.588024][ T7430] dump_stack+0x15/0x1b [ 154.588079][ T7430] should_fail_ex+0x263/0x280 [ 154.588126][ T7430] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 154.588160][ T7430] should_failslab+0x8c/0xb0 [ 154.588222][ T7430] __kmalloc_cache_noprof+0x5f/0x400 [ 154.588266][ T7430] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 154.588302][ T7430] nfc_genl_rcv_nl_event+0x6f/0x130 [ 154.588388][ T7430] blocking_notifier_call_chain+0x9b/0x1e0 [ 154.588416][ T7430] netlink_release+0xa97/0xf10 [ 154.588514][ T7430] sock_close+0x6b/0x150 [ 154.588563][ T7430] ? __pfx_sock_close+0x10/0x10 [ 154.588614][ T7430] __fput+0x29b/0x630 [ 154.588687][ T7430] ____fput+0x1c/0x30 [ 154.588706][ T7430] task_work_run+0x130/0x1a0 [ 154.588728][ T7430] exit_to_user_mode_loop+0x211/0x820 [ 154.588791][ T7430] do_syscall_64+0x232/0x3b0 [ 154.588821][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.588918][ T7430] RIP: 0033:0x7fa07f77ce59 [ 154.588933][ T7430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.588950][ T7430] RSP: 002b:00007fa07e1d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.589021][ T7430] RAX: 0000000000000000 RBX: 00007fa07f9f5fa0 RCX: 00007fa07f77ce59 [ 154.589038][ T7430] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 154.589055][ T7430] RBP: 00007fa07e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.589124][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.589140][ T7430] R13: 00007fa07f9f6038 R14: 00007fa07f9f5fa0 R15: 00007ffc906750f8 [ 154.589182][ T7430] [ 154.591252][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105a56c00: abort rx timeout. Force session deactivation [ 154.796959][ T7428] loop3: detected capacity change from 0 to 1024 [ 154.873802][ T7428] EXT4-fs: Mount option(s) incompatible with ext3 [ 154.890262][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.055905][ T7428] loop3: detected capacity change from 0 to 512 [ 155.116050][ T7428] EXT4-fs: test_dummy_encryption option not supported [ 155.268323][ T7455] loop4: detected capacity change from 0 to 512 [ 156.268085][ T7455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.292018][ T7455] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.429895][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 156.429915][ T28] audit: type=1400 audit(2000000030.950:2563): avc: denied { write } for pid=7438 comm="syz.4.1213" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.464953][ T7444] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.1213: corrupted inode contents [ 156.483925][ T7444] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.1213: mark_inode_dirty error [ 156.514218][ T7444] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.1213: corrupted inode contents [ 156.528678][ T7444] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1213: mark_inode_dirty error [ 156.566754][ T7449] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.1213: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 156.566754][ T7449] [ 156.587750][ T7449] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.1213: corrupted inode contents [ 156.601487][ T7449] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.1213: mark_inode_dirty error [ 156.613135][ T7449] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 156.622227][ T7455] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.1213: corrupted inode contents [ 156.635251][ T7455] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.1213: mark_inode_dirty error [ 156.650307][ T28] audit: type=1400 audit(2000000031.130:2564): avc: denied { write } for pid=7438 comm="syz.4.1213" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.695867][ T7471] loop3: detected capacity change from 0 to 128 [ 156.734307][ T28] audit: type=1400 audit(2000000031.190:2565): avc: denied { write } for pid=7438 comm="syz.4.1213" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.758370][ T7471] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.818437][ T7471] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.894335][ T4984] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.978775][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.093882][ T7480] syz_tun: entered allmulticast mode [ 157.101773][ T7479] syz_tun: left allmulticast mode [ 157.185697][ T7490] loop3: detected capacity change from 0 to 736 [ 157.212389][ T7490] iso9660: Unknown parameter 'iide' [ 157.242949][ T7493] dvmrp0: entered allmulticast mode [ 157.493315][ T7503] loop4: detected capacity change from 0 to 4096 [ 157.500927][ T7503] EXT4-fs: Ignoring removed bh option [ 157.595586][ T7503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.637448][ T28] audit: type=1400 audit(2000000032.180:2566): avc: denied { write } for pid=7483 comm="syz.4.1225" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.930319][ T7513] bond2: entered promiscuous mode [ 157.935837][ T7513] bond2: entered allmulticast mode [ 157.941661][ T7513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.028450][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.108429][ T7521] __nla_validate_parse: 1 callbacks suppressed [ 158.108443][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 158.256796][ T7538] netlink: 572 bytes leftover after parsing attributes in process `syz.0.1243'. [ 158.265996][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 158.384591][ T7542] macvlan2: entered allmulticast mode [ 158.390074][ T7542] bridge0: entered allmulticast mode [ 158.396806][ T7542] bridge0: entered promiscuous mode [ 158.485664][ T7553] syzkaller0: entered promiscuous mode [ 158.491754][ T7553] syzkaller0: entered allmulticast mode [ 158.502777][ T7553] loop3: detected capacity change from 0 to 512 [ 158.531664][ T7553] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 158.540307][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 158.546780][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.610715][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.809502][ T7559] loop3: detected capacity change from 0 to 128 [ 158.854936][ T7559] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.897155][ T7559] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.029419][ T28] audit: type=1400 audit(2000000033.590:2567): avc: denied { write } for pid=7557 comm="syz.3.1250" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.124715][ T28] audit: type=1400 audit(2000000033.630:2568): avc: denied { setattr } for pid=7557 comm="syz.3.1250" path="/133/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.153291][ T28] audit: type=1400 audit(2000000033.720:2569): avc: denied { write } for pid=7557 comm="syz.3.1250" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.176615][ T28] audit: type=1400 audit(2000000033.740:2570): avc: denied { write } for pid=7557 comm="syz.3.1250" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.198580][ T28] audit: type=1400 