last executing test programs: 5.293439337s ago: executing program 1 (id=747): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c2a1efa"]) 4.964204984s ago: executing program 1 (id=751): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, 0x44, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de5"}, &(0x7f0000000100)=0x4c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000030000000000000001000006040000000100000005000000002e00"], &(0x7f0000002800)=""/4089, 0x2f, 0xff9, 0xd, 0xf1b}, 0x28) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000001280)="ee9437523f5de6384fb64f4e1214c8fed3", &(0x7f0000001340)=""/98) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x63f8, 0x1c080, 0xa, 0x20002f7}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc850, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10001, 0x0, 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="cdcf7c2f525df213c3c7736ae6ce319560ed88193334b702c3eaab09240cc5e190c7e8c04d901a9b94d77e3f2d63958f", 0x30}], 0x1}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000001100001800000000000000100100000c000000aa00000000000000"], 0x30}, 0xfc40) prctl$PR_SET_FPEXC(0xc, 0x80) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) r7 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 4.369697307s ago: executing program 1 (id=757): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000004780)=[{&(0x7f0000001ac0)={0x0, 0x0, 0x2}, &(0x7f0000001b00), 0x1}], 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3f606e934aa91bc}, 0x1, 0x0, 0x0, 0x8000880}, 0x26088088) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x9, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) fcntl$addseals(r1, 0x409, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8001}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x300) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000100)=""/82) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000010280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x1066, &(0x7f0000001080)="$eJzszzFKxFAQBuD/BRKfASGVtTbeI7W1lbW9RwgItrZeQc/gkeyt5C1kA7sn2N3i+4oZmOEfmHBWZWtL0iWtPIxpWdZZn/Lxu1+3tXZHucf/1yFZ7u7zNv+11KTUJPOU8SfvNZ95vk1ynXzNQ8rUX9Ut+XJzuPL0fZovAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCy7QIAAP//sUMQPQ==") 3.434882387s ago: executing program 3 (id=758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(r1, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x10, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000001000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.335714329s ago: executing program 3 (id=760): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick=0xfffd, {}, {}, @raw32={[0x0, 0x0, 0xfffe]}}], 0x1001a) 3.27809922s ago: executing program 3 (id=761): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x21, @none, 0x0, 0x2}, 0xe) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf25030000003000018014000400fc000000000000000000000000000000060005004e240000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="2f0238f0bafd69dfa516184929c7c9cce4f7c32635fa0fbe5d749aaefbcb1f0e121d80089c08146c83318377a0e7be80ef88422bea8329304ec99f0018b3b16883680800c287fee2f82dfd9e8ec134d42c03bc77953d0480ada967763352c97bca63fc25afc56a173620ee43972d02f5972dd147c5c4232260babc8f93d9c5a626509f053c49ece523f802f259b4f8a5e8441540a8"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4004, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) setgid(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 2.589874845s ago: executing program 3 (id=765): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37ec, 0x683) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r1, 0x10, 0x37ec, 0x683) 2.34413983s ago: executing program 3 (id=767): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe533}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba80000012", 0x2d}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x103602, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) r4 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000ac0)="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") io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000cc0)) socket$inet6(0xa, 0x800, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xd0, &(0x7f0000000300), &(0x7f0000000380)=0x4) r6 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd776d12ee267000fddbdf7e4bdf772395bf42be81b6253e000000060000000000000045000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0xd122e27bc48d226b, 0x1000, 0xd, 0x2}, 0x20) 1.86934076s ago: executing program 4 (id=776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000003a40)=[{&(0x7f00000017c0)="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", 0x280}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a834"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) 1.779403602s ago: executing program 0 (id=778): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ac000000000000000000000000010000ac"], 0x28}}], 0x1, 0x0) 1.716283973s ago: executing program 0 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x1, 0x9, 0x4, 0x0, 0x5a1d, 0x1020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1, 0xa}, 0x8a0, 0x400000, 0x3, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x24, 0x2, 0x6) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c6012837000000000000000000001000"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82704, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x1, 0xfffffffe, 0x5, 0x47, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000000940)=""/55, 0x37}, {&(0x7f0000000980)=""/209, 0xd1}], 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) accept(r4, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 1.635004645s ago: executing program 2 (id=781): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000060a010400000000000000000a0000110900010073797a31070001006374000004000280140000001100010000000000000000000200000a000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d30000000000000300016802c0001802800010005000080"], 0x6c}}, 0x4000844) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cbd700000dcdf250000000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00'], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) r6 = socket(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000814}, 0x40000) 1.540401287s ago: executing program 2 (id=782): sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.540127867s ago: executing program 4 (id=783): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0], 0x6, 0x806, &(0x7f0000000200)="$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") 1.478712808s ago: executing program 2 (id=784): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30, 0x1f000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.437701729s ago: executing program 2 (id=785): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103aff20010000000000000000000000000002feee000000000000000000000000000186009078010002000000000000000000"], 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32800000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 1.320235422s ago: executing program 4 (id=786): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000440)={[{@nodioread_nolock}, {@delalloc}, {@nojournal_checksum}, {@errors_remount}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r2 = creat(0x0, 0x12e) close(r2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget(0x0, 0x3000, 0x10, &(0x7f0000083000/0x3000)=nil) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x54e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e21, 0x200, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0xfffffffe, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x10}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38147aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") 1.314238122s ago: executing program 4 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400fff51000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.299817462s ago: executing program 4 (id=788): r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x160, 0xc8, 0x8, 0x160, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x2, 0x200, 0x12, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @empty, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@loopback, r1}, 0x14) (async) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0xd, 0x10}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.148250096s ago: executing program 1 (id=789): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x4000802) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x5, 0x0, 0x7, 0x681b2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) socket$kcm(0x10, 0x400000002, 0x0) 1.147780096s ago: executing program 4 (id=790): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r1, 0x0, 0x7}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x11, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x7000, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r2}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x20008801) 1.055184008s ago: executing program 3 (id=791): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x640}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) epoll_wait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffff90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mremap(&(0x7f00000f6000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 1.014805798s ago: executing program 0 (id=792): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, ')R$', 0x3a, ',}$', 0x3a, './file0', 0x3a, [0x46, 0x1f]}, 0x2f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 949.11991ms ago: executing program 0 (id=793): getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x1, 0x49b, &(0x7f00000006c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100", @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB="040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) getxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x300}}, {0xc}}}]}]}, 0x6c}}, 0x0) 889.715791ms ago: executing program 1 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x4, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x3c, r8, 0x607, 0x70bd2b, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x3c}}, 0x20048840) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, 0x0, 0x0) sendmmsg(r11, 0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x8824) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2f, 0x25dfdbfc, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 500.447659ms ago: executing program 0 (id=795): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (fail_nth: 9) 500.273369ms ago: executing program 2 (id=796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x2000}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.435951ms ago: executing program 2 (id=797): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002100010000000000000000000220000000b415000020000008000100ac1414aa080006"], 0x2c}}, 0x0) 529.5µs ago: executing program 0 (id=798): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400feff1000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 1 (id=799): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000080)={0x7fffffffffffffff, 0x507b}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[@ANYBLOB='umask=00000000000000000000007,nodots,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f733178666c6f7070792c6e66732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c636865636b3d72656c617865642c6e6f646f74732c6e6f646f74732c692c081ed4d1eabf727c6d31f1df646f74732c666c7573682c6e6f646f74732c646f74732c646f74732c73686f77657865632c646f74732c646f74732c74696d655f6f66667365743d307866666666"], 0x1, 0x1f5, &(0x7f0000000600)="$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") unshare(0x22020400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'lo\x00', 0x2}, 0x18) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_create(0x10) socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xff000000, 0x10002, 0xc519, 0x1}, 0x50) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x1f) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4a3ced68e code=0x7ffc0000 [ 73.809430][ T28] audit: type=1326 audit(73.750:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff4a3d2b297 code=0x7ffc0000 [ 73.853684][ T28] audit: type=1326 audit(73.750:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4a3ced68e code=0x7ffc0000 [ 73.894597][ T28] audit: type=1326 audit(73.750:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 73.901769][ T4331] loop0: detected capacity change from 0 to 1024 [ 73.925662][ T28] audit: type=1326 audit(73.750:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 73.973478][ T28] audit: type=1326 audit(73.750:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 74.000026][ T28] audit: type=1326 audit(73.750:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 74.015425][ T4331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.027872][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.056123][ T28] audit: type=1400 audit(73.750:509): avc: denied { write } for pid=4324 comm="syz.1.207" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.079197][ T28] audit: type=1326 audit(73.750:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 74.109522][ T28] audit: type=1326 audit(73.750:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a3d2ce59 code=0x7ffc0000 [ 74.140450][ T4331] EXT4-fs: inline encryption not supported [ 74.149989][ T4331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.157581][ T4331] EXT4-fs: Ignoring removed bh option [ 74.188545][ T4344] netlink: 128 bytes leftover after parsing attributes in process `syz.3.215'. [ 74.190066][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.212506][ T4344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.243640][ T4341] loop2: detected capacity change from 0 to 8192 [ 74.406154][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.435554][ T4341] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 74.444049][ T4341] FAT-fs (loop2): Filesystem has been set read-only [ 74.683346][ T4360] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 74.914154][ T4364] program syz.0.