last executing test programs: 4.029324651s ago: executing program 4 (id=2004): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x90, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866c", 0x0, 0x31, 0x6000000000000000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a44000000030a010800000000000000000a0000070900010073797a31000000000c0002400000000000000002180004"], 0x6c}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x269}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x1c}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x5, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 3.306543119s ago: executing program 4 (id=2013): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) creat(&(0x7f0000000240)='./file0\x00', 0x153) (async) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x153) write$char_usb(r5, &(0x7f00000001c0)="64e9", 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000000)) ioctl$TCSETS(r8, 0x4b72, &(0x7f0000000080)={0xfffffffa, 0x7d, 0x1, 0x3, 0xe, "0060000000000000000001030040000000f600"}) (async) ioctl$TCSETS(r8, 0x4b72, &(0x7f0000000080)={0xfffffffa, 0x7d, 0x1, 0x3, 0xe, "0060000000000000000001030040000000f600"}) 3.053186934s ago: executing program 4 (id=2020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000100fdffffffffdbdf25ff010000000000000000000000000001e00000020000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000ffffffffffffffff0010000000000000000000000000000000000000000000000000000000000000000000000000000001006c0000000000060000000000000005000000000000000000000000000000fcffffff00000000010000000000000004010500fc000000000000000000000000000004000000003c0000000000000000000000000000000000000000000000023500000002000000000000d00b000000000000fe8000000000000000000000000000bb000004d53c0000000a000000ff010000000000000000000000000001fdffffff01000000000800000008000000000000000000000000000000000000000000010000000032"], 0x1bc}, 0x1, 0x0, 0x0, 0x6815}, 0x800) 3.020585355s ago: executing program 4 (id=2024): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x4020000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_getres(0xfffffffffffffff1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x2}, &(0x7f0000000300)=0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 2.734183902s ago: executing program 2 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x552, 0x4102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x515001, 0x488) r2 = socket$unix(0x1, 0x5, 0x0) iopl(0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x80085610, &(0x7f0000000740)={0x0, 0x0}) ioperm(0x0, 0x1, 0x1) ioperm(0x0, 0x40, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x4010, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) io_destroy(0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) sendmsg$nl_route(r0, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x0, 0x140, 0x3}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0x6, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000189500000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x8, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) 2.659289655s ago: executing program 4 (id=2033): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf59fcf686f76cd13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000009000000000000000800000081117c000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) socket$key(0xf, 0x3, 0x2) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) unshare(0x4000400) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x2000000, 0x8655}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xd, 0x1}, {0x7, 0x1}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x200, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x0, 0x1000000000400000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.587957256s ago: executing program 2 (id=2034): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fsopen(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100fe", @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.698642278s ago: executing program 4 (id=2043): openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r2, 0x1, 0x4070bd28, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r7, 0x0, 0x4000040) r8 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff199}}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(r4, r8, 0x7, r6, &(0x7f0000000140)={r9, r7, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59cf000000000100000008000000140001800600010008000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private1, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.63985962s ago: executing program 1 (id=2044): io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0x1, 0x4, &(0x7f0000000880)=[{}, {}, {}, {}], &(0x7f0000000900)={0x0, 0x3938700}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x2, &(0x7f0000001380)=ANY=[@ANYBLOB="d3a11000ffffffff95"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x3, &(0x7f0000001340)=""/3, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002500)={&(0x7f00000013c0)={0x1134, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4b}}}}, [@NL80211_ATTR_TESTDATA={0xc9, 0x45, "39e88cac8fa9dd69ce327407e4632511235603de95501459064e10bd94945530289c13237a09a0d9c9e4ad7da3e778caff78ebf1bfd8fe75d4e8f4177314000e548250e823b47fcd0976bf68cef5f184a8b25104e08ba95313cbef472ee65ad3f7792824beb1ca0fb3373ff7de9c53efa3169c141527ecc713542383c86a511c07e1748eb539f8c2ae20b60d7064354dfe83eb14a5992e759430efc61c13b0999d138a1cfbb7f4f8bf0ffcb3ed7cc882423b0b2297a0af0b9025a1cf1ff4eb61af44c57bed"}, @NL80211_ATTR_TESTDATA={0x1f, 0x45, "9d2aa68762da64651efdb614527dcfd76122ad471c5a4f9c86fd47"}, @NL80211_ATTR_TESTDATA={0xe, 0x45, "3c43b10d4f01394b35a1"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x11, 0x45, "8fcaf90d61ecc1efba6af8b957"}]}, 0x1134}, 0x1, 0x0, 0x0, 0x1c}, 0x8000) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") 1.61732391s ago: executing program 3 (id=2046): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x2, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x107042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file2\x00', 0x102942, 0x9f667fd378a54edc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8095}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="bdcd6e3dba430c6cebac71ac4486708a37d64e7f4d48cea686ddd6611c7ab111a17ad39dfc5c67b470ef005c6cec", @ANYRESHEX=r2, @ANYRES16=r4, @ANYRESDEC=r0, @ANYRES16=r5], 0x83, 0x235, &(0x7f0000000280)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r6 = epoll_create1(0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x30000000}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x1b8, 0x428, 0x1b8, 0x2e0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x100], 0x4, 0x28, 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) unshare(0x6020400) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) 1.60606544s ago: executing program 0 (id=2047): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5d370887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3360959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc361534b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0xdc7}}, 0x375) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000200000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c0000000200000000000000000000000000ffffe00000020000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.531812872s ago: executing program 0 (id=2048): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xffe0}}, @TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2b}]}}]}, 0x70}}, 0x24040094) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x40d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x1a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r7, r6, 0x4, r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000000000000500"/28], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@errors_continue}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") 1.531640692s ago: executing program 3 (id=2049): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x3700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.514418492s ago: executing program 2 (id=2050): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000580)=""/145, 0x91, 0x142, 0x0, 0x0) (async, rerun: 64) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400009000005001500010000000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@dax_never}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="9db625bd0200ffdbdf25010000000500040001000000f2815990b3950671198c016e05f810809028d27e2b0ba5cd68506d260ddf98bb07a6398eae80b45788ab79a7863c2b528a18697630c7e9bd1d430717c08b23989165e1480c7d4f2ab10d7932a0b3a6abf457328640c37dbade970109bb1dd42028417a32"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000407a4607979820fd327e376c833ef9a52a3f27af8cf424e9f673ce5027e69a6854ec07de8f512c8a1d2fc5db6b7da75a81120baeb32b8c0cbea784d4c90b3994311cadab520005b5060aaa4e16c82e1dbd68783948a4fef2cd2bebbfec", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000180)={0x1, 0x0, '\x00', 0x0, 0x0}) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x52d, &(0x7f0000000c40)="$eJzs3c9vI1cdAPDvjONt9hd2AaFSiVLRot0K1t40tI0QgnKBUyWg3JeQOFEUO45ip2yiClLxHyAkkDhx4oLEH4BU9cAfgCpVggvigACBEGzhgETpINvj3cSxk+zixGn8+Uhv/d545n3fm8jPM+O3MwFMracj4uWIKETEcxFRypeneYq9Xuqs9+6915c6KYkse/XvSST5sn5dnfJMRFzNN5uNiG98NeLbyeG4rZ3d9cV6vbaVl6vtxma1tbN7a62xuFpbrW3Mz8+9uPDSwgsLt7Pc8A4MqXuYcj/zs6988c3PfucPd/5687udTb/wsSjGQD/Gqde8Yndf9HX20dZpBJuAQt6f4qQbAgDAiXSO8T8cEZ/qHv+XotA9mhtQmETLAAAAgHHJvpTEe0lE9lCSeNgtAAAAgMlJI+JaJGklnwtwLdL0Un5t4KNxJa03W+3PrDS3N5Y770WUo5iurNVrt/O5wuUoJp3yXD7Htl9+fqA8HxGPR8QPS5e75cpSs7484WsfAAAAMC2uDpz//6uUdvPHG/L/BAAAAIDzqzyyAAAAAFwUTvkBAADg4hs8/39zQu0AAAAATsXXXnmlk7L+86+XX9vZXm++dmu51lqvNLaXKkvNrc3KarO52r1nX+O4+urN5ubnYmP7brVda7WrrZ3dO43m9kb7ztqBR2ADAAAAZ+jxT7712yQi9j5/uZsivw8gwAF/mnQDgHEqTLoBwMQ8+l28i2NtB3D2fIqB5Jj3Td4BAIAPvhsfP/z7f//5/64NwMVmrg8ATB9P8YbpVRycAWhCIEyVNCI+1Ms+Nmqdkb////qkUbIs4u3S/iWuLwIAwNm61k1JWrl/gJ+mlUrE9Yi0HMVkZa1eu52fH/ymVHysU57rrpccO2cYAAAAAAAAAAAAAAAAAAAAAAAAAOjJsiQyAAAA4EKLSP+SdO/mH3Gj9Oy1wesDl5J/l+LPeeEnr/7o7mK7vTXXWf6P7rO8LkVE+8f58udHPj4MAAAAGLdkb+RbvfP0/HXuTFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBR4997rS/20f3nhlOP+7csRUb4fP4378Wditvs6G8WIuPLPJGb2bZeMqW17b0TEE8P6n8T7WZaV81YMxk8j4vIpxy93d83o+FfHEB+m2Vud8eflYZ+/NJ7uvg7//M3k6f81MP4diN+L/ER3nBs2/l0/VFtjaIwn3/lFdWT8NyKenBk+/vTH32RE/GcO1fafLMsOx/jWN3d3R4R/L/tpxI2h3z/JgVjVdmOz2trZvbXWWFytrdY25ufnXlx4aeGFhdvVlbV6Lf93aJAffOKX7x/V/ytD4v/+d73x96j+Pzuq0gH/fefuvY/0ssVh8W8+M/T7dzZGxC/k6dP590Dn/Rv9/F4vv99TP3/7qaP6vzxi/x/39795wv4/9/Xv//GEqwIAZ6C1s7u+WK/Xto7IzB67Tnqies5b5lez56IZD5nJvtf7y52X9jxqpnO0+mBJv1ePXuH1U2hqdmZ7oxDjq7A1lnomOiwBAACn4MFB/6RbAgAAAAAAAAAAAAAAAAAAANPrLG5vNhhzbzJdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//5Gi2oU=") (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r8, 0x1) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x77, "52057962b27c4212d76c4ae262de528e48bbd5f9644cf501c2e61cf819"}, &(0x7f0000000140)=0x25) (rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 1.501459873s ago: executing program 3 (id=2051): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.443759974s ago: executing program 3 (id=2052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000300", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@local, @local, 0xff, 0xff0000ff, 0x7, 0xb, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x3, 0x7, 0x40, 0x7, 0x3, 'ip6_vti0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x101}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 0xb, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0xff, 0xff, 0xc706bb1ee1c865e4, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x9, 0x1, 0x9, 0x6, 0xff, 'ip6erspan0\x00', 'pimreg1\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @rand_addr=0x64010100, @multicast2, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x22, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xcad}, [@alu={0x4, 0x0, 0x4, 0x7, 0x9, 0x80, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk, @generic={0x6, 0xe, 0x0, 0x1, 0x6}]}, &(0x7f0000000b00)='GPL\x00', 0x3, 0x8a, &(0x7f0000000b40)=""/138, 0x40f00, 0x3c, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000c00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x10, 0xed9c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r3, r3, r3], 0x0, 0x10, 0x7}, 0x94) (async) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendmmsg(r4, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e6", 0xc5}], 0x1}}], 0x1, 0x4000) (async) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_rxfh={0x46, 0xe, 0x3, 0x0, 0x7, "b820dd", 0x4}}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 1.443666274s ago: executing program 3 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x700}, 0x48) 1.332284467s ago: executing program 2 (id=2054): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xf1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mkdir(0x0, 0x0) 1.154126431s ago: executing program 3 (id=2055): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68184, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x6020}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xeaae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50000000020601020000000000000000020000000c00078008001240000600000c000300686173683a697000050005000a00000005000400000000000900020073797a31000000000500010007000000734f2c209036310e858a7d0cf18f0c7e4e18c45286dd3492ce76b2d544ab8579034221ce8dc4bd7c73874ad9e7615dffe81c71b22c58158b85191773e9663a03f547044009bbbd28f424e50e08b37ed10ed5b3490770fe8f1ca9bde7a71d99203975a2709a07a60c8f151ed79be131fe19919e19ab9640e3da63479412de1e093ffd22c8878165541c0b1e9e960f6c3c929123b24fe52fede7a319953ec5f8400397b9b23c1b98ee4e71b4827839955f53"], 0x50}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000340)=""/184, 0xb8}], 0x6, &(0x7f0000000500)=[@mask_cswp={0x58, 0x114, 0x9, {{0xa, 0x1aa}, &(0x7f0000000480)=0x4266, &(0x7f00000004c0)=0x7f, 0xffffffffffffffff, 0x100000000, 0x0, 0x100000000000000, 0x38, 0x6}}], 0x58, 0x24004850}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001480)={&(0x7f000091f000/0x2000)=nil, &(0x7f000055d000/0x2000)=nil, &(0x7f000074f000/0x1000)=nil, &(0x7f000023d000/0x2000)=nil, &(0x7f000012e000/0x4000)=nil, &(0x7f0000569000/0x3000)=nil, &(0x7f000070a000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000789000/0x4000)=nil, &(0x7f000015f000/0x2000)=nil, &(0x7f0000000480), 0x0, r3}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20000f7}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.011943445s ago: executing program 1 (id=2056): perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x17, 