last executing test programs: 3.672728621s ago: executing program 2 (id=570): bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 3.558204134s ago: executing program 2 (id=572): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x2}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x30b, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x80001, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000a000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x9, 0x7ff4}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@nouid32}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") 3.319217541s ago: executing program 3 (id=575): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r7) 2.615169582s ago: executing program 0 (id=580): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@nouid32}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") 2.614565742s ago: executing program 2 (id=581): unshare(0x24000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) unshare(0x6020400) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0x1, 0x2c2, &(0x7f00000009c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) mount(&(0x7f0000000100)=@filename='./bus\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='exfat\x00', 0x10008, &(0x7f00000001c0)='!\x84\x00') accept$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) fcntl$setstatus(r1, 0x4, 0x6000) 2.547454895s ago: executing program 1 (id=582): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800c0) fchmod(r3, 0x10) ioctl(r0, 0x4, &(0x7f0000000440)="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") ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x188, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe00}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc68f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b8a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3a3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40008084}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={0x0}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001880)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={@local, @multicast2, 0x18, 0xf9d}}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000001980), &(0x7f00000019c0), 0x2, 0x3) read$rfkill(r1, &(0x7f0000001a00), 0x8) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000001a40)='},)\x00', &(0x7f0000001a80)="0badd9ce1917be14", 0x8) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000001b40)={@loopback, @multicast1, @multicast1}, &(0x7f0000001b80)=0xc) 2.533225365s ago: executing program 1 (id=583): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) syz_open_dev$sg(0x0, 0x0, 0x8082) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r2, 0x0, 0x9, 0x4) read(r2, &(0x7f0000000080)=""/221, 0xdd) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140), 0x14) r4 = eventfd(0xfffffffd) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r4, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="e37a", @ANYRESHEX, @ANYBLOB=',\x00']) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xf7fb, 0x0, 0xffc, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1300c5, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x3}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x4, 0x9, 0x20, @mcast2, @mcast2, 0x7, 0x10, 0xb719, 0x1c}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x5, 0x8001, 0xf, 0xc0, 0x1, 0x3, '\x00', r6, r5, 0x1, 0x5, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x10000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(r0, &(0x7f0000000180)) 2.481753557s ago: executing program 0 (id=584): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r2, 0x0, 0x9, 0x4) read(r2, &(0x7f0000000080)=""/221, 0xdd) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140), 0x14) r4 = eventfd(0xfffffffd) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r4, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="e37a", @ANYRESHEX, @ANYBLOB=',\x00']) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xf7fb, 0x0, 0xffc, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1300c5, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x3}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x4, 0x9, 0x20, @mcast2, @mcast2, 0x7, 0x10, 0xb719, 0x1c}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x5, 0x8001, 0xf, 0xc0, 0x1, 0x3, '\x00', r6, r5, 0x1, 0x5, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x10000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(r0, &(0x7f0000000180)) 2.400463759s ago: executing program 3 (id=585): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@minixdf}, {@grpjquota, 0x22}, {@minixdf}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") 2.082540088s ago: executing program 2 (id=586): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) sendfile(0xffffffffffffffff, r6, &(0x7f0000000080)=0xa00, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x1b0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r8) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0), 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d8000000180081054e81f783db4cb9040a1d290006007ca8cec7f3a10a0015000600142603600e1208001e0000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290", 0x51}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.865650235s ago: executing program 0 (id=587): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.839876556s ago: executing program 3 (id=588): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) sendfile(0xffffffffffffffff, r6, &(0x7f0000000080)=0xa00, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x1b0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r8) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0), 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d8000000180081054e81f783db4cb9040a1d290006007ca8cec7f3a10a0015000600142603600e1208001e0000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290", 0x51}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.463814947s ago: executing program 1 (id=591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) 1.3341552s ago: executing program 1 (id=593): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x8000000) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.187166015s ago: executing program 4 (id=594): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@nouid32}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") 1.052383399s ago: executing program 2 (id=595): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x6) fallocate(r2, 0x0, 0x9, 0x4) read(r2, &(0x7f0000000080)=""/221, 0xdd) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140), 0x14) r4 = eventfd(0xfffffffd) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r4, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="e37a", @ANYRESHEX, @ANYBLOB=',\x00']) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xf7fb, 0x0, 0xffc, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1300c5, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x3}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x4, 0x9, 0x20, @mcast2, @mcast2, 0x7, 0x10, 0xb719, 0x1c}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x5, 0x8001, 0xf, 0xc0, 0x1, 0x3, '\x00', r6, r5, 0x1, 0x5, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000001140)='./file2\x00', &(0x7f0000001180), 0x10000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(r0, &(0x7f0000000180)) 1.045273789s ago: executing program 4 (id=596): unshare(0x24000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) unshare(0x6020400) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0x1, 0x2c2, &(0x7f00000009c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pipe(&(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) mount(&(0x7f0000000100)=@filename='./bus\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='exfat\x00', 0x10008, &(0x7f00000001c0)='!\x84\x00') fcntl$setstatus(r1, 0x4, 0x6000) 962.074092ms ago: executing program 1 (id=597): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000103c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xe, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000001840)={0x90000001}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x8000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) shutdown(r2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8, 0x830d}, 0x7e2fa81389bbc49, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xa) r5 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000c50000040000000407000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000002180)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r6]}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000100)}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r7], &(0x7f0000000500)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2810812, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0xa2b, &(0x7f0000000d80)="$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") 961.603412ms ago: executing program 0 (id=598): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) (fail_nth: 1) 885.290354ms ago: executing program 3 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) read(r1, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x8, 0xfffffffc, {{0xd, 0x4, 0x0, 0x30, 0x34, 0x66, 0x0, 0xd, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, {[@cipso={0x86, 0x1c, 0x3, [{0x5, 0xe, "1d93d4361e732809f8bdd35d"}, {0x5, 0x8, "0bf53ced10f6"}]}, @end]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000540)=0x4) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x38, 0x2, {{0x2, 0x7, 0x9, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xe}, {0xfff3, 0x1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24054040}, 0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r15, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200"], 0x50}}, 0x4080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x100, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 707.890499ms ago: executing program 0 (id=600): socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000240), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0x20000084}, 0x40880) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff64000000006c907800000000000000000420880b0000000000000800000086dd080088be000000ea100000000100000000000000080022eb000000002000800002000000fffffffe000000000800655800"/102], 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 249.900753ms ago: executing program 3 (id=601): socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000240), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0x20000084}, 0x40880) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff64000000006c907800000000000000000420880b0000000000000800000086dd080088be000000ea100000000100000000000000080022eb000000002000800002000000fffffffe000000000800655800"/102], 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 249.625963ms ago: executing program 4 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a0500000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 210.707724ms ago: executing program 4 (id=603): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 126.917717ms ago: executing program 4 (id=604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, 0x0, 0x0, 0x1a, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 96.029577ms ago: executing program 3 (id=605): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="002e0000000000f3", 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4010, &(0x7f0000000580), 0x5, 0x4e8, &(0x7f0000000ac0)="$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") (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 64) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) (rerun: 64) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) pwrite64(r4, &(0x7f0000000740)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 14.09536ms ago: executing program 4 (id=606): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) sendfile(0xffffffffffffffff, r6, &(0x7f0000000080)=0xa00, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x1b0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d8000000180081054e81f783db4cb9040a1d290006007ca8cec7f3a10a0015000600142603600e1208001e0000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290", 0x51}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 12.82569ms ago: executing program 0 (id=607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000009000000000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702007814000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000faffffff0000000010000000bf91000000040000b702000001010000850000008500e0ffb6000000000000009500000200000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xa4, &(0x7f0000000140)=""/164, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x2, 0x7, 0x7}], 0x10, 0x746b}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28000600) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) r4 = socket(0x2, 0x80805, 0x0) r5 = open(&(0x7f0000000440)='./file0\x00', 0x44eac1, 0x52) flock(r5, 0x1) r6 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r6, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x1) getsockopt$bt_hci(r4, 0x84, 0x3, 0x0, &(0x7f0000001040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r9 = socket(0x28, 0x801, 0x0) sendmsg$kcm(r9, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x8011) 1.35942ms ago: executing program 1 (id=608): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendto$inet6(r1, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback={0x10000000000000}, 0xc5f}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) 0s ago: executing program 2 (id=609): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = socket(0xa, 0x5, 0x0) fcntl$setlease(r1, 0x400, 0x2) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) sendto$inet6(r1, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) kernel console output (not intermixed with test programs): c: denied { write } for pid=4107 comm="syz.4.171" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.196835][ T4108] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1: comm syz.4.171: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.224039][ T4114] wireguard0: entered promiscuous mode [ 77.236639][ T4114] wireguard0: entered allmulticast mode [ 77.246429][ T28] audit: type=1400 audit(1781972625.068:809): avc: denied { add_name } for pid=4107 comm="syz.4.171" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.291104][ T4108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.171: bg 0: block 112: padding at end of block bitmap is not set [ 77.315782][ T28] audit: type=1400 audit(1781972625.198:810): avc: denied { write } for pid=4107 comm="syz.4.171" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.393655][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.576823][ T4120] loop0: detected capacity change from 0 to 1024 [ 77.622352][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.653288][ T28] audit: type=1400 audit(1781972625.558:811): avc: denied { write } for pid=4119 comm="syz.0.176" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.693547][ T28] audit: type=1400 audit(1781972625.598:812): avc: denied { map } for pid=4119 comm="syz.0.176" path="/45/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.767925][ T28] audit: type=1400 audit(1781972625.598:813): avc: denied { execute } for pid=4119 comm="syz.0.176" path="/45/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.804014][ T4131] program syz.1.