last executing test programs: 3m4.125603396s ago: executing program 3 (id=2384): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000280), 0x80000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3m4.105650468s ago: executing program 3 (id=2385): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m3.238180927s ago: executing program 3 (id=2394): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000440)=ANY=[], 0xa2) 3m2.349080367s ago: executing program 3 (id=2396): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xfe, 0x45e, &(0x7f0000000740)="$eJzs3MuPFMUfAPBv98wu79/uT/EBgq6ikfjYZZfnwYMYTTxoYqIHjKd1dyHIwiq7JkKIogc8GhLvxqOJf4EnvRj1ZOJV74aEGC6gicmY7umeHYeZdYcdGGA+n6ShqruGqm9310x11QwBDKyx7I8kYnNE/BoRI/XsvwuM1f+6duXczJ9Xzs0kUau9/keSl7t65dxMWbR83aZ6plYr8uva1HvhrYjp+fm500V+YunkuxOLZ84+e/zk9LG5Y3Onpg4d2rd35/CBqf09iTOL6+r2Dxd2bHv5zYuvzhy5+PaPX2ft3Vwcb46jV8bqZ7etJ3pdWZ9taUon1Yjn+9gWVq8SEdWIGMr7/0hUYkPj2Ei89ElfGwfcVLVardbu87lwvgbcxZLodwuA/ig/6LPn33K7RUOP28LlwxHvHazHf63Y6keqkRZlhlqeb3tpLCKOnP/ri2yLmzQPAQDQ7NvDEfFMu/FfGvc3lftfsYYyGhH/j4h7IuLeiNgaEfdF5GUfiIgHu6y/dYXk+vFPeumGAlulbPz3XLG21Rj//V3L4y+MVorcljz+oeTo8fm5PcU52R1D67L85Ap1fPfiL591OtY8/su2rP5yLFiXXqq2TNDNTi9NrzHshssfR2yvtsSfS/J1gSjW9bZFxPau/uXlJ4zjT321o1Op/45/BdWuGtS+lV9GPFm//uejJf5S0nF9cvLggan9E+tjfm7PRHlXlJbXUX76+cJrnepfU/w9kF3/ja33f64R/2iyPmLxzNkT+XrtYvd1XPjt047PNDd6/w8nb+Tp4WLfB9NLS6cnI4aTV67fP7X82jJfls/i372rXfxp/h5XnomHIiK7iXdGxMMR8UjR9kcj4rGI2LVC/D+88Pg73ce/wqx8D2Xxz7a7/pVGkdEs/uXr332icuL7b7qPv5Rd/315anexZzXvf6tt4FrOHQAAANwp0vw78Ek63kin6fh4/Tv8W2NjOr+wuPT00YX3T83Wvys/GkNpOdM10jQfOlnMDZf5qZb83mLe+PPKhjw/PrMwP9vv4GHAberQ/zO/V/rdOuCm68E6GnCH0v9hcOn/MLj0fxhc+j8Mrnb9/6M+tAO49Xz+w+DS/2Fw6f8wuPR/GEitP4mvlHvSNf3kX+KuT0Ta/auqcZs0/k5KVFf9n1ncYGJd20P9fmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojX8CAAD//w/N7aY=") creat(&(0x7f0000000c00)='./bus\x00', 0x0) timerfd_create(0x0, 0x0) mount(&(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000cc0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x0) 3m2.276210625s ago: executing program 3 (id=2400): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000000100)={[{@orlov}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000002840)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000002d80)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000002dc0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002e00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000002e40)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002f80), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003500)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000003580), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003600)={'ip6_vti0\x00', &(0x7f0000003640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000f80), 0x208e24b) 3m2.230568399s ago: executing program 3 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) io_uring_setup(0x386b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000a40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000500)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000580)="ee64", 0x2}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) 3m2.205936412s ago: executing program 32 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) io_uring_setup(0x386b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000a40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000500)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000580)="ee64", 0x2}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) 10.138673535s ago: executing program 2 (id=3264): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0xcc) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x487}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001a40)={0x0, 0xa1, &(0x7f0000001a80)=[{&(0x7f0000001ac0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000d80)="63eced8e465c1c76e716c0be4b07", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x3e) mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000240)=0xd, 0x8, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001c80)=[{{&(0x7f0000001d00)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040) 9.409419469s ago: executing program 2 (id=3267): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 8.161691027s ago: executing program 4 (id=3271): socket$netlink(0x10, 0x3, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 8.059580317s ago: executing program 2 (id=3272): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x173) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)='10', 0x2) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x100000000, 0x2, 0xeaf3, 0x5, 0x8, 0x6, 0x800}, &(0x7f0000000300)={0x6, 0x2, 0x0, 0x35, 0x4, 0x9, 0x8, 0x9}, &(0x7f0000000340)={0x9, 0x6, 0x18c2, 0x7, 0x5, 0x2, 0x2, 0x6}, &(0x7f0000000380)={0x77359400}, 0x0) 7.937018689s ago: executing program 2 (id=3276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x24000800) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) gettid() r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 7.158190179s ago: executing program 4 (id=3277): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, 0x0, 0x0, 0x20008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000007100c00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xffa0, &(0x7f00000003c0)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)='1', 0x1) 6.386853227s ago: executing program 5 (id=3278): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xc) splice(r2, 0x0, r4, 0x0, 0x800000000082, 0xf) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="bf00"}) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000500)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x40) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xe19, 0x5, 0x7, 0x11, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "0100400900052a8bfe140f580008df1a0000f4ff0800", [0x7a, 0xc]}) 6.371497139s ago: executing program 1 (id=3279): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000540)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000780), 0x800001d, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000280)={@local, @dev, @void, {@llc={0x4, {@llc={0x4, 0xf0, "cd"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='- 1 0 0 ', 0x8) 5.704976077s ago: executing program 4 (id=3281): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000003280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001c280)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f000001c340)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f000001c380)=""/265, 0x109) 5.307439358s ago: executing program 1 (id=3282): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 4.831581397s ago: executing program 4 (id=3284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000020b804020240000102030109022400010100200109040009020701034c06050102000405000009058202100008123ff943ef119c872f35353f1ef870f8ad097623d21c86ac"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x85, 0x0, 0x5, 0x10, 0x80}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000540)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) 4.682443832s ago: executing program 5 (id=3286): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x173) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)='10', 0x2) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x100000000, 