last executing test programs: 5.460008242s ago: executing program 1 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVFUbAOD3zrSlpfC1kC/fJy6kiTGQKC0tYIhxAVtDGvwRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5MdOPKkBA1LE0cc2fuLZ32TktLO7cyz5MMc+89c3veYfr2nDlzzp0AOtZQ+k8lYl9EzCQRA8nCYllXZIVDjcfd//PDM+ktiVrt1d+TSLJj+eOT7L4/O7k3In74Pom91ZX1zs5fvTAxPT11Jdsfmbs4MzI7f/XQ+YsT56bOTV0ae37s+LGjx46PHt7Q87pWcOzUjXfeG/h4/I2vv/wrGf3ml/EkTsRL2QOXPo/NMhRD9f+TZGVR//HNrqwk1ez3ZOlLnHSVGBDrkr9+3RHx/xiIajx48Qbio5dLDQ7YUrUkogZ0qET+Q4fK+wH5e/vl74MrpfRKgHa4d7IxALAy/7saY4PRWx8b2Hk/iaXDOklEbGxkrtmuiLhze/zG2dvjN2KLxuGAYgvXI+KJovxP6vk/GL0xWM//SlP+p/2C09l9evyVDda/fKhY/kP7NPK/d9X8jxb5/2Z6v7ux/9YG6x96sPl2X1P+923wJwIAAAAAAEDnunUyIp4r+vy/sjj/Jwrm//RHxIlNqH9o2f7Kz/8rdzehGqDAvZMRLxbO/63ks38Hq9nW7vp8gO7k7PnpqcMR8Z+IOBjdO9L90VXqOPTJ3i9alQ1l8//yW1r/nWwuYBbH3a4dzedMTsxNPOrzBiLuXY94snD+b7LY/icF7X/692DmIevY+8zN063K1s5/YKvUvoo4UNj+P7hqRbL69TlG6v2BkbxXkFmycOipDz79tlX9G81/l5iAR5e2/ztXz//BZOn1embXX8eR+a5aq7KN9v97ktfql5zpyY69PzE3d2U0oic5VU2PNh0fW3/M8DjK8yHPlzT/Dz69+vhfUf+/LyIWlv3s5I/mNcW5//3d/2urePT/oTxp/k+uq/1f/8bYzcHvWtX/cO3/0XpbfzA7YvwPGj7P07Sn+XhBOnYVFbU7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYlckleHF7UpleDiiPyL+Gzsr05dn5549e/ndS5NpWf37/yv5N/0ONPaT/Pv/B5fsjy3bPxIReyLis2pffX/4zOXpybKfPAAAAAAAAAAAAAAAAAAAAGwT/S3W/6d+q5YdHbDlusoOAChNQf7/WEYcQPtp/6FzyX/oXPIfOldx/v/c9jiA9tP+Q+eS/9C55D90LvkPAAAAAACPlT37b/2URMTCC331W6onK+suNTJgq1XKDgAoTeMSP7WywwBKYOoPdC7v8YFkjfLelietdeZqZs48wskAAAAAAAAAAAAA0HEO7LP+HzrVquv/T7cvDqD9qmUHAJQmX/+/v+Q4gPbzHh+INVbyF67/X/MsAAAAAAAAAAAAAGAzzc5fvTAxPT11xcbr2yOMdm7UarVr6W/BdonnX76RT4XfLvEs28jX+j3cWeX9TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9EwAA//+Fxyb7") r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x190) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r7, 0x0, 0x1, 0x6784, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, 0x23, 0xa0028000}, 0x38) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d72"], 0xa) madvise(&(0x7f000060e000/0x4000)=nil, 0x4000, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @private=0xa010102, @rand_addr=0x64010102}, @echo_reply={0x0, 0x0, 0x0, 0x68}}}}}, 0x0) 3.994992344s ago: executing program 1 (id=1332): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000020000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00"], 0x23c}}, 0x0) 3.87395544s ago: executing program 2 (id=1333): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) listen(r0, 0x0) fsopen(&(0x7f0000000040)='ocfs2\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 3.648123671s ago: executing program 1 (id=1334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) timerfd_create(0x9, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') dup3(0xffffffffffffffff, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 3.616751413s ago: executing program 1 (id=1335): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2404c084) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x5, 0x4c, 0xf3, 0x2, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmat(0x0, &(0x7f0000270000/0x3000)=nil, 0x1000) 2.913925217s ago: executing program 2 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000001280)={0xa, 0x4e21, 0xc9, @mcast2}, 0x1c) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000025dc00000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bf8900000000000007010000f8ffffffb702000008000000b70300000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0xa0a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r8}, 0x38) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 2.86358688s ago: executing program 3 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$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") r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x190) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r7, 0x0, 0x1, 0x6784, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, 0x23, 0xa0028000}, 0x38) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d72"], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @private=0xa010102, @rand_addr=0x64010102}, @echo_reply={0x0, 0x0, 0x0, 0x68}}}}}, 0x0) 2.801373783s ago: executing program 4 (id=1343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000940)=ANY=[@ANYRESDEC, @ANYRESHEX], 0xfe37, 0x0) 1.804625202s ago: executing program 0 (id=1345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) timerfd_create(0x9, 0x80000) dup3(0xffffffffffffffff, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 1.734175575s ago: executing program 1 (id=1346): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0}, 0x40) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018f8ff000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a70fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.618786901s ago: executing program 0 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0xba01, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25302}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x8}, 0x20000004) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000240)="8be85ecb863ca3bbef4ba5e76f4387aafac389bdb3147004468e950c5bb652f7d5784f1b2937b574374d6abb2d468d12f94fb424a8d303d1e9ea15bbbeac8598d5fcad70549da872357e2c398939169f36e8ecda762d3060338e6f956e1b3f5513907df015a33346c77d9dd6d566680c877f86da29ff4a", 0x77}, {&(0x7f00000002c0)="0536f0ad6c597792057469f82b16e0e440910d98b78aaeda044ed515dc5f474849fa28ae257ea49763e78e1ccd1cc29e0314079cc178a0c1b00c7d368b7e067229c7997d03eade17276e742320f69064f965fd6fa60d35066d97cdf5eb5eafc9a808b8fdd44a838f76c36ea757113e1ac436f33a95aa124b6f8539a22d3bd1077878004d6d92d936ccb5953a90a5", 0x8e}, {&(0x7f0000000380)="ed8f82bd42c6a4ce99be349544516a194c1f22b842d490bd2d7b51d2a458d6cdf9391a3c41ddbf0b1a6534ef0fc35069f3965af092095c97d075f4e2f1b1be22a188bfaf63a9245b91eba637332900ac279b5e01313bc46ca02ff61dc8144b0e8db2650dfd62", 0x66}, {&(0x7f0000000400)="d3e75ebfb114656895d831be66817dbbc153b50217df832da026b66ea27de46628e3b19b9e7050aed6d6f0dce5586f5cb670bfa3f59ef18ec02e4dc1c5d31926e53ecba5cd89d666eb93a329bdab401ee1ef11aa7902b6d76a7ed1a909f9", 0xffffffffffffffe0}, {&(0x7f0000000480)="8b28ee9e5309b7ebfdbe1863e710ae8bd418d63d77e55902b94a15c7a59f8ab4a3666248db3f9cccc981b668fa4be57acf4fef7c8a9c28c18e4ce35f0f3a2b7bd02d6d8457112becb2cd94317594d5030311334bef4c0700e32f7508000fc61ee86c424e21c9d75072b6e8468142872957f993de3b7cf195bfcb4e0a5813e851e636a25e3eba1ccbfc363a4c08efe1ce8e62277fcee81c", 0x97}, {&(0x7f0000000540)="fcf5c5821fb5a0fb63", 0x9}, {&(0x7f0000000580)="6a44045ce376b17fdd96885c950c1cd093af22eb2b0e1aa6258ec4259fed2d9b42da26be8b6a4fed3904d155e719cba9dae8ec7627c5d132e689e7d0f23264345faaff83615143c32fc9188593236b60abcc53a02aa84485", 0x58}], 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93c7c4a2b88dcfff}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}}, 0x0) 1.618280001s ago: executing program 3 (id=1348): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x87, &(0x7f0000000040)={0x0, 0xc8a1, 0x2c011, 0x2, 0x234}) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfd}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b00000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac1e0001867100000000000ce2ffb28c599d1681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6010a6580a5e97612fe8600122400110003000000000000000000860c0000000300067f36c525000000"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r6, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x7}, &(0x7f0000000140)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.614774341s ago: executing program 4 (id=1349): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000440), 0x0, 0x0, 0x3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) flistxattr(r2, &(0x7f00000000c0)=""/181, 0xb5) setpgid(0x0, r7) fchdir(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0x6, 0x4, @local, @mcast1, 0x8, 0x7, 0xfffffffd, 0x6}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r8, r6, 0x5}, 0x50) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x44, &(0x7f00000000c0)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.422037481s ago: executing program 2 (id=1350): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.331935305s ago: executing program 4 (id=1351): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f1ffffff00"/20], 0x48) 1.008102871s ago: executing program 3 (id=1352): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f1ffffff00"/20], 0x48) 978.488283ms ago: executing program 4 (id=1353): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) (rerun: 64) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9b) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x401, 0x7, 0x5, 0x2, 0xf}}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) (async, rerun: 64) r5 = syz_open_pts(r1, 0x40000) (rerun: 64) dup3(r5, r1, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}}}}]}, 0x38}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) 921.959246ms ago: executing program 2 (id=1354): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x30000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x8804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071002c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) sched_rr_get_interval(r13, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c8, r12, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1a4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52bb2791}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724711df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1bab58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x680ac8fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fce0a05}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe80e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ccf2664}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9513}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x392fde94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x282f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e73a00d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3ad4f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf62bbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4094}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a7dba1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d3a4a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb62a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x523f49e9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee62}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa74b1bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d0800be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf842}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c83344c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cf7ca6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x762b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b95abb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65cd394e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35b5c6c2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd239}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21616dd2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac97}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d559a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a91f41f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8223}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75067a34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc46ff96}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c8}}, 0x0) 917.163856ms ago: executing program 3 (id=1355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000003c000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00"], 0x23c}}, 0x0) 887.816247ms ago: executing program 0 (id=1356): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000440), 0x0, 0x0, 0x3) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x44, &(0x7f00000000c0)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 845.907669ms ago: executing program 3 (id=1357): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4) sendfile(0xffffffffffffffff, r5, 0x0, 0x3ffff) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 831.98032ms ago: executing program 0 (id=1358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) timerfd_create(0x9, 0x80000) dup3(0xffffffffffffffff, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 831.75403ms ago: executing program 1 (id=1359): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVFUbAOD3zrSlpfC1kC/fJy6kiTGQKC0tYIhxAVtDGvwRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5MdOPKkBA1LE0cc2fuLZ32TktLO7cyz5MMc+89c3veYfr2nDlzzp0AOtZQ+k8lYl9EzCQRA8nCYllXZIVDjcfd//PDM+ktiVrt1d+TSLJj+eOT7L4/O7k3In74Pom91ZX1zs5fvTAxPT11Jdsfmbs4MzI7f/XQ+YsT56bOTV0ae37s+LGjx46PHt7Q87pWcOzUjXfeG/h4/I2vv/wrGf3ml/EkTsRL2QOXPo/NMhRD9f+TZGVR//HNrqwk1ez3ZOlLnHSVGBDrkr9+3RHx/xiIajx48Qbio5dLDQ7YUrUkogZ0qET+Q4fK+wH5e/vl74MrpfRKgHa4d7IxALAy/7saY4PRWx8b2Hk/iaXDOklEbGxkrtmuiLhze/zG2dvjN2KLxuGAYgvXI+KJovxP6vk/GL0xWM//SlP+p/2C09l9evyVDda/fKhY/kP7NPK/d9X8jxb5/2Z6v7ux/9YG6x96sPl2X1P+923wJwIAAAAAAEDnunUyIp4r+vy/sjj/Jwrm//RHxIlNqH9o2f7Kz/8rdzehGqDAvZMRLxbO/63ks38Hq9nW7vp8gO7k7PnpqcMR8Z+IOBjdO9L90VXqOPTJ3i9alQ1l8//yW1r/nWwuYBbH3a4dzedMTsxNPOrzBiLuXY94snD+b7LY/icF7X/692DmIevY+8zN063K1s5/YKvUvoo4UNj+P7hqRbL69TlG6v2BkbxXkFmycOipDz79tlX9G81/l5iAR5e2/ztXz//BZOn1embXX8eR+a5aq7KN9v97ktfql5zpyY69PzE3d2U0oic5VU2PNh0fW3/M8DjK8yHPlzT/Dz69+vhfUf+/LyIWlv3s5I/mNcW5//3d/2urePT/oTxp/k+uq/1f/8bYzcHvWtX/cO3/0XpbfzA7YvwPGj7P07Sn+XhBOnYVFbU7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYlckleHF7UpleDiiPyL+Gzsr05dn5549e/ndS5NpWf37/yv5N/0ONPaT/Pv/B5fsjy3bPxIReyLis2pffX/4zOXpybKfPAAAAAAAAAAAAAAAAAAAAGwT/S3W/6d+q5YdHbDlusoOAChNQf7/WEYcQPtp/6FzyX/oXPIfOldx/v/c9jiA9tP+Q+eS/9C55D90LvkPAAAAAACPlT37b/2URMTCC331W6onK+suNTJgq1XKDgAoTeMSP7WywwBKYOoPdC7v8YFkjfLelietdeZqZs48wskAAAAAAAAAAAAA0HEO7LP+HzrVquv/T7cvDqD9qmUHAJQmX/+/v+Q4gPbzHh+INVbyF67/X/MsAAAAAAAAAAAAAGAzzc5fvTAxPT11xcbr2yOMdm7UarVr6W/BdonnX76RT4XfLvEs28jX+j3cWeX9TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9EwAA//+Fxyb7") r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x190) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r7, 0x0, 0x1, 0x6784, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, 0x23, 0xa0028000}, 0x38) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d72"], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @private=0xa010102, @rand_addr=0x64010102}, @echo_reply={0x0, 0x0, 0x0, 0x68}}}}}, 0x0) 830.23438ms ago: executing program 2 (id=1360): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="010000000005fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c000780080005010000000008000000000000000800050000000000240007800800050000ed98"], 0x150}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 