audit(2000000033.740:2571): avc: denied { ioctl } for pid=7557 comm="syz.3.1250" path="/133/mnt/file1" dev="loop3" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.357653][ T4984] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.376490][ T7569] loop4: detected capacity change from 0 to 512 [ 159.395975][ T7574] macvlan3: entered allmulticast mode [ 159.420909][ T28] audit: type=1400 audit(2000000033.980:2572): avc: denied { write } for pid=7570 comm="syz.0.1255" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.566420][ T7569] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 992: comm syz.4.1254: lblock 6 mapped to illegal pblock 992 (length 1) [ 159.635707][ T7569] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.637141][ T7569] ------------[ cut here ]------------ [ 159.646319][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 159.646334][ C1] EXT4-fs (loop4): initial error at time 2000000034: ext4_map_blocks:791: inode 11: block 992 [ 159.646394][ C1] EXT4-fs (loop4): last error at time 2000000034: ext4_map_blocks:791: inode 11: block 992 [ 159.678758][ T7569] EA inode 11 i_nlink=2 [ 159.678791][ T7569] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.1254/7569 [ 159.693729][ T7569] Modules linked in: [ 159.697654][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.4.1254 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.707019][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.717180][ T7569] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 159.723835][ T7569] Code: f4 52 98 ff 4c 8d 2d 0d 5d 5c 05 49 8d 7e 40 e8 d4 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 11 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 66 d8 03 66 66 66 66 66 66 2e [ 159.743570][ T7569] RSP: 0018:ffffc9000c14b778 EFLAGS: 00010246 [ 159.749675][ T7569] RAX: ffff8881050a2d00 RBX: ffff888106cc4178 RCX: ffffffff81c0e0f8 [ 159.757714][ T7569] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3df0 [ 159.765749][ T7569] RBP: 000000000000000b R08: 0001888106cc412b R09: 0000000000000000 [ 159.773773][ T7569] R10: 0001c9000c283a8c R11: 0001c9000c14b6a8 R12: ffff888106cc4128 [ 159.781807][ T7569] R13: ffffffff871d3df0 R14: ffff888106cc40e0 R15: 0000000000000001 [ 159.789800][ T7569] FS: 00007fd82c04f6c0(0000) GS:ffff8882ae9f7000(0000) knlGS:0000000000000000 [ 159.798896][ T7569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.805515][ T7569] CR2: 00007fa075df6000 CR3: 000000011ebc6000 CR4: 00000000003506f0 [ 159.813593][ T7569] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.821704][ T7569] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 159.829753][ T7569] Call Trace: [ 159.833140][ T7569] [ 159.836101][ T7569] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 159.842068][ T7569] ? errseq_check+0x2c/0x50 [ 159.846599][ T7569] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 159.852176][ T7569] ? ext4_truncate+0x89f/0xa10 [ 159.856978][ T7569] ext4_evict_inode+0xb16/0xe30 [ 159.861951][ T7569] ? __pfx_ext4_evict_inode+0x10/0x10 [ 159.867430][ T7569] evict+0x2af/0x510 [ 159.871393][ T7569] ? __dquot_initialize+0x146/0x7c0 [ 159.876645][ T7569] iput+0x41a/0x580 [ 159.880479][ T7569] ext4_process_orphan+0x1a9/0x1c0 [ 159.885700][ T7569] ext4_orphan_cleanup+0x69c/0x9f0 [ 159.890878][ T7569] ext4_fill_super+0x3408/0x37c0 [ 159.895848][ T7569] ? set_blocksize+0x14c/0x270 [ 159.900637][ T7569] ? setup_bdev_super+0x30e/0x370 [ 159.905761][ T7569] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.911179][ T7569] get_tree_bdev_flags+0x291/0x300 [ 159.916343][ T7569] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.921733][ T7569] get_tree_bdev+0x1f/0x30 [ 159.926249][ T7569] ext4_get_tree+0x1c/0x30 [ 159.930690][ T7569] vfs_get_tree+0x57/0x1d0 [ 159.935177][ T7569] do_new_mount+0x288/0x8d0 [ 159.939756][ T7569] path_mount+0x4d0/0xbc0 [ 159.944212][ T7569] __se_sys_mount+0x28c/0x2e0 [ 159.948941][ T7569] __x64_sys_mount+0x67/0x80 [ 159.953631][ T7569] x64_sys_call+0x2d61/0x3020 [ 159.958365][ T7569] do_syscall_64+0x12c/0x3b0 [ 159.963029][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.969031][ T7569] RIP: 0033:0x7fd82d5fe0ca [ 159.973507][ T7569] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.993188][ T7569] RSP: 002b:00007fd82c04ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.001651][ T7569] RAX: ffffffffffffffda RBX: 00007fd82c04eee0 RCX: 00007fd82d5fe0ca [ 160.009671][ T7569] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd82c04eea0 [ 160.017688][ T7569] RBP: 00002000000009c0 R08: 00007fd82c04eee0 R09: 0000000000800718 [ 160.025698][ T7569] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 160.033715][ T7569] R13: 00007fd82c04eea0 R14: 000000000000048d R15: 0000200000000200 [ 160.041821][ T7569] [ 160.044866][ T7569] ---[ end trace 0000000000000000 ]--- [ 160.242467][ T7569] EXT4-fs (loop4): 1 orphan inode deleted [ 160.248494][ T7580] loop3: detected capacity change from 0 to 736 [ 160.255695][ T7585] loop1: detected capacity change from 0 to 512 [ 160.263681][ T7580] iso9660: Unknown parameter 'iide' [ 160.269542][ T7585] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 160.278746][ T7585] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.1258: iget: bad i_size value: 12154757448730 [ 160.294810][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.333144][ T7585] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 160.333321][ T7585] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1258: couldn't read orphan inode 13 (err -117) [ 160.342535][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 160.342557][ C1] EXT4-fs (loop1): initial error at time 2000000034: ext4_orphan_get:1397: inode 13 [ 160.342592][ C1] EXT4-fs (loop1): last error at time 2000000034: ext4_orphan_get:1397: inode 13 [ 160.381285][ T7585] loop1: lost filesystem error report for type 5 error -117 [ 160.383850][ T7585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.412471][ T7585] FAULT_INJECTION: forcing a failure. [ 160.412471][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 160.427494][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.466910][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.1.1258 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.466975][ T7585] Tainted: [W]=WARN [ 160.466981][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.467044][ T7585] Call Trace: [ 160.467052][ T7585] [ 160.467061][ T7585] __dump_stack+0x1d/0x30 [ 160.467083][ T7585] dump_stack_lvl+0x95/0xd0 [ 160.467101][ T7585] dump_stack+0x15/0x1b [ 160.467161][ T7585] should_fail_ex+0x263/0x280 [ 160.467185][ T7585] should_failslab+0x8c/0xb0 [ 160.467217][ T7585] kmem_cache_alloc_noprof+0x66/0x3f0 [ 160.467303][ T7585] ? security_file_alloc+0x32/0xf0 [ 160.467323][ T7585] security_file_alloc+0x32/0xf0 [ 160.467340][ T7585] init_file+0x5b/0x1b0 [ 160.467418][ T7585] alloc_empty_file+0x85/0x1e0 [ 