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.323919][ T4352] loop1: detected capacity change from 0 to 4096 [ 75.358676][ T4352] ext3: Unknown parameter 'fsmagic' [ 75.492824][ T4375] tmpfs: Bad value for 'mpol' [ 76.239506][ T4388] loop4: detected capacity change from 0 to 512 [ 76.317233][ T4388] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.230: iget: bad i_size value: 38620345925642 [ 76.342702][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.357884][ T4388] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.364724][ T4388] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.230: couldn't read orphan inode 15 (err -117) [ 76.374955][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 76.374973][ C1] EXT4-fs (loop4): initial error at time 76: ext4_orphan_get:1399: inode 15 [ 76.375027][ C1] EXT4-fs (loop4): last error at time 76: ext4_orphan_get:1399: inode 15 [ 76.394355][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.394516][ T4388] loop4: lost filesystem error report for type 5 error -117 [ 76.432127][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.469188][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.496124][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.519288][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.560903][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.574966][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.599179][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.613969][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.675372][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.720631][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.729130][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.468855][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.559037][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.880153][ T3820] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.902632][ T3820] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.972170][ T3820] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.096401][ T3820] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.552683][ T4422] syzkaller1: entered promiscuous mode [ 78.560329][ T4424] loop0: detected capacity change from 0 to 1024 [ 78.568683][ T4422] syzkaller1: entered allmulticast mode [ 78.616436][ T4424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.715802][ T4424] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.242: lblock 3 mapped to illegal pblock 3 (length 3) [ 78.736847][ T4424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 78.754713][ T4424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.754713][ T4424] [ 78.779508][ T4424] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.242: lblock 0 mapped to illegal pblock 0 (length 3) [ 78.793559][ T4424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 78.807114][ T4424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.807114][ T4424] [ 78.828504][ T4435] loop1: detected capacity change from 0 to 512 [ 78.836547][ T4435] EXT4-fs (loop1): inodes count not valid: 10 vs 32 [ 78.858704][ T361] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 4) [ 78.875257][ T361] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 78.888322][ T361] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.888322][ T361] [ 78.902181][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 78.914946][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.022777][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 79.022832][ T28] audit: type=1400 audit(78.960:562): avc: denied { firmware_load } for pid=4443 comm="syz.4.246" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.423113][ T4458] loop3: detected capacity change from 0 to 256 [ 81.276943][ T28] audit: type=1400 audit(81.220:563): avc: denied { create } for pid=4459 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.396657][ T4465] __nla_validate_parse: 138 callbacks suppressed [ 82.396685][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 82.464524][ T28] audit: type=1400 audit(82.400:564): avc: denied { nlmsg_read } for pid=4464 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.957361][ T4466] loop1: detected capacity change from 0 to 512 [ 83.520688][ T4466] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.253: attempt to clear invalid blocks 2 len 1 [ 83.614024][ T4466] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.616197][ T4466] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 83.625715][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 83.625735][ C0] EXT4-fs (loop1): initial error at time 83: ext4_clear_blocks:876: inode 13 [ 83.625764][ C0] EXT4-fs (loop1): last error at time 83: ext4_clear_blocks:876: inode 13 [ 83.661010][ T4466] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 83.687917][ T4474] loop0: detected capacity change from 0 to 512 [ 83.741090][ T4474] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 83.750090][ T4474] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.255: corrupted in-inode xattr: e_value size too large [ 83.765754][ T4474] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.765865][ T4474] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.255: couldn't read orphan inode 15 (err -117) [ 83.775350][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 83.775374][ C0] EXT4-fs (loop0): initial error at time 83: ext4_iget_extra_inode:5180: inode 15 [ 83.775405][ C0] EXT4-fs (loop0): last error at time 83: ext4_iget_extra_inode:5180: inode 15 [ 83.816696][ T4466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.253: invalid indirect mapped block 1819239214 (level 0) [ 83.830940][ T4466] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.831430][ T4466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.253: invalid indirect mapped block 1819239214 (level 1) [ 83.855654][ T4474] loop0: lost filesystem error report for type 5 error -117 [ 83.855924][ T4466] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 83.863705][ T4474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.887859][ T4466] EXT4-fs (loop1): 1 truncate cleaned up [ 83.894780][ T4466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.980327][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 83.992331][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.009033][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.021338][ T28] audit: type=1400 audit(83.960:565): avc: denied { create } for pid=4485 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.091469][ T28] audit: type=1400 audit(83.990:566): avc: denied { bind } for pid=4482 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.144500][ T28] audit: type=1400 audit(83.990:567): avc: denied { setopt } for pid=4482 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.167084][ T4498] loop2: detected capacity change from 0 to 256 [ 84.196276][ T28] audit: type=1400 audit(84.000:568): avc: denied { watch } for pid=4485 comm="syz.4.263" path="/46" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.196972][ T4495] loop3: detected capacity change from 0 to 4096 [ 84.241503][ T28] audit: type=1326 audit(84.000:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.256799][ T4502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.283194][ T28] audit: type=1326 audit(84.000:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.311630][ T4495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.315481][ T28] audit: type=1326 audit(84.000:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.351878][ T28] audit: type=1326 audit(84.000:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.391005][ T28] audit: type=1326 audit(84.000:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.433408][ T28] audit: type=1326 audit(84.000:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.461734][ T28] audit: type=1326 audit(84.000:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63625ce59 code=0x7ffc0000 [ 84.497221][ T4508] loop1: detected capacity change from 0 to 256 [ 84.640034][ T4515] loop1: detected capacity change from 0 to 256 [ 84.691254][ T4520] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 84.702785][ T4509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 84.713525][ T4520] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 84.865118][ T4537] tipc: Started in network mode [ 84.876563][ T4537] tipc: Node identity , cluster identity 4711 [ 84.884404][ T4537] tipc: Failed to set node id, please configure manually [ 84.892910][ T4537] tipc: Enabling of bearer rejected, failed to enable media [ 85.003666][ T4537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.281'. [ 85.019908][ T4543] netlink: 200 bytes leftover after parsing attributes in process `syz.0.283'. [ 85.033946][ T4541] loop1: detected capacity change from 0 to 512 [ 85.152628][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.232553][ T4561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.288'. [ 85.253924][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 86.097277][ T4598] loop1: detected capacity change from 0 to 1024 [ 86.115607][ T4598] EXT4-fs: Ignoring removed i_version option [ 86.130471][ T4598] EXT4-fs: Ignoring removed bh option [ 86.187269][ T4598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.277474][ T4597] loop2: detected capacity change from 0 to 4096 [ 86.293894][ T4597] EXT4-fs (loop2): bad geometry: block count 261888 exceeds size of device (512 blocks) [ 86.312554][ T4598] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 86.725635][ T4697] syz.2.308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.036725][ T4709] macvtap1: entered promiscuous mode [ 87.042654][ T4709] macvtap1: entered allmulticast mode [ 87.049653][ T4709] dummy0: entered allmulticast mode [ 87.055486][ T4709] dummy0: entered promiscuous mode [ 87.064550][ T4709] team0: Device macvtap1 failed to register rx_handler [ 88.441814][ T4709] dummy0: left allmulticast mode [ 88.448870][ T4709] dummy0: left promiscuous mode [ 89.055139][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.126239][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.157880][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.835898][ T4738] can: request_module (can-proto-0) failed. [ 89.854490][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 89.854507][ T28] audit: type=1400 audit(89.790:676): avc: denied { getopt } for pid=4734 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.880447][ T4733] loop1: detected capacity change from 0 to 128 [ 89.891077][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 90.209761][ T4733] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.413272][ T4750] loop4: detected capacity change from 0 to 1024 [ 90.489033][ T4735] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 90.542333][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.586683][ T4735] bond2 (unregistering): Released all slaves [ 90.819289][ T28] audit: type=1400 audit(90.230:677): avc: denied { write } for pid=4732 comm="syz.1.318" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.549667][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 91.581234][ T4768] loop0: detected capacity change from 0 to 1024 [ 91.635778][ T4768] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 91.697224][ T28] audit: type=1400 audit(91.640:678): avc: denied { bind } for pid=4775 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.760321][ T28] audit: type=1400 audit(91.660:679): avc: denied { setopt } for pid=4775 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.786002][ T28] audit: type=1400 audit(91.660:680): avc: denied { write } for pid=4775 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.864362][ T28] audit: type=1326 audit(91.800:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b31ce59 code=0x7ffc0000 [ 91.895543][ T28] audit: type=1326 audit(91.840:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b31ce59 code=0x7ffc0000 [ 91.926007][ T28] audit: type=1326 audit(91.840:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f018b31ce59 code=0x7ffc0000 [ 91.963402][ T28] audit: type=1326 audit(91.900:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b31ce59 code=0x7ffc0000 [ 92.014998][ T28] audit: type=1326 audit(91.900:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.0.