0x44, "8130d5b77b2552022f50cd593f74caea6d30d7f07532858879a1c0cd2d7b11d26a4a7ffbd7e2da2f0be03f1778e060d40cfc00d86f89bbc7b6e5bed9e8325d", 0x36}, 0x80, &(0x7f0000001c40)}, 0x44000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) 1.010429785s ago: executing program 0 (id=2057): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200800002000000007000000000000000100000d0c0000000400000006000000000000130800000080003030002e00"], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x4}, 0x28) dup3(r2, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) r4 = socket$unix(0x1, 0x5, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1003, r4, 0x0}]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r7, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x180, 0x40000}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a'], 0xa) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) unshare(0x22020400) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, 0x0) mkdir(0x0, 0x0) 979.033736ms ago: executing program 1 (id=2058): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000030000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 921.075047ms ago: executing program 1 (id=2059): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xdc7}}, 0x375) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000001000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c0000000200000000000000000000000000ffffe00000020000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 819.668549ms ago: executing program 2 (id=2060): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) openat$vcs(0xffffffffffffff9c, 0x0, 0x200602, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/ppp\x00'}]}, 0x15) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x66000000, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_notify(r4, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x484, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xe}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x450, 0x2, [@TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7, 0x1, 0xff, {0x3, 0x0, 0x6, 0x4123, 0xf89, 0x1}, {0xff, 0x1, 0x8e, 0x2, 0x9}, 0x380, 0x2b61, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x53, 0x8001, 0x2, 0x8, 0x6, 0x2, 0x5, 0xfff, 0x800, 0x80, 0x7fff, 0x7, 0x3, 0x4, 0x1b, 0x9, 0x8, 0x7, 0xffffffff, 0x4, 0x10000, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x3ff, 0x3, 0x3, 0x5181589f, 0x4d6, 0xca9, 0x9, 0x2, 0x3ff, 0x7, 0x10001, 0x9d, 0x1ff, 0x7fff, 0x90, 0x1, 0x10001, 0x80000001, 0x7, 0x400, 0x800, 0x7, 0x8, 0x6, 0xb9, 0x81, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, 0x45, 0x11a, 0x8000, 0x10000, 0x300, 0x9e8, 0x6, 0x1, 0x0, 0x0, 0x2f90, 0x5, 0x7, 0x6, 0x200, 0x0, 0x9, 0x9, 0x4, 0x90b, 0x87ec, 0x5, 0x5, 0x8, 0x0, 0x7, 0xff, 0x0, 0x2e5f7e9e, 0x1000, 0x4, 0x5, 0x6e, 0x8001, 0x0, 0x1f9aa762, 0x3, 0x9, 0x1, 0xd98, 0x9, 0x0, 0x0, 0xd, 0x8, 0xffff, 0x40, 0x7, 0xd, 0x10000, 0x9, 0x9, 0x6, 0x2, 0x200, 0x4b, 0x10001, 0x80000001, 0xe1da, 0x10000, 0x4, 0x7fff, 0x5, 0xc, 0x3, 0x8, 0x1, 0x101, 0x0, 0x6, 0x2, 0x8, 0x49d85126, 0x7, 0x5, 0x3, 0x8000, 0x4f7cd2f4, 0xd, 0x1ff, 0x1, 0x10, 0xb0a, 0x2, 0x8, 0xdd4b, 0xa3, 0x4, 0x0, 0x40, 0x66d6, 0x7, 0x0, 0x0, 0x101, 0xa2, 0x0, 0x1, 0x3, 0x7, 0x0, 0x7, 0x5, 0xd, 0x2, 0x7, 0x7, 0xdd7, 0x0, 0xa, 0x8, 0x4a3d, 0x48, 0x1, 0xffff, 0xc7d, 0xfffffffa, 0x6, 0x4, 0x0, 0x9, 0xf, 0x2, 0xfff, 0x83, 0x3, 0x0, 0x0, 0x80, 0xf1fc2bb, 0x7, 0x7, 0x7fffffff, 0x39, 0x2, 0xffffffff, 0x7ff, 0x2, 0x9, 0x5, 0x4, 0x0, 0x4, 0x9, 0x0, 0x4, 0x6, 0x15, 0x9, 0x72ebbd3f, 0x80008, 0x3ff, 0x5, 0x9, 0x7, 0x9, 0xff, 0xfffffff6, 0x9fa0, 0x7fff, 0xffffffff, 0x10001, 0xb, 0x8095, 0x80000000, 0x9, 0x4b6, 0x302, 0x3, 0x3, 0xcc5c, 0x5, 0x2, 0x7, 0x0, 0xae, 0x3, 0x5, 0x6, 0x4, 0xa0, 0x0, 0x9, 0x9f, 0x0, 0xfff, 0x5, 0x995e, 0x0, 0x2, 0x100, 0x0, 0x5, 0x5, 0x6, 0xa7bf]}]}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x484}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff2e29}}, './file1\x00'}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000180)=0x8b8e, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") getdents64(0xffffffffffffffff, 0x0, 0xc00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 747.386331ms ago: executing program 1 (id=2061): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fsopen(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811f8ff", @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 593.790005ms ago: executing program 0 (id=2062): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 419.943219ms ago: executing program 0 (id=2063): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000008c001a000000008001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 408.18441ms ago: executing program 0 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000310df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') write$cgroup_int(r2, &(0x7f0000000140)=0x7fd, 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) 265.265783ms ago: executing program 1 (id=2065): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) set_mempolicy(0x1, &(0x7f00000001c0)=0x3, 0xb) unshare(0x6a040000) 0s ago: executing program 2 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x900}, 0x48) kernel console output (not intermixed with test programs): 197.323335][ T7614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 197.376321][ T7646] loop3: detected capacity change from 0 to 256 [ 197.389677][ T7646] vfat: Bad value for 'utf8' [ 197.415398][ T7643] gtp2: entered allmulticast mode [ 197.434929][ T7640] Set syz1 is full, maxelem 65536 reached [ 197.570811][ T7657] loop3: detected capacity change from 0 to 512 [ 197.595415][ T7657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.595931][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.608301][ T7657] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.629264][ T28] audit: type=1400 audit(1784894683.166:886): avc: denied { write } for pid=7656 comm="syz.3.1211" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.652287][ T28] audit: type=1400 audit(1784894683.176:887): avc: denied { write } for pid=7656 comm="syz.3.1211" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.656635][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.687963][ T7662] loop1: detected capacity change from 0 to 1024 [ 197.695083][ T7662] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.706616][ T7662] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 5: comm syz.1.1212: lblock 5 mapped to illegal pblock 5 (length 1) [ 197.723919][ T7662] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.726980][ T7662] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1212: Failed to acquire dquot type 0 [ 197.736140][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 197.736162][ C1] EXT4-fs (loop1): initial error at time 1784894683: ext4_map_blocks:833: inode 3: block 5 [ 197.736219][ C1] EXT4-fs (loop1): last error at time 1784894683: ext4_map_blocks:833: inode 3: block 5 [ 197.774508][ T7662] loop1: lost filesystem error report for type 5 error -117 [ 197.776727][ T7662] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.1212: lblock 5 mapped to illegal pblock 5 (length 1) [ 197.798100][ T7662] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.798258][ T7662] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1212: Failed to acquire dquot type 0 [ 197.819414][ T7662] loop1: lost filesystem error report for type 5 error -117 [ 197.819594][ T7662] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1212: Freeing blocks not in datazone - block = 0, count = 4096 [ 197.840845][ T7662] loop1: lost filesystem error report for type 5 error -117 [ 197.841062][ T7662] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.1212: lblock 5 mapped to illegal pblock 5 (length 1) [ 197.863035][ T7662] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.863148][ T7662] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1212: Failed to acquire dquot type 0 [ 197.885532][ T7662] loop1: lost filesystem error report for type 5 error -117 [ 197.885799][ T7662] EXT4-fs (loop1): 1 orphan inode deleted [ 197.899760][ T7662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.937103][ T7662] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.1212: lblock 5 mapped to illegal pblock 5 (length 1) [ 197.951419][ T7662] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1212: Failed to acquire dquot type 0 [ 197.975734][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.486925][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 198.556286][ T7681] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.726762][ T7689] loop0: detected capacity change from 0 to 512 [ 198.797374][ T7689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.837755][ T7689] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.852038][ T7682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.928032][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.998777][ T7693] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1217'. [ 199.200240][ T7686] loop2: detected capacity change from 0 to 512 [ 199.217738][ T7705] loop4: detected capacity change from 0 to 512 [ 199.265918][ T7686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.279803][ T7705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.485795][ T7686] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.498521][ T7705] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.586734][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 199.667357][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.802760][ T7733] loop3: detected capacity change from 0 to 1024 [ 199.873815][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.947223][ T7728] gtp8: entered allmulticast mode [ 199.960430][ T7733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.996464][ T7738] loop4: detected capacity change from 0 to 1024 [ 200.035375][ T7738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.670911][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.710794][ T7746] loop2: detected capacity change from 0 to 1764 [ 200.842529][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.957729][ T7771] loop4: detected capacity change from 0 to 512 [ 201.958860][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 202.060397][ T7778] EXT4-fs: inline encryption not supported [ 202.066507][ T7778] EXT4-fs: Ignoring removed orlov option [ 202.082288][ T7780] FAULT_INJECTION: forcing a failure. [ 202.082288][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.101868][ T7778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.116332][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 202.116359][ T28] audit: type=1400 audit(1784894687.676:896): avc: denied { ioctl } for pid=7776 comm="syz.1.1246" path="socket:[17187]" dev="sockfs" ino=17187 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.181529][ T7778] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1242: invalid indirect mapped block 32768 (level 2) [ 202.195201][ T7778] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 202.202181][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 202.217768][ C1] EXT4-fs (loop3): initial error at time 1784894687: ext4_free_branches:1023: inode 16 [ 202.227536][ C1] EXT4-fs (loop3): last error at time 1784894687: ext4_free_branches:1023: inode 16 [ 202.253535][ T7778] EXT4-fs (loop3): 1 orphan inode deleted [ 202.259365][ T7778] EXT4-fs (loop3): 1 truncate cleaned up [ 202.265709][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.314505][ T7771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.331612][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.0.1247 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.331644][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.331659][ T7780] Call Trace: [ 202.331743][ T7780] [ 202.331753][ T7780] __dump_stack+0x1d/0x30 [ 202.331778][ T7780] dump_stack_lvl+0x95/0xd0 [ 202.331831][ T7780] dump_stack+0x15/0x1b [ 202.331908][ T7780] should_fail_ex+0x25e/0x270 [ 202.331937][ T7780] should_fail+0xb/0x20 [ 202.332043][ T7780] should_fail_usercopy+0x1a/0x20 [ 202.332073][ T7780] _copy_from_user+0x1c/0xb0 [ 202.332093][ T7780] ___sys_sendmsg+0xc1/0x1e0 [ 202.332214][ T7780] __x64_sys_sendmsg+0xd4/0x160 [ 202.332248][ T7780] x64_sys_call+0x194c/0x3020 [ 202.332269][ T7780] do_syscall_64+0x136/0x3c0 [ 202.332369][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.332474][ T7780] RIP: 0033:0x7f0857d4de99 [ 202.332489][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.332508][ T7780] RSP: 002b:00007f0856786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.332531][ T7780] RAX: ffffffffffffffda RBX: 00007f0857fd6090 RCX: 00007f0857d4de99 [ 202.332548][ T7780] RDX: 0000000004000850 RSI: 0000200000000140 RDI: 0000000000000005 [ 202.332601][ T7780] RBP: 00007f0856786090 R08: 0000000000000000 R09: 0000000000000000 [ 202.332691][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.332704][ T7780] R13: 00007f0857fd6128 R14: 00007f0857fd6090 R15: 00007ffe218047f8 [ 202.332728][ T7780] [ 202.512710][ T7771] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.523922][ T28] audit: type=1400 audit(1784894687.726:897): avc: denied { connect } for pid=7776 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.780834][ T28] audit: type=1400 audit(1784894688.336:898): avc: denied { write } for pid=7769 comm="syz.4.1245" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.887535][ T7775] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 202.908280][ T7778] geneve1: entered promiscuous mode [ 202.930947][ T7798] tipc: Failed to remove unknown binding: 66,0,0/0:1568154208/1568154210 [ 202.961629][ T7795] tipc: Failed to remove unknown binding: 66,0,0/0:691920596/691920597 [ 202.973084][ T7794] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 203.005641][ T7795] tipc: Failed to remove unknown binding: 66,0,0/0:691920596/691920597 [ 203.067487][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.121273][ T7802] Cannot find map_set index 135 as target [ 203.138911][ T7797] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 203.208173][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 203.969228][ T7813] gtp9: entered allmulticast mode [ 204.098258][ T7822] set_capacity_and_notify: 1 callbacks suppressed [ 204.098276][ T7822] loop4: detected capacity change from 0 to 512 [ 204.314659][ T7830] syzkaller1: entered promiscuous mode [ 204.320295][ T7830] syzkaller1: entered allmulticast mode [ 204.422237][ T7822] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.458825][ T7822] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.1258: orphan file block 0: bad magic [ 204.471541][ T7822] loop4: lost filesystem error report for type 5 error -117 [ 204.482179][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 204.495953][ C1] EXT4-fs (loop4): initial error at time 1784894690: ext4_init_orphan_info:618 [ 204.504966][ C1] EXT4-fs (loop4): last error at time 1784894690: ext4_init_orphan_info:618 [ 204.524179][ T7822] EXT4-fs (loop4): mount failed [ 204.540748][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.269583][ T28] audit: type=1400 audit(1784894690.826:899): avc: denied { append } for pid=7837 comm="syz.2.1266" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.359339][ T7850] loop1: detected capacity change from 0 to 512 [ 205.398930][ T7850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.432662][ T7858] loop0: detected capacity change from 0 to 512 [ 205.455064][ T7850] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.495890][ T7858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.524887][ T28] audit: type=1400 audit(1784894691.076:900): avc: denied { write } for pid=7849 comm="syz.1.1270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.558501][ T7858] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.588581][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.614587][ T28] audit: type=1400 audit(1784894691.086:901): avc: denied { write } for pid=7849 comm="syz.1.1270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.662527][ T28] audit: type=1400 audit(1784894691.086:902): avc: denied { write } for pid=7849 comm="syz.1.1270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.707403][ T28] audit: type=1400 audit(1784894691.156:903): avc: denied { write } for pid=7857 comm="syz.0.1271" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.743523][ T7860] loop3: detected capacity change from 0 to 512 [ 205.775897][ T7860] EXT4-fs: Ignoring removed bh option [ 205.782903][ T7860] EXT4-fs: dax option not supported [ 205.835956][ T7860] netlink: 'syz.3.1272': attribute type 8 has an invalid length. [ 205.913297][ T7864] loop3: detected capacity change from 0 to 512 [ 205.935801][ T7864] EXT4-fs: Ignoring removed bh option [ 205.941641][ T7864] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 205.951144][ T7864] EXT4-fs (loop3): 1 truncate cleaned up [ 205.958100][ T7864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.036415][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.045691][ T7838] 9p: Could not find request transport: f:Ÿ]S•4*Eûd [ 206.099546][ T28] audit: type=1400 audit(1784894691.656:904): avc: denied { write } for pid=7863 comm="syz.3.1275" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.125909][ T28] audit: type=1400 audit(1784894691.656:905): avc: denied { write } for pid=7863 comm="syz.3.1275" path="/250/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 206.212588][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 206.237462][ T7890] loop2: detected capacity change from 0 to 512 [ 206.250736][ T7890] EXT4-fs (loop2): 1 truncate cleaned up [ 206.256970][ T7890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.347746][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.377171][ T7902] loop1: detected capacity change from 0 to 512 [ 206.412998][ T7896] loop0: detected capacity change from 0 to 1024 [ 206.415611][ T7874] gtp3: entered allmulticast mode [ 206.424956][ T7902] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 206.436500][ T7902] EXT4-fs (loop1): 1 truncate cleaned up [ 206.442702][ T7902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.494791][ T7902] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.514796][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.579907][ T7909] loop3: detected capacity change from 0 to 8192 [ 206.610508][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.739471][ T7920] loop3: detected capacity change from 0 to 256 [ 206.776373][ T7920] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 206.789727][ T7920] bond2 (unregistering): Released all slaves [ 206.823372][ T7929] lo speed is unknown, defaulting to 1000 [ 206.908597][ T7939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.939752][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.270024][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.554323][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 207.585559][ T7959] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1303'. [ 207.725352][ T7973] EXT4-fs: Ignoring removed oldalloc option [ 207.731382][ T7973] EXT4-fs: Ignoring removed oldalloc option [ 207.737310][ T7973] ext4: Unknown parameter 'obj_user' [ 207.749609][ T7973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 207.756249][ T7973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.763736][ T7973] vhci_hcd vhci_hcd.0: Device attached [ 207.770926][ T7973] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 207.777633][ T7973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.785278][ T7973] vhci_hcd vhci_hcd.0: Device attached [ 207.800326][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'. [ 207.826744][ T7981] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 207.908034][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 207.908049][ T28] audit: type=1400 audit(1784894693.456:914): avc: denied { read } for pid=7972 comm="syz.2.1309" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.940030][ T28] audit: type=1400 audit(1784894693.456:915): avc: denied { open } for pid=7972 comm="syz.2.1309" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.965333][ T7991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7991 comm=syz.4.1311 [ 207.988617][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'. [ 208.006878][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 208.018414][ T7994] netlink: 'syz.1.1314': attribute type 12 has an invalid length. [ 208.034217][ T28] audit: type=1400 audit(1784894693.576:916): avc: denied { unmount } for pid=7986 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.061758][ T7979] vhci_hcd: connection closed [ 208.062034][ T7974] vhci_hcd: connection closed [ 208.062060][ T4707] vhci_hcd vhci_hcd.2: stop threads [ 208.076690][ T4707] vhci_hcd vhci_hcd.2: release socket [ 208.082138][ T4707] vhci_hcd vhci_hcd.2: disconnect device [ 208.088004][ T4707] vhci_hcd vhci_hcd.2: stop threads [ 208.093409][ T4707] vhci_hcd vhci_hcd.2: release socket [ 208.099133][ T4707] vhci_hcd vhci_hcd.2: disconnect device [ 208.105925][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.118670][ T7994] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.133415][ T9] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 208.142339][ T9] usb 5-1: enqueue for inactive port 0 [ 208.149541][ T28] audit: type=1400 audit(1784894693.696:917): avc: denied { write } for pid=7993 comm="syz.1.1314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.172610][ T9] usb 5-1: enqueue for inactive port 0 [ 208.186856][ T9] usb 5-1: enqueue for inactive port 0 [ 208.193246][ T28] audit: type=1400 audit(1784894693.696:918): avc: denied { write } for pid=7993 comm="syz.1.1314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.221775][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.234122][ T7978] gtp4: entered allmulticast mode [ 208.272274][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 208.299929][ T8004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.313523][ T8004] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.332985][ T28] audit: type=1400 audit(1784894693.896:919): avc: denied { write } for pid=8003 comm="syz.4.1318" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.375515][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.539546][ T8019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.580952][ T8019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.637447][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 208.689844][ T28] audit: type=1400 audit(1784894694.246:920): avc: denied { write } for pid=8022 comm="syz.2.1323" lport=51590 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.738211][ T28] audit: type=1400 audit(1784894694.246:921): avc: denied { setopt } for pid=8022 comm="syz.2.1323" lport=51590 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.779002][ T28] audit: type=1400 audit(1784894694.246:922): avc: denied { ioctl } for pid=8022 comm="syz.2.1323" path="socket:[18711]" dev="sockfs" ino=18711 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.818523][ T28] audit: type=1400 audit(1784894694.246:923): avc: denied { bind } for pid=8022 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.146234][ T8051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.627098][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.720290][ T8068] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18969 sclass=netlink_xfrm_socket pid=8068 comm=syz.0.1337 [ 209.776805][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 209.848738][ T8077] set_capacity_and_notify: 5 callbacks suppressed [ 209.848754][ T8077] loop1: detected capacity change from 0 to 512 [ 209.911261][ T8070] lo speed is unknown, defaulting to 1000 [ 209.960219][ T8087] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1342'. [ 209.969430][ T8077] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1336: inode has both inline data and extents flags [ 209.996109][ T8077] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.004636][ T8077] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1336: couldn't read orphan inode 15 (err -117) [ 210.025966][ T8077] loop1: lost filesystem error report for type 5 error -117 [ 210.030143][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.050806][ T8080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8080 comm=syz.3.1338 [ 210.065695][ T11] Process accounting resumed [ 210.079180][ T8094] loop2: detected capacity change from 0 to 512 [ 210.110105][ T8096] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 210.123988][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 210.135777][ T8094] EXT4-fs (loop2): 1 truncate cleaned up [ 210.148631][ T8094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.184454][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.249848][ T8107] bridge_slave_0: left allmulticast mode [ 210.259235][ T8107] bridge_slave_0: left promiscuous mode [ 210.266197][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.275258][ T8107] bridge_slave_1: left allmulticast mode [ 210.280958][ T8107] bridge_slave_1: left promiscuous mode [ 210.286817][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.296179][ T8107] bond0: (slave bond_slave_0): Releasing backup interface [ 210.305880][ T8107] bond0: (slave bond_slave_1): Releasing backup interface [ 210.316765][ T8107] team0: Port device team_slave_0 removed [ 210.325292][ T8107] team0: Port device team_slave_1 removed [ 210.332136][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.339589][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.349036][ T8107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.379463][ T8108] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 210.477727][ T8122] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1353'. [ 210.545097][ T8128] netlink: 'syz.0.1356': attribute type 21 has an invalid length. [ 210.553174][ T8128] netlink: 'syz.0.1356': attribute type 5 has an invalid length. [ 210.561361][ T8128] netlink: 'syz.0.1356': attribute type 6 has an invalid length. [ 211.043997][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.214468][ T8145] loop1: detected capacity change from 0 to 512 [ 211.238035][ T8149] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 211.278526][ T8145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.291065][ T8145] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.308997][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.629424][ T8169] loop2: detected capacity change from 0 to 512 [ 211.642102][ T8169] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.649581][ T8169] EXT4-fs: inline encryption not supported [ 211.663935][ T8169] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 212.748365][ T4721] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.757446][ T4721] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.770089][ T4721] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.779286][ T4721] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.768538][ T8196] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.798252][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 213.798268][ T28] audit: type=1400 audit(1784894699.356:941): avc: denied { ioctl } for pid=8199 comm="syz.4.1380" path="socket:[19058]" dev="sockfs" ino=19058 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.975741][ T8214] loop1: detected capacity change from 0 to 512 [ 214.017065][ T8221] loop2: detected capacity change from 0 to 512 [ 214.025538][ T8214] EXT4-fs: Ignoring removed orlov option [ 214.035796][ T8221] EXT4-fs (loop2): 1 truncate cleaned up [ 214.044548][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.060715][ T8214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1384: invalid indirect mapped block 4294967295 (level 1) [ 214.074847][ T8201] loop0: detected capacity change from 0 to 512 [ 214.082864][ T8201] EXT4-fs: Ignoring removed bh option [ 214.088386][ T8201] EXT4-fs: dax option not supported [ 214.093489][ T8214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.093718][ T8214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1384: invalid indirect mapped block 4294967295 (level 1) [ 214.117425][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 214.117467][ C1] EXT4-fs (loop1): initial error at time 1784894699: ext4_free_branches:1023: inode 11 [ 214.117498][ C1] EXT4-fs (loop1): last error at time 1784894699: ext4_free_branches:1023: inode 11 [ 214.118409][ T28] audit: type=1400 audit(1784894699.606:942): avc: denied { nlmsg_read } for pid=8211 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 214.124600][ T8223] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 214.138744][ T8201] netlink: 'syz.0.1378': attribute type 8 has an invalid length. [ 214.144545][ T8214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.144776][ T8214] EXT4-fs (loop1): 2 truncates cleaned up [ 214.145193][ T8214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.222721][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.301198][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.341478][ T8246] loop2: detected capacity change from 0 to 512 [ 214.356648][ T8246] EXT4-fs: Ignoring removed bh option [ 214.373397][ T8246] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 