160.467439][ T7585] path_openat+0x65/0x2050 [ 160.467537][ T7585] ? _parse_integer_limit+0x170/0x190 [ 160.467578][ T7585] ? _parse_integer+0x27/0x40 [ 160.467606][ T7585] ? kstrtoull+0x111/0x140 [ 160.467645][ T7585] ? kstrtouint+0x76/0xc0 [ 160.467686][ T7585] do_file_open+0x16c/0x290 [ 160.467745][ T7585] do_sys_openat2+0x94/0x130 [ 160.467831][ T7585] __x64_sys_creat+0x65/0x90 [ 160.467886][ T7585] x64_sys_call+0x2ea0/0x3020 [ 160.467914][ T7585] do_syscall_64+0x12c/0x3b0 [ 160.467942][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.467967][ T7585] RIP: 0033:0x7fa07f77ce59 [ 160.467983][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.467999][ T7585] RSP: 002b:00007fa07e1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 160.468017][ T7585] RAX: ffffffffffffffda RBX: 00007fa07f9f5fa0 RCX: 00007fa07f77ce59 [ 160.468088][ T7585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 160.468102][ T7585] RBP: 00007fa07e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.468113][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.468124][ T7585] R13: 00007fa07f9f6038 R14: 00007fa07f9f5fa0 R15: 00007ffc906750f8 [ 160.468145][ T7585] [ 160.713196][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.687566][ T7630] loop4: detected capacity change from 0 to 256 [ 161.734825][ T7630] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.774174][ T7633] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1271'. [ 161.864056][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 161.864289][ T28] audit: type=1326 audit(2000000036.430:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 161.928940][ T28] audit: type=1326 audit(2000000036.460:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 161.954563][ T28] audit: type=1326 audit(2000000036.460:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 161.979980][ T28] audit: type=1326 audit(2000000036.460:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.005440][ T28] audit: type=1326 audit(2000000036.460:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.031101][ T28] audit: type=1326 audit(2000000036.460:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.056558][ T28] audit: type=1326 audit(2000000036.460:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.085178][ T28] audit: type=1326 audit(2000000036.460:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.120473][ T28] audit: type=1326 audit(2000000036.460:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.145897][ T28] audit: type=1326 audit(2000000036.460:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 162.281795][ T7645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.289078][ T7645] IPv6: NLM_F_CREATE should be set when creating new route [ 162.493094][ T7654] loop4: detected capacity change from 0 to 512 [ 162.501448][ T7654] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 162.509546][ T7654] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.1278: iget: bad i_size value: 12154757448730 [ 162.522272][ T7654] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.524095][ T7654] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1278: couldn't read orphan inode 13 (err -117) [ 162.540799][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 162.546193][ T7654] loop4: lost filesystem error report for type 5 error -117 [ 162.551680][ C1] EXT4-fs (loop4): initial error at time 2000000037: ext4_orphan_get:1397: inode 13 [ 162.559015][ C1] EXT4-fs (loop4): last error at time 2000000037: ext4_orphan_get:1397: inode 13 [ 162.571261][ T7654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.659162][ T7657] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 162.756644][ T7660] loop1: detected capacity change from 0 to 736 [ 162.763556][ T7660] iso9660: Unknown parameter 'iide' [ 163.029465][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.054550][ T7662] xt_hashlimit: size too large, truncated to 1048576 [ 163.100934][ T7666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1282'. [ 163.473218][ T7678] loop1: detected capacity change from 0 to 4096 [ 163.481034][ T7678] EXT4-fs: Ignoring removed bh option [ 163.577048][ T7678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.210041][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 164.269655][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.315271][ T7701] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1290'. [ 164.320102][ T7698] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 164.375179][ T7702] loop4: detected capacity change from 0 to 2048 [ 164.381959][ T7702] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 164.427042][ T7705] loop3: detected capacity change from 0 to 736 [ 164.434293][ T7705] iso9660: Unknown parameter 'iide' [ 164.564587][ T7713] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 164.585350][ T7713] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1295'. [ 164.606778][ T7721] loop4: detected capacity change from 0 to 1024 [ 164.625463][ T7721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.642016][ T7721] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.726898][ T7721] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1298: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.754887][ T7721] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 164.767554][ T7721] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.767554][ T7721] [ 164.808856][ T7737] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 164.816577][ T7737] SELinux: failed to load policy [ 164.990880][ T7738] loop3: detected capacity change from 0 to 4096 [ 164.998800][ T7738] EXT4-fs: Ignoring removed bh option [ 165.102391][ T7738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.386555][ T7748] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1306'. [ 165.436610][ T3476] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 165.453023][ T3476] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 165.465804][ T3476] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.465804][ T3476] [ 165.476414][ T3476] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 165.477630][ T7751] loop1: detected capacity change from 0 to 1024 [ 165.491891][ T3476] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 165.501995][ T7751] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 165.521681][ T3476] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.521681][ T3476] [ 165.532038][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 165.543954][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.603953][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.635007][ T7754] loop4: detected capacity change from 0 to 736 [ 165.643899][ T7754] iso9660: Unknown parameter 'iide' [ 165.771609][ T7763] FAULT_INJECTION: forcing a failure. [ 165.771609][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 165.784393][ T7763] CPU: 