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.039932][ T4134] loop4: detected capacity change from 0 to 128 [ 78.099766][ T28] audit: type=1400 audit(1781972625.998:814): avc: denied { listen } for pid=4135 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.136114][ T4120] syz.0.176 (4120) used greatest stack depth: 9024 bytes left [ 78.145665][ T4139] FAULT_INJECTION: forcing a failure. [ 78.145665][ T4139] name failslab, interval 1, probability 0, space 0, times 1 [ 78.158337][ T4139] CPU: 1 UID: 0 PID: 4139 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.158394][ T4139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.158411][ T4139] Call Trace: [ 78.158420][ T4139] [ 78.158430][ T4139] __dump_stack+0x1d/0x30 [ 78.158458][ T4139] dump_stack_lvl+0x95/0xd0 [ 78.158482][ T4139] dump_stack+0x15/0x1b [ 78.158512][ T4139] should_fail_ex+0x25e/0x270 [ 78.158545][ T4139] should_failslab+0x8c/0xb0 [ 78.158572][ T4139] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 78.158634][ T4139] ? __alloc_skb+0x2db/0x6f0 [ 78.158677][ T4139] __alloc_skb+0x2db/0x6f0 [ 78.158767][ T4139] ? kvfree_call_rcu+0xb4/0x390 [ 78.158857][ T4139] tipc_buf_acquire+0x2c/0xb0 [ 78.158886][ T4139] tipc_named_withdraw+0x13b/0x360 [ 78.158921][ T4139] tipc_nametbl_withdraw+0x114/0x200 [ 78.158970][ T4139] tipc_release+0x39e/0xf30 [ 78.158998][ T4139] ? sock_close+0x38/0x150 [ 78.159029][ T4139] sock_close+0x6b/0x150 [ 78.159056][ T4139] ? __pfx_sock_close+0x10/0x10 [ 78.159131][ T4139] __fput+0x29e/0x630 [ 78.159167][ T4139] ____fput+0x1c/0x30 [ 78.159200][ T4139] task_work_run+0x130/0x1a0 [ 78.159228][ T4139] exit_to_user_mode_loop+0x1e4/0x8c0 [ 78.159331][ T4139] do_syscall_64+0x23c/0x3c0 [ 78.159358][ T4139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.159380][ T4139] RIP: 0033:0x7f6abb46ce59 [ 78.159396][ T4139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.159420][ T4139] RSP: 002b:00007f6ab9ea6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 78.159500][ T4139] RAX: 0000000000000000 RBX: 00007f6abb6e6090 RCX: 00007f6abb46ce59 [ 78.159513][ T4139] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 78.159527][ T4139] RBP: 00007f6ab9ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.159544][ T4139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.159557][ T4139] R13: 00007f6abb6e6128 R14: 00007f6abb6e6090 R15: 00007ffc339a8ff8 [ 78.159629][ T4139] [ 78.159637][ T4139] tipc: Withdrawal distribution failure [ 78.396466][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.442649][ T4142] loop0: detected capacity change from 0 to 512 [ 78.462588][ T28] audit: type=1400 audit(1781972626.368:815): avc: denied { read write } for pid=4136 comm="syz.2.180" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.487746][ T4142] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.497545][ T28] audit: type=1400 audit(1781972626.368:816): avc: denied { open } for pid=4136 comm="syz.2.180" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.559634][ T4148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.183'. [ 78.579002][ T4142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.595060][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 78.601904][ C1] EXT4-fs (loop0): initial error at time 1781972626: ext4_mb_generate_buddy:1317 [ 78.607860][ T4142] EXT4-fs (loop0): 1 truncate cleaned up [ 78.611184][ C1] EXT4-fs (loop0): last error at time 1781972626: ext4_mb_generate_buddy:1317 [ 78.623856][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.698003][ T4142] EXT4-fs error (device loop0) in ext4_setattr:6172: error 28 [ 78.739676][ T4155] macsec0: entered promiscuous mode [ 78.757384][ T4142] Unsupported ieee802154 address type: 0 [ 78.783042][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 78.812399][ T4155] veth1_macvtap: left promiscuous mode [ 78.858976][ T4155] macsec0 (unregistering): left promiscuous mode [ 78.980017][ T4160] program syz.3.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.032418][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.128963][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.261887][ T4164] loop1: detected capacity change from 0 to 512 [ 79.368257][ T4164] EXT4-fs: Ignoring removed oldalloc option [ 79.431058][ T4164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.494880][ T4164] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.188: corrupted in-inode xattr: invalid ea_ino [ 79.515818][ T4164] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.516093][ T4164] EXT4-fs (loop1): Remounting filesystem read-only [ 79.525357][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.525384][ C0] EXT4-fs (loop1): initial error at time 1781972627: ext4_iget_extra_inode:5180: inode 15 [ 79.525422][ C0] EXT4-fs (loop1): last error at time 1781972627: ext4_iget_extra_inode:5180: inode 15 [ 79.575831][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.607472][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.948865][ T4175] process 'syz.2.191' launched './file0' with NULL argv: empty string added [ 80.184777][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.200617][ T4180] loop4: detected capacity change from 0 to 128 [ 80.227478][ T4182] sctp: [Deprecated]: syz.0.193 (pid 4182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.227478][ T4182] Use struct sctp_sack_info instead [ 80.270846][ T4182] ip6gre1: entered promiscuous mode [ 80.288821][ T4182] ip6gre1: entered allmulticast mode [ 80.369564][ T4184] loop2: detected capacity change from 0 to 1764 [ 80.399587][ T4186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.195'. [ 80.789876][ T4198] loop4: detected capacity change from 0 to 512 [ 80.815084][ T4198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.831538][ T4198] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.985517][ T4196] loop1: detected capacity change from 0 to 512 [ 81.047990][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.195075][ T4198] FAULT_INJECTION: forcing a failure. [ 81.195075][ T4198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.327532][ T4198] CPU: 1 UID: 0 PID: 4198 Comm: syz.4.199 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.327566][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.327622][ T4198] Call Trace: [ 81.327629][ T4198] [ 81.327638][ T4198] __dump_stack+0x1d/0x30 [ 81.327669][ T4198] dump_stack_lvl+0x95/0xd0 [ 81.327696][ T4198] dump_stack+0x15/0x1b [ 81.327719][ T4198] should_fail_ex+0x25e/0x270 [ 81.327746][ T4198] should_fail+0xb/0x20 [ 81.327805][ T4198] should_fail_usercopy+0x1a/0x20 [ 81.327844][ T4198] _copy_from_user+0x1c/0xb0 [ 81.327900][ T4198] ___sys_sendmsg+0xc1/0x1e0 [ 81.327943][ T4198] __x64_sys_sendmsg+0xd4/0x160 [ 81.328021][ T4198] x64_sys_call+0x194c/0x3020 [ 81.328056][ T4198] do_syscall_64+0x136/0x3c0 [ 81.328146][ T4198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.328173][ T4198] RIP: 0033:0x7fae4ae3ce59 [ 81.328192][ T4198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.328211][ T4198] RSP: 002b:00007fae49897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.328231][ T4198] RAX: ffffffffffffffda RBX: 00007fae4b0b5fa0 RCX: 00007fae4ae3ce59 [ 81.328265][ T4198] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 81.328280][ T4198] RBP: 00007fae49897090 R08: 0000000000000000 R09: 0000000000000000 [ 81.328292][ T4198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.328305][ T4198] R13: 00007fae4b0b6038 R14: 00007fae4b0b5fa0 R15: 00007fffee415c88 [ 81.328399][ T4198] [ 81.637715][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.934357][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.018448][ T4211] loop1: detected capacity change from 0 to 512 [ 82.105870][ T4211] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.258908][ T4210] macvlan2: entered promiscuous mode [ 82.324248][ T4211] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 82.428152][ T4216] loop4: detected capacity change from 0 to 1024 [ 82.435954][ T4216] EXT4-fs: Ignoring removed bh option [ 83.270810][ T4216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.275458][ T4211] EXT4-fs (loop1): 1 truncate cleaned up [ 83.283196][ T4216] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.310995][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 83.311015][ T28] audit: type=1400 audit(1781972631.218:822): avc: denied { write } for pid=4213 comm="syz.4.203" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.340671][ T4211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.360740][ T4216] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.203: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.089449][ T4216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 84.101783][ T4216] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.101783][ T4216] [ 84.111756][ T4219] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 84.129978][ T4219] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 84.160772][ T4211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.393101][ T28] audit: type=1400 audit(1781972632.298:823): avc: denied { bind } for pid=4229 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.435586][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.456965][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.474145][ T28] audit: type=1400 audit(1781972632.328:824): avc: denied { connect } for pid=4229 comm="syz.1.207" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.562157][ T4233] loop1: detected capacity change from 0 to 512 [ 84.604263][ T4233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.708664][ T4233] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.804641][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.087920][ T4250] netlink: 380 bytes leftover after parsing attributes in process `syz.1.214'. [ 85.112078][ T4248] loop4: detected capacity change from 0 to 1764 [ 85.273708][ T4250] loop1: detected capacity change from 0 to 764 [ 85.630431][ T4258] loop4: detected capacity change from 0 to 512 [ 85.678523][ T4258] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 85.721132][ T4258] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 85.799691][ T4258] EXT4-fs (loop4): 1 truncate cleaned up [ 85.823747][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.841091][ T4258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.857689][ T4256] macvlan2: entered promiscuous mode [ 85.994495][ T28] audit: type=1326 audit(1781972633.898:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.3.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6abb46ce59 code=0x0 [ 86.096839][ T4271] loop7: detected capacity change from 0 to 16384 [ 86.217827][ T4276] sctp: [Deprecated]: syz.0.221 (pid 4276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.217827][ T4276] Use struct sctp_sack_info instead [ 86.267049][ T4267] loop3: detected capacity change from 0 to 128 [ 86.320544][ T4276] loop0: detected capacity change from 0 to 256 [ 86.340863][ T4273] loop7: detected capacity change from 16384 to 0 [ 86.354876][ C0] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 2 [ 86.694893][ T28] audit: type=1326 audit(1781972634.598:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.4.229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae4ae3ce59 code=0x0 [ 86.782282][ T28] audit: type=1400 audit(1781972634.688:827): avc: denied { checkpoint_restore } for pid=4286 comm="syz.0.227" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.814094][ T4291] loop0: detected capacity change from 0 to 512 [ 86.848763][ T4291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.884978][ T4300] loop2: detected capacity change from 0 to 1024 [ 86.901626][ T4300] EXT4-fs: Ignoring removed bh option [ 86.938683][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.970295][ T4285] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.013437][ T4308] program syz.3.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.046285][ T4300] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.059924][ T28] audit: type=1400 audit(1781972634.968:828): avc: denied { write } for pid=4299 comm="syz.2.230" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.090665][ T4291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.100807][ T4300] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 1: comm syz.2.230: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.211502][ T28] audit: type=1400 audit(1781972635.118:829): avc: denied { write } for pid=4299 comm="syz.2.230" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.234133][ T4300] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.230: bg 0: block 112: padding at end of block bitmap is not set [ 87.598491][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.638207][ T4320] program syz.4.