735.782695ms ago: executing program 0 (id=1361): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 630.25364ms ago: executing program 4 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x87, &(0x7f0000000040)={0x0, 0xc8a1, 0x2c011, 0x2, 0x234}) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfd}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b00000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac1e0001867100000000000ce2ffb28c599d1681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6010a6580a5e97612fe8600122400110003000000000000000000860c0000000300067f36c525000000"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r6, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x7}, &(0x7f0000000140)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 537.950864ms ago: executing program 0 (id=1363): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x7, 0x3, 0x3, 0x0, 0x60be88a}) openat$tun(0xffffffffffffff9c, 0x0, 0x284002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 530.911165ms ago: executing program 2 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000090ffffffffffffff00000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 205.383171ms ago: executing program 3 (id=1365): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7fffff7fffffffff, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8, 0xf60e}, 0x10ed96, 0x1, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100000000000000000000000000008500000075"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x1, 0x9, 0x2, 0x8, 0x6, 0x6, 0x9, 0x9, 0xe7, 0x10, 0xe0, 0x4, 0x3}, 0xe) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c000780080005010000000008000000000000000800050000000000240007800800050000ed"], 0x150}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1366): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x280443, 0x72) write$P9_RREADLINK(r3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000fff80000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0xbf22, 0x150, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000004000000000000000000001fe80000000000000008000000000000000000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) kernel console output (not intermixed with test programs): x170f/0x20c0 [ 113.986135][ T5868] ? __rcu_read_unlock+0x4e/0x70 [ 113.986157][ T5868] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 113.986204][ T5868] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 113.986231][ T5868] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 113.986301][ T5868] ? __pfx_guard_install_set_pte+0x10/0x10 [ 113.986330][ T5868] madvise_do_behavior+0x897/0xa10 [ 113.986360][ T5868] do_madvise+0x10e/0x190 [ 113.986390][ T5868] __x64_sys_madvise+0x63/0x80 [ 113.986434][ T5868] x64_sys_call+0x1eff/0x3020 [ 113.986501][ T5868] do_syscall_64+0x12c/0x370 [ 113.986527][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.986596][ T5868] RIP: 0033:0x7eff4466c799 [ 113.986613][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.986700][ T5868] RSP: 002b:00007eff430bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 113.986722][ T5868] RAX: ffffffffffffffda RBX: 00007eff448e5fa0 RCX: 00007eff4466c799 [ 113.986811][ T5868] RDX: 0000000000000066 RSI: 0000000000600003 RDI: 0000200000000000 [ 113.986825][ T5868] RBP: 00007eff430bf090 R08: 0000000000000000 R09: 0000000000000000 [ 113.986839][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.986852][ T5868] R13: 00007eff448e6038 R14: 00007eff448e5fa0 R15: 00007ffcba1993d8 [ 113.986904][ T5868] [ 114.026673][ T28] audit: type=1400 audit(1773722898.005:555): avc: denied { setopt } for pid=5872 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.285369][ T28] audit: type=1400 audit(1773722898.015:556): avc: denied { getopt } for pid=5872 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.315895][ T5876] loop4: detected capacity change from 0 to 8192 [ 114.344353][ T28] audit: type=1400 audit(1773722898.325:557): avc: denied { bind } for pid=5877 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.375733][ T3303] loop4: p1 < > p2 p4 < p5 > [ 114.383199][ T3303] loop4: partition table partially beyond EOD, truncated [ 114.415276][ T3303] loop4: p1 start 134217728 is beyond EOD, truncated [ 114.424704][ T3303] loop4: p2 size 591360 extends beyond EOD, truncated [ 114.434604][ T3303] loop4: p5 size 591360 extends beyond EOD, truncated [ 114.446986][ T5876] loop4: p1 < > p2 p4 < p5 > [ 114.452350][ T5876] loop4: partition table partially beyond EOD, truncated [ 114.460360][ T5876] loop4: p1 start 134217728 is beyond EOD, truncated [ 114.487229][ T5876] loop4: p2 size 591360 extends beyond EOD, truncated [ 114.505210][ T5876] loop4: p5 size 591360 extends beyond EOD, truncated [ 114.816048][ T5886] syzkaller1: entered promiscuous mode [ 114.928141][ T5886] syzkaller1: entered allmulticast mode [ 115.062243][ T28] audit: type=1400 audit(1773722899.035:558): avc: denied { ioctl } for pid=5865 comm="syz.4.685" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.297736][ T5895] xt_TCPMSS: Only works on TCP SYN packets [ 115.402798][ T28] audit: type=1400 audit(1773722899.355:559): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.550998][ T5908] FAULT_INJECTION: forcing a failure. [ 115.550998][ T5908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.579181][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: syz.2.699 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.579222][ T5908] Tainted: [W]=WARN [ 115.579230][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.579296][ T5908] Call Trace: [ 115.579305][ T5908] [ 115.579315][ T5908] __dump_stack+0x1d/0x30 [ 115.579348][ T5908] dump_stack_lvl+0x95/0xd0 [ 115.579371][ T5908] dump_stack+0x15/0x1b [ 115.579462][ T5908] should_fail_ex+0x263/0x280 [ 115.579494][ T5908] should_fail+0xb/0x20 [ 115.579521][ T5908] should_fail_usercopy+0x1a/0x20 [ 115.579571][ T5908] _copy_to_user+0x20/0xa0 [ 115.579603][ T5908] simple_read_from_buffer+0xb5/0x130 [ 115.579680][ T5908] proc_fail_nth_read+0x10e/0x150 [ 115.579715][ T5908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.579809][ T5908] vfs_read+0x1ab/0x7f0 [ 115.579843][ T5908] ? __rcu_read_unlock+0x4e/0x70 [ 115.579865][ T5908] ? __fget_files+0x184/0x1c0 [ 115.579888][ T5908] ? mutex_lock+0x57/0x90 [ 115.579965][ T5908] ksys_read+0xdc/0x1a0 [ 115.579995][ T5908] __x64_sys_read+0x40/0x50 [ 115.580013][ T5908] x64_sys_call+0x2886/0x3020 [ 115.580042][ T5908] do_syscall_64+0x12c/0x370 [ 115.580082][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.580164][ T5908] RIP: 0033:0x7eff4462cfce [ 115.580183][ T5908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.580200][ T5908] RSP: 002b:00007eff430befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.580225][ T5908] RAX: ffffffffffffffda RBX: 00007eff430bf6c0 RCX: 00007eff4462cfce [ 115.580280][ T5908] RDX: 000000000000000f RSI: 00007eff430bf0a0 RDI: 0000000000000006 [ 115.580296][ T5908] RBP: 00007eff430bf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.580310][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.580411][ T5908] R13: 00007eff448e6038 R14: 00007eff448e5fa0 R15: 00007ffcba1993d8 [ 115.580434][ T5908] [ 115.804072][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 115.814308][ T5903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.827724][ T5914] loop4: detected capacity change from 0 to 1024 [ 115.846062][ T5903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.921777][ T5914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.026180][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.129647][ T5933] syzkaller1: entered promiscuous mode [ 116.135323][ T5933] syzkaller1: entered allmulticast mode [ 116.238288][ T5959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.286807][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 116.383636][ T5972] netlink: 792 bytes leftover after parsing attributes in process `syz.4.711'. [ 116.546455][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.558110][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.602921][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.613056][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.631915][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.641058][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.049957][ T5984] loop3: detected capacity change from 0 to 512 [ 117.091789][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.105003][ T5984] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.122843][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 117.122861][ T28] audit: type=1400 audit(1773722901.105:565): avc: denied { add_name } for pid=5982 comm="syz.3.716" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.150111][ T28] audit: type=1400 audit(1773722901.105:566): avc: denied { create } for pid=5982 comm="syz.3.716" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.170954][ T28] audit: type=1400 audit(1773722901.105:567): avc: denied { read write } for pid=5982 comm="syz.3.716" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.214665][ T28] audit: type=1400 audit(1773722901.105:568): avc: denied { open } for pid=5982 comm="syz.3.716" path="/136/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.254662][ T28] audit: type=1400 audit(1773722901.175:569): avc: denied { read append open } for pid=5982 comm="syz.3.716" path="/136/file1/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.278987][ T28] audit: type=1400 audit(1773722901.175:570): avc: denied { write } for pid=5982 comm="syz.3.716" name="cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.304479][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.314583][ T28] audit: type=1400 audit(1773722901.225:571): avc: denied { execmem } for pid=5989 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.335309][ T28] audit: type=1400 audit(1773722901.285:572): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.369086][ T28] audit: type=1400 audit(1773722901.345:573): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.399867][ T28] audit: type=1400 audit(1773722901.345:574): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.349840][ T5898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.459418][ T6004] netlink: 'syz.0.720': attribute type 11 has an invalid length. [ 118.533220][ T6023] loop2: detected capacity change from 0 to 1024 [ 118.644806][ T6031] loop4: detected capacity change from 0 to 512 [ 118.658752][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.688720][ T6031] EXT4-fs: Ignoring removed bh option [ 118.715472][ T6031] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 118.879240][ T6031] EXT4-fs (loop4): 1 truncate cleaned up [ 118.926290][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.984210][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.258440][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 119.275679][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 119.862585][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.912907][ T6054] loop2: detected capacity change from 0 to 1024 [ 119.958337][ T6059] IPv6: sit1: Disabled Multicast RS [ 120.112425][ T6072] netlink: 220 bytes leftover after parsing attributes in process `syz.0.735'. [ 120.137331][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 120.221324][ T6060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.265370][ T6060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.314569][ T6081] dvmrp0: entered allmulticast mode [ 120.318059][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 120.647006][ T6075] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 120.798016][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.808257][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.847438][ T6091] bond2: invalid ARP target 0.0.0.0 specified for addition [ 120.855001][ T6091] bond2: option arp_ip_target: invalid value (0) [ 120.868291][ T6091] bond2 (unregistering): Released all slaves [ 120.888318][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.910883][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.936467][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.974809][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.017295][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.026416][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.035778][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.045600][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.056492][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.066137][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.075399][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.084759][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.947778][ T6105] netlink: 14 bytes leftover after parsing attributes in process `syz.3.745'. [ 122.146444][ T6112] loop3: detected capacity change from 0 to 8192 [ 122.154934][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.217225][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 122.217320][ T28] audit: type=1400 audit(1773722906.175:639): avc: denied { create } for pid=6122 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.262596][ T28] audit: type=1400 audit(1773722906.175:640): avc: denied { read } for pid=6122 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.332094][ T28] audit: type=1400 audit(1773722906.315:641): avc: denied { create } for pid=6103 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.365174][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.421134][ T6125] loop4: detected capacity change from 0 to 32768 [ 122.454019][ T28] audit: type=1400 audit(1773722906.435:642): avc: denied { mounton } for pid=6122 comm="syz.4.750" path="/proc/490/task" dev="proc" ino=13644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 122.456438][ T6105] bond0 (unregistering): Released all slaves [ 122.510277][ T28] audit: type=1400 audit(1773722906.435:643): avc: denied { mount } for pid=6122 comm="syz.4.750" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.587449][ T28] audit: type=1400 audit(1773722906.465:644): avc: denied { write } for pid=6122 comm="syz.4.750" name="dev_mcast" dev="proc" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.597597][ T3303] loop4: p1 p3 < > [ 122.657634][ T6125] loop4: p1 p3 < > [ 122.748070][ T6135] vhci_hcd vhci_hcd.3: invalid port number 9 [ 122.827282][ T28] audit: type=1400 audit(1773722906.705:645): avc: denied { mounton } for pid=6122 comm="syz.4.750" path="/proc/490/task" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 122.909679][ T6137] FAULT_INJECTION: forcing a failure. [ 122.909679][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.149060][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.1.752 