0x2, 0xeaf3, 0x5, 0x8, 0x6, 0x800}, &(0x7f0000000300)={0x6, 0x2, 0x0, 0x35, 0x4, 0x9, 0x8, 0x9}, &(0x7f0000000340)={0x9, 0x6, 0x18c2, 0x7, 0x5, 0x2, 0x2, 0x6}, &(0x7f0000000380)={0x77359400}, 0x0) 4.665832014s ago: executing program 5 (id=3287): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10400000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x51b}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x4b72, &(0x7f0000000680)={0x5, 0x1ff, 0x10001, 0x20, 0x9, "16ee0500000000000000c000"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESOCT], 0x0, 0x392, &(0x7f0000000840)="$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") getpeername$netlink(r4, &(0x7f00000000c0), 0x0) 4.633909047s ago: executing program 2 (id=3288): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000003280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001c280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001c2c0)='./sys\x00', &(0x7f000001c300)='sysfs\x00', 0x604, 0x0) read(0xffffffffffffffff, &(0x7f000001c380)=""/265, 0x109) 4.40161931s ago: executing program 1 (id=3289): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)="ffffdd014376"}, 0x50) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 3.81375908s ago: executing program 2 (id=3290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x24000800) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r6, &(0x7f0000000380), 0x10106, 0x2, 0x0) gettid() ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x801, 0xf000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.795581432s ago: executing program 0 (id=3291): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000dc0)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000019dc0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_ro(r3, &(0x7f0000019e00)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.605961622s ago: executing program 5 (id=3292): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000000100)={[{@orlov}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000002840)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000002d80)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000002dc0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002e00)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002e80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002f80), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000003580), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003600)={'ip6_vti0\x00', &(0x7f0000003640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000f80), 0x208e24b) fdatasync(r4) 3.579948264s ago: executing program 0 (id=3293): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xc) splice(r2, 0x0, r4, 0x0, 0x800000000082, 0xf) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setns(0xc9, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="bf00"}) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000500)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x40) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0xe19, 0x5, 0x7, 0x11, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "0100400900052a8bfe140f580008df1a0000f4ff0800", [0x7a, 0xc]}) 2.649600259s ago: executing program 5 (id=3294): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 2.164614729s ago: executing program 0 (id=3295): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea23d7800aec9822", 0x35}, {&(0x7f0000000680)="c05d0dc2fdda573c5872e33584e8735fd9f8a0151935edc78b9bbf6424e2b7f2e669ca0b5b0bd870399b43266e2c9f824a313cfa3f930b6dc49c44b254c37f5fab1c177b3889472eb7d4850957cc", 0x4e}, {&(0x7f0000000780)="55bee026e579cd98c199b0adfda09fae5228b8f7b883add4099e88200a72dfc6782dc3af4564c1f19ae2f530ef2c3fc6fb946257c569c4d9f6e35f8e75b3d268400ad5a5cad70c1706b377aaaaf28c721f0446c5c73597b18a8fa3cca93bb82329b19a1402716827c227450da61339af5844af4b70dbeb85a4fdd5ac60765c105db1b74f9b903c92d5467dc1c5f72aeb6b", 0x91}, {&(0x7f0000000840)="fab32dba0a84fa9993200bb35203dd3961c8fab0d6b272c0b797cf1c3ef279aa6e", 0x21}], 0x6}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="3fa7ff9e6f6e0e08c5fb3086421898e47a2eb7017bdfa4f1e042238bf63229ea0c50a6f3860d6d165a690ffc63722f086e52e105d4099c36e257f0115ec33d9d3d8bdc9c52560c07991481eb43cdfc173f075191d69b879431", 0x59}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x34a}], 0x1) 2.061875009s ago: executing program 0 (id=3296): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000003280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001c280)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f000001c340)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f000001c380)=""/265, 0x109) 1.835015783s ago: executing program 1 (id=3297): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r0, &(0x7f0000003280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001c280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001c2c0)='./sys\x00', &(0x7f000001c300)='sysfs\x00', 0x604, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000001c340)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r1, &(0x7f000001c380)=""/265, 0x109) 1.601584736s ago: executing program 5 (id=3298): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)="ffffdd014376"}, 0x50) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 1.495785777s ago: executing program 0 (id=3299): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 1.46392532s ago: executing program 4 (id=3300): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, 0x0, 0x0, 0x20008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000007100c00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xffa0, &(0x7f00000003c0)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)='1', 0x1) 1.17469227s ago: executing program 1 (id=3301): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000003280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001c280)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f000001c340)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f000001c380)=""/265, 0x109) 392.14123ms ago: executing program 0 (id=3302): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed3aea0d14f20bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd8}], 0x1}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r5, 0x4b72, &(0x7f0000000680)={0x5, 0x1ff, 0x10001, 0x20, 0x9, "16ee0500000000000000c000"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESOCT], 0x0, 0x392, &(0x7f0000000840)="$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") getpeername$netlink(r4, &(0x7f00000000c0), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$P9_RCLUNK(r6, &(0x7f0000000080)={0x7, 0x79, 0x4}, 0x7) 145.777895ms ago: executing program 1 (id=3303): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000dc0)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000019dc0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_ro(r3, &(0x7f0000019e00)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 0s ago: executing program 4 (id=3304): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_create_resource$futex(&(0x7f00000001c0)=0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x8, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0xb5, 0x4, 0x4, 0x0, 0xff, 0x0, 0x0, 0x40041, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x400, 0x691}, 0xc80, 0x410, 0x6, 0x5, 0x80, 0x9, 0x1, 0x0, 