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b31ce59 code=0x7ffc0000 [ 92.310929][ T4798] bond0: entered promiscuous mode [ 92.317736][ T4798] bond_slave_0: entered promiscuous mode [ 92.369967][ T4798] bond_slave_1: entered promiscuous mode [ 92.412200][ T4798] bond0: left promiscuous mode [ 92.424410][ T4798] bond_slave_0: left promiscuous mode [ 92.454048][ T4798] bond_slave_1: left promiscuous mode [ 93.646281][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.655657][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.766293][ T4825] loop1: detected capacity change from 0 to 8192 [ 93.822340][ T4832] loop0: detected capacity change from 0 to 512 [ 93.830051][ T4825] loop1: p3 p4[EZD] [ 93.834063][ T4825] loop1: p3 start 458783 is beyond EOD, truncated [ 93.843552][ T4825] loop1: p4 size 100663296 extends beyond EOD, truncated [ 93.853416][ T4832] EXT4-fs: Ignoring removed i_version option [ 93.956532][ T4832] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.348: Bad quota inum: 2, type: 0 [ 94.095173][ T4832] loop0: lost filesystem error report for type 5 error -117 [ 94.104597][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 94.120383][ C0] EXT4-fs (loop0): initial error at time 350: ext4_quota_enable:7228 [ 94.129372][ C0] EXT4-fs (loop0): last error at time 350: ext4_quota_enable:7228 [ 94.152437][ T4832] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 94.210128][ T4832] EXT4-fs (loop0): mount failed [ 94.359642][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 94.989562][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 95.152177][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 95.152194][ T28] audit: type=1400 audit(351.093:696): avc: denied { map } for pid=4861 comm="syz.0.358" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.245975][ T4868] netdevsim netdevsim1 ì: renamed from netdevsim0 (while UP) [ 95.377489][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 95.397308][ T4876] loop1: detected capacity change from 0 to 512 [ 95.415090][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 95.427900][ T4874] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 95.496095][ T4874] 0: entered promiscuous mode [ 95.643355][ T28] audit: type=1400 audit(351.597:697): avc: granted { setsecparam } for pid=4889 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 95.667111][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.677192][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.706221][ T4886] loop3: detected capacity change from 0 to 512 [ 95.742681][ T4885] loop1: detected capacity change from 0 to 512 [ 95.750872][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.758943][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.766834][ T4897] bridge0: entered allmulticast mode [ 95.779634][ T4886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.804628][ T4899] loop2: detected capacity change from 0 to 512 [ 95.815659][ T4886] EXT4-fs (loop3): 1 truncate cleaned up [ 95.837145][ T4886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.839562][ T4899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.864901][ T4901] loop4: detected capacity change from 0 to 128 [ 95.870116][ T4885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.874317][ T4901] vfat: Unknown parameter 'ÿÿ00000000000000000000' [ 95.902470][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.903861][ T28] audit: type=1400 audit(351.859:698): avc: denied { write } for pid=4898 comm="syz.2.371" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.961453][ T28] audit: type=1400 audit(351.909:699): avc: denied { setopt } for pid=4908 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.981533][ T28] audit: type=1400 audit(351.909:700): avc: denied { write } for pid=4908 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.002979][ T28] audit: type=1400 audit(351.909:701): avc: denied { ioctl } for pid=4898 comm="syz.2.371" path="/83/file2/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.057235][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.373'. [ 96.059785][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.078529][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 96.080084][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.190161][ T4911] loop4: detected capacity change from 0 to 512 [ 96.212426][ T4911] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.280725][ T4911] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 96.289777][ T4911] FAT-fs (loop4): Filesystem has been set read-only [ 96.734674][ T28] audit: type=1400 audit(352.343:702): avc: denied { bind } for pid=4917 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.183254][ T4932] loop1: detected capacity change from 0 to 512 [ 97.231003][ T4932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.290252][ T4932] EXT4-fs (loop1): shut down requested (2) [ 97.298234][ T28] audit: type=1400 audit(353.260:703): avc: denied { read } for pid=2961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 97.325597][ T4934] loop2: detected capacity change from 0 to 512 [ 97.337221][ T4932] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 97.358650][ T4934] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 97.406454][ T28] audit: type=1400 audit(353.260:704): avc: denied { search } for pid=2961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.435299][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.552473][ T4942] loop2: detected capacity change from 0 to 512 [ 97.563668][ T4942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.580719][ T4942] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.384: bad orphan inode 131083 [ 97.592540][ T4942] loop2: lost filesystem error report for type 5 error -117 [ 97.596765][ T4942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.628119][ T28] audit: type=1400 audit(353.260:705): avc: denied { write search } for pid=2961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.651850][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 97.661540][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 97.717849][ T4947] netlink: 'syz.1.385': attribute type 13 has an invalid length. [ 97.807676][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.817056][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.936196][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.957730][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.055840][ T361] netdevsim netdevsim1 ì: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.068650][ T361] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.088947][ T361] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.108477][ T361] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.239718][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.347504][ T4955] Unsupported ieee802154 address type: 0 [ 98.360851][ T4951] loop2: detected capacity change from 0 to 512 [ 98.426144][ T4951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.442059][ T4951] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.387: inode has both inline data and extents flags [ 98.463207][ T4951] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.463468][ T4951] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.387: couldn't read orphan inode 15 (err -117) [ 98.476786][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 98.476826][ C1] EXT4-fs (loop2): initial error at time 354: ext4_orphan_get:1399: inode 15 [ 98.476878][ C1] EXT4-fs (loop2): last error at time 354: ext4_orphan_get:1399: inode 15 [ 98.514759][ T4951] loop2: lost filesystem error report for type 5 error -117 [ 98.558772][ T4951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.613304][ T4951] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 230 vs 220 free clusters [ 98.693794][ T4960] loop0: detected capacity change from 0 to 1024 [ 99.016689][ T4960] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 99.397159][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.750306][ T4978] tunl0: Caught tx_queue_len zero misconfig [ 100.617471][ T4993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.806070][ T5002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 100.942985][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 100.943000][ T28] audit: type=1400 audit(356.926:721): avc: denied { watch_reads } for pid=5006 comm="syz.2.402" path="/90" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.096173][ T5011] syzkaller1: entered allmulticast mode [ 101.126975][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 101.152613][ T5013] FAULT_INJECTION: forcing a failure. [ 101.152613][ T5013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.194319][ T28] audit: type=1400 audit(357.087:722): avc: denied { ioctl } for pid=5010 comm="syz.3.403" path="socket:[9429]" dev="sockfs" ino=9429 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.233138][ T5007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.401'. [ 101.283419][ T5013] CPU: 0 UID: 0 PID: 5013 Comm: syz.3.403 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 101.283476][ T5013] Tainted: [W]=WARN [ 101.283482][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.283492][ T5013] Call Trace: [ 101.283498][ T5013] [ 101.283506][ T5013] __dump_stack+0x1d/0x30 [ 101.283528][ T5013] dump_stack_lvl+0x95/0xd0 [ 101.283552][ T5013] dump_stack+0x15/0x1b [ 101.283566][ T5013] should_fail_ex+0x25e/0x270 [ 101.283591][ T5013] should_fail+0xb/0x20 [ 101.283613][ T5013] should_fail_usercopy+0x1a/0x20 [ 101.283647][ T5013] _copy_from_iter+0xcc/0xe70 [ 101.283723][ T5013] ? lockref_put_return+0xf7/0x130 [ 101.283789][ T5013] ? __rcu_read_unlock+0x4e/0x70 [ 101.283815][ T5013] ? __rcu_read_unlock+0x4e/0x70 [ 101.283880][ T5013] tun_get_user+0x14e/0x2820 [ 101.283901][ T5013] ? _parse_integer_limit+0x177/0x1a0 [ 101.283926][ T5013] ? _parse_integer+0x27/0x40 [ 101.283950][ T5013] ? ref_tracker_alloc+0x1eb/0x2f0 [ 101.284038][ T5013] tun_chr_write_iter+0x15a/0x210 [ 101.284057][ T5013] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 101.284079][ T5013] vfs_write+0x57d/0x990 [ 101.284101][ T5013] ksys_write+0xdc/0x1a0 [ 101.284117][ T5013] __x64_sys_write+0x40/0x50 [ 101.284201][ T5013] x64_sys_call+0x27e1/0x3020 [ 101.284222][ T5013] do_syscall_64+0x136/0x3c0 [ 101.284285][ T5013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.284306][ T5013] RIP: 0033:0x7fc6d521ce59 [ 101.284322][ T5013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.284433][ T5013] RSP: 002b:00007fc6d3c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.284449][ T5013] RAX: ffffffffffffffda RBX: 00007fc6d5496090 RCX: 00007fc6d521ce59 [ 101.284464][ T5013] RDX: 00000000000000dc RSI: 00002000000003c0 RDI: 0000000000000005 [ 101.284477][ T5013] RBP: 00007fc6d3c56090 R08: 0000000000000000 R09: 0000000000000000 [ 101.284564][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.284576][ T5013] R13: 00007fc6d5496128 R14: 00007fc6d5496090 R15: 00007ffe172ae0b8 [ 101.284596][ T5013] [ 101.936784][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 101.955299][ T5025] loop3: detected capacity change from 0 to 1024 [ 101.967140][ T5023] netlink: 76 bytes leftover after parsing attributes in process `syz.2.408'. [ 102.012944][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.029230][ T28] audit: type=1400 audit(358.024:723): avc: denied { setopt } for pid=5022 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 102.110743][ T5025] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.409: lblock 3 mapped to illegal pblock 3 (length 3) [ 102.156915][ T5025] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 102.167387][ T28] audit: type=1400 audit(358.104:724): avc: denied { write } for pid=5024 comm="syz.3.409" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.204420][ T28] audit: type=1400 audit(358.155:725): avc: denied { read } for pid=5022 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.227657][ T5025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.227657][ T5025] [ 102.240801][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 102.264408][ T28] audit: type=1400 audit(358.175:726): avc: denied { write } for pid=5022 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 102.293932][ T5025] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.409: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 102.294073][ T5044] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 102.357140][ T5025] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 102.390350][ T5042] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.409: lblock 3 mapped to illegal pblock 3 (length 1) [ 102.424966][ T5025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.424966][ T5025] [ 102.471273][ T5025] EXT4-fs (loop3): Total free blocks count 0 [ 102.524156][ T5025] EXT4-fs (loop3): Free/Dirty block details [ 102.543921][ T5025] EXT4-fs (loop3): free_blocks=0 [ 102.562053][ T5025] EXT4-fs (loop3): dirty_blocks=64 [ 102.589376][ T5025] EXT4-fs (loop3): Block reservation details [ 102.618968][ T5042] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.409: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 102.871564][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 102.925935][ T5063] loop2: detected capacity change from 0 to 128 [ 103.010369][ T5063] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 103.593859][ T28] audit: type=1400 audit(359.594:727): avc: denied { create } for pid=5075 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.656242][ T28] audit: type=1400 audit(359.645:728): avc: denied { read } for pid=5075 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.851384][ T5080] loop3: detected capacity change from 0 to 512 [ 103.933607][ T5080] EXT4-fs (loop3): inodes count not valid: 13 vs 32 [ 104.309460][ T5073] loop0: detected capacity change from 0 to 4096 [ 104.352252][ T5073] ext3: Unknown parameter 'fsmagic' [ 104.438397][ T5083] loop2: detected capacity change from 0 to 512 [ 104.501956][ T5083] EXT4-fs: Ignoring removed bh option [ 104.562107][ T5083] EXT4-fs: inline encryption not supported [ 104.594475][ T5090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5090 comm=syz.3.425 [ 104.599156][ T5083] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.670291][ T5083] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 104.817626][ T5099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.429'. [ 104.829227][ T5097] loop3: detected capacity change from 0 to 1024 [ 104.849299][ T5097] EXT4-fs: Ignoring removed bh option [ 104.879843][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 104.908674][ T5097] ext3: Unknown parameter 'fsmagic' [ 104.965425][ T5099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=5099 comm=syz.0.429 [ 