1 UID: 0 PID: 7763 Comm: syz.4.1313 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 165.784428][ T7763] Tainted: [W]=WARN [ 165.784434][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.784449][ T7763] Call Trace: [ 165.784457][ T7763] [ 165.784466][ T7763] __dump_stack+0x1d/0x30 [ 165.784547][ T7763] dump_stack_lvl+0x95/0xd0 [ 165.784573][ T7763] dump_stack+0x15/0x1b [ 165.784661][ T7763] should_fail_ex+0x263/0x280 [ 165.784687][ T7763] should_failslab+0x8c/0xb0 [ 165.784786][ T7763] kmem_cache_alloc_noprof+0x66/0x3f0 [ 165.784819][ T7763] ? skb_clone+0x151/0x1f0 [ 165.784859][ T7763] skb_clone+0x151/0x1f0 [ 165.784888][ T7763] __netlink_deliver_tap+0x2c9/0x500 [ 165.785004][ T7763] netlink_unicast+0x653/0x680 [ 165.785035][ T7763] netlink_sendmsg+0x5c8/0x6f0 [ 165.785172][ T7763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.785204][ T7763] ____sys_sendmsg+0x563/0x5b0 [ 165.785273][ T7763] ___sys_sendmsg+0x195/0x1e0 [ 165.785349][ T7763] __x64_sys_sendmsg+0xd4/0x160 [ 165.785404][ T7763] x64_sys_call+0x194c/0x3020 [ 165.785434][ T7763] do_syscall_64+0x12c/0x3b0 [ 165.785547][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.785573][ T7763] RIP: 0033:0x7fd82d5fce59 [ 165.785636][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.785654][ T7763] RSP: 002b:00007fd82c04f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.785733][ T7763] RAX: ffffffffffffffda RBX: 00007fd82d875fa0 RCX: 00007fd82d5fce59 [ 165.785750][ T7763] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000003 [ 165.785772][ T7763] RBP: 00007fd82c04f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.785788][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.785803][ T7763] R13: 00007fd82d876038 R14: 00007fd82d875fa0 R15: 00007ffe7781a248 [ 165.785862][ T7763] [ 166.031789][ T7769] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1317'. [ 166.370820][ T7786] loop4: detected capacity change from 0 to 4096 [ 166.378649][ T7786] EXT4-fs: Ignoring removed bh option [ 166.401477][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.742491][ T7793] loop3: detected capacity change from 0 to 736 [ 166.755015][ T7793] iso9660: Unknown parameter 'iide' [ 166.847636][ T7798] FAULT_INJECTION: forcing a failure. [ 166.847636][ T7798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.863434][ T7798] CPU: 0 UID: 0 PID: 7798 Comm: syz.0.1325 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 166.863546][ T7798] Tainted: [W]=WARN [ 166.863553][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.863567][ T7798] Call Trace: [ 166.863574][ T7798] [ 166.863583][ T7798] __dump_stack+0x1d/0x30 [ 166.863610][ T7798] dump_stack_lvl+0x95/0xd0 [ 166.863678][ T7798] dump_stack+0x15/0x1b [ 166.863702][ T7798] should_fail_ex+0x263/0x280 [ 166.863728][ T7798] should_fail+0xb/0x20 [ 166.863746][ T7798] should_fail_usercopy+0x1a/0x20 [ 166.863811][ T7798] _copy_from_user+0x1c/0xb0 [ 166.863931][ T7798] __sys_bpf+0x183/0x7e0 [ 166.863965][ T7798] __x64_sys_bpf+0x41/0x50 [ 166.863992][ T7798] x64_sys_call+0x10cb/0x3020 [ 166.864018][ T7798] do_syscall_64+0x12c/0x3b0 [ 166.864117][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.864195][ T7798] RIP: 0033:0x7f2b1b30ce59 [ 166.864211][ T7798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.864228][ T7798] RSP: 002b:00007f2b19d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.864250][ T7798] RAX: ffffffffffffffda RBX: 00007f2b1b585fa0 RCX: 00007f2b1b30ce59 [ 166.864267][ T7798] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000008 [ 166.864367][ T7798] RBP: 00007f2b19d67090 R08: 0000000000000000 R09: 0000000000000000 [ 166.864384][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.864399][ T7798] R13: 00007f2b1b586038 R14: 00007f2b1b585fa0 R15: 00007fffaff77078 [ 166.864420][ T7798] [ 167.145727][ T7815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1328'. [ 167.146721][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.199161][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 167.199178][ T28] audit: type=1326 audit(2000000041.760:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.241226][ T28] audit: type=1326 audit(2000000041.800:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.268764][ T28] audit: type=1326 audit(2000000041.800:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.305141][ T28] audit: type=1326 audit(2000000041.800:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.331010][ T28] audit: type=1326 audit(2000000041.800:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.358146][ T7820] loop3: detected capacity change from 0 to 2048 [ 167.373330][ T28] audit: type=1326 audit(2000000041.800:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.399163][ T28] audit: type=1326 audit(2000000041.800:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.424976][ T28] audit: type=1326 audit(2000000041.800:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.451377][ T28] audit: type=1326 audit(2000000041.800:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.477620][ T7820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.492382][ T28] audit: type=1326 audit(2000000041.800:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.1334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 167.520881][ T7820] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.547680][ T7829] loop1: detected capacity change from 0 to 1024 [ 167.589721][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.600217][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1338'. [ 167.602096][ T7829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.621455][ T7829] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.688305][ T7829] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1336: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.708358][ T7829] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 167.726752][ T7829] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.726752][ T7829] [ 168.013764][ T7858] loop4: detected capacity change from 0 to 512 [ 168.173338][ T7860] EXT4-fs: Ignoring removed bh option [ 168.186927][ T7858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.225223][ T7858] EXT4-fs (loop4): 1 truncate cleaned up [ 168.259525][ T7858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.279091][ T7860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.573817][ T36] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 168.588395][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 168.601036][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.601036][ T36] [ 168.653455][ T36] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 168.669486][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.705086][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 168.717694][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.717694][ T36] [ 