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.149096][ T6137] Tainted: [W]=WARN [ 123.149104][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.149137][ T6137] Call Trace: [ 123.149145][ T6137] [ 123.149154][ T6137] __dump_stack+0x1d/0x30 [ 123.149185][ T6137] dump_stack_lvl+0x95/0xd0 [ 123.149261][ T6137] dump_stack+0x15/0x1b [ 123.149284][ T6137] should_fail_ex+0x263/0x280 [ 123.149354][ T6137] should_fail+0xb/0x20 [ 123.149452][ T6137] should_fail_usercopy+0x1a/0x20 [ 123.149493][ T6137] _copy_from_user+0x1c/0xb0 [ 123.149527][ T6137] ___sys_sendmsg+0xc1/0x1e0 [ 123.149591][ T6137] __x64_sys_sendmsg+0xd4/0x160 [ 123.149702][ T6137] x64_sys_call+0x194c/0x3020 [ 123.149731][ T6137] do_syscall_64+0x12c/0x370 [ 123.149858][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.149886][ T6137] RIP: 0033:0x7f6205dac799 [ 123.149906][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.149927][ T6137] RSP: 002b:00007f62047ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.149999][ T6137] RAX: ffffffffffffffda RBX: 00007f6206025fa0 RCX: 00007f6205dac799 [ 123.150015][ T6137] RDX: 0000000000004004 RSI: 0000200000000400 RDI: 0000000000000004 [ 123.150031][ T6137] RBP: 00007f62047ff090 R08: 0000000000000000 R09: 0000000000000000 [ 123.150046][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.150061][ T6137] R13: 00007f6206026038 R14: 00007f6206025fa0 R15: 00007ffc2443bdc8 [ 123.150082][ T6137] [ 123.157711][ T6139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.270370][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 123.272722][ T6139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.298660][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 123.402279][ T6146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.756'. [ 123.439056][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 123.459894][ T6146] ip6gre1: entered promiscuous mode [ 123.465246][ T6146] ip6gre1: entered allmulticast mode [ 123.515676][ T6148] loop3: detected capacity change from 0 to 1024 [ 123.517206][ T28] audit: type=1400 audit(1773722907.475:646): avc: denied { write } for pid=6145 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.564276][ T6146] loop1: detected capacity change from 0 to 164 [ 123.574189][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.623496][ T28] audit: type=1400 audit(1773722907.605:647): avc: denied { mounton } for pid=6145 comm="syz.1.756" path="/148/file2" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.745666][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.767210][ T28] audit: type=1400 audit(1773722907.645:648): avc: denied { mount } for pid=6145 comm="syz.1.756" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 123.854763][ T6144] loop4: detected capacity change from 0 to 1024 [ 123.925746][ T6144] EXT4-fs: Ignoring removed orlov option [ 123.968642][ T6144] ext4: Unknown parameter 'mask' [ 125.320886][ T6190] loop3: detected capacity change from 0 to 1024 [ 125.381499][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.488208][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.590762][ T6202] loop3: detected capacity change from 0 to 512 [ 125.643737][ T6202] EXT4-fs (loop3): 1 truncate cleaned up [ 125.657613][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.723073][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.817701][ T6211] loop3: detected capacity change from 0 to 1024 [ 125.869142][ T6211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.990534][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.810368][ T6206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.837720][ T6231] netlink: 'syz.0.780': attribute type 12 has an invalid length. [ 126.961139][ T6237] loop3: detected capacity change from 0 to 1024 [ 127.012204][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.160158][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.458122][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 127.458139][ T28] audit: type=1400 audit(1773722911.445:663): avc: denied { bind } for pid=6250 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.494290][ T28] audit: type=1400 audit(1773722911.445:664): avc: denied { name_bind } for pid=6250 comm="syz.3.787" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 128.881057][ T6260] loop3: detected capacity change from 0 to 1024 [ 128.887950][ T6260] EXT4-fs: Ignoring removed orlov option [ 128.988101][ T28] audit: type=1400 audit(1773722911.445:665): avc: denied { node_bind } for pid=6250 comm="syz.3.787" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 129.034840][ T6260] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 129.107952][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.482031][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.489463][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.631374][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.703797][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.790653][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.831933][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.880341][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.890596][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.927301][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.991062][ T28] audit: type=1400 audit(1773722914.975:666): avc: denied { create } for pid=6277 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.039399][ T6280] netlink: 68 bytes leftover after parsing attributes in process `syz.3.794'. [ 131.060426][ T28] audit: type=1400 audit(1773722914.995:667): avc: denied { ioctl } for pid=6277 comm="syz.4.793" path="socket:[12877]" dev="sockfs" ino=12877 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.147241][ T28] audit: type=1400 audit(1773722915.025:668): avc: denied { read write } for pid=6279 comm="syz.3.794" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.206305][ T28] audit: type=1400 audit(1773722915.025:669): avc: denied { open } for pid=6279 comm="syz.3.794" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.252260][ T6292] loop3: detected capacity change from 0 to 1024 [ 131.257319][ T28] audit: type=1400 audit(1773722915.025:670): avc: denied { validate_trans } for pid=6279 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.302491][ T28] audit: type=1400 audit(1773722915.025:671): avc: denied { map } for pid=6279 comm="syz.3.794" path="socket:[13904]" dev="sockfs" ino=13904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.353077][ T28] audit: type=1400 audit(1773722915.025:672): avc: denied { read } for pid=6279 comm="syz.3.794" path="socket:[13904]" dev="sockfs" ino=13904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.353896][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.440485][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.516321][ T6301] syzkaller1: entered promiscuous mode [ 131.525650][ T6301] syzkaller1: entered allmulticast mode [ 131.601231][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 131.687973][ T6318] syzkaller0: entered promiscuous mode [ 131.693662][ T6318] syzkaller0: entered allmulticast mode [ 132.097791][ T6313] loop4: detected capacity change from 0 to 32768 [ 132.149038][ T3303] loop4: p1 p2 p3 < p5 p6 > [ 132.160716][ T3303] loop4: p2 size 16775168 extends beyond EOD, truncated [ 132.203366][ T3303] loop4: p5 start 4294970168 is beyond EOD, truncated [ 132.215232][ T6313] loop4: p1 p2 p3 < p5 p6 > [ 132.223668][ T6313] loop4: p2 size 16775168 extends beyond EOD, truncated [ 132.236651][ T6313] loop4: p5 start 4294970168 is beyond EOD, truncated [ 132.427356][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.438526][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.449152][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 132.449189][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.545443][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 132.545546][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.595348][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.693019][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 132.693038][ T28] audit: type=1400 audit(1773722916.655:688): avc: denied { create } for pid=6326 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.695732][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.706706][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43800 sclass=netlink_route_socket pid=6342 comm=syz.3.814 [ 132.755371][ T6342] 9p: Bad value for 'rfdno' [ 132.793407][ T6349] loop1: detected capacity change from 0 to 512 [ 132.834979][ T6349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.855717][ T6349] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.815: Invalid block bitmap block 0 in block_group 0 [ 132.889360][ T6358] netlink: 'syz.4.818': attribute type 46 has an invalid length. [ 132.897722][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 132.897974][ T6349] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 132.914940][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 132.914965][ C1] EXT4-fs (loop1): initial error at time 1773722916: ext4_read_block_bitmap_nowait:483 [ 132.914997][ C1] EXT4-fs (loop1): last error at time 1773722916: ext4_read_block_bitmap_nowait:483 [ 132.948029][ T28] audit: type=1400 audit(1773722916.925:689): avc: denied { cpu } for pid=6353 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.967260][ T6358] netlink: 55 bytes leftover after parsing attributes in process `syz.4.818'. [ 133.009268][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.009534][ T6349] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.815: attempt to clear invalid blocks 983261 len 1 [ 133.072236][ T6349] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.072435][ T6349] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.815: Invalid inode table block 0 in block_group 0 [ 133.097247][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.097411][ T6349] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 133.147216][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.147436][ T6349] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 133.164166][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.164370][ T6349] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.815: Invalid inode table block 0 in block_group 0 [ 133.184836][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.185039][ T6349] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 133.203365][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.203664][ T6349] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.815: mark_inode_dirty error [ 133.244736][ T6364] loop2: detected capacity change from 0 to 512 [ 133.347660][ T6349] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.377562][ T6349] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 133.444553][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.457395][ T6364] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.683355][ T28] audit: type=1400 audit(1773722917.565:690): avc: denied { map } for pid=6359 comm="syz.2.819" path="/166/file1/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.707425][ T28] audit: type=1400 audit(1773722917.625:691): avc: denied { setattr } for pid=6368 comm="syz.0.821" name="PPPOE" dev="sockfs" ino=12978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.731601][ T28] audit: type=1400 audit(1773722917.645:692): avc: denied { name_bind } for pid=6359 comm="syz.2.819" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 133.747258][ T6378] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 133.754491][ T28] audit: type=1400 audit(1773722917.655:693): avc: denied { create } for pid=6368 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.783475][ T28] audit: type=1400 audit(1773722917.665:694): avc: denied { getopt } for pid=6368 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.803351][ T28] audit: type=1400 audit(1773722917.715:695): avc: denied { write } for pid=6368 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.826620][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.859028][ T6349] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.815: Invalid inode table block 0 in block_group 0 [ 133.950004][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.974107][ T6349] loop1: lost filesystem error report for type 5 error -117 [ 133.976534][ T6349] EXT4-fs (loop1): 1 truncate cleaned up [ 134.004695][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.049777][ T6349] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.815: Invalid inode table block 0 in block_group 0 [ 134.050792][ T28] audit: type=1400 audit(1773722918.035:696): avc: denied { setattr } for pid=6346 comm="syz.1.815" path="/161/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.096677][ T6349] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 134.140103][ T6383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.823'. [ 134.188057][ T28] audit: type=1400 audit(1773722918.155:697): avc: denied { sqpoll } for pid=6346 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.189406][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.432494][ T6394] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.539088][ T6400] pimreg: entered allmulticast mode [ 134.631228][ T6394] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.798090][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.087363][ T6401] loop2: detected capacity change from 0 to 1024 [ 135.130762][ T6401] EXT4-fs: Ignoring removed orlov option [ 135.149061][ T6401] ext4: Unknown parameter 'mask' [ 135.482110][ T6394] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.208445][ T6413] 9pnet_virtio: no channels available for device @ [ 137.188218][ T6422] syz_tun: entered promiscuous mode [ 137.197884][ T6422] macvtap1: entered promiscuous mode [ 137.220653][ T6420] siw: device registration error -23 [ 137.439812][ T6422] syz_tun: left promiscuous mode [ 137.464561][ T6394] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.173617][ T5952] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.226142][ T5952] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.273930][ T5952] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.379675][ T5951] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.520138][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 138.520159][ T28] audit: type=1400 audit(1773722922.505:707): avc: denied { watch_reads } for pid=6443 comm="syz.4.842" path="/182/file1" dev="tmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.737039][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 138.945161][ T28] audit: type=1400 audit(1773722922.925:708): avc: denied { bind } for pid=6455 