104.994468][ T5102] loop4: detected capacity change from 0 to 1024 [ 105.036248][ T5102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.111774][ T5102] EXT4-fs: inline encryption not supported [ 105.139858][ T5102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.182653][ T5102] EXT4-fs: Ignoring removed bh option [ 105.235834][ T5102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.373816][ T5102] FAULT_INJECTION: forcing a failure. [ 105.373816][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 105.403627][ T5106] loop0: detected capacity change from 0 to 256 [ 105.586682][ T28] audit: type=1400 audit(360.702:729): avc: denied { lock } for pid=5089 comm="syz.3.425" path="socket:[10392]" dev="sockfs" ino=10392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.586915][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz.4.430 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 105.586945][ T5102] Tainted: [W]=WARN [ 105.586956][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.586968][ T5102] Call Trace: [ 105.586975][ T5102] [ 105.586984][ T5102] __dump_stack+0x1d/0x30 [ 105.587006][ T5102] dump_stack_lvl+0x95/0xd0 [ 105.587026][ T5102] dump_stack+0x15/0x1b [ 105.587087][ T5102] should_fail_ex+0x25e/0x270 [ 105.587161][ T5102] should_failslab+0x8c/0xb0 [ 105.587183][ T5102] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 105.587203][ T5102] ? do_getname+0x2e/0x1c0 [ 105.587223][ T5102] ? do_getname+0x2e/0x1c0 [ 105.587283][ T5102] do_getname+0x2e/0x1c0 [ 105.587304][ T5102] getname_flags+0x1d/0x30 [ 105.587323][ T5102] do_sys_openat2+0x6c/0x130 [ 105.587354][ T5102] __x64_sys_openat+0xf2/0x120 [ 105.587377][ T5102] x64_sys_call+0x1e39/0x3020 [ 105.587427][ T5102] do_syscall_64+0x136/0x3c0 [ 105.587506][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.587526][ T5102] RIP: 0033:0x7fc63625ce59 [ 105.587541][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.587558][ T5102] RSP: 002b:00007fc634caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.587578][ T5102] RAX: ffffffffffffffda RBX: 00007fc6364d5fa0 RCX: 00007fc63625ce59 [ 105.587601][ T5102] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 105.587613][ T5102] RBP: 00007fc634caf090 R08: 0000000000000000 R09: 0000000000000000 [ 105.587626][ T5102] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 105.587637][ T5102] R13: 00007fc6364d6038 R14: 00007fc6364d5fa0 R15: 00007ffd7cce6a88 [ 105.587652][ T5102] [ 105.966362][ T28] audit: type=1400 audit(360.712:730): avc: denied { lock } for pid=5089 comm="syz.3.425" path="socket:[10385]" dev="sockfs" ino=10385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 106.332516][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.879216][ T5117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 107.160449][ T5118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 107.396490][ T5097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.428'. [ 107.418769][ T28] audit: type=1326 audit(363.450:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 107.449616][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 107.490282][ T5124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.436'. [ 107.511039][ T28] audit: type=1326 audit(363.480:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 107.640095][ T28] audit: type=1326 audit(363.480:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 107.692063][ T5132] loop0: detected capacity change from 0 to 256 [ 107.703190][ T5134] program syz.3.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.723832][ T5132] vfat: Unknown parameter '·ÒŸ6ÔŸ' [ 107.744849][ T5135] loop3: detected capacity change from 0 to 256 [ 107.752278][ T5135] msdos: Unknown parameter 'i' [ 107.760263][ T5135] IPVS: Error joining to the multicast group [ 107.768145][ T28] audit: type=1326 audit(363.480:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 108.079902][ T5145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 108.241832][ T28] audit: type=1326 audit(363.500:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 108.311737][ T28] audit: type=1326 audit(363.500:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 108.410162][ T5146] loop2: detected capacity change from 0 to 4096 [ 108.418610][ T5157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.443'. [ 108.448729][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 108.473641][ T5158] netlink: 14 bytes leftover after parsing attributes in process `syz.1.444'. [ 108.777411][ T5160] loop1: detected capacity change from 0 to 8192 [ 109.235574][ T5146] ext3: Unknown parameter 'fsmagic' [ 109.245703][ T28] audit: type=1326 audit(363.500:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 110.251171][ T28] audit: type=1326 audit(363.500:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 110.905603][ T28] audit: type=1326 audit(363.500:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 110.974578][ T28] audit: type=1326 audit(363.500:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.035413][ T28] audit: type=1326 audit(363.500:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.065144][ T28] audit: type=1326 audit(363.500:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.099016][ T28] audit: type=1326 audit(363.500:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.129081][ T28] audit: type=1326 audit(363.500:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.159668][ T28] audit: type=1326 audit(363.500:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.187824][ T28] audit: type=1326 audit(363.500:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.217045][ T5160] loop1: p1 p2 p3 [ 111.218698][ T5158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.222062][ T28] audit: type=1326 audit(363.510:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5096 comm="syz.3.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6d521ce59 code=0x7ffc0000 [ 111.258271][ T28] audit: type=1400 audit(363.802:748): avc: denied { shutdown } for pid=5130 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.259783][ T5160] loop1: p2 start 9961480 is beyond EOD, truncated [ 111.278184][ T28] audit: type=1400 audit(366.941:749): avc: denied { read write } for pid=5142 comm="syz.0.442" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.285691][ T5160] loop1: p3 start 117772289 is beyond EOD, truncated [ 111.321152][ T5158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.331676][ T5158] bond0 (unregistering): Released all slaves [ 111.345135][ T5150] tipc: Enabling of bearer rejected, failed to enable media [ 111.408081][ T2979] loop1: p1 p2 p3 [ 111.442849][ T2979] loop1: p2 start 9961480 is beyond EOD, truncated [ 111.469260][ T2979] loop1: p3 start 117772289 is beyond EOD, truncated [ 111.572169][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.108978][ T5199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 112.108996][ T5199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 114.109196][ T5211] xt_hashlimit: size too large, truncated to 1048576 [ 114.430317][ T5211] xt_hashlimit: max too large, truncated to 1048576 [ 114.444605][ T5212] loop4: detected capacity change from 0 to 4096 [ 114.607692][ T5212] ext3: Unknown parameter 'fsmagic' [ 114.650577][ T5208] loop1: detected capacity change from 0 to 4096 [ 114.720821][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.997212][ T5236] bond0: entered promiscuous mode [ 115.016263][ T5236] bond_slave_0: entered promiscuous mode [ 115.029181][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.049536][ T5236] bond_slave_1: entered promiscuous mode [ 115.066213][ T5236] bond0: left promiscuous mode [ 115.079113][ T5236] bond_slave_0: left promiscuous mode [ 115.088126][ T5236] bond_slave_1: left promiscuous mode [ 115.160776][ T5245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.203024][ T5248] loop1: detected capacity change from 0 to 128 [ 115.481054][ T5259] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 115.530427][ T5259] 0: entered promiscuous mode [ 115.580104][ T5245] team0: Port device netdevsim2 removed [ 115.624759][ T5245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.691748][ T5245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.706569][ T5266] loop0: detected capacity change from 0 to 4096 [ 115.716225][ T5266] ext3: Unknown parameter 'fsmagic' [ 115.757542][ T5269] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.772733][ T5245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.810707][ T5273] loop0: detected capacity change from 0 to 1024 [ 115.826973][ T5273] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 115.843568][ T5273] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 115.860516][ T3433] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.870527][ T5273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.962439][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.988024][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.119374][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.178791][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.518213][ T5288] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.528870][ T5288] block device autoloading is deprecated and will be removed. [ 118.913268][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 118.913363][ T28] audit: type=1400 audit(374.826:764): avc: denied { append } for pid=5281 comm="syz.0.478" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 120.440125][ T28] audit: type=1400 audit(376.404:765): avc: denied { write } for pid=5285 comm="syz.4.481" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.248534][ T28] audit: type=1400 audit(377.359:766): avc: denied { connect } for pid=5302 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.566404][ T5312] loop3: detected capacity change from 0 to 512 [ 121.682393][ T5312] EXT4-fs (loop3): 1 orphan inode deleted [ 121.854301][ T5312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.918260][ T5312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.936852][ T5316] loop0: detected capacity change from 0 to 1024 [ 121.995033][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 122.011579][ T5320] netlink: 3 bytes leftover after parsing attributes in process `syz.1.488'. [ 122.028333][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.066696][ T5323] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.082347][ T28] audit: type=1400 audit(378.203:767): avc: denied { write } for pid=5315 comm="syz.0.486" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.083170][ T5323] bond0 (unregistering): Released all slaves [ 122.118156][ T5316] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.486: lblock 3 mapped to illegal pblock 3 (length 3) [ 122.162139][ T5318] loop4: detected capacity change from 0 to 512 [ 122.169043][ T3833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 122.191714][ T5316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 122.209138][ T5325] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.486: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 122.216494][ T5316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.216494][ T5316] [ 122.232820][ T5326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5326 comm=syz.1.488 [ 122.242849][ T5325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 122.278536][ T5320] 9p: Bad value for 'rfdno' [ 122.288435][ T5312] loop3: detected capacity change from 0 to 128 [ 122.327146][ T5325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.327146][ T5325] [ 122.338100][ T5312] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.342463][ T5318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.354874][ T5325] EXT4-fs (loop0): Total free blocks count 0 [ 122.375716][ T5325] EXT4-fs (loop0): Free/Dirty block details [ 122.423498][ T5325] EXT4-fs (loop0): free_blocks=0 [ 122.430041][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.438008][ T5325] EXT4-fs (loop0): dirty_blocks=64 [ 122.463215][ T5325] EXT4-fs (loop0): Block reservation details [ 122.542015][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.707560][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 123.276558][ T127] IPVS: starting estimator thread 0... [ 123.715547][ T5360] IPVS: using max 2400 ests per chain, 120000 per kthread [ 123.739455][ T5354] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 123.759135][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 124.048335][ T5361] loop4: detected capacity change from 0 to 512 [ 124.123788][ T5361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.229485][ T5361] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.494: iget: bad i_size value: 38620345925642 [ 124.252835][ T5369] xt_limit: Overflow, try lower: 0/0 [ 124.469819][ T5361] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.470026][ T5361] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.494: couldn't read orphan inode 15 (err -117) [ 124.484026][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 124.484045][ C1] EXT4-fs (loop4): initial error at time 380: ext4_orphan_get:1399: inode 15 [ 124.484070][ C1] EXT4-fs (loop4): last error at time 380: ext4_orphan_get:1399: inode 15 [ 125.208114][ T5361] loop4: lost filesystem error report for type 5 error -117 [ 125.228574][ T5361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.894611][ T28] audit: type=1400 audit(382.022:768): avc: denied { read } for pid=5374 comm="syz.3.500" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.150188][ T5368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 126.191274][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.273067][ T5387] loop3: detected capacity change from 0 to 128 [ 126.297355][ T5387] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.519746][ T5393] loop2: detected capacity change from 0 to 1024 [ 126.546611][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.589633][ T5393] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.505: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.628858][ T5393] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.654523][ T3833] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 126.670730][ T5393] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.670730][ T5393] [ 126.690786][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.703997][ T5397] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 126.726858][ T5397] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 126.740031][ T5397] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.740031][ T5397] [ 126.750804][ T5397] EXT4-fs (loop2): Total free blocks count 0 [ 126.765543][ T5397] EXT4-fs (loop2): Free/Dirty block details [ 126.771997][ T5397] EXT4-fs (loop2): free_blocks=0 [ 126.777877][ T5397] EXT4-fs (loop2): dirty_blocks=64 [ 126.784279][ T5397] EXT4-fs (loop2): Block reservation details [ 126.790587][ T28] audit: type=1400 audit(382.022:769): avc: denied { open } for pid=5374 comm="syz.3.500" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.827787][ T28] audit: type=1400 audit(382.022:770): avc: denied { ioctl } for pid=5374 comm="syz.3.500" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.857875][ T3294] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 126.871513][ T28] audit: type=1400 audit(382.474:771): avc: denied { setattr } for pid=5386 comm="syz.3.503" name="SCTPv6" dev="sockfs" ino=10885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.922823][ T28] audit: type=1400 audit(382.725:772): avc: denied { write } for pid=5392 comm="syz.2.505" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.970870][ T5405] loop3: detected capacity change from 0 to 128 [ 126.995729][ T5405] vfat: Unknown parameter '0xffffffffffffffff' [ 127.080575][ T28] audit: type=1400 audit(383.217:773): avc: denied { setopt } for pid=5409 comm="syz.1.510" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.107039][ T5413] loop3: detected capacity change from 0 to 512 [ 127.136920][ T5417] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 127.290671][ T5413] EXT4-fs (loop3): 1 orphan inode deleted [ 127.299762][ T5413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.313803][ T5413] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.358494][ T5410] wireguard0: entered promiscuous mode [ 127.366274][ T5410] wireguard0: entered allmulticast mode [ 127.375818][ T5405] loop3: detected capacity change from 0 to 128 [ 127.383677][ T5405] ext4: Unknown parameter 'obj_user' [ 127.441834][ T28] audit: type=1400 audit(383.589:774): avc: denied { create } for pid=5402 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.495845][ T5427] program syz.3.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.523229][ T5427] loop3: detected capacity change from 0 to 256 [ 127.542642][ T5427] msdos: Unknown parameter 'i' [ 127.561545][ T5427] IPVS: Error joining to the multicast group [ 127.656559][ T5433] loop3: detected capacity change from 0 to 1024 [ 127.673395][ T5433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.691041][ T28] audit: type=1400 audit(383.840:775): avc: denied { write } for pid=5432 comm="syz.3.517" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.701927][ T5433] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.517: lblock 3 mapped to illegal pblock 3 (length 3) [ 127.761770][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 127.782103][ T5433] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 127.813541][ T5441] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.517: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 127.836559][ T5433] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.836559][ T5433] [ 127.851616][ T5441] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 127.996777][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 128.826057][ T5454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.852009][ T5441] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.852009][ T5441] [ 129.055426][ T5441] EXT4-fs (loop3): Total free blocks count 0 [ 129.073726][ T5441] EXT4-fs (loop3): Free/Dirty block details [ 129.864442][ T5441] EXT4-fs (loop3): free_blocks=0 [ 129.875543][ T5441] EXT4-fs (loop3): dirty_blocks=64 [ 129.891372][ T5441] EXT4-fs (loop3): Block reservation details [ 130.200653][ T5429] loop1: detected capacity change from 0 to 4096 [ 130.211465][ T5429] ext3: Unknown parameter 'fsmagic' [ 130.929712][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 131.299139][ T5469] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 131.314304][ T5469] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 131.563991][ T5469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.668623][ T5477] netlink: 'syz.3.529': attribute type 6 has an invalid length. [ 131.699040][ T5477] netlink: 156 bytes leftover after parsing attributes in process `syz.3.529'. [ 131.744051][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 131.832913][ T5493] loop4: detected capacity change from 0 to 1024 [ 131.864685][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.881597][ T28] audit: type=1400 audit(388.049:776): avc: denied { write } for pid=5492 comm="syz.4.535" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.884734][ T5493] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.535: lblock 3 mapped to illegal pblock 3 (length 3) [ 131.921078][ T5493] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 131.935142][ T5493] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.935142][ T5493] [ 131.941314][ T122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 131.995418][ T5493] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.535: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 132.022692][ T5493] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 132.026682][ T28] audit: type=1400 audit(388.189:777): avc: denied { read } for pid=3018 comm="dhcpcd" name="n52" dev="tmpfs" ino=4281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.042366][ T5493] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.042366][ T5493] [ 132.074574][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 132.131228][ T5503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 132.150462][ T28] audit: type=1400 audit(388.189:778): avc: denied { open } for pid=3018 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=4281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.154273][ T5509] loop1: detected capacity change from 0 to 128 [ 132.182458][ T28] audit: type=1400 audit(388.189:779): avc: denied { getattr } for pid=3018 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=4281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.221571][ T5493] EXT4-fs (loop4): Total free blocks count 0 [ 132.226942][ T5509] vfat: Unknown parameter 'uni_x²' [ 132.239501][ T5493] EXT4-fs (loop4): Free/Dirty block details [ 132.247457][ T5493] EXT4-fs (loop4): free_blocks=0 [ 132.256099][ T5493] EXT4-fs (loop4): dirty_blocks=64 [ 132.262631][ T5493] EXT4-fs (loop4): Block reservation details [ 132.300237][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 132.330528][ T28] audit: type=1400 audit(388.501:780): avc: denied { write } for pid=5518 comm="syz.1.541" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.342035][ T5520] xfrm1: entered allmulticast mode [ 132.380719][ T28] audit: type=1400 audit(388.541:781): avc: denied { write } for pid=5511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.458076][ T28] audit: type=1400 audit(388.541:782): avc: denied { create } for pid=5511 comm="dhcpcd-run-hook" name="resolv.conf.veth0_vlan.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.511772][ T3018] veth0_vlan: left promiscuous mode [ 132.520986][ T127] veth0_vlan: entered promiscuous mode [ 132.549375][ T28] audit: type=1400 audit(388.541:783): avc: denied { write } for pid=5511 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.veth0_vlan.link" dev="tmpfs" ino=4315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.588741][ T5540] loop1: detected capacity change from 0 to 512 [ 132.590252][ T28] audit: type=1400 audit(388.561:784): avc: denied { append } for pid=5511 comm="dhcpcd-run-hook" name="resolv.conf.veth0_vlan.link" dev="tmpfs" ino=4315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.664848][ T28] audit: type=1400 audit(388.601:785): avc: denied { write } for pid=5529 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.688170][ T5540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.950919][ T5506] loop2: detected capacity change from 0 to 4096 [ 132.961491][ T5506] ext3: Unknown parameter 'fsmagic' [ 133.034227][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 133.048103][ T5560] netlink: 'syz.2.546': attribute type 30 has an invalid length. [ 133.087545][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 133.107906][ T3833] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.119648][ T5561] netlink: 'syz.2.546': attribute type 30 has an invalid length. [ 133.131900][ T3833] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.151402][ T3833] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.165642][ T3833] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.208500][ T5560] loop2: detected capacity change from 0 to 512 [ 133.220823][ T5560] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.238408][ T5560] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.257080][ T5560] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.546: bg 0: block 248: padding at end of block bitmap is not set [ 133.276578][ T5560] loop2: lost filesystem error report for type 5 error -117 [ 133.278492][ T5560] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.546: Failed to acquire dquot type 1 [ 133.289565][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 133.289605][ C1] EXT4-fs (loop2): last error at time 389: ext4_validate_block_bitmap:441 [ 133.368181][ T5560] loop2: lost filesystem error report for type 5 error -28 [ 133.374337][ T5560] EXT4-fs (loop2): 1 truncate cleaned up [ 133.403002][ T5560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 133.471658][ T5560] syz.2.546 (5560) used greatest stack depth: 8192 bytes left [ 133.544922][ T5561] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.546: deleted inode referenced: 12 [ 133.736877][ T5576] netlink: set zone limit has 8 unknown bytes [ 133.747714][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.865389][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 133.904161][ T5585] loop2: detected capacity change from 0 to 1024 [ 133.933813][ T5585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.956807][ T5581] loop1: detected capacity change from 0 to 512 [ 133.974166][ T5585] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.552: lblock 3 mapped to illegal pblock 3 (length 3) [ 133.992853][ T5585] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 134.007905][ T5585] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.007905][ T5585] [ 134.031890][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.033243][ T3579] Bluetooth: hci0: command 0x1003 tx timeout [ 134.054889][ T5581] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.551: corrupted inode contents [ 134.069640][ T3833] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 134.089545][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.089735][ T5581] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.551: mark_inode_dirty error [ 134.100462][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 134.100483][ C1] EXT4-fs (loop1): initial error at time 390: ext4_do_update_inode:5742: inode 16 [ 134.100536][ C1] EXT4-fs (loop1): last error at time 390: ext4_do_update_inode:5742: inode 16 [ 134.151706][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.152483][ T5581] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.551: corrupted inode contents [ 134.186479][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.192372][ T5581] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.551: mark_inode_dirty error [ 134.234171][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.234566][ T5581] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.551: corrupted inode contents [ 134.263731][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 28 [ 134.277916][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.277916][ T12] [ 134.278974][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.304883][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 134.335409][ T5581] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 134.362087][ T12] EXT4-fs (loop2): Free/Dirty block details [ 134.367013][ T5581] loop1: lost filesystem error report for type 5 error -117 [ 134.381810][ T12] EXT4-fs (loop2): free_blocks=0 [ 134.423755][ T12] EXT4-fs (loop2): dirty_blocks=64 [ 134.437189][ T12] EXT4-fs (loop2): Block reservation details [ 134.451638][ T5581] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.551: corrupted inode contents [ 134.465464][ T3294] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 134.478222][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.493589][ T5602] loop0: detected capacity change from 0 to 4096 [ 134.514877][ T5581] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.551: mark_inode_dirty error [ 134.529324][ T5602] ext3: Unknown parameter 'fsmagic' [ 134.540272][ T5581] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.541377][ T5581] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 134.613800][ T5581] loop1: lost filesystem error report for type 5 