168.736037][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 168.749224][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.759719][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.964728][ T7888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.981760][ T7889] syz_tun: entered allmulticast mode [ 169.034461][ T7888] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.107893][ T7888] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1357: lblock 3 mapped to illegal pblock 3 (length 1) [ 169.125159][ T7888] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 169.137838][ T7888] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.137838][ T7888] [ 169.324498][ T352] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2) [ 169.340235][ T352] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 169.354257][ T352] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.354257][ T352] [ 169.364651][ T352] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 169.379509][ T352] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 169.392201][ T352] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.392201][ T352] [ 169.402608][ T4984] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 169.415356][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.650636][ T7883] syz_tun: left allmulticast mode [ 169.765417][ T7903] set_capacity_and_notify: 2 callbacks suppressed [ 169.765482][ T7903] loop3: detected capacity change from 0 to 4096 [ 169.778714][ T7903] EXT4-fs: Ignoring removed bh option [ 169.792331][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.868642][ T7908] loop1: detected capacity change from 0 to 136 [ 171.266403][ T7934] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1370'. [ 171.334598][ T7937] loop4: detected capacity change from 0 to 512 [ 171.351667][ T7937] ext3: Unknown parameter 'smackfsroot' [ 171.462306][ T7945] loop1: detected capacity change from 0 to 2048 [ 171.517364][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.580238][ T7945] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.606818][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.669775][ T7958] loop3: detected capacity change from 0 to 736 [ 171.696679][ T7958] iso9660: Unknown parameter 'iide' [ 171.699687][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.827018][ T7972] tipc: Enabling of bearer rejected, failed to enable media [ 171.893813][ T7971] FAULT_INJECTION: forcing a failure. [ 171.893813][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.914882][ T7975] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1384'. [ 171.922756][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.0.1382 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 171.922846][ T7971] Tainted: [W]=WARN [ 171.922872][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.922941][ T7971] Call Trace: [ 171.922961][ T7971] [ 171.922987][ T7971] __dump_stack+0x1d/0x30 [ 171.923057][ T7971] dump_stack_lvl+0x95/0xd0 [ 171.923118][ T7971] dump_stack+0x15/0x1b [ 171.923188][ T7971] should_fail_ex+0x263/0x280 [ 171.923256][ T7971] should_fail+0xb/0x20 [ 171.923307][ T7971] should_fail_usercopy+0x1a/0x20 [ 171.923439][ T7971] _copy_from_user+0x1c/0xb0 [ 171.923524][ T7971] __ia32_sys_rt_sigreturn+0x127/0x350 [ 171.923733][ T7971] x64_sys_call+0x2823/0x3020 [ 171.923894][ T7971] do_syscall_64+0x12c/0x3b0 [ 171.923996][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.924113][ T7971] RIP: 0033:0x7f2b1b2ae1d9 [ 171.924151][ T7971] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 171.924176][ T7971] RSP: 002b:00007f2b19d66a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 171.924201][ T7971] RAX: ffffffffffffffda RBX: 00007f2b1b585fa0 RCX: 00007f2b1b2ae1d9 [ 171.924235][ T7971] RDX: 00007f2b19d66a80 RSI: 00007f2b19d66bb0 RDI: 0000000000000021 [ 171.924399][ T7971] RBP: 00007f2b19d67090 R08: 0000000000000080 R09: 0000000000000004 [ 171.924441][ T7971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 171.924483][ T7971] R13: 00007f2b1b586038 R14: 00007f2b1b585fa0 R15: 00007fffaff77078 [ 171.924550][ T7971] [ 171.936261][ T7978] loop3: detected capacity change from 0 to 512 [ 172.102903][ T7982] loop4: detected capacity change from 0 to 4096 [ 172.109629][ T7982] ext4: Unknown parameter ' ' [ 172.208439][ T28] kauditd_printk_skb: 590 callbacks suppressed [ 172.208456][ T28] audit: type=1326 audit(2000000046.770:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.248133][ T28] audit: type=1326 audit(2000000046.810:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.306357][ T7992] loop4: detected capacity change from 0 to 1024 [ 172.316736][ T28] audit: type=1326 audit(2000000046.840:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.350197][ T7992] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.377045][ T7992] JBD2: no valid journal superblock found [ 172.398350][ T7992] EXT4-fs (loop4): Could not load journal inode [ 172.411961][ T28] audit: type=1326 audit(2000000046.840:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.438790][ T28] audit: type=1326 audit(2000000046.840:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.465351][ T28] audit: type=1326 audit(2000000046.840:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.492880][ T28] audit: type=1326 audit(2000000046.840:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.518929][ T28] audit: type=1326 audit(2000000046.840:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.582571][ T28] audit: type=1326 audit(2000000046.840:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.655136][ T28] audit: type=1326 audit(2000000046.840:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.0.1389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b1b30ce59 code=0x7ffc0000 [ 172.917747][ T8007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8007 comm=syz.3.1395 [ 172.982880][ T8007] bridge0: port 3(batadv1) entered blocking state [ 172.994669][ T8007] bridge0: port 3(batadv1) entered disabled state [ 173.007515][ T8007] batadv1: entered allmulticast mode [ 173.017466][ T8007] batadv1: entered promiscuous mode [ 173.233008][ T8042] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1403'. [ 173.322955][ T8045] loop1: detected capacity change from 0 to 2048 [ 173.345421][ T8045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.358357][ T8045] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.422301][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.538829][ T8054] loop4: detected capacity change from 0 to 4096 [ 173.547255][ T8054] EXT4-fs: Ignoring removed bh option [ 173.640662][ T8054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.697269][ T352] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 173.706662][ T352] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 174.100454][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.152194][ T8066] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1410'. [ 