214.374522][ T8244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.405594][ T8246] EXT4-fs (loop2): 1 truncate cleaned up [ 214.443538][ T8246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.494306][ T8259] __nla_validate_parse: 2 callbacks suppressed [ 214.494321][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 214.590070][ T28] audit: type=1400 audit(1784894700.146:943): avc: denied { write } for pid=8245 comm="syz.2.1392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.618597][ T28] audit: type=1400 audit(1784894700.176:944): avc: denied { write } for pid=8245 comm="syz.2.1392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.649068][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 214.652525][ T28] audit: type=1400 audit(1784894700.176:945): avc: denied { write } for pid=8245 comm="syz.2.1392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.686671][ T8240] gtp5: entered allmulticast mode [ 214.751266][ T28] audit: type=1400 audit(1784894700.206:946): avc: denied { write } for pid=8262 comm="syz.3.1401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 214.779613][ T8277] loop1: detected capacity change from 0 to 512 [ 214.789131][ T8277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.815846][ T8265] loop4: detected capacity change from 0 to 512 [ 214.838106][ T8277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.863723][ T8265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.876971][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.887624][ T8277] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.906095][ T8265] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.927260][ T28] audit: type=1326 audit(1784894700.486:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a09de99 code=0x7ffc0000 [ 214.987476][ T28] audit: type=1326 audit(1784894700.486:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd37a09de99 code=0x7ffc0000 [ 215.042667][ T28] audit: type=1326 audit(1784894700.486:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a09de99 code=0x7ffc0000 [ 215.069150][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.079104][ T28] audit: type=1326 audit(1784894700.486:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd37a09de99 code=0x7ffc0000 [ 215.405042][ T8286] loop4: detected capacity change from 0 to 512 [ 215.422750][ T8286] EXT4-fs: Ignoring removed i_version option [ 215.450184][ T8286] EXT4-fs: Ignoring removed bh option [ 215.475947][ T8286] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 215.559330][ T8300] geneve2: entered promiscuous mode [ 215.583734][ T4697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.597881][ T4697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.608809][ T8304] program syz.4.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.714656][ T4697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.753897][ T8310] loop1: detected capacity change from 0 to 512 [ 215.763738][ T4697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.782629][ T8310] EXT4-fs: Ignoring removed bh option [ 215.798911][ T8300] loop2: detected capacity change from 0 to 512 [ 215.811377][ T8300] ext4: Unknown parameter 'oldalloc"grpquota' [ 215.826154][ T8310] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 215.858188][ T8319] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.869347][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.876629][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.894741][ T8310] EXT4-fs (loop1): 1 truncate cleaned up [ 215.905687][ T8300] loop2: detected capacity change from 0 to 164 [ 215.913699][ T8300] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 215.939991][ T8300] loop2: detected capacity change from 0 to 512 [ 215.964461][ T8329] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 215.989970][ T8300] ------------[ cut here ]------------ [ 215.995488][ T8300] EA inode 11 i_nlink=2 [ 215.995515][ T8300] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.2.1413/8300 [ 216.010646][ T8300] Modules linked in: [ 216.014560][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.2.1413 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.023869][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.034086][ T8300] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 216.040865][ T8300] Code: 76 c1 96 ff 49 8d 7e 40 4c 8d 2d db 9f 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 f8 d9 03 90 90 90 90 90 90 90 [ 216.060721][ T8300] RSP: 0018:ffffc9000158f7f8 EFLAGS: 00010246 [ 216.067067][ T8300] RAX: ffff88811fbbf2b0 RBX: ffff8881072aa6e8 RCX: ffffffff81c29656 [ 216.075195][ T8300] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3620 [ 216.088530][ T8300] RBP: 000000000000000b R08: 00018881072aa69b R09: 0000000000000000 [ 216.096575][ T8300] R10: ffffc9000158f728 R11: 0001c9000158f728 R12: ffff8881072aa698 [ 216.099856][ T8329] bond1: entered promiscuous mode [ 216.104565][ T8300] R13: ffffffff871d3620 R14: ffff8881072aa650 R15: 0000000000000001 [ 216.104589][ T8300] FS: 00007fdb0ddd76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 216.110152][ T8329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.118082][ T8300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.140150][ T8300] CR2: 0000000000000000 CR3: 000000012d0ce000 CR4: 00000000003506f0 [ 216.148211][ T8300] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.156250][ T8300] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 216.164359][ T8300] Call Trace: [ 216.167644][ T8300] [ 216.170689][ T8300] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 216.176663][ T8300] ext4_xattr_delete_inode+0x6b5/0x790 [ 216.182268][ T8300] ext4_evict_inode+0xb18/0xdf0 [ 216.187133][ T8300] ? __pfx_ext4_evict_inode+0x10/0x10 [ 216.196322][ T8300] evict+0x2a5/0x510 [ 216.200230][ T8300] iput+0x430/0x5a0 [ 216.204088][ T8300] ext4_process_orphan+0x1a4/0x1c0 [ 216.209284][ T8300] ext4_orphan_cleanup+0x6a6/0xa10 [ 216.214445][ T8300] ? ext4_register_li_request+0x14c/0x440 [ 216.220195][ T8300] ext4_fill_super+0x33ab/0x3760 [ 216.225157][ T8300] ? set_blocksize+0x14c/0x270 [ 216.229991][ T8300] ? __pfx_ext4_fill_super+0x10/0x10 [ 216.235272][ T8300] get_tree_bdev_flags+0x291/0x300 [ 216.240396][ T8300] ? __pfx_ext4_fill_super+0x10/0x10 [ 216.245734][ T8300] get_tree_bdev+0x1f/0x30 [ 216.250143][ T8300] ext4_get_tree+0x1c/0x30 [ 216.254567][ T8300] vfs_get_tree+0x57/0x1d0 [ 216.258975][ T8300] do_new_mount+0x288/0x8d0 [ 216.263545][ T8300] path_mount+0x4ad/0xb90 [ 216.267884][ T8300] __se_sys_mount+0x28c/0x2e0 [ 216.272586][ T8300] ? __se_sys_mkdirat+0xa2/0xf0 [ 216.277492][ T8300] ? kmem_cache_free+0xca/0x380 [ 216.282345][ T8300] __x64_sys_mount+0x67/0x80 [ 216.286964][ T8300] x64_sys_call+0x2d61/0x3020 [ 216.291630][ T8300] do_syscall_64+0x136/0x3c0 [ 216.296210][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.306358][ T8300] RIP: 0033:0x7fdb0f37f10a [ 216.310838][ T8300] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.330887][ T8300] RSP: 002b:00007fdb0ddd6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.339364][ T8300] RAX: ffffffffffffffda RBX: 00007fdb0ddd6ee0 RCX: 00007fdb0f37f10a [ 216.347471][ T8300] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fdb0ddd6ea0 [ 216.355468][ T8300] RBP: 00002000000009c0 R08: 00007fdb0ddd6ee0 R09: 0000000000800718 [ 216.363500][ T8300] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 216.371524][ T8300] R13: 00007fdb0ddd6ea0 R14: 000000000000048d R15: 0000200000000200 [ 216.379650][ T8300] [ 216.382835][ T8300] ---[ end trace 0000000000000000 ]--- [ 216.388963][ T8300] EXT4-fs (loop2): 1 orphan inode deleted [ 216.405116][ T8332] gtp6: entered allmulticast mode [ 216.428831][ T8346] lo speed is unknown, defaulting to 1000 [ 216.462147][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'. [ 216.639422][ T8368] FAULT_INJECTION: forcing a failure. [ 216.639422][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.653788][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.2.1433 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 216.653900][ T8368] Tainted: [W]=WARN [ 216.653908][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.653922][ T8368] Call Trace: [ 216.653929][ T8368] [ 216.653938][ T8368] __dump_stack+0x1d/0x30 [ 216.653965][ T8368] dump_stack_lvl+0x95/0xd0 [ 216.654101][ T8368] dump_stack+0x15/0x1b [ 216.654121][ T8368] should_fail_ex+0x25e/0x270 [ 216.654152][ T8368] should_fail+0xb/0x20 [ 216.654179][ T8368] should_fail_usercopy+0x1a/0x20 [ 216.654252][ T8368] _copy_from_user+0x1c/0xb0 [ 216.654274][ T8368] vt_ioctl+0x97c/0x1900 [ 216.654311][ T8368] tty_ioctl+0x7d7/0xb80 [ 216.654346][ T8368] ? __pfx_tty_ioctl+0x10/0x10 [ 216.654417][ T8368] __se_sys_ioctl+0xce/0x140 [ 216.654440][ T8368] __x64_sys_ioctl+0x43/0x50 [ 216.654461][ T8368] x64_sys_call+0x1563/0x3020 [ 216.654532][ T8368] do_syscall_64+0x136/0x3c0 [ 216.654559][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.654586][ T8368] RIP: 0033:0x7fdb0f37de99 [ 216.654603][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.654625][ T8368] RSP: 002b:00007fdb0ddd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.654648][ T8368] RAX: ffffffffffffffda RBX: 00007fdb0f605fa0 RCX: 00007fdb0f37de99 [ 216.654665][ T8368] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000006 [ 216.654719][ T8368] RBP: 00007fdb0ddd7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.654734][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.654748][ T8368] R13: 00007fdb0f606038 R14: 00007fdb0f605fa0 R15: 00007ffebd364fe8 [ 216.654770][ T8368] [ 216.924988][ T8379] loop1: detected capacity change from 0 to 512 [ 216.966547][ T8379] EXT4-fs (loop1): 1 truncate cleaned up [ 216.992563][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 217.168534][ T8389] loop2: detected capacity change from 0 to 512 [ 217.177176][ T8389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.251792][ T8389] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.1436: orphan file block 0: bad magic [ 217.263301][ T8389] loop2: lost filesystem error report for type 5 error -117 [ 217.263902][ T8389] EXT4-fs (loop2): mount failed [ 217.346713][ T8396] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 217.481725][ T8399] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 217.597348][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 217.606984][ T8399] team0: entered promiscuous mode [ 217.629004][ T8399] team_slave_0: entered promiscuous mode [ 217.635732][ T8399] team_slave_1: entered promiscuous mode [ 217.641693][ T8399] team0: entered allmulticast mode [ 217.647193][ T8399] team_slave_0: entered allmulticast mode [ 217.662953][ T8399] team_slave_1: entered allmulticast mode [ 217.671481][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.679303][ T8405] loop4: detected capacity change from 0 to 512 [ 217.686658][ T8405] EXT4-fs: Ignoring removed nobh option [ 217.707531][ T8399] bridge0: port 3(team0) entered blocking state [ 217.733727][ T8399] bridge0: port 3(team0) entered disabled state [ 217.749768][ T8405] EXT4-fs: test_dummy_encryption option not supported [ 217.766853][ T8399] bridge0: port 3(team0) entered blocking state [ 217.773147][ T8399] bridge0: port 3(team0) entered forwarding state [ 217.804217][ T8405] loop4: detected capacity change from 0 to 1024 [ 217.811544][ T8403] loop0: detected capacity change from 0 to 1024 [ 217.820198][ T8405] EXT4-fs: Ignoring removed bh option [ 218.011060][ T8405] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.110588][ T8418] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 218.601809][ T8423] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.801426][ T8431] EXT4-fs: Ignoring removed bh option [ 218.814799][ T8431] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 218.827016][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 218.827033][ T28] audit: type=1400 audit(1784894704.386:993): avc: denied { read } for pid=8434 comm="syz.0.1452" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.861563][ T28] audit: type=1400 audit(1784894704.386:994): avc: denied { open } for pid=8434 comm="syz.0.1452" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.895880][ T28] audit: type=1400 audit(1784894704.416:995): avc: denied { ioctl } for pid=8434 comm="syz.0.1452" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.931921][ T8431] EXT4-fs (loop2): 1 truncate cleaned up [ 218.999323][ T28] audit: type=1400 audit(1784894704.556:996): avc: denied { write } for pid=8430 comm="syz.2.1453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.030626][ T28] audit: type=1400 audit(1784894704.586:997): avc: denied { write } for pid=8430 comm="syz.2.1453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.339504][ T8449] Cannot find map_set index 17 as target [ 219.664738][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1460'. [ 219.737681][ T28] audit: type=1400 audit(1784894705.286:998): avc: denied { write } for pid=8457 comm="syz.1.1460" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 219.766083][ T8461] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 219.779967][ T8461] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 219.899958][ T8470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8470 comm=syz.2.1458 [ 219.935647][ T8462] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.038723][ T8456] loop2: p1 p2 p3 [ 220.048850][ T8456] loop2: p1 start 51379968 is beyond EOD, truncated [ 220.058177][ T8482] FAULT_INJECTION: forcing a failure. [ 220.058177][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 220.071354][ T8456] loop2: p3 size 100663552 extends beyond EOD, truncated [ 220.073941][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.1.1465 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 220.073998][ T8482] Tainted: [W]=WARN [ 220.074005][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.074021][ T8482] Call Trace: [ 220.074028][ T8482] [ 220.074037][ T8482] __dump_stack+0x1d/0x30 [ 220.074063][ T8482] dump_stack_lvl+0x95/0xd0 [ 220.074085][ T8482] dump_stack+0x15/0x1b [ 220.074181][ T8482] should_fail_ex+0x25e/0x270 [ 220.074212][ T8482] should_failslab+0x8c/0xb0 [ 220.074236][ T8482] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 220.074260][ T8482] ? skb_clone+0x151/0x1f0 [ 220.074316][ T8482] ? skb_clone+0x151/0x1f0 [ 220.074363][ T8482] skb_clone+0x151/0x1f0 [ 220.074430][ T8482] __netlink_deliver_tap+0x2be/0x510 [ 220.074502][ T8482] netlink_unicast+0x654/0x680 [ 220.074595][ T8482] netlink_sendmsg+0x5be/0x6f0 [ 220.074676][ T8482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.074719][ T8482] ____sys_sendmsg+0x532/0x580 [ 220.074756][ T8482] ___sys_sendmsg+0x195/0x1e0 [ 220.074808][ T8482] __x64_sys_sendmsg+0xd4/0x160 [ 220.074843][ T8482] x64_sys_call+0x194c/0x3020 [ 220.074867][ T8482] do_syscall_64+0x136/0x3c0 [ 220.074923][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.074946][ T8482] RIP: 0033:0x7fd37a09de99 [ 220.074963][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.075050][ T8482] RSP: 002b:00007fd378af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.075197][ T8482] RAX: ffffffffffffffda RBX: 00007fd37a325fa0 RCX: 00007fd37a09de99 [ 220.075212][ T8482] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 220.075225][ T8482] RBP: 00007fd378af7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.075283][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.075296][ T8482] R13: 00007fd37a326038 R14: 00007fd37a325fa0 R15: 00007ffcb3ea15a8 [ 220.075317][ T8482] [ 220.408136][ T8490] EXT4-fs: Ignoring removed bh option [ 220.425092][ T8490] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 220.584472][ T28] audit: type=1400 audit(1784894706.146:999): avc: denied { read } for pid=8495 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.313202][ T8490] EXT4-fs (loop0): 1 truncate cleaned up [ 221.564081][ T28] audit: type=1400 audit(1784894706.826:1000): avc: denied { ioctl } for pid=8495 comm="syz.3.1470" path="socket:[19874]" dev="sockfs" ino=19874 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.474272][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 222.484627][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 222.894716][ T8498] set_capacity_and_notify: 7 callbacks suppressed [ 222.894733][ T8498] loop2: detected capacity change from 0 to 512 [ 222.946935][ T8498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.993422][ T8498] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.1471: orphan file block 0: bad magic [ 223.016451][ T8498] loop2: lost filesystem error report for type 5 error -117 [ 223.018658][ T8498] EXT4-fs (loop2): mount failed [ 223.026730][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 223.026790][ C1] EXT4-fs (loop2): initial error at time 1784894708: ext4_init_orphan_info:618 [ 223.026940][ C1] EXT4-fs (loop2): last error at time 1784894708: ext4_init_orphan_info:618 [ 223.041872][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1473'. [ 223.072725][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.077797][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 223.095506][ T28] audit: type=1400 audit(1784894708.626:1001): avc: denied { write } for pid=8489 comm="syz.0.1468" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.117207][ T28] audit: type=1400 audit(1784894708.626:1002): avc: denied { write } for pid=8489 comm="syz.0.1468" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.201731][ T8522] FAULT_INJECTION: forcing a failure. [ 223.201731][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.228682][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.1.1477 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 223.228721][ T8522] Tainted: [W]=WARN [ 223.228729][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 223.228790][ T8522] Call Trace: [ 223.228796][ T8522] [ 223.228804][ T8522] __dump_stack+0x1d/0x30 [ 223.228835][ T8522] dump_stack_lvl+0x95/0xd0 [ 223.228854][ T8522] dump_stack+0x15/0x1b [ 223.228872][ T8522] should_fail_ex+0x25e/0x270 [ 223.228945][ T8522] should_fail+0xb/0x20 [ 223.229003][ T8522] should_fail_usercopy+0x1a/0x20 [ 223.229040][ T8522] _copy_to_user+0x20/0xa0 [ 223.229061][ T8522] simple_read_from_buffer+0xb5/0x130 [ 223.229089][ T8522] proc_fail_nth_read+0x10e/0x150 [ 223.229186][ T8522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.229206][ T8522] vfs_read+0x18e/0x7c0 [ 223.229223][ T8522] ? __rcu_read_unlock+0x4e/0x70 [ 223.229264][ T8522] ? __fget_files+0x184/0x1c0 [ 223.229292][ T8522] ? __rcu_read_unlock+0x4e/0x70 [ 223.229386][ T8522] ? mutex_lock+0x57/0x90 [ 223.229421][ T8522] ksys_read+0xdc/0x1a0 [ 223.229452][ T8522] __x64_sys_read+0x40/0x50 [ 223.229552][ T8522] x64_sys_call+0x2886/0x3020 [ 223.229574][ T8522] do_syscall_64+0x136/0x3c0 [ 223.229636][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.229660][ T8522] RIP: 0033:0x7fd37a05e6ce [ 223.229679][ T8522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.229700][ T8522] RSP: 002b:00007fd378af6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.229720][ T8522] RAX: ffffffffffffffda RBX: 00007fd378af76c0 RCX: 00007fd37a05e6ce [ 223.229810][ T8522] RDX: 000000000000000f RSI: 00007fd378af70a0 RDI: 0000000000000003 [ 223.229824][ T8522] RBP: 00007fd378af7090 R08: 0000000000000000 R09: 0000000000000000 [ 223.229871][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.229883][ T8522] R13: 00007fd37a326038 R14: 00007fd37a325fa0 R15: 00007ffcb3ea15a8 [ 223.229976][ T8522] [ 223.451118][ T8519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 223.490712][ T8519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 223.526765][ T8515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=8515 comm=syz.4.1476 [ 223.547280][ T8516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=8516 comm=syz.4.1476 [ 223.635747][ T8540] loop2: detected capacity change from 0 to 512 [ 223.663749][ T8540] EXT4-fs mount: 20 callbacks suppressed [ 223.663794][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.688336][ T8540] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.721758][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.735024][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.168563][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 224.189673][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 224.409943][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 224.409963][ T28] audit: type=1400 audit(1784894709.966:1009): avc: denied { read } for pid=8553 comm="syz.3.1489" path="socket:[19967]" dev="sockfs" ino=19967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.507372][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 224.516872][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 224.551073][ T28] audit: type=1326 audit(1784894710.106:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.679972][ T8569] loop2: detected capacity change from 0 to 512 [ 224.759520][ T28] audit: type=1326 audit(1784894710.106:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.811793][ T28] audit: type=1326 audit(1784894710.106:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.838412][ T28] audit: type=1326 audit(1784894710.106:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.864947][ T28] audit: type=1326 audit(1784894710.106:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.891546][ T28] audit: type=1326 audit(1784894710.106:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.918275][ T28] audit: type=1326 audit(1784894710.106:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.944595][ T28] audit: type=1326 audit(1784894710.106:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 224.970805][ T28] audit: type=1326 audit(1784894710.106:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 225.066157][ T8569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.093954][ T8569] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.1491: orphan file block 0: bad magic [ 225.106181][ T8569] loop2: lost filesystem error report for type 5 error -117 [ 225.112174][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 225.125949][ C1] EXT4-fs (loop2): initial error at time 1784894710: ext4_init_orphan_info:618 [ 225.134935][ C1] EXT4-fs (loop2): last error at time 1784894710: ext4_init_orphan_info:618 [ 225.147502][ T8569] EXT4-fs (loop2): mount failed [ 225.597439][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 225.612295][ T8584] netlink: 'syz.3.1499': attribute type 19 has an invalid length. [ 225.632094][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 225.644862][ T4699] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.644890][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 225.662622][ T8584] netlink: 'syz.3.1499': attribute type 19 has an invalid length. [ 225.670574][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 225.671163][ T4699] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.903921][ T8606] loop0: detected capacity change from 0 to 512 [ 225.937408][ T8606] EXT4-fs (loop0): 1 truncate cleaned up [ 225.961806][ T8606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.224144][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 226.274612][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 226.387788][ T4699] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.397233][ T4699] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.499281][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.788535][ T8629] lo speed is unknown, defaulting to 1000 [ 226.796243][ T8634] loop2: detected capacity change from 0 to 128 [ 227.057519][ T8629] loop2: detected capacity change from 0 to 512 [ 227.080078][ T8631] loop0: detected capacity change from 0 to 4096 [ 227.089065][ T8631] EXT4-fs: test_dummy_encryption option not supported [ 227.104467][ T8652] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.134442][ T8629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.147155][ T8629] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.179972][ T8663] loop1: detected capacity change from 0 to 512 [ 227.186854][ T8663] EXT4-fs: Ignoring removed bh option [ 227.205313][ T8663] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 227.236653][ T8668] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.237692][ T8663] EXT4-fs (loop1): 1 truncate cleaned up [ 227.258434][ T8663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.288705][ T8668] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.444844][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.542871][ T8697] FAULT_INJECTION: forcing a failure. [ 227.542871][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 227.566841][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.0.1537 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 227.566948][ T8697] Tainted: [W]=WARN [ 227.566956][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.566969][ T8697] Call Trace: [ 227.566976][ T8697] [ 227.566984][ T8697] __dump_stack+0x1d/0x30 [ 227.567016][ T8697] dump_stack_lvl+0x95/0xd0 [ 227.567040][ T8697] dump_stack+0x15/0x1b [ 227.567058][ T8697] should_fail_ex+0x25e/0x270 [ 227.567134][ T8697] should_failslab+0x8c/0xb0 [ 227.567155][ T8697] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 227.567246][ T8697] ? dst_alloc+0xbd/0x100 [ 227.567343][ T8697] ? dst_alloc+0xbd/0x100 [ 227.567380][ T8697] dst_alloc+0xbd/0x100 [ 227.567459][ T8697] ? ip_mc_validate_source+0x242/0x260 [ 227.567481][ T8697] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 227.567545][ T8697] ip_route_output_key_hash+0x63/0xa0 [ 227.567570][ T8697] __ip4_datagram_connect+0x4b9/0x7a0 [ 227.567634][ T8697] __ip6_datagram_connect+0x5e0/0x7f0 [ 227.567720][ T8697] ? _raw_spin_lock_bh+0x56/0xb0 [ 227.567750][ T8697] ip6_datagram_connect_v6_only+0x52/0x80 [ 227.567788][ T8697] inet_dgram_connect+0x116/0x1b0 [ 227.567841][ T8697] ? __pfx_inet_dgram_connect+0x10/0x10 [ 227.567944][ T8697] __sys_connect+0x1f1/0x2a0 [ 227.568103][ T8697] __x64_sys_connect+0x3f/0x50 [ 227.568128][ T8697] x64_sys_call+0x2df0/0x3020 [ 227.568166][ T8697] do_syscall_64+0x136/0x3c0 [ 227.568194][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.568220][ T8697] RIP: 0033:0x7f0857d4de99 [ 227.568238][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.568259][ T8697] RSP: 002b:00007f08567a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 227.568338][ T8697] RAX: ffffffffffffffda RBX: 00007f0857fd5fa0 RCX: 00007f0857d4de99 [ 227.568356][ T8697] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 227.568371][ T8697] RBP: 00007f08567a7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.568385][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.568421][ T8697] R13: 00007f0857fd6038 R14: 00007f0857fd5fa0 R15: 00007ffe218047f8 [ 227.568445][ T8697] [ 227.858394][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.936978][ T8710] loop2: detected capacity change from 0 to 512 [ 228.050429][ T8710] EXT4-fs (loop2): 1 truncate cleaned up [ 228.058009][ T8710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.155841][ T8704] loop0: detected capacity change from 0 to 256 [ 228.322802][ T8704] loop0: detected capacity change from 0 to 512 [ 228.473357][ T8704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.488527][ T8704] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.824181][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.928864][ T8739] loop1: detected capacity change from 0 to 512 [ 228.956987][ T8739] EXT4-fs: Ignoring removed bh option [ 229.019935][ T8739] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 229.054901][ T8739] EXT4-fs (loop1): 1 truncate cleaned up [ 229.073917][ T8739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.113210][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.177730][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 229.288867][ T8752] tls_set_device_offload_rx: netdev not found [ 229.374122][ T8762] loop2: detected capacity change from 0 to 1024 [ 229.389650][ T8766] netlink: 'syz.3.1555': attribute type 13 has an invalid length. [ 229.397804][ T8766] netlink: 'syz.3.1555': attribute type 17 has an invalid length. [ 229.402930][ T8762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.432015][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.515946][ T8766] gtp0: left allmulticast mode [ 229.521728][ T8766] gtp1: left allmulticast mode [ 229.527372][ T8766] gtp2: left allmulticast mode [ 229.546737][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.557157][ T8766] gtp3: left allmulticast mode [ 229.565822][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.578552][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.592742][ T8766] gretap0: entered promiscuous mode [ 229.627251][ T8781] FAULT_INJECTION: forcing a failure. [ 229.627251][ T8781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.641087][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.2.1560 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 229.641159][ T8781] Tainted: [W]=WARN [ 229.641167][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 229.641181][ T8781] Call Trace: [ 229.641194][ T8781] [ 229.641279][ T8781] __dump_stack+0x1d/0x30 [ 229.641306][ T8781] dump_stack_lvl+0x95/0xd0 [ 229.641328][ T8781] dump_stack+0x15/0x1b [ 229.641345][ T8781] should_fail_ex+0x25e/0x270 [ 229.641376][ T8781] should_fail+0xb/0x20 [ 229.641419][ T8781] should_fail_usercopy+0x1a/0x20 [ 229.641474][ T8781] _copy_from_user+0x1c/0xb0 [ 229.641556][ T8781] kstrtouint_from_user+0x69/0xf0 [ 229.641622][ T8781] ? 