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.741326][ T28] audit: type=1326 audit(1781972635.648:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.1.241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eb5c1ce59 code=0x0 [ 87.820559][ T4332] loop3: detected capacity change from 0 to 128 [ 88.115258][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 88.366617][ T4351] loop2: detected capacity change from 0 to 512 [ 88.390343][ T4351] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.247: corrupted in-inode xattr: invalid ea_ino [ 88.406016][ T4351] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.406783][ T4351] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.247: couldn't read orphan inode 15 (err -117) [ 88.416100][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 88.416146][ C0] EXT4-fs (loop2): initial error at time 1781972636: ext4_iget_extra_inode:5180: inode 15 [ 88.416177][ C0] EXT4-fs (loop2): last error at time 1781972636: ext4_iget_extra_inode:5180: inode 15 [ 88.457314][ T4351] loop2: lost filesystem error report for type 5 error -117 [ 88.458238][ T4351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.533233][ T4351] FAULT_INJECTION: forcing a failure. [ 88.533233][ T4351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.533543][ T28] audit: type=1400 audit(1781972636.438:831): avc: denied { write } for pid=4350 comm="syz.2.247" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.547275][ T4351] CPU: 0 UID: 0 PID: 4351 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.547451][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.547494][ T4351] Call Trace: [ 88.547522][ T4351] [ 88.547546][ T4351] __dump_stack+0x1d/0x30 [ 88.547630][ T4351] dump_stack_lvl+0x95/0xd0 [ 88.547697][ T4351] dump_stack+0x15/0x1b [ 88.547770][ T4351] should_fail_ex+0x25e/0x270 [ 88.547866][ T4351] should_fail+0xb/0x20 [ 88.547962][ T4351] should_fail_usercopy+0x1a/0x20 [ 88.548075][ T4351] strncpy_from_user+0x27/0x250 [ 88.548194][ T4351] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 88.548222][ T4351] do_getname+0x59/0x1c0 [ 88.548298][ T4351] __se_sys_rename+0x2f/0x1c0 [ 88.548425][ T4351] __x64_sys_rename+0x31/0x40 [ 88.548496][ T4351] x64_sys_call+0x2b3/0x3020 [ 88.548653][ T4351] do_syscall_64+0x136/0x3c0 [ 88.548745][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.548806][ T4351] RIP: 0033:0x7f0528c8ce59 [ 88.548869][ T4351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.548925][ T4351] RSP: 002b:00007f05276e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 88.549043][ T4351] RAX: ffffffffffffffda RBX: 00007f0528f05fa0 RCX: 00007f0528c8ce59 [ 88.549093][ T4351] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000200000000880 [ 88.549136][ T4351] RBP: 00007f05276e7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.549178][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.549219][ T4351] R13: 00007f0528f06038 R14: 00007f0528f05fa0 R15: 00007fff31d52578 [ 88.549338][ T4351] [ 88.624380][ T4360] loop0: detected capacity change from 0 to 1024 [ 88.664855][ T28] audit: type=1400 audit(1781972636.438:832): avc: denied { write } for pid=4350 comm="syz.2.247" path="/39/file0/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.718958][ T4362] program syz.1.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.729274][ T4360] EXT4-fs: Ignoring removed bh option [ 88.783308][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.877105][ T4360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.890835][ T4360] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.041060][ T28] audit: type=1400 audit(1781972636.878:833): avc: denied { write } for pid=4359 comm="syz.0.250" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.147706][ T4377] loop4: detected capacity change from 0 to 512 [ 89.815429][ T4360] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1: comm syz.0.250: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.578173][ T4384] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 134217731, id = 0 [ 90.912984][ T4354] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 90.937645][ T4377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.548771][ T28] audit: type=1400 audit(1781972636.898:834): avc: denied { create } for pid=4373 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.568085][ T28] audit: type=1400 audit(1781972636.898:835): avc: denied { write } for pid=4373 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.829716][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.847809][ T28] audit: type=1400 audit(1781972638.938:836): avc: denied { write } for pid=4366 comm="syz.4.255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.882313][ T28] audit: type=1400 audit(1781972639.728:837): avc: denied { write } for pid=4359 comm="syz.0.250" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.934130][ T4393] netlink: 76 bytes leftover after parsing attributes in process `syz.1.261'. [ 91.977496][ T4396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.980815][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.010783][ T28] audit: type=1400 audit(1781972639.918:838): avc: denied { create } for pid=4397 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.053692][ T28] audit: type=1400 audit(1781972639.918:839): avc: denied { read } for pid=4397 comm="syz.3.262" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.083985][ T28] audit: type=1400 audit(1781972639.918:840): avc: denied { open } for pid=4397 comm="syz.3.262" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.113251][ T4406] program syz.0.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.214801][ T4410] loop4: detected capacity change from 0 to 512 [ 92.244931][ T4410] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.263127][ T4410] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.276581][ T4410] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.267: Failed to acquire dquot type 1 [ 92.295794][ T4410] loop4: lost filesystem error report for type 5 error -5 [ 92.298471][ T4410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.267: bg 0: block 40: padding at end of block bitmap is not set [ 92.305801][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 92.305837][ C0] EXT4-fs (loop4): initial error at time 1781972640: ext4_acquire_dquot:7041 [ 92.305868][ C0] EXT4-fs (loop4): last error at time 1781972640: ext4_acquire_dquot:7041 [ 92.354109][ T4410] loop4: lost filesystem error report for type 5 error -117 [ 92.363848][ T4410] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 92.381306][ T4410] loop4: lost filesystem error report for type 5 error -117 [ 92.382056][ T4410] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.267: data will be lost [ 92.401819][ T4410] EXT4-fs (loop4): 1 truncate cleaned up [ 92.409268][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.425254][ T4410] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.267: corrupted xattr block 31: invalid header [ 92.438892][ T4410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 92.448235][ T4410] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.267: corrupted xattr block 31: invalid header [ 92.464602][ T4410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 92.474432][ T4410] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.267: bad symlink. [ 92.521901][ T4421] netlink: 'syz.2.269': attribute type 21 has an invalid length. [ 92.538832][ T4421] netlink: 128 bytes leftover after parsing attributes in process `syz.2.269'. [ 92.559729][ T4421] netlink: 3 bytes leftover after parsing attributes in process `syz.2.269'. [ 92.574512][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.624999][ T4423] netlink: 380 bytes leftover after parsing attributes in process `syz.4.270'. [ 92.735807][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.782607][ T4423] loop4: detected capacity change from 0 to 764 [ 92.805294][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.051727][ T4438] loop1: detected capacity change from 0 to 128 [ 93.092101][ T4438] FAULT_INJECTION: forcing a failure. [ 93.092101][ T4438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.180515][ T4444] program syz.3.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.221393][ T4438] CPU: 0 UID: 0 PID: 4438 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.221483][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.221499][ T4438] Call Trace: [ 93.221508][ T4438] [ 93.221518][ T4438] __dump_stack+0x1d/0x30 [ 93.221564][ T4438] dump_stack_lvl+0x95/0xd0 [ 93.221593][ T4438] dump_stack+0x15/0x1b [ 93.221612][ T4438] should_fail_ex+0x25e/0x270 [ 93.221645][ T4438] should_fail+0xb/0x20 [ 93.221690][ T4438] should_fail_usercopy+0x1a/0x20 [ 93.221787][ T4438] _copy_from_iter+0xcc/0xe70 [ 93.221826][ T4438] ? __alloc_skb+0x511/0x6f0 [ 93.221866][ T4438] ? __alloc_skb+0x205/0x6f0 [ 93.221969][ T4438] netlink_sendmsg+0x4a4/0x6f0 [ 93.222004][ T4438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.222104][ T4438] ____sys_sendmsg+0x532/0x580 [ 93.222203][ T4438] ___sys_sendmsg+0x195/0x1e0 [ 93.222237][ T4438] __x64_sys_sendmsg+0xd4/0x160 [ 93.222267][ T4438] x64_sys_call+0x194c/0x3020 [ 93.222303][ T4438] do_syscall_64+0x136/0x3c0 [ 93.222337][ T4438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.222367][ T4438] RIP: 0033:0x7f7eb5c1ce59 [ 93.222384][ T4438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.222403][ T4438] RSP: 002b:00007f7eb466f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.222428][ T4438] RAX: ffffffffffffffda RBX: 00007f7eb5e95fa0 RCX: 00007f7eb5c1ce59 [ 93.222447][ T4438] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 93.222464][ T4438] RBP: 00007f7eb466f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.222480][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.222590][ T4438] R13: 00007f7eb5e96038 R14: 00007f7eb5e95fa0 R15: 00007ffcda3051a8 [ 93.222611][ T4438] [ 93.621039][ T4437] syz.1.276: attempt to access beyond end of device [ 93.621039][ T4437] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 93.831517][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 93.831536][ T28] audit: type=1400 audit(1781972641.738:849): avc: denied { setopt } for pid=4448 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.858503][ T4449] netlink: 'syz.0.279': attribute type 30 has an invalid length. [ 93.872017][ T4449] bond1: option arp_missed_max: invalid value (0) [ 93.878527][ T4449] bond1: option arp_missed_max: allowed values 1 - 255 [ 93.887065][ T4449] bond1 (unregistering): Released all slaves [ 93.972581][ T4451] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 93.996011][ T4447] loop1: detected capacity change from 0 to 512 [ 94.020012][ T28] audit: type=1400 audit(1781972641.928:850): avc: denied { create } for pid=4455 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.041694][ T28] audit: type=1400 audit(1781972641.928:851): avc: denied { setopt } for pid=4455 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.049922][ T4447] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.067323][ T4458] syz.4.282 (4458): /proc/4457/oom_adj is deprecated, please use /proc/4457/oom_score_adj instead. [ 94.081210][ T4447] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.088067][ T4447] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 94.103442][ T28] audit: type=1400 audit(1781972642.008:852): avc: denied { bind } for pid=4455 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.122777][ T4447] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 94.154744][ T4447] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.280: Failed to acquire dquot type 1 [ 94.214342][ T4447] loop1: lost filesystem error report for type 5 error -5 [ 94.215462][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 94.234315][ C1] EXT4-fs (loop1): initial error at time 1781972642: ext4_acquire_dquot:7041 [ 94.243682][ C1] EXT4-fs (loop1): last error at time 1781972642: ext4_acquire_dquot:7041 [ 94.267241][ T4469] loop4: detected capacity change from 0 to 128 [ 94.274919][ T4447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.280: bg 0: block 40: padding at end of block bitmap is not set [ 94.300534][ T4472] loop2: detected capacity change from 0 to 256 [ 94.312740][ T4472] vfat: Unknown parameter './file2' [ 94.319169][ T4447] loop1: lost filesystem error report for type 5 error -117 [ 94.339295][ T4447] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 94.343878][ T4468] syz.4.285: attempt to access beyond end of device [ 94.343878][ T4468] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 94.366363][ T4447] loop1: lost filesystem error report for type 5 error -117 [ 94.400598][ T4447] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.280: data will be lost [ 94.419360][ T4447] EXT4-fs (loop1): 1 truncate cleaned up [ 94.425518][ T4447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.454629][ T4447] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.280: corrupted xattr block 31: invalid header [ 94.470441][ T4447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 94.479456][ T4447] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.280: corrupted xattr block 31: invalid header [ 94.493687][ T4447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 94.502896][ T4447] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.280: bad symlink. [ 94.525648][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.559595][ T4479] loop3: detected capacity change from 0 to 128 [ 94.645266][ T4481] loop1: detected capacity change from 0 to 8192 [ 94.713142][ T4483] random: crng reseeded on system resumption [ 94.796488][ T4481] loop1: p1 p3 p4 [ 94.803332][ T4481] loop1: p3 start 117772289 is beyond EOD, truncated [ 94.825104][ T4485] netlink: 136 bytes leftover after parsing attributes in process `syz.4.292'. [ 94.865123][ T28] audit: type=1400 audit(1781972642.618:853): avc: denied { read write } for pid=4471 comm="syz.2.286" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.891688][ T4481] loop1: p4 size 4281074432 extends beyond EOD, truncated [ 94.934970][ T4489] netlink: 136 bytes leftover after parsing attributes in process `syz.4.292'. [ 95.026594][ T4490] loop0: detected capacity change from 0 to 512 [ 95.079020][ T28] audit: type=1400 audit(1781972642.618:854): avc: denied { ioctl open } for pid=4471 comm="syz.2.286" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.180954][ T28] audit: type=1400 audit(1781972643.048:855): avc: denied { mounton } for pid=4487 comm="syz.0.291" path="/file0" dev="autofs" ino=7564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 95.245994][ T4490] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 95.282827][ T28] audit: type=1400 audit(1781972643.188:856): avc: denied { connect } for pid=4480 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.303810][ T4488] macvlan3: entered promiscuous mode [ 95.308423][ T4490] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 95.321209][ T4481] 8021q: VLANs not supported on ip_vti0 [ 95.331301][ T4490] EXT4-fs (loop0): 1 truncate cleaned up [ 95.339366][ T4490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.358222][ T4490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.378207][ T4505] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 96.392430][ T4505] bond1: entered promiscuous mode [ 96.398073][ T4505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.482880][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 