174.322623][ T8066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.763215][ T8086] veth1_to_bond: entered allmulticast mode [ 175.927704][ T8086] veth1_to_bond: left allmulticast mode [ 176.284741][ T8090] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1418'. [ 176.689632][ T8090] loop4: detected capacity change from 0 to 256 [ 177.119931][ T8097] loop3: detected capacity change from 0 to 2048 [ 177.182499][ T8097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.234448][ T8107] loop1: detected capacity change from 0 to 1024 [ 177.265500][ T8097] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.303088][ T8107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.333486][ T28] kauditd_printk_skb: 242 callbacks suppressed [ 177.333499][ T28] audit: type=1326 audit(2000000051.900:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f848492d68e code=0x7ffc0000 [ 177.404884][ T8107] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.432147][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.502078][ T28] audit: type=1326 audit(2000000051.900:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f848496b297 code=0x7ffc0000 [ 177.529025][ T8107] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1424: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.622779][ T8107] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 177.677101][ T28] audit: type=1326 audit(2000000051.900:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f848492d68e code=0x7ffc0000 [ 177.711418][ T8107] EXT4-fs (loop1): This should not happen!! Data will be lost [ 177.711418][ T8107] [ 177.824316][ T28] audit: type=1326 audit(2000000051.900:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 177.969666][ T28] audit: type=1326 audit(2000000051.900:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 178.009253][ T28] audit: type=1326 audit(2000000051.900:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 178.034974][ T28] audit: type=1326 audit(2000000051.900:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 178.060576][ T28] audit: type=1400 audit(2000000051.900:3665): avc: denied { write } for pid=8093 comm="syz.3.1421" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.082301][ T28] audit: type=1326 audit(2000000051.900:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 178.107880][ T28] audit: type=1326 audit(2000000051.900:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.1421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 178.376458][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.429826][ T36] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 178.458411][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 178.485846][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.485846][ T36] [ 178.510150][ T36] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 178.536179][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 178.548847][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.548847][ T36] [ 178.560496][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 178.572728][ T8152] loop4: detected capacity change from 0 to 2048 [ 178.572887][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.620857][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.642278][ T8156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1438'. [ 178.644111][ T8152] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.684414][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.943420][ T8172] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1442'. [ 179.004506][ T8182] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.017709][ T8182] SELinux: failed to load policy [ 179.096964][ T8191] loop3: detected capacity change from 0 to 736 [ 179.110172][ T8191] iso9660: Unknown parameter 'iide' [ 179.241676][ T8202] loop4: detected capacity change from 0 to 2048 [ 179.307237][ T8202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.320938][ T8202] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.364560][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.494238][ T8215] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1458'. [ 179.546100][ T8222] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.578127][ T8222] SELinux: failed to load policy [ 179.731574][ T8233] loop1: detected capacity change from 0 to 512 [ 179.786845][ T8233] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 179.813222][ T8233] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1464: inode #15: comm syz.1.1464: iget: illegal inode # [ 179.899263][ T8236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8236 comm=syz.4.1463 [ 180.277665][ T8233] loop1: lost filesystem error report for type 5 error -117 [ 180.277848][ T8233] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1464: couldn't read orphan inode 15 (err -117) [ 180.285264][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 180.285300][ C0] EXT4-fs (loop1): initial error at time 2000000054: ext4_orphan_get:1397 [ 180.285321][ C0] EXT4-fs (loop1): last error at time 2000000054: ext4_orphan_get:1397 [ 180.375140][ T8239] loop3: detected capacity change from 0 to 2048 [ 180.412827][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.431074][ T8233] loop1: lost filesystem error report for type 5 error -117 [ 180.433220][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.464159][ T8239] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.642940][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.725829][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.837067][ T8255] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1471'. [ 180.901077][ T8260] loop4: detected capacity change from 0 to 164 [ 180.920660][ T8260] isofs_fill_super: root inode is not a directory. Corrupted media? [ 181.046966][ T8260] syzkaller0: entered promiscuous mode [ 181.060821][ T8260] syzkaller0: entered allmulticast mode [ 183.246829][ T35] IPVS: starting estimator thread 0... [ 183.984929][ T3378] IPVS: starting estimator thread 0... [ 184.060923][ T8293] IPVS: using max 1728 ests per chain, 86400 per kthread [ 184.100885][ T8294] IPVS: using max 2112 ests per chain, 105600 per kthread [ 184.109797][ T8281] syz_tun: entered allmulticast mode [ 184.161851][ T8281] syz_tun: left allmulticast mode [ 184.302245][ T8298] loop1: detected capacity change from 0 to 256 [ 184.420260][ T28] kauditd_printk_skb: 323 callbacks suppressed [ 184.420277][ T28] audit: type=1400 audit(2000000058.980:3991): avc: denied { bind } for pid=8299 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.574840][ T8320] loop3: detected capacity change from 0 to 512 [ 184.591458][ T8320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.625990][ T8320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.638706][ T8320] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.675362][ T8320] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1492: Allocating blocks 41-42 which overlap fs metadata [ 184.691503][ T8320] loop3: lost filesystem error report for type 5 error -117 [ 184.691698][ T8320] EXT4-fs (loop3): Remounting filesystem read-only [ 184.705710][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 184.705732][ C0] EXT4-fs (loop3): initial error at time 2000000059: ext4_mb_mark_diskspace_used:4222 [ 184.705764][ C0] EXT4-fs (loop3): last error at time 2000000059: ext4_mb_mark_diskspace_used:4222 [ 184.811168][ T28] audit: type=1326 audit(2000000059.370:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8328 comm="syz.2.