0xffffffff81000000 [ 229.641647][ T8781] ? avc_policy_seqno+0x15/0x30 [ 229.641703][ T8781] proc_fail_nth_write+0x50/0x160 [ 229.641724][ T8781] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.641768][ T8781] vfs_write+0x252/0x990 [ 229.641788][ T8781] ? __fget_files+0x184/0x1c0 [ 229.641815][ T8781] ? mutex_lock+0x57/0x90 [ 229.641842][ T8781] ksys_write+0xdc/0x1a0 [ 229.641860][ T8781] __x64_sys_write+0x40/0x50 [ 229.641889][ T8781] x64_sys_call+0x27e1/0x3020 [ 229.641964][ T8781] do_syscall_64+0x136/0x3c0 [ 229.641989][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.642019][ T8781] RIP: 0033:0x7fdb0f33e6ce [ 229.642034][ T8781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.642124][ T8781] RSP: 002b:00007fdb0ddd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.642144][ T8781] RAX: ffffffffffffffda RBX: 00007fdb0ddd76c0 RCX: 00007fdb0f33e6ce [ 229.642157][ T8781] RDX: 0000000000000001 RSI: 00007fdb0ddd70a0 RDI: 0000000000000004 [ 229.642169][ T8781] RBP: 00007fdb0ddd7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.642258][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.642272][ T8781] R13: 00007fdb0f606038 R14: 00007fdb0f605fa0 R15: 00007ffebd364fe8 [ 229.642293][ T8781] [ 229.644842][ T8775] x_tables: duplicate underflow at hook 2 [ 230.069406][ T8793] loop2: detected capacity change from 0 to 512 [ 230.081368][ T8748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.091609][ T8793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.108948][ T8793] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.474630][ T8804] loop4: detected capacity change from 0 to 512 [ 230.528135][ T8804] EXT4-fs: Ignoring removed bh option [ 230.555640][ T8804] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 230.578739][ T8804] EXT4-fs (loop4): 1 truncate cleaned up [ 230.608779][ T8804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.632225][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 230.632240][ T28] audit: type=1400 audit(1784894716.186:1235): avc: denied { write } for pid=8803 comm="syz.4.1568" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.661220][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.661367][ T28] audit: type=1400 audit(1784894716.216:1236): avc: denied { read } for pid=8800 comm="syz.0.1567" dev="sockfs" ino=20189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.672936][ T8801] 9p: Bad value for 'wfdno' [ 230.693102][ T28] audit: type=1400 audit(1784894716.226:1237): avc: denied { write } for pid=8803 comm="syz.4.1568" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.709439][ T28] audit: type=1400 audit(1784894716.266:1238): avc: denied { write } for pid=8803 comm="syz.4.1568" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.779812][ T8816] mmap: syz.2.1572 (8816): VmData 167485440 exceed data ulimit 4096. Update limits or use boot option ignore_rlimit_data. [ 230.898657][ T8823] loop0: detected capacity change from 0 to 128 [ 230.930309][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.943763][ T8812] loop1: detected capacity change from 0 to 1024 [ 230.951370][ T8823] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.963544][ T8812] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.963816][ T8812] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 230.969032][ T8812] jbd2_journal_init_inode: Cannot locate journal superblock [ 231.010750][ T8812] EXT4-fs (loop1): Could not load journal inode [ 231.018846][ T8823] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.038878][ T8834] netlink: 'syz.4.1577': attribute type 2 has an invalid length. [ 231.047620][ T8834] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 231.081228][ T8834] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1577'. [ 231.147585][ T8845] loop4: detected capacity change from 0 to 512 [ 231.211330][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.336181][ T28] audit: type=1400 audit(1784894716.896:1239): avc: denied { setopt } for pid=8861 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.444716][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 231.484457][ T8878] EXT4-fs: Ignoring removed bh option [ 231.507448][ T8874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.545161][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.569464][ T8878] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.608449][ T8883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.625101][ T8893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1597'. [ 231.629071][ T8883] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 231.650537][ T28] audit: type=1400 audit(1784894717.186:1240): avc: denied { write } for pid=8882 comm="syz.0.1595" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.695524][ T8883] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 231.710777][ T28] audit: type=1400 audit(1784894717.186:1241): avc: denied { write } for pid=8882 comm="syz.0.1595" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.715225][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.733976][ T8883] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.733976][ T8883] [ 231.743081][ T28] audit: type=1400 audit(1784894717.186:1242): avc: denied { write } for pid=8882 comm="syz.0.1595" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.752060][ T8883] EXT4-fs (loop0): Total free blocks count 0 [ 231.780845][ T8883] EXT4-fs (loop0): Free/Dirty block details [ 231.792398][ T8883] EXT4-fs (loop0): free_blocks=2415919504 [ 231.821117][ T8883] EXT4-fs (loop0): dirty_blocks=64 [ 231.842127][ T28] audit: type=1400 audit(1784894717.236:1243): avc: denied { write } for pid=8877 comm="syz.4.1593" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.853039][ T8883] EXT4-fs (loop0): Block reservation details [ 231.870095][ T8883] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 231.889615][ T8906] lo speed is unknown, defaulting to 1000 [ 231.916167][ T28] audit: type=1400 audit(1784894717.236:1244): avc: denied { bind } for pid=8877 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.959762][ T8882] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 232.015599][ T8911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.033815][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 232.110059][ T8911] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.178980][ T8906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8906 comm=syz.2.1601 [ 232.410140][ T8920] netlink: 'syz.0.1603': attribute type 46 has an invalid length. [ 232.428107][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 232.442435][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.634192][ T8929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.646953][ T8929] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.040647][ T8942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.209255][ T8951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.461815][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 233.601949][ T8944] xt_recent: Unsupported userspace flags (000000b1) [ 233.769992][ T8946] set_capacity_and_notify: 6 callbacks suppressed [ 233.770011][ T8946] loop4: detected capacity change from 0 to 1024 [ 234.199158][ T8984] loop2: detected capacity change from 0 to 512 [ 234.391631][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.423686][ T8984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.437252][ T8984] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.437326][ T8992] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.554315][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.568728][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.604055][ T8946] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.637215][ T9006] loop2: detected capacity change from 0 to 512 [ 234.656969][ T9006] EXT4-fs: Ignoring removed bh option [ 234.678667][ T9006] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 234.697567][ T9006] EXT4-fs (loop2): 1 truncate cleaned up [ 234.734658][ T9006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.002035][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.656717][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 235.665367][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 235.673877][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 236.688211][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 236.695951][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 237.038682][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.056418][ T9030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.119055][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 237.135969][ T9030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.248410][ T9044] loop2: detected capacity change from 0 to 512 [ 237.274878][ T9044] EXT4-fs: Ignoring removed bh option [ 237.298453][ T9044] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 237.317406][ T9044] EXT4-fs (loop2): 1 truncate cleaned up [ 237.327958][ T9044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.343867][ T9050] sctp: [Deprecated]: syz.1.1644 (pid 9050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.343867][ T9050] Use struct sctp_sack_info instead [ 237.363826][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 237.363842][ T28] audit: type=1400 audit(1784894722.926:1253): avc: denied { write } for pid=9042 comm="syz.2.1645" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.400368][ T28] audit: type=1400 audit(1784894722.926:1254): avc: denied { write } for pid=9042 comm="syz.2.1645" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.616181][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.662502][ T9059] tap0: tun_chr_ioctl cmd 1074025677 [ 237.667924][ T9059] tap0: linktype set to 1 [ 237.765741][ T28] audit: type=1400 audit(1784894723.326:1255): avc: denied { execute } for pid=9079 comm="syz.2.1656" path="/313/memory.events" dev="tmpfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.805393][ T9082] loop2: detected capacity change from 0 to 512 [ 237.817353][ T9082] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 237.829420][ T9082] EXT4-fs (loop2): 1 truncate cleaned up [ 237.835627][ T9082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.867435][ T28] audit: type=1400 audit(1784894723.426:1256): avc: denied { write } for pid=9071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.873238][ T9082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.913188][ T9076] loop4: detected capacity change from 0 to 1024 [ 237.918797][ T28] audit: type=1400 audit(1784894723.476:1257): avc: denied { write } for pid=9094 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.107603][ T9076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.123202][ T9102] loop0: detected capacity change from 0 to 512 [ 238.126227][ T9063] loop1: detected capacity change from 0 to 1024 [ 238.129933][ T9102] EXT4-fs: Ignoring removed bh option [ 238.171261][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.192054][ T9102] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 238.214710][ T9102] EXT4-fs (loop0): 1 truncate cleaned up [ 238.220847][ T9102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.250353][ T28] audit: type=1400 audit(1784894723.806:1258): avc: denied { write } for pid=9101 comm="syz.0.1659" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.288477][ T28] audit: type=1400 audit(1784894723.846:1259): avc: denied { write } for pid=9101 comm="syz.0.1659" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.297546][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 238.327790][ T9063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.461784][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.471359][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.482260][ T9122] loop4: detected capacity change from 0 to 164 [ 238.549162][ T9122] iso9660: Unknown parameter '' [ 238.591366][ T28] audit: type=1400 audit(1784894723.976:1260): avc: denied { write } for pid=9108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.614457][ T28] audit: type=1400 audit(1784894723.996:1261): avc: denied { write } for pid=9133 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.659291][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 238.674352][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 238.711729][ T9143] loop2: detected capacity change from 0 to 1024 [ 238.727371][ T9143] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.762026][ T9143] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 238.798847][ T9143] bond1: (slave geneve3): making interface the new active one [ 238.806797][ T9143] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 238.816110][ T4699] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.827918][ T4699] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.836787][ T4699] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.845583][ T4699] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.891319][ T9149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.904031][ T9149] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.110453][ T9167] set_capacity_and_notify: 1 callbacks suppressed [ 239.110476][ T9167] loop4: detected capacity change from 0 to 256 [ 239.163658][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 239.225068][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 239.355730][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.438171][ T9191] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.479953][ T9201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.557301][ T9203] loop0: detected capacity change from 0 to 1024 [ 239.585365][ T9222] loop1: detected capacity change from 0 to 512 [ 239.634384][ T9222] EXT4-fs (loop1): 1 truncate cleaned up [ 239.640719][ T9222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.685162][ T9203] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 239.693180][ T9203] EXT4-fs (loop0): mount failed [ 241.772362][ T28] audit: type=1400 audit(1784894727.296:1262): avc: denied { getopt } for pid=9238 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.099042][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.244479][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1711'. [ 242.347078][ T9281] loop0: detected capacity change from 0 to 2048 [ 242.378887][ T9283] loop2: detected capacity change from 0 to 1024 [ 242.386267][ T9281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.390682][ T9283] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 242.401669][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 242.401683][ T28] audit: type=1400 audit(1784894727.956:1266): avc: denied { write } for pid=9280 comm="syz.0.1719" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.412816][ T9281] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 242.447798][ T9281] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 242.460313][ T9281] EXT4-fs (loop0): This should not happen!! Data will be lost [ 242.460313][ T9281] [ 242.470694][ T9281] EXT4-fs (loop0): Total free blocks count 0 [ 242.476857][ T9281] EXT4-fs (loop0): Free/Dirty block details [ 242.483150][ T9281] EXT4-fs (loop0): free_blocks=2415919104 [ 242.488894][ T9281] EXT4-fs (loop0): dirty_blocks=64 [ 242.494278][ T9281] EXT4-fs (loop0): Block reservation details [ 242.500272][ T9281] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 242.539883][ T9287] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 242.571132][ T28] audit: type=1400 audit(1784894728.116:1267): avc: denied { setopt } for pid=9290 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.573801][ T9294] loop4: detected capacity change from 0 to 512 [ 242.623952][ T9281] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 242.640879][ T9294] EXT4-fs (loop4): 1 truncate cleaned up [ 242.647596][ T9294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.675907][ T28] audit: type=1326 audit(1784894728.236:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.711173][ T4699] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 242.711960][ T9299] SELinux: Context is not valid (left unmapped). [ 242.723715][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 242.746332][ T28] audit: type=1326 audit(1784894728.236:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.771740][ T28] audit: type=1326 audit(1784894728.236:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.797125][ T28] audit: type=1326 audit(1784894728.236:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.842822][ T28] audit: type=1326 audit(1784894728.236:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.871107][ T28] audit: type=1326 audit(1784894728.236:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.898007][ T28] audit: type=1326 audit(1784894728.236:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 242.926031][ T28] audit: type=1326 audit(1784894728.236:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.1722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b5f7cde99 code=0x7ffc0000 [ 243.178159][ T9310] loop1: detected capacity change from 0 to 128 [ 243.228957][ T9310] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.244061][ T9310] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.663913][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.489050][ T9334] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1733'. [ 244.528169][ T9341] loop1: detected capacity change from 0 to 512 [ 244.564248][ T9341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.597138][ T9341] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.613630][ T9331] netlink: 'syz.2.1733': attribute type 3 has an invalid length. [ 244.647834][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.683392][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.021588][ T9355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1740'. [ 245.490808][ T9366] loop0: detected capacity change from 0 to 2048 [ 245.541512][ T9366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.573728][ T9366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 246.219339][ T9380] xt_hashlimit: size too large, truncated to 1048576 [ 248.200913][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.301402][ T9384] loop2: detected capacity change from 0 to 512 [ 248.315506][ T9384] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.327550][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 248.348134][ T9392] batadv_slave_1: entered promiscuous mode [ 248.386434][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1749'. [ 249.513230][ T9384] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.519632][ T9384] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 249.526398][ T9394] batadv_slave_1: left promiscuous mode [ 249.534023][ T9384] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1746: attempt to clear invalid blocks 2 len 1 [ 249.546913][ T9384] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 249.548008][ T9384] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 249.571486][ T9384] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1746: invalid indirect mapped block 1819239214 (level 0) [ 249.585391][ T9384] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 249.602300][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 249.618692][ C0] EXT4-fs (loop2): initial error at time 1784894735: ext4_clear_blocks:876: inode 13 [ 249.628649][ C0] EXT4-fs (loop2): last error at time 1784894735: ext4_free_branches:1023: inode 13 [ 249.652357][ T9397] lo speed is unknown, defaulting to 1000 [ 249.671122][ T9384] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1746: invalid indirect mapped block 1819239214 (level 1) [ 249.685048][ T9384] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 249.837638][ T9384] EXT4-fs (loop2): 1 truncate cleaned up [ 249.853243][ T9384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.866365][ T9384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.927037][ T28] kauditd_printk_skb: 220 callbacks suppressed [ 249.927053][ T28] audit: type=1400 audit(1784894735.486:1493): avc: denied { write } for pid=9398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.015088][ T28] audit: type=1400 audit(1784894735.566:1494): avc: denied { write } for pid=9424 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.083437][ T9426] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1754'. [ 250.097531][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1756'. [ 250.151695][ T9426] netlink: 'syz.4.1754': attribute type 3 has an invalid length. [ 250.187333][ T9435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.239999][ T9397] loop0: detected capacity change from 0 to 512 [ 250.302837][ T9437] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 250.335966][ T9443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.365266][ T28] audit: type=1400 audit(1784894735.896:1495): avc: denied { write } for pid=9429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.388432][ T28] audit: type=1400 audit(1784894735.916:1496): avc: denied { write } for pid=9450 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.412822][ T9397] EXT4-fs (loop0): filesystem is read-only [ 250.418684][ T9397] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 250.438793][ T9397] EXT4-fs (loop0): failed to initialize system zone (-117) [ 250.452195][ T9397] EXT4-fs (loop0): mount failed [ 250.520227][ T9444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.995468][ T9437] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.242064][ T9459] gtp4: entered allmulticast mode [ 251.367284][ T9468] loop1: detected capacity change from 0 to 1764 [ 252.862229][ T9478] loop0: detected capacity change from 0 to 512 [ 252.890840][ T28] audit: type=1326 audit(1784894738.436:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9475 comm="syz.2.1765" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0f37de99 code=0x0 [ 252.898770][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1766'. [ 252.937785][ T9478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.950355][ T9478] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.020003][ T9491] loop1: detected capacity change from 0 to 512 [ 253.035833][ T9491] EXT4-fs (loop1): 1 truncate cleaned up [ 253.213846][ T9512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1773'. [ 253.230363][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1775'. [ 253.266913][ T9517] loop4: detected capacity change from 0 to 128 [ 253.273609][ T9514] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 253.283837][ T9517] FAT-fs (loop4): bogus number of reserved sectors [ 253.290356][ T9517] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 253.299650][ T9517] FAT-fs (loop4): Can't find a valid FAT filesystem [ 253.415568][ T9517] loop4: detected capacity change from 0 to 512 [ 253.428829][ T9517] msdos: Unknown parameter 'O' [ 253.698998][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 253.704483][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 253.708732][ T28] audit: type=1400 audit(1784894739.256:1498): avc: denied { execute_no_trans } for pid=9513 comm="syz.0.1775" path="/369/file1" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.796270][ T9535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9535 comm=syz.3.1782 [ 253.859134][ T3302] EXT4-fs unmount: 2 callbacks suppressed [ 253.859149][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.961414][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1788'. [ 254.151635][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 254.177060][ T28] audit: type=1400 audit(1784894739.736:1499): avc: denied { ioctl } for pid=9555 comm="syz.0.1790" path="socket:[22217]" dev="sockfs" ino=22217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.287826][ T9556] netlink: 'syz.0.1790': attribute type 5 has an invalid length. [ 254.295598][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 254.410602][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.423659][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.502563][ T9567] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 254.524097][ T9564] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 254.699422][ T9567] team0: Device wg2 is of different type [ 254.907968][ T9564] team0: Device wg2 is of different type [ 254.991109][ T9588] loop2: detected capacity change from 0 to 1024 [ 255.097004][ T9588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.200166][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.519311][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 255.579987][ T9613] loop4: detected capacity change from 0 to 512 [ 255.651833][ T9613] EXT4-fs (loop4): 1 truncate cleaned up [ 255.694932][ T9613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.880085][ T9619] loop2: detected capacity change from 0 to 512 [ 255.935857][ T9619] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.981152][ T9619] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 256.002159][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 256.007434][ T9619] Quota error (device loop2): write_blk: dquota write failed [ 256.008643][ C1] EXT4-fs (loop2): initial error at time 1784894741: ext4_mb_generate_buddy:1317 [ 256.008669][ C1] EXT4-fs (loop2): last error at time 1784894741: ext4_mb_generate_buddy:1317 [ 256.027665][ T9629] loop0: detected capacity change from 0 to 1764 [ 256.149828][ T9619] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 256.168790][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1812'. [ 256.180746][ T9619] Quota error (device loop2): write_blk: dquota write failed [ 256.189512][ T9619] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 256.497990][ T9619] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1810: Failed to acquire dquot type 1 [ 256.518901][ T9619] loop2: lost filesystem error report for type 5 error -28 [ 256.519240][ T9619] EXT4-fs (loop2): 1 truncate cleaned up [ 256.532407][ T9619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.684839][ T9634] loop1: detected capacity change from 0 to 512 [ 256.771187][ T9619] EXT4-fs error (device loop2): __ext4_remount:6844: comm syz.2.1810: Abort forced by user [ 256.790838][ T9634] EXT4-fs (loop1): 1 truncate cleaned up [ 256.814505][ T9634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.840612][ T9619] EXT4-fs (loop2): Remounting filesystem read-only [ 256.898085][ T9619] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 257.006523][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.073891][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.331067][ T9643] gtp5: entered allmulticast mode [ 257.368225][ T9664] loop0: detected capacity change from 0 to 512 [ 257.667267][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.861127][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1826'. [ 258.084541][ T28] audit: type=1400 audit(1784894743.646:1500): avc: denied { getopt } for pid=9689 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.142061][ T28] audit: type=1400 audit(1784894743.696:1501): avc: denied { ioctl } for pid=9687 comm="syz.0.1836" path="socket:[23872]" dev="sockfs" ino=23872 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.190622][ T9701] loop1: detected capacity change from 0 to 512 [ 258.233043][ T9701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.264576][ T9701] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.285562][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 258.375041][ T9668] gtp10: entered allmulticast mode [ 258.437705][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1845'. [ 258.785185][ T28] audit: type=1400 audit(1784894744.326:1502): avc: denied { write } for pid=9700 comm="syz.1.1840" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.970352][ T9723] gtp6: entered allmulticast mode [ 260.027317][ T28] audit: type=1400 audit(1784894745.586:1503): avc: denied { create } for pid=9733 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.100285][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.358295][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.414450][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.490491][ T9749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=9749 comm=syz.0.1856 [ 260.617199][ T9773] loop4: detected capacity change from 0 to 512 [ 260.638948][ T9773] ext4: Unknown parameter 'fowner' [ 260.670023][ T28] audit: type=1400 audit(1784894746.226:1504): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 260.760381][ T9776] loop4: detected capacity change from 0 to 128 [ 260.817255][ T9776] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.829464][ T9776] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.841758][ T28] audit: type=1400 audit(1784894746.396:1505): avc: denied { write } for pid=9775 comm="syz.4.1864" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.873529][ T9783] __nla_validate_parse: 2 callbacks suppressed [ 260.873563][ T9783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 260.928112][ T9785] loop1: detected capacity change from 0 to 1024 [ 260.968586][ T9785] netlink: 'syz.1.1867': attribute type 12 has an invalid length. [ 260.976468][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 260.985398][ T9785] netlink: 'syz.1.1867': attribute type 12 has an invalid length. [ 261.008906][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 261.019760][ T28] audit: type=1400 audit(1784894746.576:1506): avc: denied { getopt } for pid=9784 comm="syz.1.