0x3ff, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='nfs\x00', 0x810004, &(0x7f0000000540)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000100)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x90}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): ted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.595544][ T29] audit: type=1400 audit(1700006412.220:687): avc: denied { write } for pid=11923 comm="syz.4.2416" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.652119][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.980863][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.092656][T11937] FAULT_INJECTION: forcing a failure. [ 432.092656][T11937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 432.092688][T11937] CPU: 0 UID: 0 PID: 11937 Comm: syz.4.2418 Not tainted syzkaller #0 PREEMPT(lazy) [ 432.092715][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 432.092728][T11937] Call Trace: [ 432.092739][T11937] [ 432.092747][T11937] __dump_stack+0x1d/0x30 [ 432.092779][T11937] dump_stack_lvl+0x95/0xd0 [ 432.092826][T11937] dump_stack+0x15/0x1b [ 432.092846][T11937] should_fail_ex+0x259/0x270 [ 432.092949][T11937] should_fail+0xb/0x20 [ 432.092978][T11937] get_futex_key+0x12c/0xc40 [ 432.092998][T11937] ? __css_rstat_updated+0xbb/0x280 [ 432.093031][T11937] futex_wait_setup+0x49/0x3e0 [ 432.093108][T11937] ? trace_save_cmdline+0x1ce/0x210 [ 432.093138][T11937] __futex_wait+0xb2/0x2a0 [ 432.093169][T11937] ? __pfx_futex_wake_mark+0x10/0x10 [ 432.093339][T11937] futex_wait+0x98/0x1c0 [ 432.093374][T11937] do_futex+0x391/0x460 [ 432.093398][T11937] __se_sys_futex+0x2f6/0x370 [ 432.093426][T11937] __x64_sys_futex+0x78/0x90 [ 432.093519][T11937] x64_sys_call+0x22e2/0x2550 [ 432.093545][T11937] do_syscall_64+0x112/0x360 [ 432.093610][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.093637][T11937] RIP: 0033:0x7f54b0eafb19 [ 432.093656][T11937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.093678][T11937] RSP: 002b:00007f54af9070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.093703][T11937] RAX: ffffffffffffffda RBX: 00007f54b1135fa8 RCX: 00007f54b0eafb19 [ 432.093800][T11937] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54b1135fa8 [ 432.093816][T11937] RBP: 00007f54b1135fa0 R08: 0000000000000000 R09: 0000000000000000 [ 432.093832][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.093928][T11937] R13: 00007f54b1136038 R14: 00007ffefa46fe90 R15: 00007ffefa46ff78 [ 432.093947][T11937] [ 432.278466][T11937] rxe_eth0 speed is unknown, defaulting to 1000 [ 432.588918][ T29] audit: type=1400 audit(1700006413.210:688): avc: denied { create } for pid=11945 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.970690][T11978] loop4: detected capacity change from 0 to 512 [ 434.148576][T11978] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 434.193126][ T29] audit: type=1326 audit(1700006414.770:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.5.2402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d9de034e code=0x7fc00000 [ 434.196888][T11978] EXT4-fs (loop4): 1 orphan inode deleted [ 434.198089][T11978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.198647][T11978] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.206666][ T29] audit: type=1400 audit(1700006414.830:690): avc: denied { write } for pid=11970 comm="syz.4.2425" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.269662][ T29] audit: type=1326 audit(1700006414.860:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.5.2402" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d9e1fb19 code=0x7fc00000 [ 434.359672][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 434.376116][T11985] loop2: detected capacity change from 0 to 512 [ 434.390884][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2428: iget: bad i_size value: 38620345925642 [ 434.390915][T11985] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 434.392876][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 434.392893][ C0] EXT4-fs (loop2): initial error at time 1700006415: ext4_orphan_get:1404: inode 15 [ 434.392922][ C0] EXT4-fs (loop2): last error at time 1700006415: ext4_orphan_get:1404: inode 15 [ 434.393369][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2428: couldn't read orphan inode 15 (err -117) [ 434.393398][T11985] loop2: lost filesystem error report for type 5 error -117 [ 434.396088][T11985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.421398][ T29] audit: type=1400 audit(1700006415.040:692): avc: denied { write } for pid=11984 comm="syz.2.2428" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.495568][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.661447][T11994] loop2: detected capacity change from 0 to 164 [ 434.669396][T11994] iso9660: Corrupted directory entry in block 28 of inode 1792 [ 434.669473][T11994] isofs_fill_super: get root inode failed [ 434.752948][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.771458][T11999] netlink: 'syz.1.2433': attribute type 1 has an invalid length. [ 434.809550][T11999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 434.820527][T11999] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 434.822164][T12004] loop4: detected capacity change from 0 to 512 [ 434.851972][T12004] EXT4-fs: Ignoring removed orlov option [ 434.999134][T12004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.999227][T12004] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.086652][T12014] loop1: detected capacity change from 0 to 512 [ 435.095324][T12014] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 435.132857][T12014] EXT4-fs (loop1): 1 orphan inode deleted [ 435.133786][T12014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.134594][T12014] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.146284][ T29] audit: type=1400 audit(1700006415.760:693): avc: denied { write } for pid=12006 comm="syz.1.2435" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.826719][T12024] loop2: detected capacity change from 0 to 512 [ 435.899166][T12024] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 435.916203][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.948069][T12024] EXT4-fs (loop2): 1 orphan inode deleted [ 435.948886][T12024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.949293][T12024] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.975052][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 435.975084][ T29] audit: type=1400 audit(1700006416.580:695): avc: denied { write } for pid=12017 comm="syz.2.2436" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.034175][ T29] audit: type=1400 audit(1700006416.660:696): avc: denied { write } for pid=12002 comm="syz.4.2432" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.313638][T12036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.388524][ T29] audit: type=1400 audit(1700006417.010:697): avc: denied { ioctl } for pid=12032 comm="syz.0.2439" path="socket:[36646]" dev="sockfs" ino=36646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.388600][ T29] audit: type=1400 audit(1700006417.010:698): avc: denied { setopt } for pid=12032 comm="syz.0.