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 184.865678][ T8331] loop4: detected capacity change from 0 to 512 [ 184.866412][ T8320] Quota error (device loop3): write_blk: dquota write failed [ 184.882765][ T8320] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 184.892270][ T28] audit: type=1326 audit(2000000059.370:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8328 comm="syz.2.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 184.919383][ T8320] Quota error (device loop3): write_blk: dquota write failed [ 184.927130][ T8320] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 184.937518][ T8320] EXT4-fs (loop3): 1 truncate cleaned up [ 184.943641][ T28] audit: type=1326 audit(2000000059.370:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8328 comm="syz.2.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 184.970175][ T8320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.998329][ T28] audit: type=1326 audit(2000000059.400:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8328 comm="syz.2.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 185.028897][ T8320] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1492'. [ 185.038303][ T8320] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 185.047019][ T8320] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 185.056219][ T28] audit: type=1326 audit(2000000059.400:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8328 comm="syz.2.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba1ecce59 code=0x7ffc0000 [ 186.495771][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.977884][ T8367] syzkaller0: entered promiscuous mode [ 186.983695][ T8367] syzkaller0: entered allmulticast mode [ 187.476647][ T8407] syz_tun: entered allmulticast mode [ 187.484571][ T8404] syz_tun: left allmulticast mode [ 187.527886][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 187.790233][ T8431] loop3: detected capacity change from 0 to 736 [ 187.804016][ T8431] iso9660: Unknown parameter 'iide' [ 188.218190][ T8439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8439 comm=syz.3.1533 [ 188.970513][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 189.016554][ T8462] loop4: detected capacity change from 0 to 256 [ 189.035641][ T8462] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.227531][ T8471] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1543'. [ 189.254073][ T8471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.342148][ T8474] syzkaller0: entered promiscuous mode [ 189.347892][ T8474] syzkaller0: entered allmulticast mode [ 189.382267][ T8482] loop1: detected capacity change from 0 to 1024 [ 189.388850][ T8481] loop4: detected capacity change from 0 to 1024 [ 189.397477][ T8481] EXT4-fs: Ignoring removed orlov option [ 189.406018][ T8482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.418249][ T8482] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.428868][ T8481] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 189.438900][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 189.438918][ T28] audit: type=1400 audit(2000000064.000:4184): avc: denied { write } for pid=8480 comm="syz.1.1548" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.466970][ T8481] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 189.475398][ T8481] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.486978][ T8481] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.1545: Invalid inode table block 0 in block_group 0 [ 189.491397][ T8482] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1548: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.502700][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.514730][ T8481] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 189.522084][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 189.522102][ C1] EXT4-fs (loop4): initial error at time 2000000064: __ext4_get_inode_loc:4885 [ 189.522128][ C1] EXT4-fs (loop4): last error at time 2000000064: __ext4_get_inode_loc:4885 [ 189.530923][ T8482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 189.532519][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.540107][ T8482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 189.540107][ T8482] [ 189.547750][ T8481] EXT4-fs error (device loop4): ext4_quota_write:7423: inode #3: comm syz.4.1545: mark_inode_dirty error [ 189.596398][ T8481] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.596576][ T8481] Quota error (device loop4): write_blk: dquota write failed [ 189.613109][ T8481] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 189.623150][ T8481] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1545: Failed to acquire dquot type 0 [ 189.634459][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.640176][ T8481] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.1545: Invalid inode table block 0 in block_group 0 [ 189.677225][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.680357][ T8481] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 189.718519][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.720050][ T8481] EXT4-fs error (device loop4): ext4_ext_truncate:4557: inode #15: comm syz.4.1545: mark_inode_dirty error [ 189.756312][ T8495] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1552'. [ 189.766277][ T8481] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.767698][ T8481] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.1545: Invalid inode table block 0 in block_group 0 [ 189.789687][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.790187][ T8481] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 189.807026][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.807116][ T8481] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 189.830271][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.830516][ T8481] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.1545: Invalid inode table block 0 in block_group 0 [ 189.878585][ T28] audit: type=1326 audit(2000000064.440:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 189.887688][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 189.927026][ T8481] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 189.967913][ T28] audit: type=1326 