96.499234][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 96.515582][ T4505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 96.620670][ T4518] loop4: detected capacity change from 0 to 128 [ 96.627799][ T4518] FAT-fs (loop4): bogus number of FAT sectors [ 96.639254][ T4518] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.671744][ T4521] netlink: 380 bytes leftover after parsing attributes in process `syz.3.303'. [ 96.686118][ T4512] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 96.694152][ T4512] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.701105][ T4512] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.299: Failed to acquire dquot type 1 [ 96.713137][ T4512] loop0: lost filesystem error report for type 5 error -5 [ 96.713596][ T4512] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.299: bg 0: block 40: padding at end of block bitmap is not set [ 96.735339][ T4512] loop0: lost filesystem error report for type 5 error -117 [ 96.735705][ T4512] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 96.753031][ T4512] loop0: lost filesystem error report for type 5 error -117 [ 96.753822][ T4512] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.299: data will be lost [ 96.767812][ C0] EXT4-fs (loop0): error count since last fsck: 3 [ 96.774428][ T4512] EXT4-fs (loop0): 1 truncate cleaned up [ 96.778983][ C0] EXT4-fs (loop0): initial error at time 1781972644: ext4_acquire_dquot:7041 [ 96.779010][ C0] EXT4-fs (loop0): last error at time 1781972644: ext4_mb_clear_bb:6679 [ 96.803560][ T4512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.818981][ T4512] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.299: corrupted xattr block 31: invalid header [ 96.834646][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 96.843728][ T4512] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.299: corrupted xattr block 31: invalid header [ 96.857103][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 96.866126][ T4512] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.299: bad symlink. [ 96.897074][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.120828][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 97.162556][ T4538] xt_hashlimit: size too large, truncated to 1048576 [ 97.368517][ T4551] set_capacity_and_notify: 2 callbacks suppressed [ 97.368538][ T4551] loop1: detected capacity change from 0 to 512 [ 97.509424][ T4551] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.567960][ T4551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.580872][ T4551] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.316: Failed to acquire dquot type 1 [ 97.601781][ T4551] loop1: lost filesystem error report for type 5 error -5 [ 97.605167][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 97.619158][ C0] EXT4-fs (loop1): initial error at time 1781972645: ext4_acquire_dquot:7041 [ 97.627971][ C0] EXT4-fs (loop1): last error at time 1781972645: ext4_acquire_dquot:7041 [ 97.650135][ T4564] loop4: detected capacity change from 0 to 512 [ 97.657662][ T4564] EXT4-fs: Ignoring removed oldalloc option [ 97.666490][ T4564] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 97.674757][ T4564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.682181][ T4564] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 97.697154][ T4564] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 97.704537][ T4564] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 97.781399][ T4551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.316: bg 0: block 40: padding at end of block bitmap is not set [ 97.895488][ T4564] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.895799][ T4564] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.318: couldn't read orphan inode 13 (err -117) [ 97.905088][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 97.905116][ C0] EXT4-fs (loop4): last error at time 1781972645: ext4_ext_check_inode:521: inode 13 [ 97.985822][ T4551] loop1: lost filesystem error report for type 5 error -117 [ 97.994932][ T4551] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 98.020149][ T4564] loop4: lost filesystem error report for type 5 error -117 [ 98.020298][ T4551] loop1: lost filesystem error report for type 5 error -117 [ 98.033530][ T4564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.058228][ T4551] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.316: data will be lost [ 98.074180][ T4551] EXT4-fs (loop1): 1 truncate cleaned up [ 98.083331][ T4571] macvlan3: entered promiscuous mode [ 98.085804][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.105478][ T4564] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 98.118597][ T4564] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 98.129689][ T4551] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.316: corrupted xattr block 31: invalid header [ 98.143371][ T4551] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 98.152383][ T4551] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.316: corrupted xattr block 31: invalid header [ 98.165896][ T4571] loop3: detected capacity change from 0 to 512 [ 98.166606][ T4551] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 98.195216][ T4564] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 98.209259][ T4551] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.316: bad symlink. [ 98.225767][ T4571] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.233838][ T4571] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 98.253085][ T4571] EXT4-fs (loop3): 1 truncate cleaned up [ 98.264427][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.307647][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.344868][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.346918][ T4571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.442279][ T4591] loop4: detected capacity change from 0 to 1024 [ 98.490329][ T4591] EXT4-fs: Ignoring removed nobh option [ 98.507192][ T4591] EXT4-fs: Ignoring removed bh option [ 98.520986][ T4594] loop0: detected capacity change from 0 to 512 [ 98.557215][ T4594] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.331: bad orphan inode 15 [ 98.567813][ T4594] ext4_test_bit(bit=14, block=18) = 1 [ 98.573560][ T4594] is_bad_inode(inode)=0 [ 98.577809][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 98.577836][ C0] EXT4-fs (loop0): initial error at time 1781972646: ext4_orphan_get:1425 [ 98.577866][ C0] EXT4-fs (loop0): last error at time 1781972646: ext4_orphan_get:1425 [ 98.613829][ T4591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.628881][ T4594] NEXT_ORPHAN(inode)=1023 [ 98.633500][ T4594] max_ino=32 [ 98.637289][ T4594] i_nlink=0 [ 98.642100][ T4594] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.331: corrupted xattr block 19: invalid header [ 98.656239][ T4594] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.656760][ T4594] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 98.678623][ T4594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 98.736331][ T4594] ext4 filesystem being mounted at /76/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 99.260192][ T4612] program syz.3.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.982971][ T4614] FAULT_INJECTION: forcing a failure. [ 99.982971][ T4614] name failslab, interval 1, probability 0, space 0, times 0 [ 100.018532][ T4614] CPU: 1 UID: 0 PID: 4614 Comm: syz.4.334 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.018569][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.018649][ T4614] Call Trace: [ 100.018659][ T4614] [ 100.018669][ T4614] __dump_stack+0x1d/0x30 [ 100.018700][ T4614] dump_stack_lvl+0x95/0xd0 [ 100.018726][ T4614] dump_stack+0x15/0x1b [ 100.018747][ T4614] should_fail_ex+0x25e/0x270 [ 100.018827][ T4614] should_failslab+0x8c/0xb0 [ 100.018855][ T4614] kmem_cache_alloc_noprof+0x66/0x3f0 [ 100.018882][ T4614] ? do_getname+0x2e/0x1c0 [ 100.018903][ T4614] ? mutex_lock+0x57/0x90 [ 100.018994][ T4614] do_getname+0x2e/0x1c0 [ 100.019016][ T4614] __se_sys_mknodat+0x24/0xf0 [ 100.019051][ T4614] __x64_sys_mknodat+0x55/0x70 [ 100.019229][ T4614] x64_sys_call+0x312/0x3020 [ 100.019258][ T4614] do_syscall_64+0x136/0x3c0 [ 100.019284][ T4614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.019308][ T4614] RIP: 0033:0x7fae4ae3ce59 [ 100.019328][ T4614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.019352][ T4614] RSP: 002b:00007fae49897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 100.019381][ T4614] RAX: ffffffffffffffda RBX: 00007fae4b0b5fa0 RCX: 00007fae4ae3ce59 [ 100.019401][ T4614] RDX: 7889d5e36594eec9 RSI: 0000000000000000 RDI: ffffffffffffffff [ 100.019418][ T4614] RBP: 00007fae49897090 R08: 0000000000000000 R09: 0000000000000000 [ 100.019431][ T4614] R10: 0000000000000709 R11: 0000000000000246 R12: 0000000000000001 [ 100.019479][ T4614] R13: 00007fae4b0b6038 R14: 00007fae4b0b5fa0 R15: 00007fffee415c88 [ 100.019505][ T4614] [ 100.675785][ T4617] loop4: detected capacity change from 0 to 1024 [ 100.716634][ T4617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.764624][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 100.764641][ T28] audit: type=1400 audit(1781972648.668:862): avc: denied { write } for pid=4592 comm="syz.0.331" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.774196][ T4615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.331: bg 0: block 449: padding at end of block bitmap is not set [ 100.813179][ T28] audit: type=1400 audit(1781972648.718:863): avc: denied { read } for pid=4592 comm="syz.0.331" path="socket:[8791]" dev="sockfs" ino=8791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.858495][ T28] audit: type=1400 audit(1781972648.758:864): avc: denied { accept } for pid=4626 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 100.995378][ T4621] loop1: detected capacity change from 0 to 512 [ 101.076863][ T4621] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 101.082462][ T4637] xt_TCPMSS: Only works on TCP SYN packets [ 101.086688][ T4621] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.099430][ T4621] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 101.108609][ T4621] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 101.118445][ T4621] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.338: Failed to acquire dquot type 1 [ 101.130214][ T4621] fserror_report: 1 callbacks suppressed [ 101.130253][ T4621] loop1: lost filesystem error report for type 5 error -5 [ 101.182303][ T4621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.338: bg 0: block 40: padding at end of block bitmap is not set [ 101.190220][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 101.190260][ C0] EXT4-fs (loop1): initial error at time 1781972649: ext4_acquire_dquot:7041 [ 101.190430][ C0] EXT4-fs (loop1): last error at time 1781972649: ext4_acquire_dquot:7041 [ 101.234929][ T4636] syz_tun: entered allmulticast mode [ 101.273945][ T28] audit: type=1400 audit(1781972649.158:865): avc: denied { append } for pid=4634 comm="syz.2.344" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.368240][ T4636] syz_tun: left allmulticast mode [ 101.486120][ T4645] FAULT_INJECTION: forcing a failure. [ 101.486120][ T4645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.575998][ T4621] loop1: lost filesystem error report for type 5 error -117 [ 101.578809][ T4621] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 101.602385][ T4645] CPU: 0 UID: 0 PID: 4645 Comm: syz.4.345 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.602413][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.602429][ T4645] Call Trace: [ 101.602438][ T4645] [ 101.602448][ T4645] __dump_stack+0x1d/0x30 [ 101.602548][ T4645] dump_stack_lvl+0x95/0xd0 [ 101.602569][ T4645] dump_stack+0x15/0x1b [ 101.602592][ T4645] should_fail_ex+0x25e/0x270 [ 101.602627][ T4645] should_fail+0xb/0x20 [ 101.602734][ T4645] should_fail_usercopy+0x1a/0x20 [ 101.602770][ T4645] _copy_from_user+0x1c/0xb0 [ 101.602870][ T4645] ___sys_sendmsg+0xc1/0x1e0 [ 101.602920][ T4645] __x64_sys_sendmsg+0xd4/0x160 [ 101.602951][ T4645] x64_sys_call+0x194c/0x3020 [ 101.602975][ T4645] do_syscall_64+0x136/0x3c0 [ 101.603082][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.603110][ T4645] RIP: 0033:0x7fae4ae3ce59 [ 101.603207][ T4645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.603230][ T4645] RSP: 002b:00007fae49897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.603257][ T4645] RAX: ffffffffffffffda RBX: 00007fae4b0b5fa0 RCX: 00007fae4ae3ce59 [ 101.603277][ T4645] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 101.603294][ T4645] RBP: 00007fae49897090 R08: 0000000000000000 R09: 0000000000000000 [ 101.603311][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.603325][ T4645] R13: 00007fae4b0b6038 R14: 00007fae4b0b5fa0 R15: 00007fffee415c88 [ 101.603419][ T4645] [ 101.822064][ T4621] loop1: lost filesystem error report for type 5 error -117 [ 101.875376][ T4621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.338: data will be lost [ 101.930285][ T4621] EXT4-fs (loop1): 1 truncate cleaned up [ 101.971896][ T4621] EXT4-fs mount: 4 callbacks suppressed [ 101.971971][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.015925][ T28] audit: type=1400 audit(1781972649.898:866): avc: denied { name_bind } for pid=4652 comm="syz.4.351" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.083282][ T4657] loop0: detected capacity change from 0 to 128 [ 102.217352][ T4621] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.338: corrupted xattr block 31: invalid header [ 102.246515][ T4621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 102.257997][ T4621] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.338: corrupted xattr block 31: invalid header [ 102.271365][ T4621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 102.280365][ T4621] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.338: bad symlink. [ 102.319633][ T4663] sctp: [Deprecated]: syz.2.353 (pid 4663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.319633][ T4663] Use struct sctp_sack_info instead [ 102.355394][ T4656] syz.0.346: attempt to access beyond end of device [ 102.355394][ T4656] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 102.391292][ T28] audit: type=1400 audit(1781972650.298:867): avc: denied { create } for pid=4654 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.428670][ T28] audit: type=1400 audit(1781972650.318:868): avc: denied { setopt } for pid=4654 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.463304][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.498435][ T4668] netlink: 380 bytes leftover after parsing attributes in process `syz.2.356'. [ 102.568357][ T4668] loop2: detected capacity change from 0 to 764 [ 103.036371][ T28] audit: type=1326 audit(1781972650.948:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.1.363" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eb5c1ce59 code=0x0 [ 103.220001][ T4691] program syz.2.