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.973339][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 139.032569][ T6459] loop4: detected capacity change from 0 to 512 [ 139.045247][ T28] audit: type=1400 audit(1773722922.955:709): avc: denied { listen } for pid=6455 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.050156][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 139.107576][ T28] audit: type=1400 audit(1773722923.095:710): avc: denied { connect } for pid=6455 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.128477][ T6462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6462 comm=syz.0.844 [ 139.147812][ T6459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.159672][ T28] audit: type=1400 audit(1773722923.115:711): avc: denied { write } for pid=6455 comm="syz.0.844" path="socket:[14367]" dev="sockfs" ino=14367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.289094][ T28] audit: type=1400 audit(1773722923.275:712): avc: denied { read write } for pid=6468 comm="syz.1.847" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.307383][ T6459] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.845: bad orphan inode 11 [ 139.313817][ T28] audit: type=1400 audit(1773722923.275:713): avc: denied { open } for pid=6468 comm="syz.1.847" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.345209][ T6456] netlink: 748 bytes leftover after parsing attributes in process `syz.0.844'. [ 139.351601][ T6459] loop4: lost filesystem error report for type 5 error -117 [ 139.372588][ T28] audit: type=1400 audit(1773722923.325:714): avc: denied { read } for pid=6455 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.437146][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 139.444203][ C0] EXT4-fs (loop4): initial error at time 1773722923: ext4_orphan_get:1417 [ 139.453014][ C0] EXT4-fs (loop4): last error at time 1773722923: ext4_orphan_get:1417 [ 139.461738][ T6459] ext4_test_bit(bit=10, block=4) = 1 [ 139.467052][ T6459] is_bad_inode(inode)=0 [ 139.505665][ T6459] NEXT_ORPHAN(inode)=2080374784 [ 139.527552][ T6459] max_ino=32 [ 139.531027][ T6459] i_nlink=0 [ 139.534615][ T6459] EXT4-fs (loop4): 1 truncate cleaned up [ 139.541171][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.695100][ T28] audit: type=1400 audit(1773722923.675:715): avc: denied { read } for pid=6457 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.869017][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.418037][ T6507] loop5: detected capacity change from 0 to 7 [ 140.427319][ T3303] loop5: [ 140.441737][ T6507] loop5: [ 140.984403][ T6529] team0: Device gtp0 is of different type [ 141.077573][ T6530] loop2: detected capacity change from 0 to 128 [ 141.147058][ T6530] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.326375][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.340669][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.354277][ T28] audit: type=1400 audit(1773722925.195:716): avc: denied { mount } for pid=6521 comm="syz.2.860" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 141.581463][ T6533] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 141.715094][ T6533] loop4: detected capacity change from 0 to 4096 [ 141.840730][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.858277][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 141.867304][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 141.912691][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.457285][ T6558] netlink: 'syz.4.870': attribute type 2 has an invalid length. [ 142.465872][ T6558] netlink: 14 bytes leftover after parsing attributes in process `syz.4.870'. [ 142.848209][ T6563] loop4: detected capacity change from 0 to 136 [ 143.632581][ T6581] bridge0: port 3(bond0) entered disabled state [ 143.639013][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.646347][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.674768][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 143.674825][ T28] audit: type=1400 audit(1773722927.655:725): avc: denied { setopt } for pid=6584 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.724703][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.735748][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.851479][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.865700][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.882279][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.891164][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.892816][ T28] audit: type=1400 audit(1773722927.875:726): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 144.295238][ T6592] loop4: detected capacity change from 0 to 4096 [ 144.411357][ T6592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.518359][ T28] audit: type=1400 audit(1773722928.495:727): avc: denied { read } for pid=6591 comm="syz.4.884" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.692583][ T28] audit: type=1400 audit(1773722928.495:728): avc: denied { open } for pid=6591 comm="syz.4.884" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.768176][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 144.827770][ T28] audit: type=1400 audit(1773722928.495:729): avc: denied { ioctl } for pid=6591 comm="syz.4.884" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.905331][ T6599] loop2: detected capacity change from 0 to 512 [ 144.973297][ T28] audit: type=1400 audit(1773722928.655:730): avc: denied { setopt } for pid=6610 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.052015][ T6599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.236511][ T6599] EXT4-fs (loop2): 1 truncate cleaned up [ 145.303079][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.342515][ T6626] loop1: detected capacity change from 0 to 1024 [ 145.391722][ T6626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.499115][ T28] audit: type=1326 audit(1773722929.485:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4466c799 code=0x7ffc0000 [ 145.545602][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.584703][ T28] audit: type=1326 audit(1773722929.505:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4466c799 code=0x7ffc0000 [ 145.618917][ T6632] loop5: detected capacity change from 0 to 7 [ 145.640393][ T28] audit: type=1326 audit(1773722929.505:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4466c799 code=0x7ffc0000 [ 145.640693][ T6632] loop5: [ 145.675129][ T28] audit: type=1326 audit(1773722929.505:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7eff4466c799 code=0x7ffc0000 [ 145.824973][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.962172][ T6668] loop5: detected capacity change from 0 to 7 [ 146.982618][ T6668] loop5: [ 147.664749][ T6685] lo speed is unknown, defaulting to 1000 [ 147.670646][ T6685] lo speed is unknown, defaulting to 1000 [ 147.677055][ T6685] lo speed is unknown, defaulting to 1000 [ 147.684293][ T6685] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.697731][ T6685] lo speed is unknown, defaulting to 1000 [ 147.704283][ T6685] lo speed is unknown, defaulting to 1000 [ 147.710955][ T6685] lo speed is unknown, defaulting to 1000 [ 147.718404][ T6685] lo speed is unknown, defaulting to 1000 [ 147.724709][ T6685] lo speed is unknown, defaulting to 1000 [ 147.764454][ T6685] lo speed is unknown, defaulting to 1000 [ 148.235827][ T6689] loop1: detected capacity change from 0 to 128 [ 148.353026][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.463694][ T6710] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 148.828111][ T6737] xt_CT: No such helper "syz0" [ 148.835541][ T6737] tmpfs: Bad value for 'mpol' [ 148.890031][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 148.890052][ T28] audit: type=1400 audit(1773722932.815:800): avc: denied { mounton } for pid=6735 comm="syz.0.928" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.941375][ T6738] lo speed is unknown, defaulting to 1000 [ 149.092895][ T6745] netlink: 220 bytes leftover after parsing attributes in process `syz.2.931'. [ 149.102319][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'. [ 149.169128][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.179833][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.197187][ T28] audit: type=1400 audit(1773722933.175:801): avc: denied { getopt } for pid=6746 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.227388][ T28] audit: type=1400 audit(1773722933.175:802): avc: denied { read } for pid=6746 comm="syz.2.932" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.262910][ T28] audit: type=1400 audit(1773722933.175:803): avc: denied { open } for pid=6746 comm="syz.2.932" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.329029][ T28] audit: type=1400 audit(1773722933.315:804): avc: denied { setopt } for pid=6751 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.363767][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 149.373887][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.437333][ T28] audit: type=1400 audit(1773722933.345:805): avc: denied { bind } for pid=6751 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.660236][ T6768] loop2: detected capacity change from 0 to 128 [ 149.698971][ T28] audit: type=1400 audit(1773722933.655:806): avc: denied { create } for pid=6758 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.754873][ T6768] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 149.851031][ T6768] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.951359][ T28] audit: type=1400 audit(1773722933.665:807): avc: denied { bind } for pid=6758 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.014980][ T6768] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.494803][ T28] audit: type=1400 audit(1773722933.665:808): avc: denied { connect } for pid=6758 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.515176][ T28] audit: type=1400 audit(1773722933.665:809): avc: denied { write } for pid=6758 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.612219][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.627665][ T6782] IPv6: syztnl1: Disabled Multicast RS [ 150.674206][ T6782] lo speed is unknown, defaulting to 1000 [ 150.702940][ T6788] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.781968][ T6792] netlink: 'syz.2.947': attribute type 83 has an invalid length. [ 150.922964][ T6787] tipc: Failed to remove unknown binding: 66,0,0/0:1863244712/1863244713 [ 151.053628][ T6795] tipc: Failed to remove unknown binding: 66,0,0/0:3038492151/3038492153 [ 151.084695][ T6787] tipc: Failed to remove unknown binding: 66,0,0/0:1863244712/1863244713 [ 151.292675][ T6805] netlink: 156 bytes leftover after parsing attributes in process `syz.3.948'. [ 151.465505][ T6813] No source specified [ 151.504533][ T6816] loop5: detected capacity change from 0 to 7 [ 151.528960][ T6816] loop5: [ 151.567400][ T6818] netlink: 220 bytes leftover after parsing attributes in process `syz.1.955'. [ 151.657193][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'. [ 151.720980][ T6822] syzkaller1: entered promiscuous mode [ 151.729103][ T6822] syzkaller1: entered allmulticast mode [ 151.928840][ T6833] loop1: detected capacity change from 0 to 512 [ 151.994072][ T6833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.130929][ T6833] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.232626][ T6833] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.961: Bad quota inum: 2, type: 2 [ 152.394352][ T6833] loop1: lost filesystem error report for type 5 error -117 [ 152.396428][ T6833] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 152.397146][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.426384][ C1] EXT4-fs (loop1): last error at time 1773722936: ext4_quota_enable:7188 [ 152.498809][ T6833] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 152.561902][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.746423][ T6833] EXT4-fs error (device loop1): ext4_get_parent:1836: comm syz.1.961: inode #2: comm syz.1.961: iget: illegal inode # [ 152.861212][ T6842] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 152.872465][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.992474][ T6842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.095163][ T6847] bond2: entered allmulticast mode [ 153.250294][ T6854] loop5: detected capacity change from 0 to 7 [ 153.305168][ T6854] loop5: [ 153.791301][ T6860] loop2: detected capacity change from 0 to 4096 [ 153.798363][ T6860] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 153.818327][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 153.831859][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.983597][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 153.983619][ T28] audit: type=1400 audit(1773722937.935:822): avc: denied { read } for pid=6863 comm="syz.4.970" lport=47732 faddr=::ffff:10.