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.131797][ T9779] gtp7: entered allmulticast mode [ 261.190367][ T9791] loop1: detected capacity change from 0 to 512 [ 261.209807][ T9791] EXT4-fs: dax option not supported [ 261.356607][ T28] audit: type=1400 audit(1784894746.916:1507): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file1" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 261.390164][ T9797] loop1: detected capacity change from 0 to 1024 [ 261.414129][ T9797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.574981][ T28] audit: type=1400 audit(1784894747.136:1508): avc: denied { setopt } for pid=9806 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.605084][ T28] audit: type=1400 audit(1784894747.166:1509): avc: denied { write } for pid=9796 comm="syz.1.1872" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.636844][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.753550][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.856803][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 261.946951][ T9844] loop4: detected capacity change from 0 to 256 [ 261.966885][ T9844] vfat: Unknown parameter '' [ 262.020554][ T28] audit: type=1400 audit(1784894747.576:1510): avc: denied { map } for pid=9859 comm="syz.1.1895" path="/390" dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.023983][ T9860] loop1: detected capacity change from 0 to 1024 [ 262.082088][ T9860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.096286][ T9860] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.115222][ T9860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.217236][ T28] audit: type=1400 audit(1784894747.776:1511): avc: denied { write } for pid=9868 comm="syz.1.1898" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.219697][ T9868] cgroup: fork rejected by pids controller in [ 262.240326][ T28] audit: type=1400 audit(1784894747.776:1512): avc: denied { setattr } for pid=9868 comm="syz.1.1898" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.270483][ T9868] /syz1 [ 262.986093][ T9998] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 262.993832][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1911'. [ 263.020697][ T28] audit: type=1400 audit(1784894748.576:1513): avc: denied { bind } for pid=9997 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.042681][ T28] audit: type=1400 audit(1784894748.576:1514): avc: denied { listen } for pid=9997 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.047562][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1911'. [ 263.117596][T10000] loop2: detected capacity change from 0 to 1024 [ 263.135301][T10000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.156145][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.350638][T10027] loop4: detected capacity change from 0 to 512 [ 263.365356][T10027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.377991][T10027] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.390922][ T28] audit: type=1400 audit(1784894748.946:1515): avc: denied { write } for pid=10026 comm="syz.4.1917" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 263.462202][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.500229][ T4697] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.512783][T10033] xt_connbytes: Forcing CT accounting to be enabled [ 264.131037][T10062] 9p: Bad value for 'wfdno' [ 264.166079][T10064] loop0: detected capacity change from 0 to 512 [ 264.224660][T10064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.238825][T10064] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.360273][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.403089][T10079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62824 sclass=netlink_route_socket pid=10079 comm=syz.2.1933 [ 264.433144][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'. [ 264.463710][T10079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.523547][T10085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 264.658481][T10075] gtp9: entered allmulticast mode [ 264.771776][T10082] gtp8: entered allmulticast mode [ 265.107836][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.129447][T10098] 9p: Bad value for 'wfdno' [ 265.265728][T10111] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 265.265728][T10111] The task syz.2.1949 (10111) triggered the difference, watch for misbehavior. [ 265.473106][T10113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.519916][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.572527][ T4434] Bluetooth: hci0: command 0x1003 tx timeout [ 265.572626][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.273749][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'. [ 267.830901][T10135] gtp7: entered allmulticast mode [ 268.475750][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 268.500018][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 268.720136][T10257] hub 8-0:1.0: USB hub found [ 268.734674][T10257] hub 8-0:1.0: 8 ports detected [ 268.885246][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 269.051407][T10281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49680 sclass=netlink_route_socket pid=10281 comm=syz.1.1976 [ 269.131557][T10293] set_capacity_and_notify: 3 callbacks suppressed [ 269.131684][T10293] loop0: detected capacity change from 0 to 512 [ 269.153800][T10293] EXT4-fs: Ignoring removed oldalloc option [ 269.179710][T10293] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.312846][T10293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1980: invalid indirect mapped block 83886080 (level 1) [ 269.326817][T10293] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.327185][T10293] EXT4-fs (loop0): Remounting filesystem read-only [ 269.343190][T10293] EXT4-fs (loop0): 1 orphan inode deleted [ 269.348958][T10293] EXT4-fs (loop0): 1 truncate cleaned up [ 269.355776][T10293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.485687][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 269.485699][ T28] audit: type=1400 audit(1784894755.036:1522): avc: denied { mount } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 269.597953][ T28] audit: type=1400 audit(1784894755.036:1523): avc: denied { search } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.626528][T10305] loop2: detected capacity change from 0 to 512 [ 269.664411][T10305] EXT4-fs: Ignoring removed bh option [ 269.683472][T10305] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 269.703202][T10305] EXT4-fs (loop2): 1 truncate cleaned up [ 269.709693][T10305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.770944][ T28] audit: type=1400 audit(1784894755.036:1524): avc: denied { search } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.833056][ T28] audit: type=1400 audit(1784894755.086:1525): avc: denied { setattr } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.855410][ T28] audit: type=1400 audit(1784894755.086:1526): avc: denied { search } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.877830][ T28] audit: type=1400 audit(1784894755.086:1527): avc: denied { write search } for pid=10300 comm="syz.3.1982" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.909837][ T28] audit: type=1400 audit(1784894755.086:1528): avc: denied { add_name } for pid=10300 comm="syz.3.1982" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.933411][ T28] audit: type=1400 audit(1784894755.086:1529): avc: denied { create } for pid=10300 comm="syz.3.1982" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 269.956845][ T28] audit: type=1400 audit(1784894755.086:1530): avc: denied { getopt } for pid=10300 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.978832][ T28] audit: type=1400 audit(1784894755.286:1531): avc: denied { write } for pid=10304 comm="syz.2.1983" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.002871][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.198268][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 270.253470][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.430636][T10312] gtp9: entered allmulticast mode [ 270.526235][T10329] loop2: detected capacity change from 0 to 1764 [ 270.631828][T10336] loop1: detected capacity change from 0 to 512 [ 270.675265][T10336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.728128][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.181150][T10346] loop1: detected capacity change from 0 to 512 [ 271.189699][T10346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.199141][T10337] loop4: detected capacity change from 0 to 512 [ 271.199475][T10348] loop0: detected capacity change from 0 to 512 [ 271.213473][T10348] EXT4-fs: Ignoring removed bh option [ 271.219695][T10348] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 271.237057][T10337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.239651][T10348] EXT4-fs (loop0): 1 truncate cleaned up [ 271.255658][T10337] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.258263][T10346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.267585][T10348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.279883][T10346] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.334443][T10346] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.393211][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.428334][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.446935][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.610531][T10377] loop0: detected capacity change from 0 to 512 [ 271.624473][T10377] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 271.654873][T10381] loop2: detected capacity change from 0 to 512 [ 271.667284][T10381] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 271.689072][T10381] EXT4-fs: error: could not find journal device path [ 272.752774][T10636] loop2: detected capacity change from 0 to 512 [ 272.800041][T10636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.813546][T10636] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.814186][T10642] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 272.866172][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.932871][T10642] team0 (unregistering): Port device team_slave_0 removed [ 272.946593][T10642] team0 (unregistering): Port device team_slave_1 removed [ 273.806614][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 274.129327][T10997] set_capacity_and_notify: 1 callbacks suppressed [ 274.129345][T10997] loop2: detected capacity change from 0 to 512 [ 274.175563][T10997] EXT4-fs: Ignoring removed bh option [ 274.278653][T10997] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 274.326009][T10997] EXT4-fs (loop2): 1 truncate cleaned up [ 274.332532][T10997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.478782][T11006] loop0: detected capacity change from 0 to 512 [ 274.496475][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 274.501452][T11006] EXT4-fs: Ignoring removed bh option [ 274.543624][T11006] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 274.561511][T11006] EXT4-fs (loop0): 1 truncate cleaned up [ 274.574550][T11006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.592570][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.636375][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 274.636401][ T28] audit: type=1400 audit(1784894760.196:1667): avc: denied { write } for pid=11005 comm="syz.0.2057" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.678418][ T28] audit: type=1400 audit(1784894760.196:1668): avc: denied { write } for pid=11005 comm="syz.0.2057" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.904179][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.914524][T11022] loop2: detected capacity change from 0 to 1024 [ 275.137802][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 275.284432][T11022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.394737][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.442634][ T3301] ================================================================== [ 275.450835][ T3301] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 275.458404][ T3301] [ 275.460727][ T3301] read-write to 0xffff888237c26528 of 1 bytes by task 11001 on cpu 0: [ 275.468875][ T3301] folio_add_lru+0xa4/0x250 [ 275.473406][ T3301] shmem_get_folio_gfp+0x7cc/0xd90 [ 275.478535][ T3301] shmem_write_begin+0xfc/0x1f0 [ 275.483410][ T3301] generic_perform_write+0x186/0x490 [ 275.488701][ T3301] shmem_file_write_iter+0xc5/0xf0 [ 275.493830][ T3301] __kernel_write_iter+0x30f/0x590 [ 275.498961][ T3301] dump_user_range+0xa73/0xd00 [ 275.503744][ T3301] elf_core_dump+0x21c0/0x2340 [ 275.508660][ T3301] coredump_write+0xaf9/0xdd0 [ 275.513351][ T3301] vfs_coredump+0x2770/0x3290 [ 275.518054][ T3301] get_signal+0xd33/0xf10 [ 275.522406][ T3301] arch_do_signal_or_restart+0x96/0x480 [ 275.527981][ T3301] exit_to_user_mode_loop+0x15d/0x8c0 [ 275.533373][ T3301] do_syscall_64+0x23c/0x3c0 [ 275.537983][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.543981][ T3301] [ 275.546341][ T3301] read to 0xffff888237c26528 of 1 bytes by task 3301 on cpu 1: [ 275.553885][ T3301] __lru_add_drain_all+0x17e/0x450 [ 275.559009][ T3301] lru_add_drain_all+0x10/0x20 [ 275.563795][ T3301] invalidate_bdev+0x47/0x70 [ 275.568400][ T3301] ext4_put_super+0x614/0x7c0 [ 275.573096][ T3301] generic_shutdown_super+0xee/0x220 [ 275.578395][ T3301] kill_block_super+0x2a/0x70 [ 275.583068][ T3301] ext4_kill_sb+0x42/0x80 [ 275.587408][ T3301] deactivate_locked_super+0x75/0x1c0 [ 275.592789][ T3301] deactivate_super+0x97/0xa0 [ 275.597477][ T3301] cleanup_mnt+0x2c3/0x340 [ 275.601906][ T3301] __cleanup_mnt+0x19/0x20 [ 275.606322][ T3301] task_work_run+0x130/0x1a0 [ 275.610912][ T3301] exit_to_user_mode_loop+0x1e4/0x8c0 [ 275.616294][ T3301] do_syscall_64+0x23c/0x3c0 [ 275.620891][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.626786][ T3301] [ 275.629103][ T3301] value changed: 0x17 -> 0x1b [ 275.633772][ T3301] [ 275.636091][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 275.642238][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 275.653268][ T3301] Tainted: [W]=WARN [ 275.657071][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.667130][ T3301] ================================================================== [ 275.695486][T11131] lo speed is unknown, defaulting to 1000