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.262868][ T4690] loop1: detected capacity change from 0 to 1024 [ 103.384014][ T4690] EXT4-fs: dax option not supported [ 103.473001][ T4693] bridge_slave_0: left allmulticast mode [ 103.549545][ T4693] bridge_slave_0: left promiscuous mode [ 103.605996][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.670799][ T4694] loop4: detected capacity change from 0 to 128 [ 103.683309][ T4693] bridge_slave_1: left allmulticast mode [ 103.704110][ T4693] bridge_slave_1: left promiscuous mode [ 103.710407][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.726036][ T4693] bond0: (slave bond_slave_0): Releasing backup interface [ 103.733898][ T4694] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.759077][ T4694] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.781760][ T4693] bond0: (slave bond_slave_1): Releasing backup interface [ 103.794146][ T4694] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.801244][ T4687] loop1: detected capacity change from 0 to 2048 [ 103.824571][ T4693] team0: Port device team_slave_0 removed [ 103.834029][ T4693] team0: Port device team_slave_1 removed [ 103.841231][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.858784][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.881074][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.893875][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.917226][ T4693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.027999][ T4700] loop3: detected capacity change from 0 to 512 [ 104.094057][ T4700] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.467019][ T4712] netlink: 380 bytes leftover after parsing attributes in process `syz.1.369'. [ 104.493896][ T4700] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.577268][ T4700] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.365: Failed to acquire dquot type 1 [ 104.659169][ T4712] loop1: detected capacity change from 0 to 764 [ 104.680087][ T4700] loop3: lost filesystem error report for type 5 error -5 [ 104.695316][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.710173][ C0] EXT4-fs (loop3): initial error at time 1781972652: ext4_acquire_dquot:7041 [ 104.719524][ C0] EXT4-fs (loop3): last error at time 1781972652: ext4_acquire_dquot:7041 [ 104.854968][ T4716] loop4: detected capacity change from 0 to 512 [ 104.867582][ T4719] loop0: detected capacity change from 0 to 128 [ 104.885259][ T4700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.365: bg 0: block 40: padding at end of block bitmap is not set [ 104.899423][ T4700] loop3: lost filesystem error report for type 5 error -117 [ 104.914073][ T4700] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 104.930182][ T4700] loop3: lost filesystem error report for type 5 error -117 [ 104.931114][ T4700] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.365: data will be lost [ 104.949371][ T4700] EXT4-fs (loop3): 1 truncate cleaned up [ 104.955530][ T4700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.985978][ T4700] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.365: corrupted xattr block 31: invalid header [ 105.010679][ T4700] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 105.062080][ T4700] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.365: corrupted xattr block 31: invalid header [ 105.100222][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 105.143033][ T4700] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 105.184764][ T4700] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.365: bad symlink. [ 105.281307][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.342467][ T4743] loop3: detected capacity change from 0 to 1024 [ 105.370303][ T4743] EXT4-fs: Ignoring removed bh option [ 105.439187][ T4743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.454403][ T4739] loop4: detected capacity change from 0 to 1024 [ 105.479325][ T4739] EXT4-fs: dax option not supported [ 105.500121][ T4751] macvlan3: entered promiscuous mode [ 105.508777][ T4743] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.542533][ T4743] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 1: comm syz.3.380: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.551644][ T4751] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 105.570206][ T4751] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 105.591209][ T4751] EXT4-fs (loop1): 1 truncate cleaned up [ 105.597361][ T4751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.653156][ T4743] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.380: bg 0: block 112: padding at end of block bitmap is not set [ 105.691154][ T4727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.706513][ T4727] ext4 filesystem being mounted at /71 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.731571][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.784664][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.851261][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.891673][ T4765] syzkaller0: entered promiscuous mode [ 105.898072][ T4765] syzkaller0: entered allmulticast mode [ 106.194089][ T4771] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.202188][ T4771] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.209282][ T4771] __quota_error: 6 callbacks suppressed [ 106.209300][ T4771] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 106.227455][ T4771] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 106.255513][ T4771] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.390: Failed to acquire dquot type 1 [ 106.285053][ T4771] loop1: lost filesystem error report for type 5 error -5 [ 106.295050][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 106.308837][ C1] EXT4-fs (loop1): initial error at time 1781972654: ext4_acquire_dquot:7041 [ 106.318435][ C1] EXT4-fs (loop1): last error at time 1781972654: ext4_acquire_dquot:7041 [ 106.404275][ T4771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.390: bg 0: block 40: padding at end of block bitmap is not set [ 106.498348][ T4771] loop1: lost filesystem error report for type 5 error -117 [ 106.505546][ T4771] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 106.565429][ T4771] loop1: lost filesystem error report for type 5 error -117 [ 106.577775][ T4771] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.390: data will be lost [ 106.617722][ T4771] EXT4-fs (loop1): 1 truncate cleaned up [ 106.665443][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.821191][ T4771] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.390: corrupted xattr block 31: invalid header [ 106.836758][ T4771] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 106.847131][ T4771] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.390: corrupted xattr block 31: invalid header [ 106.867787][ T28] audit: type=1400 audit(1781972654.708:874): avc: denied { validate_trans } for pid=4800 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.876499][ T4771] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 106.910037][ T4807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 106.910266][ T4771] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.390: bad symlink. [ 106.933358][ T28] audit: type=1326 audit(1781972654.818:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 106.962586][ T28] audit: type=1326 audit(1781972654.818:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 106.988469][ T28] audit: type=1326 audit(1781972654.818:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 107.014576][ T28] audit: type=1326 audit(1781972654.818:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 107.025304][ T4807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 107.047830][ T28] audit: type=1326 audit(1781972654.818:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 107.074757][ T28] audit: type=1400 audit(1781972654.818:880): avc: denied { mount } for pid=4799 comm="syz.3.397" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.097137][ T28] audit: type=1326 audit(1781972654.818:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb46ce59 code=0x7ffc0000 [ 107.136929][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.301493][ T4815] program syz.4.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.434805][ T4818] macvlan4: entered promiscuous mode [ 107.534236][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.598524][ T4818] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.616732][ T4818] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 107.626607][ T4818] EXT4-fs (loop2): 1 truncate cleaned up [ 107.633672][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.692387][ T4813] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.402: missing EA_INODE flag [ 107.726820][ T4813] EXT4-fs (loop1): Remounting filesystem read-only [ 107.771423][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.806221][ T4813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.402'. [ 107.823827][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 107.875616][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.970793][ T4830] set_capacity_and_notify: 6 callbacks suppressed [ 107.970814][ T4830] loop3: detected capacity change from 0 to 1024 [ 107.995776][ T4830] EXT4-fs: Ignoring removed bh option [ 108.045457][ T4834] loop0: detected capacity change from 0 to 512 [ 108.067218][ T4834] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 108.078384][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.131445][ T4830] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.174529][ T4830] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 1: comm syz.3.407: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.228814][ T4848] loop4: detected capacity change from 0 to 256 [ 108.242640][ T4846] loop0: detected capacity change from 0 to 164 [ 108.249684][ T4841] loop1: detected capacity change from 0 to 512 [ 108.259621][ T4848] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.281790][ T4846] Symlink component flag not implemented [ 108.289394][ T4846] Symlink component flag not implemented (7) [ 108.296133][ T4830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.407: bg 0: block 112: padding at end of block bitmap is not set [ 108.318082][ T4841] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.326821][ T4841] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.348701][ T4846] x_tables: duplicate underflow at hook 3 [ 108.357161][ T4841] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.410: Failed to acquire dquot type 1 [ 108.383530][ T4841] loop1: lost filesystem error report for type 5 error -5 [ 108.395032][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 108.408737][ C0] EXT4-fs (loop1): initial error at time 1781972656: ext4_acquire_dquot:7041 [ 108.417583][ C0] EXT4-fs (loop1): last error at time 1781972656: ext4_acquire_dquot:7041 [ 108.432808][ T4841] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.410: bg 0: block 40: padding at end of block bitmap is not set [ 108.451026][ T4841] loop1: lost filesystem error report for type 5 error -117 [ 108.452386][ T4841] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.477153][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.487782][ T4841] loop1: lost filesystem error report for type 5 error -117 [ 108.505541][ T4841] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.410: data will be lost [ 108.527242][ T4841] EXT4-fs (loop1): 1 truncate cleaned up [ 108.561419][ T4853] loop3: detected capacity change from 0 to 512 [ 108.565005][ T4841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.580579][ T4853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.602984][ T4853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.615475][ T4841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.410: corrupted xattr block 31: invalid header [ 108.624017][ T4853] EXT4-fs (loop3): 1 truncate cleaned up [ 108.637670][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.637697][ C0] EXT4-fs (loop3): initial error at time 1781972656: ext4_mb_generate_buddy:1317 [ 108.637742][ C0] EXT4-fs (loop3): last error at time 1781972656: ext4_mb_generate_buddy:1317 [ 108.663321][ T4853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.680113][ T4841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 108.691946][ T4841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.410: corrupted xattr block 31: invalid header [ 108.707963][ T4853] EXT4-fs error (device loop3) in ext4_setattr:6172: error 28 [ 108.719255][ T4853] Unsupported ieee802154 address type: 0 [ 108.744429][ T4841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 108.754117][ T4841] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.410: bad symlink. [ 108.847170][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.859604][ T4869] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 134217731, id = 0 [ 109.025836][ T4882] syz_tun: entered allmulticast mode [ 109.058921][ T4853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.081842][ T4853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.153188][ T4882] syz_tun: left allmulticast mode [ 109.211344][ T4892] program syz.4.