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.215724][ T6867] syzkaller1: entered promiscuous mode [ 154.252424][ T6867] syzkaller1: entered allmulticast mode [ 154.510429][ T6874] lo speed is unknown, defaulting to 1000 [ 154.606688][ T28] audit: type=1400 audit(1773722938.585:823): avc: denied { bind } for pid=6875 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.629161][ T28] audit: type=1400 audit(1773722938.585:824): avc: denied { setopt } for pid=6875 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.905669][ T6894] netlink: 220 bytes leftover after parsing attributes in process `syz.2.979'. [ 156.716639][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.979'. [ 157.099246][ T6909] loop2: detected capacity change from 0 to 1024 [ 157.168116][ T6909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.367621][ T6920] loop1: detected capacity change from 0 to 4096 [ 157.392827][ T6920] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 157.401931][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.405984][ T6920] EXT4-fs (loop1): mount failed [ 158.897184][ T28] audit: type=1400 audit(1773722942.705:825): avc: denied { block_suspend } for pid=6924 comm="syz.0.988" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.591593][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 160.606187][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 160.620324][ T6934] bridge0: port 3(vlan0) entered blocking state [ 160.626995][ T6934] bridge0: port 3(vlan0) entered disabled state [ 160.633611][ T6934] vlan0: entered allmulticast mode [ 160.639342][ T6934] bond0: entered allmulticast mode [ 160.644573][ T6934] bond_slave_0: entered allmulticast mode [ 160.650760][ T6934] bond_slave_1: entered allmulticast mode [ 160.657210][ T6934] vlan0: entered promiscuous mode [ 160.662439][ T6934] bond0: entered promiscuous mode [ 160.710139][ T28] audit: type=1400 audit(1773722944.695:826): avc: denied { write } for pid=6933 comm="syz.4.989" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.733641][ T6934] bond_slave_0: entered promiscuous mode [ 160.755214][ T6934] bond_slave_1: entered promiscuous mode [ 160.768670][ T6947] netlink: 'syz.0.993': attribute type 21 has an invalid length. [ 160.849946][ T6950] syzkaller0: entered promiscuous mode [ 160.855588][ T6950] syzkaller0: entered allmulticast mode [ 160.870104][ T6934] loop4: detected capacity change from 0 to 4096 [ 160.920743][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.049633][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.759947][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.772189][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.078001][ T28] audit: type=1400 audit(1773722946.065:827): avc: denied { read } for pid=6973 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.176828][ T6974] loop2: detected capacity change from 0 to 512 [ 162.236397][ T6974] EXT4-fs: Ignoring removed i_version option [ 162.249095][ T6984] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1005'. [ 162.260844][ T6974] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 162.276013][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1005'. [ 162.277663][ T6974] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1001: invalid indirect mapped block 256 (level 1) [ 162.302675][ T6984] loop4: detected capacity change from 0 to 512 [ 162.312483][ T6984] EXT4-fs: Ignoring removed nobh option [ 162.326885][ T6984] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.340530][ T6974] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.341117][ T6974] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1001: invalid indirect mapped block 2683928664 (level 1) [ 162.350728][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 162.350773][ C0] EXT4-fs (loop2): initial error at time 1773722946: ext4_free_branches:1023: inode 13 [ 162.350803][ C0] EXT4-fs (loop2): last error at time 1773722946: ext4_free_branches:1023: inode 13 [ 162.352057][ T6984] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1005: EA inode hash validation failed [ 162.365876][ T6974] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.416152][ T6974] EXT4-fs (loop2): 1 truncate cleaned up [ 162.425931][ T6984] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.457316][ T6984] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1005: corrupted inode contents [ 162.471747][ T6974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.477457][ T6984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.486730][ T6984] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.1005: mark_inode_dirty error [ 162.493139][ T6974] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 162.496284][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 162.508229][ T6974] SELinux: failed to load policy [ 162.515661][ C0] EXT4-fs (loop4): initial error at time 1773722946: ext4_do_update_inode:5569: inode 15 [ 162.537406][ C0] EXT4-fs (loop4): last error at time 1773722946: ext4_do_update_inode:5569: inode 15 [ 162.547248][ T28] audit: type=1400 audit(1773722946.475:828): avc: denied { load_policy } for pid=6973 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.571663][ T6974] netlink: 'syz.2.1001': attribute type 9 has an invalid length. [ 162.577369][ T6984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.583793][ T6974] netlink: 'syz.2.1001': attribute type 7 has an invalid length. [ 162.594089][ T6984] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1005: corrupted inode contents [ 162.608415][ T6974] netlink: 'syz.2.1001': attribute type 8 has an invalid length. [ 162.642324][ T28] audit: type=1400 audit(1773722946.615:829): avc: denied { create } for pid=6994 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 162.662793][ T28] audit: type=1400 audit(1773722946.625:830): avc: denied { setopt } for pid=6994 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.668692][ T6984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.683925][ T28] audit: type=1326 audit(1773722946.625:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.3.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x0 [ 162.719371][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.729088][ T6984] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1005: mark_inode_dirty error [ 162.745201][ T6984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.745443][ T6984] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.1005: mark inode dirty (error -117) [ 162.768306][ T6984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.768611][ T6984] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 162.774214][ T7000] loop2: detected capacity change from 0 to 1024 [ 162.796036][ T6984] EXT4-fs (loop4): 1 orphan inode deleted [ 162.802929][ T6984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.870100][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.903132][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.903552][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.979521][ T7004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.993742][ T7006] loop2: detected capacity change from 0 to 1024 [ 162.997645][ T7006] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.1011: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 163.021937][ T7006] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 163.022077][ T7006] EXT4-fs error (device loop2): ext4_quota_enable:7195: comm syz.2.1011: Bad quota inode: 4, type: 1 [ 163.031437][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 163.031461][ C1] EXT4-fs (loop2): initial error at time 1773722947: ext4_ext_check_inode:521: inode 4 [ 163.031492][ C1] EXT4-fs (loop2): last error at time 1773722947: ext4_ext_check_inode:521: inode 4 [ 163.065898][ T7009] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1010'. [ 163.069599][ T7006] loop2: lost filesystem error report for type 5 error -117 [ 163.079776][ T7006] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.103163][ T7006] EXT4-fs (loop2): mount failed [ 163.296849][ T7011] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.593159][ T7011] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.048538][ T7011] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 164.608958][ T7036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7036 comm=syz.0.1018 [ 164.660807][ T7036] rose0: tun_chr_ioctl cmd 2147767507 [ 164.677636][ T7036] 9p: Bad value for 'timeout' [ 164.684924][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 164.715224][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1019'. [ 164.778131][ T7043] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1020'. [ 164.807320][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 165.867934][ T7064] lo speed is unknown, defaulting to 1000 [ 165.938647][ T7066] lo speed is unknown, defaulting to 1000 [ 165.962733][ T28] audit: type=1400 audit(1773722949.945:832): avc: denied { listen } for pid=7061 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.133289][ T28] audit: type=1400 audit(1773722950.115:833): avc: denied { ioctl } for pid=7074 comm="syz.3.1028" path="socket:[16389]" dev="sockfs" ino=16389 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.524613][ T7089] syzkaller1: entered promiscuous mode [ 166.530570][ T7089] syzkaller1: entered allmulticast mode [ 166.841054][ T7091] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.029952][ T7092] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.077279][ T7092] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.177762][ T7092] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 167.246532][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 167.264401][ T5945] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.267562][ T7101] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1036'. [ 167.290317][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 167.300167][ T5945] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.310318][ T5945] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.337437][ T5945] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.416579][ T7101] FAULT_INJECTION: forcing a failure. [ 167.416579][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 167.434171][ T28] audit: type=1400 audit(1773722951.415:834): avc: denied { execute_no_trans } for pid=7109 comm="syz.4.1040" path="/220/file0" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.449755][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.1.1036 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.449812][ T7101] Tainted: [W]=WARN [ 167.449820][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.449833][ T7101] Call Trace: [ 167.449842][ T7101] [ 167.449883][ T7101] __dump_stack+0x1d/0x30 [ 167.449915][ T7101] dump_stack_lvl+0x95/0xd0 [ 167.449940][ T7101] dump_stack+0x15/0x1b [ 167.449964][ T7101] should_fail_ex+0x263/0x280 [ 167.449992][ T7101] ? netlbl_cipsov4_add+0x369/0x12a0 [ 167.450069][ T7101] should_failslab+0x8c/0xb0 [ 167.450093][ T7101] __kmalloc_cache_noprof+0x5f/0x410 [ 167.450164][ T7101] netlbl_cipsov4_add+0x369/0x12a0 [ 167.450195][ T7101] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 167.450223][ T7101] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 167.450262][ T7101] genl_family_rcv_msg_doit+0x187/0x1f0 [ 167.450293][ T7101] genl_rcv_msg+0x432/0x470 [ 167.450356][ T7101] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 167.450394][ T7101] netlink_rcv_skb+0x123/0x220 [ 167.450425][ T7101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.450506][ T7101] genl_rcv+0x28/0x40 [ 167.450528][ T7101] netlink_unicast+0x5c0/0x690 [ 167.450594][ T7101] netlink_sendmsg+0x5c8/0x6f0 [ 167.450630][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.450727][ T7101] ____sys_sendmsg+0x563/0x5b0 [ 167.450763][ T7101] ___sys_sendmsg+0x195/0x1e0 [ 167.450853][ T7101] __x64_sys_sendmsg+0xd4/0x160 [ 167.450889][ T7101] x64_sys_call+0x194c/0x3020 [ 167.450917][ T7101] do_syscall_64+0x12c/0x370 [ 167.450973][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.450996][ T7101] RIP: 0033:0x7f6205dac799 [ 167.451089][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.451109][ T7101] RSP: 002b:00007f62047ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.451132][ T7101] RAX: ffffffffffffffda RBX: 00007f6206025fa0 RCX: 00007f6205dac799 [ 167.451147][ T7101] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 167.451161][ T7101] RBP: 00007f62047ff090 R08: 0000000000000000 R09: 0000000000000000 [ 167.451175][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.451246][ T7101] R13: 00007f6206026038 R14: 00007f6206025fa0 R15: 00007ffc2443bdc8 [ 167.451266][ T7101] [ 167.789065][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 168.289123][ T28] audit: type=1400 audit(1773722952.275:835): avc: denied { name_bind } for pid=7128 comm="syz.0.1046" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 168.472113][ T28] audit: type=1400 audit(1773722952.455:836): avc: denied { connect } for pid=7135 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.547232][ T28] audit: type=1400 audit(1773722952.505:837): avc: denied { write } for pid=7135 comm="syz.3.1049" path="socket:[16215]" dev="sockfs" ino=16215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.621995][ T7141] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1048'. [ 168.662080][ T7149] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1052'. [ 168.671846][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'. [ 168.740033][ T7154] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1053'. [ 168.758723][ T7154] FAULT_INJECTION: forcing a failure. [ 168.758723][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 168.772689][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.1.1053 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.772729][ T7154] Tainted: [W]=WARN [ 168.772803][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.772816][ T7154] Call Trace: [ 168.772823][ T7154] [ 168.772834][ T7154] __dump_stack+0x1d/0x30 [ 168.772884][ T7154] dump_stack_lvl+0x95/0xd0 [ 168.772907][ T7154] dump_stack+0x15/0x1b [ 168.772928][ T7154] should_fail_ex+0x263/0x280 [ 168.772961][ T7154] ? netlbl_cipsov4_add+0x369/0x12a0 [ 168.773012][ T7154] should_failslab+0x8c/0xb0 [ 168.773040][ T7154] __kmalloc_cache_noprof+0x5f/0x410 [ 168.773074][ T7154] netlbl_cipsov4_add+0x369/0x12a0 [ 168.773205][ T7154] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 168.773239][ T7154] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 168.773283][ T7154] genl_family_rcv_msg_doit+0x187/0x1f0 [ 168.773359][ T7154] genl_rcv_msg+0x432/0x470 [ 168.773383][ T7154] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 168.773423][ T7154] netlink_rcv_skb+0x123/0x220 [ 168.773590][ T7154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.773617][ T7154] genl_rcv+0x28/0x40 [ 168.773637][ T7154] netlink_unicast+0x5c0/0x690 [ 168.773750][ T7154] netlink_sendmsg+0x5c8/0x6f0 [ 168.773792][ T7154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.773830][ T7154] ____sys_sendmsg+0x563/0x5b0 [ 168.773904][ T7154] ___sys_sendmsg+0x195/0x1e0 [ 168.773982][ T7154] __x64_sys_sendmsg+0xd4/0x160 [ 168.774024][ T7154] x64_sys_call+0x194c/0x3020 [ 168.774057][ T7154] do_syscall_64+0x12c/0x370 [ 168.774092][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.774194][ T7154] RIP: 0033:0x7f6205dac799 [ 168.774212][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.774230][ T7154] RSP: 002b:00007f62047ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.774257][ T7154] RAX: ffffffffffffffda RBX: 00007f6206025fa0 RCX: 00007f6205dac799 [ 168.774301][ T7154] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 168.774318][ T7154] RBP: 00007f62047ff090 R08: 0000000000000000 R09: 0000000000000000 [ 168.774335][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.774349][ T7154] R13: 00007f6206026038 R14: 00007f6206025fa0 R15: 00007ffc2443bdc8 [ 168.774374][ T7154] [ 169.014053][ T7153] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1054'. [ 169.023697][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 169.339228][ T7167] loop1: detected capacity change from 0 to 2048 [ 169.357383][ T7167] EXT4-fs: dax option not supported [ 169.487985][ T7177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1064'. [ 169.511489][ T7179] loop1: detected capacity change from 0 to 512 [ 169.521912][ T7179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.559324][ T7179] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 169.694794][ T7172] loop1: detected capacity change from 0 to 1024 [ 169.707967][ T7172] EXT4-fs: Ignoring removed orlov option [ 169.737208][ T7172] EXT4-fs (loop1): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 169.742257][ T7188] netlink: 'syz.0.1067': attribute type 21 has an invalid length. [ 169.747555][ T28] audit: type=1400 audit(1773722953.715:838): avc: denied { read } for pid=7185 comm="syz.0.1067" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.830463][ T28] audit: type=1400 audit(1773722953.815:839): avc: denied { append } for pid=7185 comm="syz.0.1067" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.874703][ T7172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.036217][ T7217] netlink: 'syz.3.1075': attribute type 4 has an invalid length. [ 170.259291][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.353665][ T28] audit: type=1400 audit(1773722954.335:840): avc: denied { read write } for pid=7226 comm="syz.1.1079" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.367883][ T7227] sg_write: data in/out 25820/46 bytes for SCSI command 0x8-- guessing data in; [ 170.367883][ T7227] program syz.1.1079 not setting count and/or reply_len properly [ 170.433347][ T28] audit: type=1400 audit(1773722954.345:841): avc: denied { open } for pid=7226 comm="syz.1.1079" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.720518][ T7227] loop1: detected capacity change from 0 to 512 [ 170.766077][ T7227] EXT4-fs: quotafile must be on filesystem root [ 170.939080][ T7241] loop4: detected capacity change from 0 to 1024 [ 170.957589][ T7241] EXT4-fs: Ignoring removed orlov option [ 170.990564][ T7241] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 170.998091][ T7243] loop1: detected capacity change from 0 to 2048 [ 171.017992][ T7243] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 171.027854][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.122759][ T7247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7247 comm=syz.4.1082 [ 171.171847][ T28] audit: type=1400 audit(1773722955.155:842): avc: denied { setopt } for pid=7246 comm="syz.1.