error -117 [ 134.614598][ T5581] EXT4-fs (loop1): 1 truncate cleaned up [ 134.694948][ T3833] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:17: Failed to release dquot type 1 [ 134.753201][ T3833] loop1: lost filesystem error report for type 5 error -117 [ 134.841288][ T5581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.891616][ T5611] loop4: detected capacity change from 0 to 512 [ 135.022195][ T5581] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 135.022195][ T5581] program syz.1.551 not setting count and/or reply_len properly [ 135.105879][ T5611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.143420][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.331670][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 135.357105][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 135.381414][ T5629] loop0: detected capacity change from 0 to 1024 [ 135.394491][ T5625] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 135.426766][ T5629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.500794][ T5629] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.563: lblock 3 mapped to illegal pblock 3 (length 3) [ 135.527814][ T5634] netlink: 'syz.1.565': attribute type 10 has an invalid length. [ 135.559692][ T5629] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 135.596892][ T5634] Process accounting resumed [ 135.620386][ T5629] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.620386][ T5629] [ 135.622395][ T3833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 135.668592][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.697469][ T3433] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 28 [ 135.725033][ T3433] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.725033][ T3433] [ 135.779004][ T3433] EXT4-fs (loop0): Total free blocks count 0 [ 135.796024][ T3433] EXT4-fs (loop0): Free/Dirty block details [ 135.809504][ T3433] EXT4-fs (loop0): free_blocks=0 [ 135.831190][ T3433] EXT4-fs (loop0): dirty_blocks=64 [ 135.844685][ T3433] EXT4-fs (loop0): Block reservation details [ 135.860824][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 135.875914][ T5643] loop1: detected capacity change from 0 to 128 [ 135.917662][ T5643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.044775][ T5656] netlink: 'syz.0.572': attribute type 58 has an invalid length. [ 136.093395][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 136.202964][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.254680][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.327700][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.449309][ T5671] hub 8-0:1.0: USB hub found [ 136.454175][ T5671] hub 8-0:1.0: 8 ports detected [ 136.564092][ T5670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.116089][ T5688] netlink: 'syz.0.582': attribute type 8 has an invalid length. [ 138.092192][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.122470][ T5692] xt_hashlimit: size too large, truncated to 1048576 [ 138.155555][ T5692] xt_hashlimit: max too large, truncated to 1048576 [ 138.244217][ T5706] set_capacity_and_notify: 2 callbacks suppressed [ 138.244230][ T5706] loop0: detected capacity change from 0 to 512 [ 138.315601][ T5706] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 138.352648][ T5706] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.376025][ T5706] __quota_error: 21 callbacks suppressed [ 138.376047][ T5706] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 138.397200][ T5706] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.468835][ T28] audit: type=1400 audit(394.586:804): avc: denied { create } for pid=5711 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 138.490848][ T5716] loop1: detected capacity change from 0 to 128 [ 138.515096][ T5706] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 138.536649][ T5706] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.587: inode has both inline data and extents flags [ 138.575750][ T5718] netlink: 104 bytes leftover after parsing attributes in process `syz.2.591'. [ 138.592212][ T5706] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 138.592420][ T5706] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.587: couldn't read orphan inode 16 (err -117) [ 138.602508][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 138.602531][ C0] EXT4-fs (loop0): initial error at time 394: ext4_orphan_get:1399: inode 16 [ 138.602564][ C0] EXT4-fs (loop0): last error at time 394: ext4_orphan_get:1399: inode 16 [ 138.674973][ T5722] loop2: detected capacity change from 0 to 2048 [ 138.685579][ T5706] loop0: lost filesystem error report for type 5 error -117 [ 138.686105][ T5706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.735202][ T5722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.781757][ T28] audit: type=1326 audit(394.967:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f018b31ce59 code=0x10000 [ 139.151942][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.171418][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.182083][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 139.220319][ T5733] SET target dimension over the limit! [ 139.251506][ T28] audit: type=1400 audit(395.439:806): avc: denied { connect } for pid=5738 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.337218][ T5743] team0 (unregistering): Port device team_slave_0 removed [ 139.354392][ T5743] team0 (unregistering): Port device team_slave_1 removed [ 139.354885][ T5747] program syz.2.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.367427][ T28] audit: type=1400 audit(395.439:807): avc: denied { write } for pid=5738 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.398672][ T28] audit: type=1326 audit(395.479:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6d521ce59 code=0x7dff0000 [ 139.495728][ T5749] loop2: detected capacity change from 0 to 256 [ 139.504462][ T5749] msdos: Unknown parameter 'i' [ 139.604854][ T5752] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 139.823968][ T5747] dummy0: Caught tx_queue_len zero misconfig [ 140.276433][ T5761] loop1: detected capacity change from 0 to 4096 [ 140.303943][ T5761] ext3: Unknown parameter 'fsmagic' [ 140.394946][ T5765] loop4: detected capacity change from 0 to 256 [ 140.426227][ T5765] vfat: Unknown parameter 'ÿÿ18446744073709551615±<7oÝf§Ö9À%2¿Î!÷Øog‘LÒLÈ]' [ 140.520319][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'. [ 140.779114][ T5782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 140.882344][ T5788] loop1: detected capacity change from 0 to 512 [ 140.910297][ T5788] EXT4-fs: Mount option(s) incompatible with ext2 [ 140.956140][ T5793] loop4: detected capacity change from 0 to 1024 [ 140.980269][ T5793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.008615][ T5793] EXT4-fs: inline encryption not supported [ 141.026985][ T5793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.123794][ T5793] EXT4-fs: Ignoring removed bh option [ 141.146099][ T5793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.241310][ T5803] loop1: detected capacity change from 0 to 512 [ 141.271912][ T5803] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.617: bg 0: block 127: padding at end of block bitmap is not set [ 141.287847][ T5803] loop1: lost filesystem error report for type 5 error -117 [ 141.288531][ T5803] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.617: bit already cleared for inode 11 [ 141.296949][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 141.296974][ C1] EXT4-fs (loop1): initial error at time 397: ext4_validate_block_bitmap:441 [ 141.297001][ C1] EXT4-fs (loop1): last error at time 397: ext4_validate_block_bitmap:441 [ 141.335894][ T5803] loop1: lost filesystem error report for type 5 error -117 [ 141.408118][ T5803] EXT4-fs (loop1): 1 orphan inode deleted [ 141.422805][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.488655][ T28] audit: type=1400 audit(397.677:809): avc: denied { write } for pid=5808 comm="syz.1.617" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.006211][ T5822] netlink: 128 bytes leftover after parsing attributes in process `syz.2.623'. [ 142.036135][ T5822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.158857][ T28] audit: type=1400 audit(398.360:810): avc: denied { write } for pid=5792 comm="syz.4.616" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.201419][ T5817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.616: bg 0: block 112: padding at end of block bitmap is not set [ 142.271528][ T5828] tipc: Started in network mode [ 142.288747][ T5828] tipc: Node identity 00002d00000000120000000000000045, cluster identity 4711 [ 142.328822][ T5830] loop2: detected capacity change from 0 to 164 [ 142.339326][ T5817] EXT4-fs (loop4): Remounting filesystem read-only [ 142.348414][ T5828] tipc: Enabling of bearer rejected, failed to enable media [ 142.531725][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.594296][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.632370][ T5841] program syz.1.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.681110][ T5847] msdos: Unknown parameter 'i' [ 142.707047][ T28] audit: type=1400 audit(398.902:811): avc: denied { write } for pid=5844 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.780182][ T5848] ext3: Unknown parameter 'fsmagic' [ 142.787671][ T5852] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 142.801314][ T5851] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 142.886838][ T3550] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 142.950756][ T28] audit: type=1400 audit(399.153:812): avc: denied { map } for pid=5862 comm="syz.1.636" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.077140][ T5866] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 143.163506][ T5871] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 143.402091][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 143.402107][ T28] audit: type=1400 audit(399.604:827): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.527683][ T5897] set_capacity_and_notify: 3 callbacks suppressed [ 143.527700][ T5897] loop0: detected capacity change from 0 to 1024 [ 143.571527][ T5843] loop3: detected capacity change from 0 to 4096 [ 143.571592][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.600269][ T5897] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.644: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.616965][ T28] audit: type=1400 audit(399.805:828): avc: denied { write } for pid=5895 comm="syz.0.644" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.662389][ T5897] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.685039][ T5843] ext3: Unknown parameter 'fsmagic' [ 143.705866][ T28] audit: type=1400 audit(399.805:829): avc: denied { read write } for pid=5895 comm="syz.0.644" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.734811][ T5903] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.644: bg 0: block 112: padding at end of block bitmap is not set [ 143.762806][ T5905] tmpfs: Bad value for 'mpol' [ 143.765387][ T5897] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.765387][ T5897] [ 143.776497][ T28] audit: type=1400 audit(399.805:830): avc: denied { open } for pid=5895 comm="syz.0.644" path="/142/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.802534][ T5903] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 3 with error 28 [ 143.824948][ T5903] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.824948][ T5903] [ 143.827463][ T28] audit: type=1400 audit(399.946:831): avc: denied { append } for pid=5895 comm="syz.0.644" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.846599][ T5903] EXT4-fs (loop0): Total free blocks count 0 [ 143.860827][ T28] audit: type=1400 audit(399.986:832): avc: denied { ioctl } for pid=5895 comm="syz.0.644" path="/142/file1/file1" dev="loop0" ino=15 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.893375][ T5903] EXT4-fs (loop0): Free/Dirty block details [ 143.900628][ T5903] EXT4-fs (loop0): free_blocks=0 [ 143.905880][ T5903] EXT4-fs (loop0): dirty_blocks=16 [ 143.911537][ T5903] EXT4-fs (loop0): Block reservation details [ 144.380735][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 144.428297][ T5912] program syz.1.