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.334956][ T4891] loop1: detected capacity change from 0 to 2048 [ 109.404038][ T4891] loop1: p1 p4 [ 109.467462][ T4891] loop1: p4 size 589824 extends beyond EOD, truncated [ 109.818930][ T4901] syzkaller0: entered promiscuous mode [ 109.824586][ T4901] syzkaller0: entered allmulticast mode [ 109.833185][ T4901] tipc: Started in network mode [ 109.838306][ T4901] tipc: Node identity 96af94596027, cluster identity 4711 [ 109.845888][ T4901] tipc: Enabled bearer , priority 0 [ 109.854672][ T4901] tipc: Resetting bearer [ 109.870768][ T4901] loop2: detected capacity change from 0 to 1024 [ 109.879702][ T4901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.900261][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.948590][ T4901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'. [ 110.039997][ T4910] loop3: detected capacity change from 0 to 128 [ 110.114378][ T4900] tipc: Resetting bearer [ 110.123388][ T4900] tipc: Disabling bearer [ 110.255147][ T4909] syz.3.432: attempt to access beyond end of device [ 110.255147][ T4909] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 110.297738][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.446689][ T4925] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.440'. [ 110.548120][ T4924] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.440'. [ 110.719848][ T4936] netlink: 380 bytes leftover after parsing attributes in process `syz.3.442'. [ 110.762311][ T4936] loop3: detected capacity change from 0 to 764 [ 110.800410][ T4929] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.439: invalid indirect mapped block 256 (level 2) [ 110.861606][ T4929] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.865042][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 110.880722][ C1] EXT4-fs (loop0): initial error at time 1781972658: ext4_free_branches:1023: inode 11 [ 110.890428][ C1] EXT4-fs (loop0): last error at time 1781972658: ext4_free_branches:1023: inode 11 [ 110.949504][ T4929] EXT4-fs (loop0): 2 truncates cleaned up [ 110.956947][ T4929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.073203][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.167872][ T4947] EXT4-fs: Ignoring removed bh option [ 111.217825][ T4947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.289770][ T4947] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.347812][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 111.347865][ T28] audit: type=1400 audit(1781972659.258:933): avc: denied { write } for pid=4946 comm="syz.0.446" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.376374][ T4947] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1: comm syz.0.446: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.404998][ T4947] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.446: bg 0: block 112: padding at end of block bitmap is not set [ 111.405239][ T28] audit: type=1400 audit(1781972659.308:934): avc: denied { write } for pid=4946 comm="syz.0.446" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.494134][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.716847][ T4971] FAULT_INJECTION: forcing a failure. [ 111.716847][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.763500][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.763537][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.763590][ T4971] Call Trace: [ 111.763599][ T4971] [ 111.763609][ T4971] __dump_stack+0x1d/0x30 [ 111.763641][ T4971] dump_stack_lvl+0x95/0xd0 [ 111.763670][ T4971] dump_stack+0x15/0x1b [ 111.763695][ T4971] should_fail_ex+0x25e/0x270 [ 111.763731][ T4971] should_fail+0xb/0x20 [ 111.763803][ T4971] should_fail_usercopy+0x1a/0x20 [ 111.763841][ T4971] _copy_from_iter+0xcc/0xe70 [ 111.763912][ T4971] ? __alloc_skb+0x511/0x6f0 [ 111.763955][ T4971] ? __alloc_skb+0x205/0x6f0 [ 111.764053][ T4971] netlink_sendmsg+0x4a4/0x6f0 [ 111.764141][ T4971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.764180][ T4971] ____sys_sendmsg+0x532/0x580 [ 111.764225][ T4971] ___sys_sendmsg+0x195/0x1e0 [ 111.764293][ T4971] __x64_sys_sendmsg+0xd4/0x160 [ 111.764371][ T4971] x64_sys_call+0x194c/0x3020 [ 111.764445][ T4971] do_syscall_64+0x136/0x3c0 [ 111.764472][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.764536][ T4971] RIP: 0033:0x7f6abb46ce59 [ 111.764556][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.764581][ T4971] RSP: 002b:00007f6ab9ec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.764607][ T4971] RAX: ffffffffffffffda RBX: 00007f6abb6e5fa0 RCX: 00007f6abb46ce59 [ 111.764626][ T4971] RDX: 0000000000008002 RSI: 0000200000000340 RDI: 0000000000000003 [ 111.764707][ T4971] RBP: 00007f6ab9ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.764721][ T4971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.764733][ T4971] R13: 00007f6abb6e6038 R14: 00007f6abb6e5fa0 R15: 00007ffc339a8ff8 [ 111.764752][ T4971] [ 112.078041][ T4977] macvlan4: entered promiscuous mode [ 112.163190][ T4977] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.171242][ T4977] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 112.358337][ T4977] EXT4-fs (loop3): 1 truncate cleaned up [ 112.364493][ T4977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.515345][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.756349][ T28] audit: type=1400 audit(1781972660.658:935): avc: denied { write } for pid=4998 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.170920][ T5013] set_capacity_and_notify: 4 callbacks suppressed [ 113.170936][ T5013] loop3: detected capacity change from 0 to 1024 [ 113.199612][ T5014] netlink: 288 bytes leftover after parsing attributes in process `syz.2.469'. [ 113.225081][ T28] audit: type=1400 audit(1781972661.098:936): avc: denied { write } for pid=5008 comm="syz.2.469" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.269863][ T5013] EXT4-fs: Ignoring removed bh option [ 113.379931][ T5013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.401472][ T5013] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.426289][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 1: comm syz.3.471: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.426303][ T28] audit: type=1400 audit(1781972661.338:937): avc: denied { write } for pid=5012 comm="syz.3.471" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.469952][ T5013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.471: bg 0: block 112: padding at end of block bitmap is not set [ 113.470427][ T28] audit: type=1400 audit(1781972661.378:938): avc: denied { write } for pid=5012 comm="syz.3.471" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.535121][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.636109][ T5026] program syz.4.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.140909][ T28] audit: type=1400 audit(1781972662.048:939): avc: denied { setopt } for pid=5031 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.177099][ T28] audit: type=1400 audit(1781972662.048:940): avc: denied { listen } for pid=5031 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.196350][ T28] audit: type=1400 audit(1781972662.048:941): avc: denied { read } for pid=5031 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.215531][ T28] audit: type=1400 audit(1781972662.048:942): avc: denied { mount } for pid=5031 comm="syz.3.477" name="/" dev="hugetlbfs" ino=9662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 114.238593][ T5036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 114.245245][ T5036] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.257650][ T5036] vhci_hcd vhci_hcd.0: Device attached [ 114.267459][ T5037] vhci_hcd: connection closed [ 114.267688][ T120] vhci_hcd vhci_hcd.3: stop threads [ 114.279586][ T5040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.288267][ T120] vhci_hcd vhci_hcd.3: release socket [ 114.299744][ T120] vhci_hcd vhci_hcd.3: disconnect device [ 114.381786][ T5046] loop0: detected capacity change from 0 to 128 [ 114.558830][ T5046] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.577089][ T5046] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.598349][ T5046] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.869523][ T5062] loop4: detected capacity change from 0 to 512 [ 115.346652][ T5062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.625390][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.865301][ T5071] netlink: 2 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.874390][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.883349][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.892257][ T5071] netlink: 2 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.901296][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.910231][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.985799][ T5071] netlink: 2 bytes leftover after parsing attributes in process `syz.2.489'. [ 115.994817][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 116.178394][ T5091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=5091 comm=syz.0.491 [ 116.373793][ T28] kauditd_printk_skb: 248 callbacks suppressed [ 116.373812][ T28] audit: type=1326 audit(1781972664.278:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.428831][ T5089] loop1: detected capacity change from 0 to 8192 [ 116.448603][ T5089] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.528360][ T28] audit: type=1326 audit(1781972664.278:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.559205][ T28] audit: type=1326 audit(1781972664.278:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.585310][ T5099] loop0: detected capacity change from 0 to 512 [ 116.596522][ T28] audit: type=1326 audit(1781972664.278:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.618833][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.621933][ T28] audit: type=1326 audit(1781972664.278:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.656284][ T28] audit: type=1326 audit(1781972664.278:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.681727][ T28] audit: type=1326 audit(1781972664.278:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.707130][ T28] audit: type=1326 audit(1781972664.318:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.733553][ T5099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.758866][ T5109] loop4: detected capacity change from 0 to 1024 [ 116.778454][ T5111] loop3: detected capacity change from 0 to 256 [ 116.788788][ T28] audit: type=1326 audit(1781972664.318:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.799429][ T5109] EXT4-fs: inline encryption not supported [ 116.818340][ T28] audit: type=1326 audit(1781972664.318:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.2.489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0528c8ce59 code=0x7fc00000 [ 116.849914][ T5111] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 116.865443][ T5099] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 116.921495][ T5114] loop1: detected capacity change from 0 to 1024 [ 116.928522][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.937010][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.949870][ T5114] EXT4-fs: Ignoring removed bh option [ 117.015891][ T5109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.030172][ T5114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.037051][ T5109] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.056278][ T5114] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.078981][ T5114] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 1: comm syz.1.497: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.100365][ T5109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.495: bg 0: block 112: padding at end of block bitmap is not set [ 117.119106][ T5109] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 117.132420][ T5114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.497: bg 0: block 112: padding at end of block bitmap is not set [ 117.134128][ T5109] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.134128][ T5109] [ 117.134150][ T5109] EXT4-fs (loop4): Total free blocks count 0 [ 117.134177][ T5109] EXT4-fs (loop4): Free/Dirty block details [ 117.134231][ T5109] EXT4-fs (loop4): free_blocks=0 [ 117.134249][ T5109] EXT4-fs (loop4): dirty_blocks=16 [ 117.134309][ T5109] EXT4-fs (loop4): Block reservation details [ 117.134323][ T5109] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 117.197305][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.209208][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.217966][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.539996][ T5138] loop4: detected capacity change from 0 to 512 [ 119.589731][ T5139] loop1: detected capacity change from 0 to 512 [ 120.619924][ T5139] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 120.620505][ T5139] EXT4-fs: failed to create workqueue [ 120.636863][ T5139] EXT4-fs (loop1): mount failed [ 120.660127][ T5138] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 120.660584][ T5138] EXT4-fs: failed to create workqueue [ 120.676606][ T5138] EXT4-fs (loop4): mount failed [ 121.734796][ T5155] loop4: detected capacity change from 0 to 512 [ 121.996680][ T5155] /dev/loop4: Can't open blockdev [ 122.407770][ T5162] program syz.0.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.451692][ T5158] program syz.2.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.660113][ T5166] loop0: detected capacity change from 0 to 1764 [ 122.687298][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 122.687316][ T28] audit: type=1400 audit(1781972670.598:1269): avc: denied { mounton } for pid=5165 comm="syz.0.513" path="/110/file0/file0" dev="loop0" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 122.717545][ T5168] loop2: detected capacity change from 0 to 512 [ 122.738600][ T28] audit: type=1400 audit(1781972670.648:1270): avc: denied { create } for pid=5169 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.776003][ T5168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.874962][ T5168] EXT4-fs (loop2): 1 truncate cleaned up [ 122.882224][ T5168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.911577][ T28] audit: type=1400 audit(1781972670.818:1271): avc: denied { write } for pid=5167 comm="syz.2.514" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.969595][ T5180] loop0: detected capacity change from 0 to 764 [ 123.002077][ T5185] loop4: detected capacity change from 0 to 512 [ 123.103152][ T28] audit: type=1400 audit(1781972670.998:1272): avc: denied { map } for pid=5167 comm="syz.2.514" path="/107/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.137287][ T5188] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.189253][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.213780][ T5191] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.215670][ T28] audit: type=1400 audit(1781972671.118:1273): avc: denied { write } for pid=5169 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.256128][ T5192] loop1: detected capacity change from 0 to 512 [ 123.278846][ T5185] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 123.312134][ T5192] EXT4-fs (loop1): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 123.343374][ T28] audit: type=1400 audit(1781972671.158:1274): avc: denied { write } for pid=5190 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.348753][ T5185] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 123.409148][ T28] audit: type=1400 audit(1781972671.318:1275): avc: denied { read write } for pid=5190 comm="syz.1.523" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.443379][ T28] audit: type=1400 audit(1781972671.318:1276): avc: denied { open } for pid=5190 comm="syz.1.523" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.470214][ T5195] loop2: detected capacity change from 0 to 256 [ 123.477460][ T5195] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.477901][ T5185] EXT4-fs (loop4): 1 truncate cleaned up [ 123.531727][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.598508][ T5185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.639501][ T5199] program syz.1.