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.207444][ T7249] loop1: detected capacity change from 0 to 512 [ 171.231240][ T7249] EXT4-fs: Ignoring removed oldalloc option [ 171.261767][ T7249] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1084: Parent and EA inode have the same ino 15 [ 171.277273][ T7249] loop1: lost filesystem error report for type 5 error -117 [ 171.281849][ T7249] EXT4-fs (loop1): 1 orphan inode deleted [ 171.289408][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.289450][ C0] EXT4-fs (loop1): initial error at time 1773722955: ext4_xattr_inode_iget:437 [ 171.289477][ C0] EXT4-fs (loop1): last error at time 1773722955: ext4_xattr_inode_iget:437 [ 171.417074][ T7249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.660107][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.799873][ T28] audit: type=1400 audit(1773722955.785:843): avc: denied { setopt } for pid=7269 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.833492][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.849585][ T28] audit: type=1400 audit(1773722955.805:844): avc: denied { create } for pid=7267 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.918080][ T28] audit: type=1400 audit(1773722955.805:845): avc: denied { create } for pid=7269 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 171.957154][ T28] audit: type=1400 audit(1773722955.805:846): avc: denied { getopt } for pid=7269 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.986955][ T28] audit: type=1400 audit(1773722955.805:847): avc: denied { write } for pid=7267 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.027455][ T28] audit: type=1400 audit(1773722955.815:848): avc: denied { read } for pid=7267 comm="syz.0.1088" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.070962][ T28] audit: type=1400 audit(1773722955.815:849): avc: denied { open } for pid=7267 comm="syz.0.1088" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.133001][ T28] audit: type=1400 audit(1773722955.825:850): avc: denied { ioctl } for pid=7267 comm="syz.0.1088" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.181220][ T28] audit: type=1400 audit(1773722955.995:851): avc: denied { accept } for pid=7267 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.258731][ T7284] syzkaller1: entered promiscuous mode [ 172.264461][ T7284] syzkaller1: entered allmulticast mode [ 172.498197][ T7289] syzkaller0: entered promiscuous mode [ 172.514595][ T7289] syzkaller0: entered allmulticast mode [ 172.694948][ T7296] bond0: invalid ARP target 0.0.0.0 specified for addition [ 172.702867][ T7296] bond0: option arp_ip_target: invalid value (0) [ 172.714352][ T7296] bond0 (unregistering): Released all slaves [ 173.375514][ T7325] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 173.428283][ T7319] syzkaller1: entered promiscuous mode [ 173.467465][ T7319] syzkaller1: entered allmulticast mode [ 173.567834][ T7332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7332 comm=syz.0.1104 [ 173.864250][ T7337] FAULT_INJECTION: forcing a failure. [ 173.864250][ T7337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.869270][ T7335] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.888980][ T7337] CPU: 0 UID: 0 PID: 7337 Comm: syz.0.1109 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.889015][ T7337] Tainted: [W]=WARN [ 173.889024][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.889061][ T7337] Call Trace: [ 173.889069][ T7337] [ 173.889078][ T7337] __dump_stack+0x1d/0x30 [ 173.889112][ T7337] dump_stack_lvl+0x95/0xd0 [ 173.889137][ T7337] dump_stack+0x15/0x1b [ 173.889182][ T7337] should_fail_ex+0x263/0x280 [ 173.889215][ T7337] should_fail+0xb/0x20 [ 173.889297][ T7337] should_fail_usercopy+0x1a/0x20 [ 173.889323][ T7337] _copy_from_user+0x1c/0xb0 [ 173.889357][ T7337] __se_sys_migrate_pages+0x25c/0x840 [ 173.889441][ T7337] __x64_sys_migrate_pages+0x55/0x70 [ 173.889467][ T7337] x64_sys_call+0x2983/0x3020 [ 173.889498][ T7337] do_syscall_64+0x12c/0x370 [ 173.889577][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.889602][ T7337] RIP: 0033:0x7fbf34d5c799 [ 173.889622][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.889643][ T7337] RSP: 002b:00007fbf337b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 173.889664][ T7337] RAX: ffffffffffffffda RBX: 00007fbf34fd5fa0 RCX: 00007fbf34d5c799 [ 173.889742][ T7337] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 173.889759][ T7337] RBP: 00007fbf337b7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.889810][ T7337] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 173.889851][ T7337] R13: 00007fbf34fd6038 R14: 00007fbf34fd5fa0 R15: 00007fff9b1a42c8 [ 173.889870][ T7337] [ 174.222666][ T7341] loop4: detected capacity change from 0 to 8192 [ 174.233672][ T7351] bond2: invalid ARP target 0.0.0.0 specified for addition [ 174.247324][ T7351] bond2: option arp_ip_target: invalid value (0) [ 174.254872][ T7341] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.266501][ T7335] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.275521][ T7335] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.287497][ T7351] bond2 (unregistering): Released all slaves [ 174.298780][ T7335] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 174.310530][ T7341] __nla_validate_parse: 6 callbacks suppressed [ 174.310551][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 174.356857][ T7341] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1111'. [ 174.381893][ T7357] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1116'. [ 174.391233][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'. [ 174.425458][ T7359] loop4: detected capacity change from 0 to 1024 [ 174.448250][ T7359] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.1117: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 174.467360][ T7359] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 174.467571][ T7359] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.1117: Bad quota inode: 4, type: 1 [ 174.487750][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 174.487795][ C0] EXT4-fs (loop4): initial error at time 1773722958: ext4_ext_check_inode:521: inode 4 [ 174.487829][ C0] EXT4-fs (loop4): last error at time 1773722958: ext4_ext_check_inode:521: inode 4 [ 174.547289][ T7359] loop4: lost filesystem error report for type 5 error -117 [ 174.547414][ T7359] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.592224][ T7367] lo speed is unknown, defaulting to 1000 [ 174.606022][ T7366] lo speed is unknown, defaulting to 1000 [ 174.624555][ T7359] EXT4-fs (loop4): mount failed [ 174.674443][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 175.231915][ T7381] FAULT_INJECTION: forcing a failure. [ 175.231915][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.307267][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.1.1123 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.307453][ T7381] Tainted: [W]=WARN [ 175.307460][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.307472][ T7381] Call Trace: [ 175.307480][ T7381] [ 175.307489][ T7381] __dump_stack+0x1d/0x30 [ 175.307573][ T7381] dump_stack_lvl+0x95/0xd0 [ 175.307609][ T7381] dump_stack+0x15/0x1b [ 175.307699][ T7381] should_fail_ex+0x263/0x280 [ 175.307729][ T7381] should_fail+0xb/0x20 [ 175.307754][ T7381] should_fail_usercopy+0x1a/0x20 [ 175.307854][ T7381] _copy_from_user+0x1c/0xb0 [ 175.307883][ T7381] __se_sys_migrate_pages+0x25c/0x840 [ 175.307993][ T7381] __x64_sys_migrate_pages+0x55/0x70 [ 175.308027][ T7381] x64_sys_call+0x2983/0x3020 [ 175.308053][ T7381] do_syscall_64+0x12c/0x370 [ 175.308152][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.308214][ T7381] RIP: 0033:0x7f6205dac799 [ 175.308231][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.308250][ T7381] RSP: 002b:00007f62047ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 175.308271][ T7381] RAX: ffffffffffffffda RBX: 00007f6206025fa0 RCX: 00007f6205dac799 [ 175.308288][ T7381] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 175.308311][ T7381] RBP: 00007f62047ff090 R08: 0000000000000000 R09: 0000000000000000 [ 175.308334][ T7381] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 175.308351][ T7381] R13: 00007f6206026038 R14: 00007f6206025fa0 R15: 00007ffc2443bdc8 [ 175.308441][ T7381] [ 175.538002][ T7391] x_tables: duplicate underflow at hook 1 [ 175.641625][ T7395] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1128'. [ 175.653129][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1128'. [ 175.673215][ T7401] loop2: detected capacity change from 0 to 1024 [ 175.675558][ T7398] 9p: Unknown access argument cli: -22 [ 175.687872][ T7401] EXT4-fs: inline encryption not supported [ 175.763269][ T7401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.794417][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1132'. [ 175.825605][ T7408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7408 comm=syz.0.1132 [ 176.023518][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.466031][ T7428] FAULT_INJECTION: forcing a failure. [ 176.466031][ T7428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.489038][ T7428] CPU: 0 UID: 0 PID: 7428 Comm: syz.0.1137 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.489139][ T7428] Tainted: [W]=WARN [ 176.489146][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.489158][ T7428] Call Trace: [ 176.489166][ T7428] [ 176.489175][ T7428] __dump_stack+0x1d/0x30 [ 176.489211][ T7428] dump_stack_lvl+0x95/0xd0 [ 176.489236][ T7428] dump_stack+0x15/0x1b [ 176.489263][ T7428] should_fail_ex+0x263/0x280 [ 176.489292][ T7428] should_fail+0xb/0x20 [ 176.489315][ T7428] should_fail_usercopy+0x1a/0x20 [ 176.489410][ T7428] _copy_from_user+0x1c/0xb0 [ 176.489466][ T7428] __se_sys_migrate_pages+0x25c/0x840 [ 176.489499][ T7428] __x64_sys_migrate_pages+0x55/0x70 [ 176.489529][ T7428] x64_sys_call+0x2983/0x3020 [ 176.489651][ T7428] do_syscall_64+0x12c/0x370 [ 176.489681][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.489749][ T7428] RIP: 0033:0x7fbf34d5c799 [ 176.489771][ T7428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.489791][ T7428] RSP: 002b:00007fbf337b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 176.489817][ T7428] RAX: ffffffffffffffda RBX: 00007fbf34fd5fa0 RCX: 00007fbf34d5c799 [ 176.489835][ T7428] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 176.489922][ T7428] RBP: 00007fbf337b7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.489935][ T7428] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 176.489957][ T7428] R13: 00007fbf34fd6038 R14: 00007fbf34fd5fa0 R15: 00007fff9b1a42c8 [ 176.489980][ T7428] [ 176.634685][ T7433] loop4: detected capacity change from 0 to 1024 [ 176.824499][ T7433] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.1138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 176.845033][ T7433] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 176.845170][ T7433] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.1138: Bad quota inode: 4, type: 1 [ 176.854572][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 176.854592][ C0] EXT4-fs (loop4): initial error at time 1773722960: ext4_ext_check_inode:521: inode 4 [ 176.854619][ C0] EXT4-fs (loop4): last error at time 1773722960: ext4_ext_check_inode:521: inode 4 [ 176.898525][ T7433] loop4: lost filesystem error report for type 5 error -117 [ 176.898746][ T7433] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.963585][ T7449] loop1: detected capacity change from 0 to 1024 [ 176.973458][ T7449] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.985038][ T7449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 176.996985][ T7449] EXT4-fs (loop1): invalid journal inode [ 177.002977][ T7449] EXT4-fs (loop1): can't get journal size [ 177.019855][ T7443] program syz.2.