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.653555][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.676953][T12050] loop0: detected capacity change from 0 to 1024 [ 437.386995][ T29] audit: type=1400 audit(1700006417.550:699): avc: denied { ioctl } for pid=12051 comm="syz.5.2443" path="socket:[37094]" dev="sockfs" ino=37094 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.644483][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.676332][T12067] loop2: detected capacity change from 0 to 1024 [ 437.817137][T12073] ip_tables: iptables: counters copy to user failed while replacing table [ 438.153549][T12090] loop0: detected capacity change from 0 to 512 [ 438.655314][T12092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 438.840047][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 438.900744][T12092] md: could not open device unknown-block(1,2). [ 438.901378][T12105] x_tables: unsorted underflow at hook 2 [ 439.015765][T12109] loop0: detected capacity change from 0 to 1024 [ 439.017359][T12093] md: could not open device unknown-block(1,3). [ 440.844349][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 440.844378][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.028189][T12142] loop4: detected capacity change from 0 to 512 [ 441.031514][T12142] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 441.068196][T12142] EXT4-fs (loop4): 1 orphan inode deleted [ 441.068765][T12142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.069050][T12142] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.093605][ T845] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 441.093712][ T845] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1 [ 441.171389][T12158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 441.368246][T12161] md: could not open device unknown-block(1,0). [ 441.449010][T12158] md: could not open device unknown-block(1,1). [ 441.827330][ T29] audit: type=1326 audit(1700006422.450:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.2.2454" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe2fa5fb19 code=0x7fc00000 [ 441.828381][ T29] audit: type=1326 audit(1700006422.450:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12097 comm="syz.2.2454" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fa5fb19 code=0x7fc00000 [ 441.901490][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.079337][ T29] audit: type=1400 audit(1700006422.700:702): avc: denied { setopt } for pid=12174 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.132295][ T845] Bluetooth: hci0: Frame reassembly failed (-84) [ 442.508122][ T29] audit: type=1400 audit(1700006423.130:703): avc: denied { write } for pid=12173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.682699][ T29] audit: type=1400 audit(1700006423.300:704): avc: denied { write } for pid=12194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.969376][ T29] audit: type=1400 audit(1700006423.590:705): avc: denied { write } for pid=12198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.098950][ T29] audit: type=1400 audit(1700006423.720:706): avc: denied { append } for pid=12218 comm="syz.0.2480" name="001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 443.100154][T12219] loop2: detected capacity change from 0 to 512 [ 443.122997][ T29] audit: type=1400 audit(1700006423.720:707): avc: denied { write } for pid=12216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.130475][T12220] usb usb9: usbfs: process 12220 (syz.0.2480) did not claim interface 0 before use [ 443.188701][T12219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.188877][T12219] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.228607][ T29] audit: type=1400 audit(1700006423.850:708): avc: denied { write } for pid=12217 comm="syz.2.2481" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.457005][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.566324][T12245] loop0: detected capacity change from 0 to 512 [ 443.636891][T12245] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 443.642634][T12243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 443.762789][T12245] EXT4-fs (loop0): 1 orphan inode deleted [ 443.764004][T12245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.764735][T12245] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.000938][ T930] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 1 [ 444.035137][T12243] md: could not open device unknown-block(1,4). [ 444.134792][T12247] md: could not open device unknown-block(1,5). [ 444.206660][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 444.206691][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 444.318319][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.513823][T12271] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 444.567008][T12267] loop2: detected capacity change from 0 to 1024 [ 444.666568][T12279] loop0: detected capacity change from 0 to 1024 [ 444.709594][T12283] loop0: detected capacity change from 0 to 256 [ 444.710684][T12283] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.833613][T12284] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 444.833663][T12284] FAT-fs (loop0): Filesystem has been set read-only [ 446.218268][T12306] syz.0.2495 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 447.213742][T12317] loop0: detected capacity change from 0 to 512 [ 447.281886][T12317] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 447.359657][T12317] EXT4-fs (loop0): 1 orphan inode deleted [ 447.360483][T12317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.360658][T12317] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.388239][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 447.388269][ T29] audit: type=1400 audit(1700006401.470:713): avc: denied { write } for pid=12307 comm="syz.0.2497" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.850313][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.138326][T12339] loop2: detected capacity change from 0 to 512 [ 449.139488][T12339] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 449.215898][T12339] EXT4-fs (loop2): 1 orphan inode deleted [ 449.216177][T12339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.216373][T12339] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.242792][ T29] audit: type=1400 audit(1700006403.320:714): avc: denied { write } for pid=12333 comm="syz.2.2503" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.786376][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.963005][T12357] loop4: detected capacity change from 0 to 512 [ 449.963923][T12357] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 450.060043][T12357] EXT4-fs (loop4): 1 orphan inode deleted [ 450.060652][T12357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.060837][T12357] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.092393][ T922] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 450.092420][ T922] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 1 [ 450.961525][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.994596][T12374] loop4: detected capacity change from 0 to 512 [ 452.285034][T12399] loop5: detected capacity change from 0 to 512 [ 452.285432][T12399] EXT4-fs: Ignoring removed orlov option [ 452.311271][T12399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.311416][T12399] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.391560][ T29] audit: type=1400 audit(1700006406.490:715): avc: denied { write } for pid=12398 comm="syz.5.2520" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.493361][ T29] audit: type=1400 audit(1700006406.550:716): avc: denied { write } for pid=12398 comm="syz.5.2520" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.951083][T12407] loop2: detected capacity change from 0 to 1024 [ 452.966751][T12407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.985360][T12412] loop0: detected capacity change from 0 to 1024 [ 452.989930][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.004893][T12412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.027224][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.027866][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2524'. [ 453.135499][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.166699][T12430] loop5: detected capacity change from 0 to 1024 [ 453.185555][T12430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.206720][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.005249][T12442] x_tables: unsorted underflow at hook 2 [ 454.882446][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 454.939136][ T29] audit: type=1400 audit(1700006409.020:717): avc: denied { bind } for pid=12460 comm="syz.1.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.939172][ T29] audit: type=1400 audit(1700006409.020:718): avc: denied { ioctl } for pid=12460 comm="syz.1.2537" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x40047438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 455.003396][T12465] loop2: detected capacity change from 0 to 512 [ 455.004833][T12465] EXT4-fs: Ignoring removed orlov option [ 455.027967][T12465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.028032][T12465] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.055112][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'. [ 455.121315][ T29] audit: type=1400 audit(1700006409.220:719): avc: denied { write } for pid=12463 comm="syz.2.2539" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.379875][ T29] audit: type=1400 audit(1700006409.280:720): avc: denied { write } for pid=12463 comm="syz.2.2539" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.874142][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.233191][ T29] audit: type=1326 audit(1700006410.340:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.5.2529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe4d9e1fb19 code=0x7fc00000 [ 456.233446][ T29] audit: type=1326 audit(1700006410.340:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.5.2529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d9e1fb19 code=0x7fc00000 [ 457.639042][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2549'. [ 458.373621][T12525] loop2: detected capacity change from 0 to 512 [ 458.580416][T12532] FAULT_INJECTION: forcing a failure. [ 458.580416][T12532] name failslab, interval 1, probability 0, space 0, times 100 [ 458.580444][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.4.2556 Not tainted syzkaller #0 PREEMPT(lazy) [ 458.580469][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 458.580482][T12532] Call Trace: [ 458.580489][T12532] [ 458.580562][T12532] __dump_stack+0x1d/0x30 [ 458.580590][T12532] dump_stack_lvl+0x95/0xd0 [ 458.580617][T12532] dump_stack+0x15/0x1b [ 458.580651][T12532] should_fail_ex+0x259/0x270 [ 458.580716][T12532] ? alloc_workqueue_va+0x12f/0x15d0 [ 458.580749][T12532] should_failslab+0x8c/0xb0 [ 458.580802][T12532] __kmalloc_cache_noprof+0x5d/0x3e0 [ 458.580896][T12532] ? alloc_workqueue_va+0x12f/0x15d0 [ 458.580931][T12532] alloc_workqueue_va+0x12f/0x15d0 [ 458.580985][T12532] ? vsnprintf+0x857/0x8c0 [ 458.581015][T12532] alloc_workqueue_noprof+0x84/0xb0 [ 458.581045][T12532] ? nci_hci_allocate+0x33/0x180 [ 458.581147][T12532] ? should_failslab+0x8c/0xb0 [ 458.581255][T12532] nci_register_device+0x20c/0x510 [ 458.581312][T12532] virtual_ncidev_open+0xca/0x130 [ 458.581387][T12532] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 458.581422][T12532] misc_open+0x1df/0x220 [ 458.581470][T12532] chrdev_open+0x2eb/0x3a0 [ 458.581497][T12532] do_dentry_open+0x496/0xa40 [ 458.581524][T12532] ? __pfx_chrdev_open+0x10/0x10 [ 458.581547][T12532] vfs_open_consume+0x46/0x1f0 [ 458.581590][T12532] path_openat+0xc16/0x11c0 [ 458.581683][T12532] do_file_open+0x16c/0x290 [ 458.581728][T12532] do_sys_openat2+0xa1/0x140 [ 458.581761][T12532] __x64_sys_openat+0xf2/0x120 [ 458.581814][T12532] x64_sys_call+0x1f72/0x2550 [ 458.581847][T12532] do_syscall_64+0x112/0x360 [ 458.581887][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.581973][T12532] RIP: 0033:0x7f54b0eafb19 [ 458.582051][T12532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.582069][T12532] RSP: 002b:00007f54af907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.582139][T12532] RAX: ffffffffffffffda RBX: 00007f54b1135fa0 RCX: 00007f54b0eafb19 [ 458.582153][T12532] RDX: 0000000000000002 RSI: 000020000001a540 RDI: ffffffffffffff9c [ 458.582191][T12532] RBP: 00007f54b0f47b70 R08: 0000000000000000 R09: 0000000000000000 [ 458.582209][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.582222][T12532] R13: 00007f54b1136038 R14: 00007f54b1135fa0 R15: 00007ffefa46ff78 [ 458.582244][T12532] [ 459.181371][ T29] audit: type=1400 audit(1700006413.280:723): avc: denied { write } for pid=12550 comm="syz.5.2563" name="functions" dev="configfs" ino=27948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.182757][ T29] audit: type=1400 audit(1700006413.280:724): avc: denied { write } for pid=12550 comm="syz.5.2563" name="c.1" dev="configfs" ino=27953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.183003][ T29] audit: type=1400 audit(1700006413.280:725): avc: denied { create } for pid=12550 comm="syz.5.2563" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 459.183029][ T29] audit: type=1400 audit(1700006413.290:726): avc: denied { write } for pid=12550 comm="syz.5.2563" name="c.1" dev="configfs" ino=27953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.291950][T12555] loop0: detected capacity change from 0 to 512 [ 459.412054][T12555] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 459.433322][T12555] EXT4-fs (loop0): 1 orphan inode deleted [ 459.434381][T12555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.434911][T12555] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.511601][T12562] loop1: detected capacity change from 0 to 1024 [ 459.539123][T12562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.574072][ T29] audit: type=1400 audit(1700006413.680:727): avc: denied { write } for pid=12561 comm="syz.1.2566" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.707924][ T922] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 459.708002][ T922] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 1 [ 460.098429][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.482247][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.757722][T12575] netlink: 'syz.1.2568': attribute type 1 has an invalid length. [ 460.773727][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 460.773775][T12575] 8021q: adding VLAN 0 to HW filter on device bond9 [ 460.818058][T12580] loop4: detected capacity change from 0 to 512 [ 460.819836][T12580] EXT4-fs: Ignoring removed orlov option [ 460.826957][T12582] loop1: detected capacity change from 0 to 512 [ 460.828388][T12582] EXT4-fs: Ignoring removed orlov option [ 