audit(2000000064.440:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 189.972555][ T8481] loop4: lost filesystem error report for type 5 error -117 [ 190.007908][ T3476] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 190.023257][ T8500] loop3: detected capacity change from 0 to 512 [ 190.041024][ T8481] EXT4-fs error (device loop4): ext4_truncate:4690: inode #15: comm syz.4.1545: mark_inode_dirty error [ 190.046145][ T28] audit: type=1326 audit(2000000064.440:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 190.063981][ T3476] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 190.094160][ T8481] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.094289][ T8481] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 190.122010][ T8481] EXT4-fs (loop4): 1 truncate cleaned up [ 190.128290][ T8481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.141260][ T3476] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.141260][ T3476] [ 190.166071][ T28] audit: type=1326 audit(2000000064.440:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 190.171250][ T3476] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 190.206323][ T3476] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 190.218992][ T3476] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.218992][ T3476] [ 190.234878][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 190.246933][ T8500] loop3: detected capacity change from 0 to 512 [ 190.247167][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.253438][ T28] audit: type=1326 audit(2000000064.470:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 190.330883][ T28] audit: type=1326 audit(2000000064.470:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 190.358053][ T8500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.358344][ T28] audit: type=1326 audit(2000000064.470:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.1553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848496ce59 code=0x7ffc0000 [ 190.398374][ T8500] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.476924][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.611001][ T8514] syzkaller0: entered promiscuous mode [ 190.616973][ T8514] syzkaller0: entered allmulticast mode [ 190.941771][ T8521] syzkaller0: entered promiscuous mode [ 190.951409][ T8521] syzkaller0: entered allmulticast mode [ 191.154632][ T8533] sg_write: data in/out 912/16 bytes for SCSI command 0x62-- guessing data in; [ 191.154632][ T8533] program syz.0.1565 not setting count and/or reply_len properly [ 191.298895][ T8538] loop4: detected capacity change from 0 to 1024 [ 191.342626][ T8538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.367846][ T8538] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.395558][ T4984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.427569][ T8543] loop1: detected capacity change from 0 to 1024 [ 191.452368][ T8543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.464754][ T8543] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.476850][ T8538] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1567: lblock 3 mapped to illegal pblock 3 (length 1) [ 191.495430][ T8538] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 191.508123][ T8538] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.508123][ T8538] [ 191.546490][ T8543] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1568: lblock 3 mapped to illegal pblock 3 (length 1) [ 191.567243][ T8543] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 191.593150][ T8543] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.593150][ T8543] [ 191.635877][ T36] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 191.659935][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 191.684693][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.684693][ T36] [ 191.708281][ T3476] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 191.723242][ T3476] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 191.736173][ T3476] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.736173][ T3476] [ 191.754478][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 191.777795][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.791836][ T3304] ================================================================== [ 191.799933][ T3304] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 191.807518][ T3304] [ 191.809860][ T3304] read-write to 0xffff888237c266e8 of 1 bytes by task 8549 on cpu 0: [ 191.817959][ T3304] folio_add_lru+0xaa/0x1f0 [ 191.822504][ T3304] shmem_get_folio_gfp+0x7b0/0xd60 [ 191.827639][ T3304] shmem_fault+0xf6/0x250 [ 191.831996][ T3304] handle_mm_fault+0x16cd/0x2e70 [ 191.836973][ T3304] __get_user_pages+0x1290/0x1f10 [ 191.842029][ T3304] __mm_populate+0x242/0x390 [ 191.846687][ T3304] vm_mmap_pgoff+0x23b/0x2d0 [ 191.851318][ T3304] ksys_mmap_pgoff+0xc1/0x310 [ 191.856011][ T3304] x64_sys_call+0x14df/0x3020 [ 191.860717][ T3304] do_syscall_64+0x12c/0x3b0 [ 191.865352][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.871280][ T3304] [ 191.873623][ T3304] read to 0xffff888237c266e8 of 1 bytes by task 3304 on cpu 1: [ 191.881189][ T3304] __lru_add_drain_all+0x17e/0x450 [ 191.886331][ T3304] lru_add_drain_all+0x10/0x20 [ 191.891130][ T3304] invalidate_bdev+0x47/0x70 [ 191.895754][ T3304] ext4_put_super+0x610/0x7b0 [ 191.900469][ T3304] generic_shutdown_super+0xee/0x220 [ 191.905782][ T3304] kill_block_super+0x2a/0x70 [ 191.910572][ T3304] ext4_kill_sb+0x42/0x80 [ 191.914915][ T3304] deactivate_locked_super+0x75/0x1c0 [ 191.920306][ T3304] deactivate_super+0x97/0xa0 [ 191.925041][ T3304] cleanup_mnt+0x2bb/0x330 [ 191.929488][ T3304] __cleanup_mnt+0x19/0x20 [ 191.933922][ T3304] task_work_run+0x130/0x1a0 [ 191.938530][ T3304] exit_to_user_mode_loop+0x211/0x820 [ 191.943932][ T3304] do_syscall_64+0x232/0x3b0 [ 191.948646][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.954560][ T3304] [ 191.956905][ T3304] value changed: 0x17 -> 0x18 [ 191.961595][ T3304] [ 191.963935][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 191.970113][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 191.981163][ T3304] Tainted: [W]=WARN [ 191.984987][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.995055][ T3304] ================================================================== [ 192.034298][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:0: lblock 4 mapped to illegal pblock 4 (length 2) [ 192.068103][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 192.081268][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.081268][ T12] [ 192.169962][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 192.226046][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 192.247856][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.247856][ T12] [ 192.258853][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 192.271986][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.