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.140325][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.161132][ T7449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1140'. [ 177.170764][ T7449] veth0_to_team: entered promiscuous mode [ 177.187094][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 177.209535][ T28] audit: type=1400 audit(1773722961.145:860): avc: denied { ioctl } for pid=7436 comm="syz.1.1140" path="socket:[17102]" dev="sockfs" ino=17102 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.273783][ T7433] EXT4-fs (loop4): mount failed [ 177.416544][ T28] audit: type=1400 audit(1773722961.235:861): avc: denied { watch watch_reads } for pid=7456 comm="syz.3.1145" path="/241" dev="tmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.702630][ T28] audit: type=1400 audit(1773722961.245:862): avc: denied { setopt } for pid=7456 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.797596][ T7468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1142'. [ 178.754202][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.918290][ T28] audit: type=1400 audit(1773722962.905:863): avc: denied { mount } for pid=7473 comm="syz.1.1148" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 178.958203][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.968990][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.769490][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1155'. [ 179.882465][ T7500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.039784][ T7508] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.079279][ T7508] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.116455][ T7518] FAULT_INJECTION: forcing a failure. [ 180.116455][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.124416][ T7508] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 180.152755][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.2.1161 Tainted: G W syzkaller #0 PREEMPT(full) [ 180.152796][ T7518] Tainted: [W]=WARN [ 180.152805][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.152819][ T7518] Call Trace: [ 180.152825][ T7518] [ 180.152834][ T7518] __dump_stack+0x1d/0x30 [ 180.152869][ T7518] dump_stack_lvl+0x95/0xd0 [ 180.152965][ T7518] dump_stack+0x15/0x1b [ 180.153053][ T7518] should_fail_ex+0x263/0x280 [ 180.153086][ T7518] should_fail+0xb/0x20 [ 180.153112][ T7518] should_fail_usercopy+0x1a/0x20 [ 180.153179][ T7518] _copy_from_user+0x1c/0xb0 [ 180.153273][ T7518] __se_sys_migrate_pages+0x360/0x840 [ 180.153307][ T7518] __x64_sys_migrate_pages+0x55/0x70 [ 180.153338][ T7518] x64_sys_call+0x2983/0x3020 [ 180.153385][ T7518] do_syscall_64+0x12c/0x370 [ 180.153414][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.153438][ T7518] RIP: 0033:0x7eff4466c799 [ 180.153464][ T7518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.153512][ T7518] RSP: 002b:00007eff430bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 180.153536][ T7518] RAX: ffffffffffffffda RBX: 00007eff448e5fa0 RCX: 00007eff4466c799 [ 180.153571][ T7518] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 180.153587][ T7518] RBP: 00007eff430bf090 R08: 0000000000000000 R09: 0000000000000000 [ 180.153602][ T7518] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 180.153617][ T7518] R13: 00007eff448e6038 R14: 00007eff448e5fa0 R15: 00007ffcba1993d8 [ 180.153681][ T7518] [ 180.453894][ T7525] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.746561][ T7532] xt_TCPMSS: Only works on TCP SYN packets [ 180.796885][ T7525] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.818060][ T7525] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.051026][ T7525] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 181.339809][ T7539] team0: Failed to send options change via netlink (err -105) [ 181.367192][ T7539] team0: Port device bridge0 added [ 181.387397][ T7538] veth0_to_team: left promiscuous mode [ 181.407631][ T7538] ip6gre1: left promiscuous mode [ 181.897300][ T28] audit: type=1400 audit(1773722965.775:864): avc: denied { read append } for pid=7546 comm="syz.4.1169" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 181.986468][ T28] audit: type=1400 audit(1773722965.785:865): avc: denied { open } for pid=7546 comm="syz.4.1169" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.075161][ T28] audit: type=1400 audit(1773722965.785:866): avc: denied { ioctl } for pid=7546 comm="syz.4.1169" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17263 ioctlcmd=0x4814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.195795][ T28] audit: type=1400 audit(1773722965.795:867): avc: denied { ioctl } for pid=7546 comm="syz.4.1169" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.237638][ T28] audit: type=1400 audit(1773722965.815:868): avc: denied { setattr } for pid=7546 comm="syz.4.1169" name="" dev="pipefs" ino=17266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 182.261854][ T28] audit: type=1400 audit(1773722965.835:869): avc: denied { ioctl } for pid=7546 comm="syz.4.1169" path="socket:[17265]" dev="sockfs" ino=17265 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.263169][ T7560] FAULT_INJECTION: forcing a failure. [ 182.263169][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.317303][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.4.1173 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.317339][ T7560] Tainted: [W]=WARN [ 182.317346][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.317361][ T7560] Call Trace: [ 182.317369][ T7560] [ 182.317377][ T7560] __dump_stack+0x1d/0x30 [ 182.317404][ T7560] dump_stack_lvl+0x95/0xd0 [ 182.317486][ T7560] dump_stack+0x15/0x1b [ 182.317594][ T7560] should_fail_ex+0x263/0x280 [ 182.317627][ T7560] should_fail+0xb/0x20 [ 182.317651][ T7560] should_fail_usercopy+0x1a/0x20 [ 182.317677][ T7560] _copy_from_user+0x1c/0xb0 [ 182.317732][ T7560] __se_sys_migrate_pages+0x360/0x840 [ 182.317814][ T7560] __x64_sys_migrate_pages+0x55/0x70 [ 182.317845][ T7560] x64_sys_call+0x2983/0x3020 [ 182.317872][ T7560] do_syscall_64+0x12c/0x370 [ 182.317902][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.317925][ T7560] RIP: 0033:0x7f61fb70c799 [ 182.317954][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.317988][ T7560] RSP: 002b:00007f61fa15f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 182.318015][ T7560] RAX: ffffffffffffffda RBX: 00007f61fb985fa0 RCX: 00007f61fb70c799 [ 182.318033][ T7560] RDX: 0000200000000200 RSI: 00000000000000fc RDI: 0000000000000000 [ 182.318049][ T7560] RBP: 00007f61fa15f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.318093][ T7560] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 182.318107][ T7560] R13: 00007f61fb986038 R14: 00007f61fb985fa0 R15: 00007ffe624d1f58 [ 182.318126][ T7560] [ 183.600970][ T7592] loop2: detected capacity change from 0 to 256 [ 183.633545][ T28] audit: type=1400 audit(1773722967.595:870): avc: denied { shutdown } for pid=7589 comm="syz.1.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.674762][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 183.696069][ T7592] vfat: Unknown parameter 'Ŵv2:ץΏX5_{;Q$3y' [ 183.785545][ T7590] lo speed is unknown, defaulting to 1000 [ 184.001867][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1181'. [ 184.823512][ T7608] bond0: invalid ARP target 0.0.0.0 specified for addition [ 184.885117][ T7608] bond0: option arp_ip_target: invalid value (0) [ 184.897885][ T7614] loop5: detected capacity change from 0 to 7 [ 184.921652][ T7608] bond0 (unregistering): Released all slaves [ 184.932168][ T7614] loop5: [ 185.131510][ T7616] xt_hashlimit: size too large, truncated to 1048576 [ 185.344820][ T7627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7627 comm=syz.3.1192 [ 185.387261][ T28] audit: type=1400 audit(1773722969.365:871): avc: denied { ioctl } for pid=7624 comm="syz.2.1191" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.526657][ T7636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.591769][ T7642] bond0: invalid ARP target 0.0.0.0 specified for addition [ 185.605034][ T7642] bond0: option arp_ip_target: invalid value (0) [ 185.631412][ T7642] bond0 (unregistering): Released all slaves [ 185.861587][ T7654] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1193'. [ 185.882471][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'. [ 185.964523][ T7646] loop2: detected capacity change from 0 to 512 [ 186.110079][ T7670] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 186.171703][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.186850][ T7646] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.222046][ T28] audit: type=1400 audit(1773722970.205:872): avc: denied { remount } for pid=7645 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 186.246065][ T7646] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.301118][ T7646] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 186.315655][ T28] audit: type=1400 audit(1773722970.295:873): avc: denied { bind } for pid=7645 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.620456][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.152858][ T7705] bond4: invalid ARP target 0.0.0.0 specified for addition [ 187.163160][ T28] audit: type=1400 audit(1773722971.145:874): avc: denied { bind } for pid=7703 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.177146][ T7705] bond4: option arp_ip_target: invalid value (0) [ 187.182821][ T28] audit: type=1400 audit(1773722971.145:875): avc: denied { ioctl } for pid=7703 comm="syz.2.1214" path="socket:[18030]" dev="sockfs" ino=18030 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 187.214682][ T28] audit: type=1400 audit(1773722971.175:876): avc: denied { lock } for pid=7703 comm="syz.2.1214" path="socket:[18029]" dev="sockfs" ino=18029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.239076][ T7705] bond4 (unregistering): Released all slaves [ 187.271908][ T7710] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1215'. [ 187.281164][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 187.490244][ T7716] loop2: detected capacity change from 0 to 128 [ 187.527703][ T7716] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.577654][ T7716] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.680764][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.817621][ T7721] loop2: detected capacity change from 0 to 1024 [ 187.857898][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.905433][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.079514][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1223'. [ 188.104239][ T7740] lo speed is unknown, defaulting to 1000 [ 188.280632][ T7751] loop4: detected capacity change from 0 to 256 [ 188.288812][ T7723] loop1: detected capacity change from 0 to 512 [ 188.402512][ T7751] FAT-fs (loop4): Directory bread(block 64) failed [ 188.412083][ T7751] FAT-fs (loop4): Directory bread(block 65) failed [ 188.427684][ T7751] FAT-fs (loop4): Directory bread(block 66) failed [ 188.444609][ T7751] FAT-fs (loop4): Directory bread(block 67) failed [ 188.504656][ T7751] FAT-fs (loop4): Directory bread(block 68) failed [ 188.532185][ T7751] FAT-fs (loop4): Directory bread(block 69) failed [ 188.641129][ T7766] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1229'. [ 188.659800][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 188.677598][ T7751] FAT-fs (loop4): Directory bread(block 70) failed [ 188.687526][ T7751] FAT-fs (loop4): Directory bread(block 71) failed [ 188.835857][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.863075][ T7751] FAT-fs (loop4): Directory bread(block 72) failed [ 188.893061][ T7751] FAT-fs (loop4): Directory bread(block 73) failed [ 188.914932][ T7723] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.030976][ T7723] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 189.061390][ T7723] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 189.083958][ T28] audit: type=1400 audit(1773722973.065:877): avc: denied { accept } for pid=7750 comm="syz.4.1225" path="socket:[18143]" dev="sockfs" ino=18143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.401325][ T7783] bond2: invalid ARP target 0.0.0.0 specified for addition [ 189.430523][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.044341][ T7783] bond2: option arp_ip_target: invalid value (0) [ 190.054863][ T7783] bond2 (unregistering): Released all slaves [ 190.286454][ T7801] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1240'. [ 190.304461][ T7799] team0: Port device syz_tun added [ 190.310638][ T28] audit: type=1326 audit(1773722974.285:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.340684][ T28] audit: type=1326 audit(1773722974.295:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.365547][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 190.382429][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.405785][ T28] audit: type=1326 audit(1773722974.295:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.432000][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 190.432538][ T28] audit: type=1326 audit(1773722974.295:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.448064][ T7810] loop4: detected capacity change from 0 to 1024 [ 190.467949][ T28] audit: type=1326 audit(1773722974.295:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.498003][ T7805] team0: Port device bond0 removed [ 190.505927][ T28] audit: type=1326 audit(1773722974.295:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.531886][ T28] audit: type=1326 audit(1773722974.295:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.556979][ T28] audit: type=1326 audit(1773722974.295:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b597c799 code=0x7ffc0000 [ 190.607845][ T7810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.673603][ T7816] loop1: detected capacity change from 0 to 1024 [ 190.746105][ T7816] EXT4-fs: Ignoring removed bh option [ 190.757246][ T7816] EXT4-fs: inline encryption not supported [ 190.793249][ T7816] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.832648][ T7810] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.1242: inode #1717986918: comm syz.4.1242: iget: illegal inode # [ 190.837733][ T7816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 190.858095][ T7816] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.1243: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.873348][ T7816] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.873871][ T7816] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.1243: Invalid inode table block 1 in block_group 0 [ 190.883639][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.883662][ C1] EXT4-fs (loop1): initial error at time 1773722974: ext4_map_blocks:776: inode 3: block 2 [ 190.883704][ C1] EXT4-fs (loop1): last error at time 1773722974: ext4_map_blocks:776: inode 3: block 2 [ 190.992942][ T7810] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1242: error while reading EA inode 1717986918 err=-117 [ 191.127902][ T7816] loop1: lost filesystem error report for type 5 error -117 [ 191.128273][ T7816] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 191.274137][ T7816] loop1: lost filesystem error report for type 5 error -117 [ 191.275727][ T7816] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.1243: mark_inode_dirty error [ 191.311537][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.432308][ T7816] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.433588][ T7816] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1243: Failed to acquire dquot type 0 [ 191.459387][ T7816] loop1: lost filesystem error report for type 5 error -117 [ 191.467324][ T7816] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 191.477225][ T7816] loop1: lost filesystem error report