460.844077][T12580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.844142][T12580] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.846749][T12582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.846816][T12582] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.943575][ T29] audit: type=1400 audit(1700006415.050:728): avc: denied { write } for pid=12581 comm="syz.1.2571" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.023042][ T29] audit: type=1400 audit(1700006415.100:729): avc: denied { write } for pid=12581 comm="syz.1.2571" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.224184][ T29] audit: type=1400 audit(1700006415.330:730): avc: denied { write } for pid=12579 comm="syz.4.2570" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.563586][T12606] loop0: detected capacity change from 0 to 512 [ 461.567042][ T29] audit: type=1326 audit(1700006415.670:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.2.2555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe2fa5fb19 code=0x7fc00000 [ 461.761705][T12608] loop2: detected capacity change from 0 to 512 [ 461.932400][T12606] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 461.949082][T12608] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2578: iget: bad i_size value: 38620345925642 [ 461.949246][T12608] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 461.951431][T12608] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2578: couldn't read orphan inode 15 (err -117) [ 461.951519][T12608] loop2: lost filesystem error report for type 5 error -117 [ 461.952751][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 461.952789][ C0] EXT4-fs (loop2): initial error at time 1700006416: ext4_orphan_get:1404: inode 15 [ 461.952820][ C0] EXT4-fs (loop2): last error at time 1700006416: ext4_orphan_get:1409 [ 461.998467][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.004869][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.023180][T12608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.032599][T12606] EXT4-fs (loop0): 1 orphan inode deleted [ 462.033096][T12606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.042336][T12606] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.050506][ T8537] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:11: Failed to release dquot type 1 [ 462.253647][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.257929][T12616] FAULT_INJECTION: forcing a failure. [ 462.257929][T12616] name failslab, interval 1, probability 0, space 0, times 99 [ 462.257959][T12616] CPU: 1 UID: 0 PID: 12616 Comm: syz.1.2580 Not tainted syzkaller #0 PREEMPT(lazy) [ 462.257989][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 462.258005][T12616] Call Trace: [ 462.258013][T12616] [ 462.258023][T12616] __dump_stack+0x1d/0x30 [ 462.258053][T12616] dump_stack_lvl+0x95/0xd0 [ 462.258110][T12616] dump_stack+0x15/0x1b [ 462.258132][T12616] should_fail_ex+0x259/0x270 [ 462.258196][T12616] ? alloc_workqueue_va+0x45d/0x15d0 [ 462.258226][T12616] should_failslab+0x8c/0xb0 [ 462.258258][T12616] __kmalloc_noprof+0xb6/0x4b0 [ 462.258373][T12616] ? alloc_workqueue_va+0x45d/0x15d0 [ 462.258413][T12616] alloc_workqueue_va+0x45d/0x15d0 [ 462.258525][T12616] alloc_workqueue_noprof+0x84/0xb0 [ 462.258632][T12616] ? nci_hci_allocate+0x33/0x180 [ 462.258655][T12616] ? should_failslab+0x8c/0xb0 [ 462.258700][T12616] nci_register_device+0x20c/0x510 [ 462.258734][T12616] virtual_ncidev_open+0xca/0x130 [ 462.258771][T12616] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 462.258880][T12616] misc_open+0x1df/0x220 [ 462.258920][T12616] chrdev_open+0x2eb/0x3a0 [ 462.258992][T12616] do_dentry_open+0x496/0xa40 [ 462.259021][T12616] ? __pfx_chrdev_open+0x10/0x10 [ 462.259048][T12616] vfs_open_consume+0x46/0x1f0 [ 462.259081][T12616] path_openat+0xc16/0x11c0 [ 462.259160][T12616] do_file_open+0x16c/0x290 [ 462.259256][T12616] do_sys_openat2+0xa1/0x140 [ 462.259284][T12616] __x64_sys_openat+0xf2/0x120 [ 462.259477][T12616] x64_sys_call+0x1f72/0x2550 [ 462.259508][T12616] do_syscall_64+0x112/0x360 [ 462.259657][T12616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.259679][T12616] RIP: 0033:0x7f525548fb19 [ 462.259695][T12616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.259777][T12616] RSP: 002b:00007f5253edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.259797][T12616] RAX: ffffffffffffffda RBX: 00007f5255715fa0 RCX: 00007f525548fb19 [ 462.259811][T12616] RDX: 0000000000000002 RSI: 000020000001a540 RDI: ffffffffffffff9c [ 462.259825][T12616] RBP: 00007f5255527b70 R08: 0000000000000000 R09: 0000000000000000 [ 462.259840][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.259856][T12616] R13: 00007f5255716038 R14: 00007f5255715fa0 R15: 00007ffe44b45708 [ 462.259879][T12616] [ 462.822489][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.624693][T12645] loop5: detected capacity change from 0 to 1024 [ 463.658429][T12645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.726761][T12654] loop2: detected capacity change from 0 to 512 [ 463.727244][T12654] EXT4-fs: Ignoring removed orlov option [ 463.785791][T12654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.785853][T12654] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.788328][T12657] 8021q: adding VLAN 0 to HW filter on device bond10 [ 463.792383][T12657] bond8: (slave veth0_to_bond): Releasing backup interface [ 463.800648][T12657] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 463.836076][T12662] loop1: detected capacity change from 0 to 512 [ 463.929338][T12662] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2594: iget: bad i_size value: 38620345925642 [ 463.929499][T12662] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.930850][T12662] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2594: couldn't read orphan inode 15 (err -117) [ 463.930874][T12662] loop1: lost filesystem error report for type 5 error -117 [ 463.939943][T12662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.148099][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.538782][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.630377][T12675] loop5: detected capacity change from 0 to 1024 [ 464.656782][T12675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.659368][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 464.659384][ T29] audit: type=1400 audit(1700006418.760:738): avc: denied { write } for pid=12674 comm="syz.5.2598" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.797338][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.396421][ T32] IPVS: starting estimator thread 0... [ 465.545080][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.616629][T12688] loop1: detected capacity change from 0 to 1024 [ 465.630637][T12686] IPVS: using max 2496 ests per chain, 124800 per kthread [ 465.642112][T12688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.797586][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 465.797620][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.866314][ T29] audit: type=1400 audit(1700006419.970:739): avc: denied { write } for pid=12687 comm="syz.1.2600" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.985013][ T29] audit: type=1400 audit(1700006420.060:740): avc: denied { execute } for pid=12694 comm="syz.0.2603" path="/539/file0" dev="tmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 