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.698977][ T28] audit: type=1400 audit(1781972671.608:1277): avc: denied { getopt } for pid=5193 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.862434][ T5204] loop2: detected capacity change from 0 to 128 [ 124.351976][ T28] audit: type=1400 audit(1781972672.208:1278): avc: denied { relabelfrom } for pid=5206 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 124.456659][ T5216] syz.4.531 (5216) used obsolete PPPIOCDETACH ioctl [ 124.470265][ T5216] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 124.494493][ T5216] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.523292][ T5219] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 124.523805][ T5216] netlink: 'syz.4.531': attribute type 8 has an invalid length. [ 124.559273][ T5216] netlink: 'syz.4.531': attribute type 8 has an invalid length. [ 124.571738][ T5219] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.595208][ T5219] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.795057][ T5227] set_capacity_and_notify: 1 callbacks suppressed [ 124.795077][ T5227] loop0: detected capacity change from 0 to 512 [ 124.843133][ T5222] hub 5-0:1.0: USB hub found [ 124.865759][ T5227] EXT4-fs: inline encryption not supported [ 124.884399][ T5227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.905190][ T5222] hub 5-0:1.0: 8 ports detected [ 124.910229][ T5227] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.913190][ T5234] loop1: detected capacity change from 0 to 512 [ 124.958053][ T5235] loop4: detected capacity change from 0 to 2048 [ 124.977826][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.000134][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.007548][ T5234] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.071035][ T5234] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.537: corrupted xattr entries [ 125.082645][ T5234] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.085035][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.100708][ C1] EXT4-fs (loop1): initial error at time 1781972672: xattr_find_entry:337: inode 15 [ 125.110207][ C1] EXT4-fs (loop1): last error at time 1781972672: xattr_find_entry:337: inode 15 [ 125.123422][ T5234] EXT4-fs (loop1): 1 orphan inode deleted [ 125.143812][ T5234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.185438][ T5235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.214953][ T5227] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 125.231841][ T5237] loop3: detected capacity change from 0 to 512 [ 125.261073][ T5237] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.269121][ T5237] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.305423][ T5227] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.532: bg 0: block 248: padding at end of block bitmap is not set [ 125.321664][ T5227] loop0: lost filesystem error report for type 5 error -117 [ 125.327958][ T5237] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.538: Failed to acquire dquot type 1 [ 125.338968][ T5227] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.532: Failed to acquire dquot type 1 [ 125.347160][ T5237] loop3: lost filesystem error report for type 5 error -5 [ 125.348286][ T5237] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.538: bg 0: block 40: padding at end of block bitmap is not set [ 125.358644][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 125.358664][ C0] EXT4-fs (loop0): last error at time 1781972673: ext4_validate_block_bitmap:441 [ 125.358688][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 125.358700][ C0] EXT4-fs (loop3): initial error at time 1781972673: ext4_acquire_dquot:7041 [ 125.358732][ C0] EXT4-fs (loop3): last error at time 1781972673: ext4_acquire_dquot:7041 [ 125.409952][ T5227] loop0: lost filesystem error report for type 5 error -28 [ 125.413005][ T5237] loop3: lost filesystem error report for type 5 error -117 [ 125.428800][ T5237] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 125.448066][ T5248] loop2: detected capacity change from 0 to 512 [ 125.483803][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.497734][ T5248] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.514106][ T5227] EXT4-fs (loop0): 1 truncate cleaned up [ 125.521403][ T5248] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.539: iget: bad i_size value: 2533274857506816 [ 125.540518][ T5248] bridge0: port 3(team0) entered disabled state [ 125.547501][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.559028][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.566813][ T5237] loop3: lost filesystem error report for type 5 error -117 [ 125.567386][ T5227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 125.569184][ T5248] bridge0: entered allmulticast mode [ 125.642843][ T5237] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.538: data will be lost [ 125.654191][ T5237] EXT4-fs (loop3): 1 truncate cleaned up [ 125.654658][ T5248] team0: left allmulticast mode [ 125.660335][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.681205][ T5248] team_slave_0: left allmulticast mode [ 125.690285][ T5248] team_slave_1: left allmulticast mode [ 125.696735][ T5248] bond0: left allmulticast mode [ 125.703163][ T5248] bond_slave_0: left allmulticast mode [ 125.709815][ T5248] bond_slave_1: left allmulticast mode [ 125.719108][ T5248] team0: left promiscuous mode [ 125.724765][ T5248] team_slave_0: left promiscuous mode [ 125.733105][ T5248] team_slave_1: left promiscuous mode [ 125.741345][ T5248] bond0: left promiscuous mode [ 125.746914][ T5248] bond_slave_0: left promiscuous mode [ 125.755865][ T5248] bond_slave_1: left promiscuous mode [ 125.772875][ T5248] bridge0: port 3(team0) entered disabled state [ 125.780558][ T5237] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.538: corrupted xattr block 31: invalid header [ 125.823794][ T5248] bridge_slave_1: left allmulticast mode [ 125.830586][ T5248] bridge_slave_1: left promiscuous mode [ 125.839571][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.871200][ T5248] bridge_slave_0: left allmulticast mode [ 125.877969][ T5248] bridge_slave_0: left promiscuous mode [ 125.886974][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.894463][ T5237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 125.903590][ T5237] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.538: corrupted xattr block 31: invalid header [ 125.917724][ T5237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 125.926737][ T5237] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.538: bad symlink. [ 125.939066][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.951378][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.975392][ T5252] loop1: detected capacity change from 0 to 512 [ 126.061022][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 126.062014][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.123203][ T5252] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 126.136538][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.156894][ T5252] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 126.212192][ T5252] EXT4-fs (loop1): 1 truncate cleaned up [ 126.253616][ T5265] loop0: detected capacity change from 0 to 512 [ 126.259967][ T5252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.276079][ T5252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.303715][ T5270] loop2: detected capacity change from 0 to 128 [ 126.464682][ T5278] program syz.3.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.542096][ T5265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.644503][ T5265] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.969086][ T5291] loop1: detected capacity change from 0 to 128 [ 127.067190][ T5291] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.111202][ T5291] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.168168][ T5265] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 127.182746][ T5301] loop3: detected capacity change from 0 to 512 [ 127.193020][ T5291] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.238872][ T5301] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.551: corrupted inode contents [ 127.327907][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.329535][ T5301] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.551: mark_inode_dirty error [ 127.338768][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.338794][ C1] EXT4-fs (loop3): initial error at time 1781972675: ext4_do_update_inode:5742: inode 16 [ 127.338826][ C1] EXT4-fs (loop3): last error at time 1781972675: ext4_do_update_inode:5742: inode 16 [ 127.381666][ T5280] usb usb7: check_ctrlrecip: process 5280 (syz.0.546) requesting ep 01 but needs 81 [ 127.395053][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.395540][ T5280] usb usb7: usbfs: process 5280 (syz.0.546) did not claim interface 0 before use [ 127.414043][ T5301] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.551: corrupted inode contents [ 127.435297][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.435509][ T5301] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.551: mark_inode_dirty error [ 127.456099][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.456287][ T5280] vhci_hcd vhci_hcd.3: default hub control req: 0206 v0000 i0001 l0 [ 127.473731][ T5301] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.551: corrupted inode contents [ 127.485491][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.488508][ T5301] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 127.515665][ T5301] loop3: lost filesystem error report for type 5 error -117 [ 127.515857][ T5301] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.551: corrupted inode contents [ 127.536976][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.537235][ T5301] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.551: mark_inode_dirty error [ 127.558766][ T5301] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.559042][ T5301] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 127.577748][ T5301] loop3: lost filesystem error report for type 5 error -117 [ 127.578149][ T5301] EXT4-fs (loop3): 1 truncate cleaned up [ 127.592176][ T5301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.606666][ T5320] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.607003][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 127.615304][ T5320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.627244][ T5301] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.647237][ T5320] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.553: Failed to acquire dquot type 1 [ 127.669650][ T5301] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.551: Failed to acquire dquot type 1 [ 127.678454][ T5320] loop4: lost filesystem error report for type 5 error -5 [ 127.694684][ T5320] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.553: bg 0: block 40: padding at end of block bitmap is not set [ 127.702124][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 127.702155][ C1] EXT4-fs (loop4): initial error at time 1781972675: ext4_acquire_dquot:7041 [ 127.702186][ C1] EXT4-fs (loop4): last error at time 1781972675: ext4_acquire_dquot:7041 [ 127.741749][ T5320] loop4: lost filesystem error report for type 5 error -117 [ 127.741955][ T5320] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 127.835414][ T5344] __quota_error: 19 callbacks suppressed [ 127.835458][ T5344] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.861680][ T5320] loop4: lost filesystem error report for type 5 error -117 [ 127.873100][ T5320] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.553: data will be lost [ 127.891484][ T5320] EXT4-fs (loop4): 1 truncate cleaned up [ 127.926737][ T5344] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 127.998091][ T5320] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.553: corrupted xattr block 31: invalid header [ 128.076240][ T5320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 128.085867][ T5320] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.553: corrupted xattr block 31: invalid header [ 128.102633][ T5320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 128.112493][ T5320] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.553: bad symlink. [ 128.133803][ T5385] __nla_validate_parse: 22 callbacks suppressed [ 128.133824][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 128.170575][ T3391] IPVS: starting estimator thread 0... [ 128.275930][ T5386] IPVS: using max 2256 ests per chain, 112800 per kthread [ 128.283851][ T5385] loop1: p3 < > p4 [ 128.291065][ T5385] loop1: p4 size 851974 extends beyond EOD, truncated [ 128.454866][ T5116] udevd[5116]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 128.469847][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 128.659383][ T5410] EXT4-fs: Ignoring removed bh option [ 128.824383][ T5410] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.107286][ T28] audit: type=1400 audit(1781972677.018:1289): avc: denied { write } for pid=5408 comm="syz.2.565" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.419097][ T28] audit: type=1400 audit(1781972677.138:1290): avc: denied { write } for pid=5409 comm="syz.4.567" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.466789][ T5410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.565: bg 0: block 112: padding at end of block bitmap is not set [ 129.484300][ T28] audit: type=1400 audit(1781972677.378:1291): avc: denied { write } for pid=5408 comm="syz.2.565" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.725200][ T28] audit: type=1400 audit(1781972677.498:1292): avc: denied { connect } for pid=5398 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.832765][ T5429] set_capacity_and_notify: 6 callbacks suppressed [ 130.832788][ T5429] loop0: detected capacity change from 0 to 128 [ 130.973227][ T5433] loop4: detected capacity change from 0 to 1024 [ 131.028765][ T5433] EXT4-fs: Ignoring removed bh option [ 131.089051][ T5433] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.315477][ T28] audit: type=1400 audit(1781972679.198:1293): avc: denied { write } for pid=5432 comm="syz.4.573" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.336814][ T5433] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1: comm syz.4.573: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.405392][ T28] audit: type=1400 audit(1781972679.308:1294): avc: denied { write } for pid=5432 comm="syz.4.573" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.430835][ T5433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.573: bg 0: block 112: padding at end of block bitmap is not set [ 131.499910][ T5442] loop1: detected capacity change from 0 to 512 [ 131.533996][ T28] audit: type=1400 audit(1781972679.438:1295): avc: denied { write } for pid=5443 comm="syz.0.577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.559462][ T5442] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 131.572780][ T5442] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 131.591890][ T5442] EXT4-fs (loop1): 1 truncate cleaned up [ 131.601437][ T5444] loop0: detected capacity change from 0 to 512 [ 131.612356][ T5431] loop2: detected capacity change from 0 to 1024 [ 131.627205][ T5444] EXT4-fs: Ignoring removed bh option [ 131.667370][ T5444] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 131.700488][ T5444] EXT4-fs (loop0): 1 truncate cleaned up [ 131.702336][ T5431] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 131.702336][ T5431] [ 131.820313][ T5452] loop2: detected capacity change from 0 to 256 [ 131.827493][ T5454] loop0: detected capacity change from 0 to 1024 [ 131.836377][ T5452] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.839400][ T5454] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 131.839400][ T5454] [ 131.979651][ T5460] loop0: detected capacity change from 0 to 512 [ 132.045456][ T5460] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 132.054310][ T5460] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.063118][ T5460] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 132.080321][ T5460] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 132.087785][ T5458] loop1: detected capacity change from 0 to 512 [ 132.090588][ T5460] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.584: Failed to acquire dquot type 1 [ 132.090616][ T5460] fserror_report: 1 callbacks suppressed [ 132.090680][ T5460] loop0: lost filesystem error report for type 5 error -5 [ 132.110769][ T5464] loop3: detected capacity change from 0 to 512 [ 132.126186][ T5460] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.584: bg 0: block 40: padding at end of block bitmap is not set [ 132.141296][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 132.151849][ C0] EXT4-fs (loop0): initial error at time 1781972679: ext4_acquire_dquot:7041 [ 132.160769][ C0] EXT4-fs (loop0): last error at time 1781972679: ext4_acquire_dquot:7041 [ 132.185346][ T5460] loop0: lost filesystem error report for type 5 error -117 [ 132.201792][ T5464] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 132.220365][ T5460] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 132.230285][ T5460] loop0: lost filesystem error report for type 5 error -117 [ 132.230537][ T5460] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.584: data will be lost [ 132.253752][ T5464] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 132.264831][ T5460] EXT4-fs (loop0): 1 truncate cleaned up [ 132.271469][ T5460] EXT4-fs mount: 14 callbacks suppressed [ 132.271543][ T5460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.289275][ T5464] EXT4-fs (loop3): 1 truncate cleaned up [ 132.304859][ T5464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.333254][ T5458] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 132.335553][ T5464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.344592][ T5458] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.352704][ T5460] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.584: corrupted xattr block 31: invalid header [ 132.360160][ T5458] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.583: Failed to acquire dquot type 1 [ 132.371792][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 132.392774][ T5460] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.584: corrupted xattr block 31: invalid header [ 132.392892][ T5458] loop1: lost filesystem error report for type 5 error -5 [ 132.393602][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 132.393713][ T5460] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.584: bad symlink. [ 132.418432][ T5458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.583: bg 0: block 40: padding at end of block bitmap is not set [ 132.452125][ T5458] loop1: lost filesystem error report for type 5 error -117 [ 132.462232][ T5458] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 132.482947][ T5458] loop1: lost filesystem error report for type 5 error -117 [ 132.483350][ T5458] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.583: data will be lost [ 132.492487][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 132.507625][ T5458] EXT4-fs (loop1): 1 truncate cleaned up [ 132.509033][ C0] EXT4-fs (loop1): initial error at time 1781972680: ext4_acquire_dquot:7041 [ 132.509067][ C0] EXT4-fs (loop1): last error at time 1781972680: ext4_mb_clear_bb:6679 [ 132.541824][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.555555][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.597318][ T5458] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.583: corrupted xattr block 31: invalid header [ 132.637275][ T5458] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 132.659875][ T5458] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.583: corrupted xattr block 31: invalid header [ 132.698448][ T5477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 132.704978][ T5458] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 132.787619][ T5458] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.583: bad symlink. [ 132.832842][ T5471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.856261][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 132.856280][ T28] audit: type=1400 audit(1781972680.758:1296): avc: denied { name_connect } for pid=5479 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.884001][ T5471] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.895791][ T5471] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.914000][ T5481] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.943318][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.951075][ T5481] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.972667][ T5481] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.126669][ T5486] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 133.126669][ T5486] [ 133.274765][ T5495] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 133.274765][ T5495] [ 133.384013][ T5499] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.492938][ T5504] FAULT_INJECTION: forcing a failure. [ 133.492938][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 133.506137][ T28] audit: type=1326 audit(1781972681.398:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15836fce59 code=0x7ffc0000 [ 133.537689][ T5498] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.619472][ T5504] CPU: 1 UID: 0 PID: 5504 Comm: syz.0.598 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.619501][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.619568][ T5504] Call Trace: [ 133.619577][ T5504] [ 133.619586][ T5504] __dump_stack+0x1d/0x30 [ 133.619695][ T5504] dump_stack_lvl+0x95/0xd0 [ 133.619722][ T5504] dump_stack+0x15/0x1b [ 133.619747][ T5504] should_fail_ex+0x25e/0x270 [ 133.619774][ T5504] should_failslab+0x8c/0xb0 [ 133.619795][ T5504] kmem_cache_alloc_noprof+0x66/0x3f0 [ 133.619855][ T5504] ? audit_log_start+0x34c/0x730 [ 133.619928][ T5504] audit_log_start+0x34c/0x730 [ 133.619961][ T5504] audit_seccomp+0x49/0x110 [ 133.620041][ T5504] __seccomp_filter+0x905/0x1370 [ 133.620148][ T5504] ? __fget_files+0x184/0x1c0 [ 133.620209][ T5504] ? mutex_lock+0x57/0x90 [ 133.620249][ T5504] ? xfd_validate_state+0x45/0xf0 [ 133.620287][ T5504] __secure_computing+0x7d/0x150 [ 133.620315][ T5504] do_syscall_64+0xd4/0x3c0 [ 133.620351][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.620380][ T5504] RIP: 0033:0x7f15836fce59 [ 133.620407][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.620472][ T5504] RSP: 002b:00007f158214f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 133.620506][ T5504] RAX: ffffffffffffffda RBX: 00007f1583975fa0 RCX: 00007f15836fce59 [ 133.620525][ T5504] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000001023 [ 133.620546][ T5504] RBP: 00007f158214f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.620630][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.620647][ T5504] R13: 00007f1583976038 R14: 00007f1583975fa0 R15: 00007fff9629fa08 [ 133.620685][ T5504] [ 133.620707][ T5504] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 133.636706][ T5498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.642177][ T5504] audit: out of memory in audit_log_start [ 133.642593][ T28] audit: type=1326 audit(1781972681.398:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15836fce59 code=0x7ffc0000 [ 133.655567][ T5498] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 133.670523][ T28] audit: type=1326 audit(1781972681.398:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15836fce59 code=0x7ffc0000 [ 133.671339][ T5498] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 133.687817][ T28] audit: type=1326 audit(1781972681.398:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15836bd68e code=0x7ffc0000 [ 133.691037][ T5498] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.595: Failed to acquire dquot type 1 [ 133.703054][ T28] audit: type=1326 audit(1781972681.398:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15836fce59 code=0x7ffc0000 [ 133.705107][ T5498] loop2: lost filesystem error report for type 5 error -5 [ 133.750322][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 133.750346][ C0] EXT4-fs (loop2): initial error at time 1781972681: ext4_acquire_dquot:7041 [ 133.750373][ C0] EXT4-fs (loop2): last error at time 1781972681: ext4_acquire_dquot:7041 [ 133.859582][ T5510] EXT4-fs: Ignoring removed bh option [ 133.900837][ T5498] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.595: bg 0: block 40: padding at end of block bitmap is not set [ 133.954458][ T5498] loop2: lost filesystem error report for type 5 error -117 [ 133.955138][ T5498] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 133.984781][ T5508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 133.985562][ T5498] loop2: lost filesystem error report for type 5 error -117 [ 134.042105][ T5510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.043237][ T5498] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.595: data will be lost [ 134.062186][ T5510] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.072719][ T5498] EXT4-fs (loop2): 1 truncate cleaned up [ 134.089377][ T5498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.110858][ T5498] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.595: corrupted xattr block 31: invalid header [ 134.154139][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.602'. [ 134.177634][ T5498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 134.188046][ T5516] EXT4-fs: Ignoring removed bh option [ 134.219333][ T5510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.600: bg 0: block 112: padding at end of block bitmap is not set [ 134.220939][ T5516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.245666][ T5516] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.246102][ T5498] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.595: corrupted xattr block 31: invalid header [ 134.279040][ T5516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.601: bg 0: block 112: padding at end of block bitmap is not set [ 134.312701][ T5498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 134.328806][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.356345][ T5498] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.595: bad symlink. [ 134.486050][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.514759][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.529833][ T2981] ================================================================== [ 134.537958][ T2981] BUG: KCSAN: data-race in set_nlink / set_nlink [ 134.544557][ T2981] [ 134.546909][ T2981] read to 0xffff88810761efd0 of 4 bytes by task 5116 on cpu 0: [ 134.554478][ T2981] set_nlink+0x29/0xb0 [ 134.558595][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 134.563931][ T2981] inode_permission+0x2a5/0x3b0 [ 134.568824][ T2981] link_path_walk+0x875/0xdd0 [ 134.573550][ T2981] path_openat+0x1ac/0x2000 [ 134.578095][ T2981] do_file_open+0x16c/0x290 [ 134.582637][ T2981] do_sys_openat2+0xa0/0x130 [ 134.587257][ T2981] __x64_sys_openat+0xf2/0x120 [ 134.592052][ T2981] x64_sys_call+0x1e39/0x3020 [ 134.596766][ T2981] do_syscall_64+0x136/0x3c0 [ 134.601383][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.607383][ T2981] [ 134.609720][ T2981] write to 0xffff88810761efd0 of 4 bytes by task 2981 on cpu 1: [ 134.617363][ T2981] set_nlink+0x99/0xb0 [ 134.621470][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 134.626986][ T2981] inode_permission+0x2a5/0x3b0 [ 134.631866][ T2981] link_path_walk+0x875/0xdd0 [ 134.636579][ T2981] path_lookupat+0x53/0x4c0 [ 134.641115][ T2981] filename_lookup+0x18f/0x390 [ 134.645908][ T2981] vfs_statx+0x96/0x170 [ 134.650092][ T2981] vfs_fstatat+0x118/0x170 [ 134.654531][ T2981] __se_sys_newfstatat+0x55/0x3e0 [ 134.659580][ T2981] __x64_sys_newfstatat+0x55/0x70 [ 134.664629][ T2981] x64_sys_call+0x2c64/0x3020 [ 134.669342][ T2981] do_syscall_64+0x136/0x3c0 [ 134.673973][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.680334][ T2981] [ 134.682681][ T2981] value changed: 0x00000009 -> 0x00000008 [ 134.696048][ T2981] [ 134.698392][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 134.704564][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 134.713518][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.723909][ T2981] ================================================================== [ 134.792347][ T5540] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.806816][ T5540] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.818785][ T5540] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.