for type 5 error -117 [ 191.477834][ T7816] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.1243: mark_inode_dirty error [ 191.497287][ T7816] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 191.518127][ T7816] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 191.547367][ T7816] EXT4-fs (loop1): 1 orphan inode deleted [ 191.563202][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.577225][ T5953] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.651648][ T7835] loop5: detected capacity change from 0 to 7 [ 191.663944][ T7835] loop5: [ 191.713340][ T5953] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 191.890136][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.901296][ T3309] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.926841][ T3309] loop1: lost filesystem error report for type 5 error -117 [ 191.951453][ T3309] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 191.977813][ T3309] loop1: lost filesystem error report for type 5 error -117 [ 191.978000][ T3309] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 191.998103][ T3309] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 192.049150][ T7847] __nla_validate_parse: 1 callbacks suppressed [ 192.049175][ T7847] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1254'. [ 192.087484][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1254'. [ 192.317495][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 192.317517][ T28] audit: type=1400 audit(1773722976.305:902): avc: denied { ioctl } for pid=7861 comm="syz.4.1259" path="socket:[18263]" dev="sockfs" ino=18263 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.557474][ T7874] loop5: detected capacity change from 0 to 7 [ 192.862250][ T7874] loop5: [ 193.239927][ T7889] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1266'. [ 193.267376][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'. [ 193.279626][ T7891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1267'. [ 193.362334][ T7895] loop1: detected capacity change from 0 to 1024 [ 193.398622][ T7895] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1268: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 193.437844][ T7895] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 193.438132][ T7895] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1268: Bad quota inode: 4, type: 1 [ 193.447523][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 193.447543][ C0] EXT4-fs (loop1): initial error at time 1773722977: ext4_ext_check_inode:521: inode 4 [ 193.447570][ C0] EXT4-fs (loop1): last error at time 1773722977: ext4_ext_check_inode:521: inode 4 [ 193.485870][ T7895] loop1: lost filesystem error report for type 5 error -117 [ 193.486084][ T7895] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.538461][ T7895] EXT4-fs (loop1): mount failed [ 193.554784][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 193.620956][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 193.657464][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.760821][ T7921] loop2: detected capacity change from 0 to 256 [ 194.813103][ T7921] sock: sock_set_timeout: `syz.2.1275' (pid 7921) tries to set negative timeout [ 194.927756][ T28] audit: type=1400 audit(1773722978.905:903): avc: denied { connect } for pid=7920 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.346949][ T7941] loop2: detected capacity change from 0 to 128 [ 195.451294][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.465629][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 196.245759][ T7959] loop2: detected capacity change from 0 to 2048 [ 196.352564][ T28] audit: type=1400 audit(1773722980.335:904): avc: denied { ioctl } for pid=7962 comm="syz.1.1288" path="socket:[18404]" dev="sockfs" ino=18404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.392644][ T7959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.407734][ T7959] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.422800][ T7959] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1286'. [ 196.569612][ T28] audit: type=1400 audit(1773722980.555:905): avc: denied { bind } for pid=7972 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.642736][ T28] audit: type=1400 audit(1773722980.555:906): avc: denied { write } for pid=7972 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.006242][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.008670][ T7988] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1292'. [ 197.034133][ T28] audit: type=1400 audit(1773722981.005:907): avc: denied { read } for pid=7979 comm="syz.1.1290" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 197.165445][ T28] audit: type=1400 audit(1773722981.005:908): avc: denied { open } for pid=7979 comm="syz.1.1290" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 199.357816][ T8030] random: crng reseeded on system resumption [ 199.365150][ T28] audit: type=1400 audit(1773722983.345:909): avc: denied { write } for pid=8029 comm="syz.2.1303" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.557815][ T8030] loop2: detected capacity change from 0 to 512 [ 199.569518][ T28] audit: type=1400 audit(1773722983.345:910): avc: denied { open } for pid=8029 comm="syz.2.1303" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.302858][ T8030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.357154][ T28] audit: type=1400 audit(1773722984.335:911): avc: denied { mounton } for pid=8045 comm="syz.1.1307" path="/file1" dev="ramfs" ino=19510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 200.433050][ T28] audit: type=1400 audit(1773722984.415:912): avc: denied { ioctl } for pid=8029 comm="syz.2.1303" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.500174][ T8035] Restarting kernel threads ... [ 200.506351][ T8035] Done restarting kernel threads. [ 200.529348][ T28] audit: type=1326 audit(1773722984.515:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.553651][ T28] audit: type=1326 audit(1773722984.515:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.578147][ T28] audit: type=1326 audit(1773722984.515:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.604178][ T28] audit: type=1326 audit(1773722984.585:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.645458][ T8053] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 200.682857][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.706044][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 200.735083][ T28] audit: type=1326 audit(1773722984.585:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.788236][ T28] audit: type=1326 audit(1773722984.625:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6205dac799 code=0x7ffc0000 [ 200.839931][ T8059] netlink: 'syz.3.1311': attribute type 39 has an invalid length. [ 202.094855][ T8104] loop1: detected capacity change from 0 to 1024 [ 202.113681][ T8104] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 202.132823][ T8104] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 202.133088][ T8104] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1321: Bad quota inode: 4, type: 1 [ 202.142210][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 202.142234][ C0] EXT4-fs (loop1): initial error at time 1773722986: ext4_ext_check_inode:521: inode 4 [ 202.142263][ C0] EXT4-fs (loop1): last error at time 1773722986: ext4_ext_check_inode:521: inode 4 [ 202.181061][ T8104] loop1: lost filesystem error report for type 5 error -117 [ 202.181197][ T8104] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.207575][ T8104] EXT4-fs (loop1): mount failed [ 203.051286][ T8119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.189285][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 203.203672][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 203.386906][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 203.401743][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 203.416413][ T8129] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 203.429053][ T8129] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.437246][ T8129] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 204.377552][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1337'. [ 204.442223][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1337'. [ 204.931821][ T8183] loop2: detected capacity change from 0 to 1024 [ 204.945260][ T8183] EXT4-fs: Ignoring removed bh option [ 205.063922][ T8183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.077694][ T8183] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.165792][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.338494][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.360010][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 205.360039][ T28] audit: type=1400 audit(1773722989.085:982): avc: denied { map } for pid=8177 comm="syz.2.1341" path="/260/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.415870][ T8187] loop4: detected capacity change from 0 to 1024 [ 205.432765][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.453276][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.474474][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.489762][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.504224][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.522673][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.537223][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.552467][ T8177] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.650128][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.774644][ T8187] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.1343: inode #26214: comm syz.4.1343: iget: illegal inode # [ 205.804525][ T8187] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1343: error while reading EA inode 26214 err=-117 [ 205.937620][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.950508][ T8203] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 205.965233][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 205.974483][ T28] audit: type=1400 audit(1773722989.945:983): avc: denied { audit_read } for pid=8204 comm="syz.0.1347" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.978891][ T8205] vlan2: entered allmulticast mode [ 206.001878][ T8205] bridge0: port 3(vlan2) entered blocking state [ 206.008408][ T8205] bridge0: port 3(vlan2) entered disabled state [ 206.133016][ T8205] vlan2: entered promiscuous mode [ 206.149647][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.625193][ T8222] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 206.647479][ T8222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.755574][ T8232] loop1: detected capacity change from 0 to 1024 [ 206.784302][ T8238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1360'. [ 206.807794][ T8232] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 206.810362][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'. [ 206.847175][ T8232] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 206.852580][ T8242] loop5: detected capacity change from 0 to 7 [ 206.862146][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 206.862172][ C1] EXT4-fs (loop1): initial error at time 1773722990: ext4_ext_check_inode:521: inode 4 [ 206.862228][ C1] EXT4-fs (loop1): last error at time 1773722990: ext4_ext_check_inode:521: inode 4 [ 206.895847][ T8232] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1359: Bad quota inode: 4, type: 1 [ 206.907462][ T3303] loop5: [ 206.923915][ T8244] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 206.933408][ T8242] loop5: [ 206.947646][ T8232] loop1: lost filesystem error report for type 5 error -117 [ 206.947784][ T8232] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.005806][ T8232] EXT4-fs (loop1): mount failed [ 207.063759][ T8249] syzkaller1: entered promiscuous mode [ 207.077203][ T8249] syzkaller1: entered allmulticast mode [ 207.431827][ T8260] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 207.483454][ T8261] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 207.730605][ T8258] veth1_macvtap: left promiscuous mode [ 207.779209][ T3558] lo speed is unknown, defaulting to 1000 [ 207.779212][ T35] lo speed is unknown, defaulting to 1000 [ 207.779299][ T35] ================================================================== [ 207.785088][ T35] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 207.785126][ T35] [ 207.785136][ T35] write to 0xffffffff8939eb80 of 8 bytes by task 3558 on cpu 0: [ 207.785158][ T35] data_alloc+0x259/0x390 [ 207.785192][ T35] prb_reserve+0x8d7/0xae0 [ 207.785225][ T35] vprintk_store+0x54a/0x910 [ 207.785247][ T35] vprintk_emit+0x1a4/0x600 [ 207.785270][ T35] vprintk_default+0x26/0x30 [ 207.785293][ T35] vprintk+0x1d/0x30 [ 207.785321][ T35] _printk+0x79/0xa0 [ 207.785343][ T35] ib_get_eth_speed+0x351/0x4c0 [ 207.785378][ T35] siw_query_port+0x3a/0x2d0 [ 207.785400][ T35] ib_query_port+0x393/0x3d0 [ 207.785434][ T35] ib_cache_update+0xf8/0x720 [ 207.785463][ T35] ib_cache_event_task+0x8d/0x100 [ 207.785491][ T35] process_scheduled_works+0x513/0xa10 [ 207.785525][ T35] worker_thread+0x58a/0x780 [ 207.785557][ T35] kthread+0x22a/0x280 [ 207.785579][ T35] ret_from_fork+0x150/0x360 [ 207.785613][ T35] ret_from_fork_asm+0x1a/0x30 [ 207.785643][ T35] [ 207.785651][ T35] read to 0xffffffff8939eb80 of 8 bytes by task 35 on cpu 1: [ 207.785671][ T35] data_push_tail+0x100/0x470 [ 207.785693][ T35] data_alloc+0x11b/0x390 [ 207.785727][ T35] prb_reserve+0x8d7/0xae0 [ 207.785755][ T35] vprintk_store+0x54a/0x910 [ 207.785773][ T35] vprintk_emit+0x1a4/0x600 [ 207.785796][ T35] vprintk_default+0x26/0x30 [ 207.785820][ T35] vprintk+0x1d/0x30 [ 207.785847][ T35] _printk+0x79/0xa0 [ 207.785865][ T35] ib_get_eth_speed+0x351/0x4c0 [ 207.785899][ T35] siw_query_port+0x3a/0x2d0 [ 207.785921][ T35] ib_query_port+0x393/0x3d0 [ 207.785961][ T35] ib_cache_update+0xf8/0x720 [ 207.785987][ T35] ib_cache_event_task+0x8d/0x100 [ 207.786011][ T35] process_scheduled_works+0x513/0xa10 [ 207.786037][ T35] worker_thread+0x58a/0x780 [ 207.786068][ T35] kthread+0x22a/0x280 [ 207.786090][ T35] ret_from_fork+0x150/0x360 [ 207.786123][ T35] ret_from_fork_asm+0x1a/0x30 [ 207.786153][ T35] [ 207.786160][ T35] value changed: 0x00000000ffffe5f1 -> 0x00000000fffff14a [ 207.786176][ T35] [ 207.786182][ T35] Reported by Kernel Concurrency Sanitizer on: [ 207.786199][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.786245][ T35] Tainted: [W]=WARN [ 207.786255][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.786272][ T35] Workqueue: infiniband ib_cache_event_task [ 207.786304][ T35] ================================================================== [ 208.019208][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1366'. [ 208.085609][ T8268] loop2: detected capacity change from 0 to 128