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.450244][ T5912] loop1: detected capacity change from 0 to 256 [ 144.479367][ T5912] msdos: Unknown parameter 'i' [ 144.532338][ T28] audit: type=1400 audit(400.738:833): avc: denied { write } for pid=5909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.609803][ T28] audit: type=1400 audit(400.769:834): avc: denied { write } for pid=5927 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.655387][ T5933] loop1: detected capacity change from 0 to 1024 [ 144.679622][ T5937] FAULT_INJECTION: forcing a failure. [ 144.679622][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.709916][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.3.650 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 144.710008][ T5937] Tainted: [W]=WARN [ 144.710015][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.710036][ T5937] Call Trace: [ 144.710044][ T5937] [ 144.710052][ T5937] __dump_stack+0x1d/0x30 [ 144.710130][ T5937] dump_stack_lvl+0x95/0xd0 [ 144.710149][ T5937] dump_stack+0x15/0x1b [ 144.710165][ T5937] should_fail_ex+0x25e/0x270 [ 144.710185][ T5937] should_fail+0xb/0x20 [ 144.710264][ T5937] should_fail_usercopy+0x1a/0x20 [ 144.710284][ T5937] _copy_from_iter+0xcc/0xe70 [ 144.710309][ T5937] ? __alloc_skb+0x511/0x6f0 [ 144.710380][ T5937] ? __alloc_skb+0x205/0x6f0 [ 144.710412][ T5937] netlink_sendmsg+0x4a4/0x6f0 [ 144.710437][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.710457][ T5937] ____sys_sendmsg+0x532/0x580 [ 144.710551][ T5937] ___sys_sendmsg+0x195/0x1e0 [ 144.710588][ T5937] __x64_sys_sendmsg+0xd4/0x160 [ 144.710613][ T5937] x64_sys_call+0x194c/0x3020 [ 144.710648][ T5937] do_syscall_64+0x136/0x3c0 [ 144.710732][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.710751][ T5937] RIP: 0033:0x7fc6d521ce59 [ 144.710808][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.710822][ T5937] RSP: 002b:00007fc6d3c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.710839][ T5937] RAX: ffffffffffffffda RBX: 00007fc6d5495fa0 RCX: 00007fc6d521ce59 [ 144.710857][ T5937] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000007 [ 144.710868][ T5937] RBP: 00007fc6d3c77090 R08: 0000000000000000 R09: 0000000000000000 [ 144.710878][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.710947][ T5937] R13: 00007fc6d5496038 R14: 00007fc6d5495fa0 R15: 00007ffe172ae0b8 [ 144.710964][ T5937] [ 144.942368][ T5933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.956663][ T5898] loop4: detected capacity change from 0 to 4096 [ 144.970785][ T28] audit: type=1400 audit(401.190:835): avc: denied { write } for pid=5932 comm="syz.1.649" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.999434][ T5943] loop0: detected capacity change from 0 to 512 [ 145.002854][ T5933] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.649: lblock 3 mapped to illegal pblock 3 (length 3) [ 145.029122][ T5943] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.067483][ T122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 145.067963][ T5898] ext3: Unknown parameter 'fsmagic' [ 145.108399][ T5943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.128212][ T28] audit: type=1400 audit(401.341:836): avc: denied { write } for pid=5942 comm="syz.0.653" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.156621][ T5933] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 145.180748][ T5933] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.180748][ T5933] [ 145.270541][ T122] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 28 [ 145.388965][ T122] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.388965][ T122] [ 145.400495][ T122] EXT4-fs (loop1): Total free blocks count 0 [ 145.407331][ T122] EXT4-fs (loop1): Free/Dirty block details [ 145.413490][ T122] EXT4-fs (loop1): free_blocks=0 [ 145.419197][ T122] EXT4-fs (loop1): dirty_blocks=64 [ 145.425178][ T122] EXT4-fs (loop1): Block reservation details [ 145.433440][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 145.838066][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.657'. [ 145.910978][ T5970] loop1: detected capacity change from 0 to 512 [ 145.920597][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.953515][ T5970] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.658: iget: bad i_size value: 38620345925642 [ 145.995039][ T5970] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.996168][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 146.009521][ T5970] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.658: couldn't read orphan inode 15 (err -117) [ 146.013209][ C1] EXT4-fs (loop1): initial error at time 402: ext4_orphan_get:1399: inode 15 [ 146.026550][ T5970] loop1: lost filesystem error report for type 5 error -117 [ 146.035654][ C1] EXT4-fs (loop1): last error at time 402: ext4_orphan_get:1399 [ 146.036778][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.043256][ C1] [ 146.069488][ T5974] program syz.0.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.088972][ T5974] loop0: detected capacity change from 0 to 256 [ 146.107200][ T5974] msdos: Unknown parameter 'i' [ 146.122484][ T5975] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 146.205165][ T5979] netlink: 'syz.2.660': attribute type 4 has an invalid length. [ 146.214435][ T5979] netlink: 'syz.2.660': attribute type 4 has an invalid length. [ 146.231285][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.273367][ T5984] loop3: detected capacity change from 0 to 512 [ 146.284298][ T5984] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.665: iget: bad i_size value: 38620345925642 [ 146.297442][ T5984] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.297597][ T5984] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.665: couldn't read orphan inode 15 (err -117) [ 146.307936][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 146.307973][ C1] EXT4-fs (loop3): initial error at time 402: ext4_orphan_get:1399: inode 15 [ 146.308019][ C1] EXT4-fs (loop3): last error at time 402: ext4_orphan_get:1399: inode 15 [ 146.329516][ T5989] program syz.2.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.339447][ T5984] loop3: lost filesystem error report for type 5 error -117 [ 146.360165][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.628478][ T5995] EXT4-fs (loop3): shut down requested (1) [ 146.906806][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.035160][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 148.480583][ T6037] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 148.497771][ T6037] netlink: 'syz.4.681': attribute type 2 has an invalid length. [ 148.563948][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 148.563963][ T28] audit: type=1400 audit(404.782:845): avc: denied { accept } for pid=6042 comm="syz.3.683" path="socket:[13058]" dev="sockfs" ino=13058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 148.634277][ T6045] loop4: detected capacity change from 0 to 512 [ 148.658937][ T6045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.689249][ T28] audit: type=1400 audit(404.832:846): avc: denied { unlink } for pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.714678][ T28] audit: type=1400 audit(404.863:847): avc: denied { setopt } for pid=6034 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.714707][ T28] audit: type=1400 audit(404.913:848): avc: denied { write } for pid=6040 comm="syz.4.682" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.808162][ T28] audit: type=1400 audit(405.023:849): avc: denied { write } for pid=6040 comm="syz.4.682" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.945021][ T6056] bond0: option ad_user_port_key: invalid value (2311) [ 148.952366][ T6056] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 148.963062][ T6056] bond0 (unregistering): Released all slaves [ 149.455249][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.518185][ T6068] loop1: detected capacity change from 0 to 1024 [ 149.570602][ T6068] EXT4-fs: inline encryption not supported [ 149.633017][ T6068] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.722525][ T6070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.693'. [ 149.745239][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 149.766072][ T6068] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.691: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.798406][ T6068] loop1: lost filesystem error report for type 5 error -117 [ 149.798511][ T6068] EXT4-fs (loop1): Remounting filesystem read-only [ 149.806729][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 149.806773][ C0] EXT4-fs (loop1): initial error at time 406: ext4_free_blocks:6718 [ 149.806796][ C0] EXT4-fs (loop1): last error at time 406: ext4_free_blocks:6718 [ 149.959205][ T6068] EXT4-fs (loop1): 1 orphan inode deleted [ 149.966173][ T6068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.007259][ T28] audit: type=1400 audit(406.237:850): avc: denied { write } for pid=6067 comm="syz.1.691" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.037494][ T6074] loop3: detected capacity change from 0 to 512 [ 150.051041][ T3833] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 150.083089][ T3833] Quota error (device loop1): write_blk: dquota write failed [ 150.112689][ T6074] EXT4-fs (loop3): inodes count not valid: 19 vs 32 [ 150.128436][ T3833] Quota error (device loop1): remove_free_dqentry: Can't write block (2) with free entries [ 150.174423][ T3833] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 150.216449][ T3833] Quota error (device loop1): write_blk: dquota write failed [ 150.243675][ T3833] Quota error (device loop1): free_dqentry: Can't move quota data block (2) to free list [ 150.264518][ T6077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.288045][ T3833] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 150.373088][ T6083] netlink: 60 bytes leftover after parsing attributes in process `syz.4.696'. [ 150.444232][ T6087] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 150.453712][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.466535][ T35] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 150.631885][ T6093] netlink: 52 bytes leftover after parsing attributes in process `syz.1.695'. [ 150.742321][ T6093] loop1: detected capacity change from 0 to 512 [ 150.909944][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.318553][ T6115] netlink: 180 bytes leftover after parsing attributes in process `syz.2.705'. [ 151.359575][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.488708][ T6127] loop0: detected capacity change from 0 to 512 [ 151.516158][ T6127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.550336][ T6127] EXT4-fs (loop0): 1 truncate cleaned up [ 151.563543][ T6132] loop4: detected capacity change from 0 to 512 [ 151.576112][ T6106] ALSA: seq fatal error: cannot create timer (-22) [ 151.595752][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.670767][ T6132] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.713: iget: bad i_size value: 38620345925642 [ 151.697615][ T6132] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.699718][ T6132] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.713: couldn't read orphan inode 15 (err -117) [ 151.710582][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 151.710603][ C0] EXT4-fs (loop4): initial error at time 407: ext4_orphan_get:1399: inode 15 [ 151.710631][ C0] EXT4-fs (loop4): last error at time 407: ext4_orphan_get:1399: inode 15 [ 151.713513][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 151.734177][ T6132] loop4: lost filesystem error report for type 5 error -117 [ 151.759559][ T6132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.786682][ T6141] loop2: detected capacity change from 0 to 1024 [ 151.795117][ T6141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.802590][ T6141] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.810542][ T6141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.820409][ T6141] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.836941][ T6141] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.844831][ T6141] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.712: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 151.865072][ T6141] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.866189][ T6141] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.712: couldn't read orphan inode 11 (err -117) [ 151.875585][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 151.875602][ C0] EXT4-fs (loop2): initial error at time 408: ext4_ext_check_inode:521: inode 11 [ 151.875635][ C0] EXT4-fs (loop2): last error at time 408: ext4_ext_check_inode:521: inode 11 [ 151.917976][ T6141] loop2: lost filesystem error report for type 5 error -117 [ 151.920853][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.999320][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.020970][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.715'. [ 152.419569][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 152.432760][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 152.446250][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.446250][ T12] [ 152.459251][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 152.465912][ T12] EXT4-fs (loop4): Free/Dirty block details [ 152.472325][ T12] EXT4-fs (loop4): free_blocks=0 [ 152.477574][ T12] EXT4-fs (loop4): dirty_blocks=7804 [ 152.483214][ T12] EXT4-fs (loop4): Block reservation details [ 152.490017][ T12] EXT4-fs (loop4): i_reserved_data_blocks=7804 [ 152.504992][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 152.523372][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 152.776146][ T6163] loop4: detected capacity change from 0 to 512 [ 152.795613][ T6163] EXT4-fs: Mount option(s) incompatible with ext2 [ 152.858227][ T6161] loop0: detected capacity change from 0 to 512 [ 152.972590][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.085066][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.103820][ T6184] netlink: 'syz.3.724': attribute type 9 has an invalid length. [ 153.113654][ T6184] netlink: 371 bytes leftover after parsing attributes in process `syz.3.724'. [ 153.125155][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.198177][ T6187] loop2: detected capacity change from 0 to 256 [ 153.592732][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 153.611241][ T6180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.652364][ T6199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'. [ 153.979995][ T6203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.730'. [ 153.980043][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 153.980055][ T28] audit: type=1400 audit(410.220:859): avc: denied { nlmsg_read } for pid=6202 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.027389][ T6205] FAULT_INJECTION: forcing a failure. [ 154.027389][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.209470][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.3.731 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 154.209520][ T6205] Tainted: [W]=WARN [ 154.209527][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.209586][ T6205] Call Trace: [ 154.209594][ T6205] [ 154.209603][ T6205] __dump_stack+0x1d/0x30 [ 154.209680][ T6205] dump_stack_lvl+0x95/0xd0 [ 154.209713][ T6205] dump_stack+0x15/0x1b [ 154.209757][ T6205] should_fail_ex+0x25e/0x270 [ 154.209783][ T6205] should_fail+0xb/0x20 [ 154.209841][ T6205] should_fail_usercopy+0x1a/0x20 [ 154.209865][ T6205] _copy_to_user+0x20/0xa0 [ 154.209885][ T6205] bpf_verifier_vlog+0x36e/0x5a0 [ 154.209962][ T6205] __btf_verifier_log+0x7f/0xb0 [ 154.209984][ T6205] ? btf_parse_hdr+0x1e8/0x440 [ 154.210010][ T6205] ? __kvmalloc_node_noprof+0x306/0x590 [ 154.210088][ T6205] btf_parse_hdr+0x1fc/0x440 [ 154.210113][ T6205] btf_new_fd+0x258/0x670 [ 154.210206][ T6205] bpf_btf_load+0x116/0x130 [ 154.210225][ T6205] ? vfs_write+0x7a0/0x990 [ 154.210244][ T6205] __sys_bpf+0xbce/0xc30 [ 154.210317][ T6205] ? vfs_write+0x7a0/0x990 [ 154.210337][ T6205] ? vfs_write+0x7a0/0x990 [ 154.210362][ T6205] __x64_sys_bpf+0x69/0x80 [ 154.210387][ T6205] x64_sys_call+0x10cb/0x3020 [ 154.210437][ T6205] do_syscall_64+0x136/0x3c0 [ 154.210465][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.210487][ T6205] RIP: 0033:0x7fc6d521ce59 [ 154.210563][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.210581][ T6205] RSP: 002b:00007fc6d3c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.210601][ T6205] RAX: ffffffffffffffda RBX: 00007fc6d5495fa0 RCX: 00007fc6d521ce59 [ 154.210616][ T6205] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 154.210703][ T6205] RBP: 00007fc6d3c77090 R08: 0000000000000000 R09: 0000000000000000 [ 154.210717][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.210730][ T6205] R13: 00007fc6d5496038 R14: 00007fc6d5495fa0 R15: 00007ffe172ae0b8 [ 154.210752][ T6205] [ 154.467591][ T6214] loop3: detected capacity change from 0 to 512 [ 154.490504][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.518678][ T28] audit: type=1400 audit(410.751:860): avc: denied { write } for pid=6213 comm="syz.3.734" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.549000][ T28] audit: type=1400 audit(410.751:861): avc: denied { map } for pid=6213 comm="syz.3.734" path="/140/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.573561][ T28] audit: type=1400 audit(410.751:862): avc: denied { execute } for pid=6213 comm="syz.3.734" path="/140/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.632352][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.654461][ T28] audit: type=1400 audit(410.892:863): avc: denied { setattr } for pid=6219 comm="syz.0.737" name="psched" dev="proc" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.752877][ T6227] netlink: 56 bytes leftover after parsing attributes in process `syz.4.739'. [ 154.812471][ T6231] loop3: detected capacity change from 0 to 1024 [ 154.841056][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.857271][ T28] audit: type=1400 audit(411.102:864): avc: denied { write } for pid=6230 comm="syz.3.740" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.910481][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.968849][ T6244] loop1: detected capacity change from 0 to 128 [ 154.990441][ T6248] netlink: 'syz.3.743': attribute type 22 has an invalid length. [ 155.006939][ T6244] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.010370][ T6249] netlink: 'syz.3.743': attribute type 22 has an invalid length. [ 155.026262][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 155.031949][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 155.059165][ T3833] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.059213][ T6249] netlink: 'syz.3.743': attribute type 22 has an invalid length. [ 155.078983][ T3833] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.103021][ T6248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6248 comm=syz.3.743 [ 155.117726][ T3833] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.118952][ T28] audit: type=1400 audit(411.343:865): avc: denied { write } for pid=6243 comm="syz.1.747" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.126243][ T3833] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.161153][ T28] audit: type=1400 audit(411.363:866): avc: denied { ioctl } for pid=6253 comm="syz.4.748" path="socket:[13545]" dev="sockfs" ino=13545 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.163478][ T6254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=247 sclass=netlink_route_socket pid=6254 comm=syz.4.748 [ 155.190816][ T28] audit: type=1400 audit(411.403:867): avc: denied { lock } for pid=6253 comm="syz.4.748" path="socket:[13545]" dev="sockfs" ino=13545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.225844][ T6248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6248 comm=syz.3.743 [ 155.269773][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.454811][ T6278] hub 8-0:1.0: USB hub found [ 155.460025][ T6278] hub 8-0:1.0: 8 ports detected [ 156.315880][ T6296] loop1: detected capacity change from 0 to 8192 [ 156.363608][ T6296] loop1: p1 p2 p3 [ 156.369340][ T6296] loop1: p2 start 9961480 is beyond EOD, truncated [ 156.376209][ T6296] loop1: p3 start 117772289 is beyond EOD, truncated [ 157.057843][ T2979] loop1: p1 p2 p3 [ 157.064008][ T28] audit: type=1400 audit(413.319:868): avc: denied { append } for pid=6308 comm="syz.3.761" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 157.093222][ T2979] loop1: p2 start 9961480 is beyond EOD, truncated [ 157.121152][ T2979] loop1: p3 start 117772289 is beyond EOD, truncated [ 157.897807][ T6314] xt_hashlimit: size too large, truncated to 1048576 [ 157.971750][ T6314] xt_hashlimit: max too large, truncated to 1048576 [ 158.011214][ T6329] loop0: detected capacity change from 0 to 512 [ 158.034407][ T6329] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.769: iget: bad i_size value: 38620345925642 [ 158.050800][ T6329] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.068143][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 158.070533][ T6329] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.769: couldn't read orphan inode 15 (err -117) [ 158.079059][ C0] EXT4-fs (loop0): initial error at time 414: ext4_orphan_get:1399: inode 15 [ 158.079097][ C0] EXT4-fs (loop0): last error at time 414: ext4_orphan_get:1399: inode 15 [ 158.116569][ T6326] loop3: detected capacity change from 0 to 512 [ 158.125924][ T6326] EXT4-fs: Ignoring removed i_version option [ 158.134524][ T6329] loop0: lost filesystem error report for type 5 error -117 [ 158.155549][ T6329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.159319][ T6334] bond0: entered promiscuous mode [ 158.183779][ T6334] bond_slave_0: entered promiscuous mode [ 158.193085][ T6326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.200881][ T6334] bond_slave_1: entered promiscuous mode [ 158.216535][ T6334] bond0: left promiscuous mode [ 158.222032][ T6334] bond_slave_0: left promiscuous mode [ 158.240113][ T6334] bond_slave_1: left promiscuous mode [ 158.264102][ T6342] EXT4-fs (loop0): shut down requested (1) [ 158.303274][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.350280][ T6352] __nla_validate_parse: 3 callbacks suppressed [ 158.350359][ T6352] netlink: 260 bytes leftover after parsing attributes in process `syz.2.774'. [ 158.390971][ T6354] loop4: detected capacity change from 0 to 512 [ 158.410004][ T6354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.443021][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 158.452983][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.777'. [ 158.501545][ T6354] EXT4-fs (loop4): shut down requested (2) [ 158.523859][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 158.540920][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 158.544022][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 158.567548][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 158.568559][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 158.581467][ T6367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 158.589231][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 158.611973][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 158.629743][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 158.637747][ T6354] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 158.645379][ T35] IPVS: starting estimator thread 0... [ 158.688414][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.746649][ T6372] IPVS: using max 2304 ests per chain, 115200 per kthread [ 158.855793][ T6377] loop4: detected capacity change from 0 to 764 [ 158.907496][ T6384] loop4: detected capacity change from 0 to 512 [ 158.918631][ T6384] EXT4-fs: Mount option(s) incompatible with ext2 [ 158.962914][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 158.979019][ T6388] team0: Port device team_slave_0 removed [ 159.095101][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 159.101627][ T28] audit: type=1400 audit(415.344:882): avc: denied { ioctl } for pid=6391 comm="syz.1.789" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.202653][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.334553][ T6402] loop0: detected capacity change from 0 to 512 [ 159.354120][ T6402] ext4: Unknown parameter 'uid' [ 159.549266][ T28] audit: type=1400 audit(415.806:883): avc: denied { ioctl } for pid=6404 comm="syz.1.794" path="socket:[14719]" dev="sockfs" ino=14719 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.694697][ T28] audit: type=1400 audit(415.916:884): avc: denied { open } for pid=6392 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.838864][ T28] audit: type=1400 audit(415.916:885): avc: denied { kernel } for pid=6392 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.866211][ T6414] loop0: detected capacity change from 0 to 4096 [ 159.877663][ T28] audit: type=1400 audit(416.097:886): avc: denied { tracepoint } for pid=6415 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.906259][ T6414] FAULT_INJECTION: forcing a failure. [ 159.906259][ T6414] name failslab, interval 1, probability 0, space 0, times 0 [ 159.970030][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.0.795 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 159.970061][ T6414] Tainted: [W]=WARN [ 159.970067][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.970079][ T6414] Call Trace: [ 159.970087][ T6414] [ 159.970095][ T6414] __dump_stack+0x1d/0x30 [ 159.970199][ T6414] dump_stack_lvl+0x95/0xd0 [ 159.970234][ T6414] dump_stack+0x15/0x1b [ 159.970249][ T6414] should_fail_ex+0x25e/0x270 [ 159.970270][ T6414] should_failslab+0x8c/0xb0 [ 159.970348][ T6414] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 159.970367][ T6414] ? __d_alloc+0x34/0x320 [ 159.970440][ T6414] ? __d_alloc+0x34/0x320 [ 159.970486][ T6414] __d_alloc+0x34/0x320 [ 159.970506][ T6414] d_alloc+0x2e/0x100 [ 159.970526][ T6414] lookup_one_qstr_excl+0x95/0x240 [ 159.970573][ T6414] __start_renaming+0x13f/0x2a0 [ 159.970598][ T6414] filename_renameat2+0x2c1/0x6a0 [ 159.970658][ T6414] __se_sys_renameat2+0x4f/0x1c0 [ 159.970679][ T6414] __x64_sys_renameat2+0x67/0x80 [ 159.970702][ T6414] x64_sys_call+0x2a12/0x3020 [ 159.970748][ T6414] do_syscall_64+0x136/0x3c0 [ 159.970827][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.970845][ T6414] RIP: 0033:0x7f018b31ce59 [ 159.970906][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.970927][ T6414] RSP: 002b:00007f0189d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 159.970945][ T6414] RAX: ffffffffffffffda RBX: 00007f018b595fa0 RCX: 00007f018b31ce59 [ 159.970960][ T6414] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 159.970975][ T6414] RBP: 00007f0189d77090 R08: 0000000000000002 R09: 0000000000000000 [ 159.970989][ T6414] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 159.971003][ T6414] R13: 00007f018b596038 R14: 00007f018b595fa0 R15: 00007fff1355a208 [ 159.971133][ T6414] [ 160.266953][ T6420] program syz.1.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.281361][ T6420] loop1: detected capacity change from 0 to 256 [ 160.289694][ T6420] msdos: Unknown parameter 'i' [ 160.366407][ T2979] ================================================================== [ 160.375072][ T2979] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 160.382713][ T2979] [ 160.385214][ T2979] read-write to 0xffff88810061c600 of 4 bytes by task 3285 on cpu 1: [ 160.393388][ T2979] dont_mount+0x2a/0x40 [ 160.397797][ T2979] vfs_unlink+0x202/0x490 [ 160.402213][ T2979] filename_unlinkat+0x1dc/0x410 [ 160.407413][ T2979] __se_sys_unlink+0x2b/0xe0 [ 160.412373][ T2979] __x64_sys_unlink+0x1f/0x30 [ 160.417303][ T2979] x64_sys_call+0x2eb6/0x3020 [ 160.422763][ T2979] do_syscall_64+0x136/0x3c0 [ 160.427706][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.434472][ T2979] [ 160.436792][ T2979] read to 0xffff88810061c600 of 4 bytes by task 2979 on cpu 0: [ 160.444588][ T2979] step_into_slowpath+0xea/0x4c0 [ 160.449523][ T2979] path_lookupat+0x2eb/0x4c0 [ 160.454377][ T2979] filename_lookup+0x18f/0x390 [ 160.459230][ T2979] do_readlinkat+0x74/0x2f0 [ 160.464090][ T2979] __x64_sys_readlink+0x47/0x60 [ 160.469285][ T2979] x64_sys_call+0x2b51/0x3020 [ 160.474306][ T2979] do_syscall_64+0x136/0x3c0 [ 160.478897][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.485050][ T2979] [ 160.487400][ T2979] value changed: 0x00300080 -> 0x00004080 [ 160.493106][ T2979] [ 160.495686][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 160.502225][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.514034][ T2979] Tainted: [W]=WARN [ 160.517910][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.528043][ T2979] ================================================================== [ 160.561525][ T6425] program syz.2.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.576357][ T6425] loop2: detected capacity change from 0 to 256 [ 160.607878][ T6425] msdos: Unknown parameter 'i'