466.024500][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2605'. [ 466.414979][ T29] audit: type=1326 audit(1700006420.520:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.4.2588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b0eafb19 code=0x7fc00000 [ 466.415274][ T29] audit: type=1326 audit(1700006420.520:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.4.2588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b0eafb19 code=0x7fc00000 [ 466.810991][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.133068][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 468.133181][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.168753][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 469.902810][ T316] IPVS: starting estimator thread 0... [ 469.993717][T12768] IPVS: using max 2496 ests per chain, 124800 per kthread [ 470.269304][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 470.362809][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.394559][ T316] IPVS: starting estimator thread 0... [ 470.492863][T12778] IPVS: using max 2544 ests per chain, 127200 per kthread [ 471.140884][T12784] syzkaller0: entered promiscuous mode [ 471.140909][T12784] syzkaller0: entered allmulticast mode [ 472.151276][ T316] IPVS: starting estimator thread 0... [ 472.232903][T12794] IPVS: using max 2496 ests per chain, 124800 per kthread [ 472.536653][T12811] FAULT_INJECTION: forcing a failure. [ 472.536653][T12811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 472.536693][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.0.2636 Not tainted syzkaller #0 PREEMPT(lazy) [ 472.536752][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 472.536845][T12811] Call Trace: [ 472.536932][T12811] [ 472.536942][T12811] __dump_stack+0x1d/0x30 [ 472.536975][T12811] dump_stack_lvl+0x95/0xd0 [ 472.537001][T12811] dump_stack+0x15/0x1b [ 472.537022][T12811] should_fail_ex+0x259/0x270 [ 472.537055][T12811] should_fail+0xb/0x20 [ 472.537121][T12811] get_futex_key+0x12c/0xc40 [ 472.537149][T12811] futex_wake+0x89/0x400 [ 472.537179][T12811] do_futex+0x3f8/0x460 [ 472.537203][T12811] __se_sys_futex+0x2f6/0x370 [ 472.537240][T12811] __x64_sys_futex+0x78/0x90 [ 472.537315][T12811] x64_sys_call+0x22e2/0x2550 [ 472.537341][T12811] do_syscall_64+0x112/0x360 [ 472.537381][T12811] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 472.537478][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.537500][T12811] RIP: 0033:0x7fcdb9affb19 [ 472.537516][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.537534][T12811] RSP: 002b:00007fcdb85570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 472.537612][T12811] RAX: ffffffffffffffda RBX: 00007fcdb9d85fa8 RCX: 00007fcdb9affb19 [ 472.537640][T12811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcdb9d85fac [ 472.537657][T12811] RBP: 00007fcdb9d85fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 472.537674][T12811] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 472.537690][T12811] R13: 00007fcdb9d86038 R14: 00007ffdf4c34a20 R15: 00007ffdf4c34b08 [ 472.537713][T12811] [ 472.764216][T12820] loop5: detected capacity change from 0 to 1024 [ 472.774564][T12820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.943790][T12826] loop0: detected capacity change from 0 to 1024 [ 472.971331][T12826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.066519][ T29] audit: type=1400 audit(1700006427.170:743): avc: denied { write } for pid=12825 comm="syz.0.2641" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.223423][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.394148][T12838] syzkaller0: entered promiscuous mode [ 474.394170][T12838] syzkaller0: entered allmulticast mode [ 474.465168][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.132320][T12852] loop0: detected capacity change from 0 to 1024 [ 475.157094][T12852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.222176][ T29] audit: type=1400 audit(1700006429.320:744): avc: denied { write } for pid=12851 comm="syz.0.2649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.661612][T12866] loop5: detected capacity change from 0 to 1024 [ 475.715361][T12866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.951326][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.372288][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.615020][T12889] x_tables: unsorted underflow at hook 2 [ 478.324669][T12912] syzkaller0: entered promiscuous mode [ 478.324892][T12912] syzkaller0: entered allmulticast mode [ 478.645451][ T3591] Bluetooth: hci0: sending frame failed (-49) [ 478.718442][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 479.773034][T12941] loop5: detected capacity change from 0 to 512 [ 479.775189][T12941] EXT4-fs: Ignoring removed orlov option [ 479.848773][T12941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.848844][T12941] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.884279][T12948] loop2: detected capacity change from 0 to 512 [ 479.886419][T12948] EXT4-fs: Ignoring removed orlov option [ 479.928845][ T29] audit: type=1400 audit(1700006434.030:745): avc: denied { write } for pid=12940 comm="syz.5.2674" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.984265][ T29] audit: type=1400 audit(1700006434.080:746): avc: denied { write } for pid=12940 comm="syz.5.2674" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.064889][T12948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.064969][T12948] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.408527][ T29] audit: type=1400 audit(1700006434.510:747): avc: denied { write } for pid=12947 comm="syz.2.2676" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.002837][ T29] audit: type=1400 audit(1700006435.040:748): avc: denied { write } for pid=12947 comm="syz.2.2676" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.064397][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.161144][T12966] syzkaller0: entered promiscuous mode [ 481.161187][T12966] syzkaller0: entered allmulticast mode [ 481.199578][ T845] Bluetooth: hci0: Frame reassembly failed (-84) [ 482.196304][ T316] IPVS: starting estimator thread 0... [ 482.357273][T12981] IPVS: using max 2112 ests per chain, 105600 per kthread [ 483.243196][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 483.278542][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.381153][T12997] loop2: detected capacity change from 0 to 1024 [ 483.395006][T12998] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 483.409829][T12997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.411589][ T29] audit: type=1400 audit(1700006437.520:749): avc: denied { write } for pid=12995 comm="syz.2.2687" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.483375][T12998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.540811][T12998] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 484.478217][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.439388][T13020] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 485.665607][T13030] loop0: detected capacity change from 0 to 512 [ 486.063743][T13030] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 486.850776][T13030] EXT4-fs (loop0): 1 orphan inode deleted [ 486.851148][T13030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.851297][T13030] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.865774][ T316] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.865804][ T316] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 487.019744][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.034442][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 487.051192][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 487.067033][T13051] netlink: 'syz.0.2700': attribute type 1 has an invalid length. [ 487.072483][T13051] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.093744][T13051] bond4: (slave veth0_to_bond): Releasing backup interface [ 487.096483][T13051] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 487.126026][ T29] audit: type=1400 audit(1700006441.230:750): avc: denied { write } for pid=13041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.168717][ T29] audit: type=1400 audit(1700006441.270:751): avc: denied { write } for pid=13060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.255330][ T29] audit: type=1400 audit(1700006441.360:752): avc: denied { write } for pid=13064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.274129][ T29] audit: type=1400 audit(1700006441.380:753): avc: denied { write } for pid=13078 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.146385][T13085] loop0: detected capacity change from 0 to 256 [ 488.184108][T13085] FAT-fs (loop0): IO charset euc-jp not found [ 488.432433][ T29] audit: type=1326 audit(1700006442.530:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13023 comm="syz.4.2694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b0eafb19 code=0x7fc00000 [ 488.435088][ T29] audit: type=1326 audit(1700006442.540:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13023 comm="syz.4.2694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b0eafb19 code=0x7fc00000 [ 489.049625][T13100] loop5: detected capacity change from 0 to 1024 [ 489.066264][T13100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.085635][T13049] Bluetooth: hci1: command 0x1003 tx timeout [ 489.085656][T13049] Bluetooth: hci0: command 0x1003 tx timeout [ 489.085679][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 489.085717][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.111428][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.299968][T13108] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 489.316838][T13108] 8021q: adding VLAN 0 to HW filter on device bond11 [ 489.848147][T13116] loop5: detected capacity change from 0 to 512 [ 489.859953][T13108] bond10: (slave veth0_to_bond): Releasing backup interface [ 489.888369][T13116] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 489.920538][T13116] EXT4-fs (loop5): 1 orphan inode deleted [ 489.921363][T13116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.922269][T13116] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.943885][ T8537] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 489.943929][ T8537] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:11: Failed to release dquot type 1 [ 490.119974][T13108] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 490.227648][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.748773][T13126] netlink: 'syz.1.2715': attribute type 8 has an invalid length. [ 490.859625][ T29] audit: type=1400 audit(1700006444.960:756): avc: denied { setopt } for pid=13131 comm="syz.4.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.897433][T13129] netlink: 'syz.5.2716': attribute type 8 has an invalid length. [ 491.659049][T13150] loop4: detected capacity change from 0 to 512 [ 492.128975][T13150] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2723: iget: bad i_size value: 38620345925642 [ 492.129094][T13150] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 492.129887][T13150] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2723: couldn't read orphan inode 15 (err -117) [ 492.129969][T13150] loop4: lost filesystem error report for type 5 error -117 [ 492.131256][T13150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.154173][ T29] audit: type=1400 audit(1700006446.240:757): avc: denied { write } for pid=13149 comm="syz.4.2723" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 492.155553][T13163] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 492.174288][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.542087][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'. [ 493.208361][ T73] Bluetooth: hci0: Frame reassembly failed (-84) [ 494.886095][T13198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2737'. [ 495.289433][T10773] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 497.295887][T13227] loop5: detected capacity change from 0 to 256 [ 497.358125][T13227] FAT-fs (loop5): IO charset euc-jp not found [ 498.368243][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2746'. [ 498.439684][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 500.449707][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 500.466237][T13277] bond5: (slave veth0_to_bond): Releasing backup interface [ 501.193179][T13303] loop4: detected capacity change from 0 to 128 [ 501.195856][T13303] EXT4-fs: test_dummy_encryption option not supported [ 501.405270][T13306] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 501.821168][T13308] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2766'. [ 501.936033][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2769'. [ 502.537611][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 502.541734][T13328] bond11: (slave veth0_to_bond): Releasing backup interface [ 503.094725][T13342] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 503.380725][T13350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2780'. [ 503.926299][T13362] x_tables: unsorted underflow at hook 2 [ 504.033787][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2784'. [ 505.066211][T13378] loop2: detected capacity change from 0 to 512 [ 505.067919][T13378] EXT4-fs: Ignoring removed orlov option [ 505.087328][T13378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.087540][T13378] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.741182][ T29] audit: type=1400 audit(1700006459.340:758): avc: denied { write } for pid=13377 comm="syz.2.2789" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.741250][ T29] audit: type=1400 audit(1700006459.840:759): avc: denied { write } for pid=13377 comm="syz.2.2789" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.923754][T13393] loop0: detected capacity change from 0 to 512 [ 505.925878][T13393] EXT4-fs: Ignoring removed orlov option [ 505.974926][T13393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.974999][T13393] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.142297][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.324849][ T29] audit: type=1400 audit(1700006460.430:760): avc: denied { write } for pid=13392 comm="syz.0.2790" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.186821][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.761440][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2799'. [ 509.295246][T13446] loop2: detected capacity change from 0 to 256 [ 509.311051][T13446] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 509.437861][T13448] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 509.437915][T13448] FAT-fs (loop2): Filesystem has been set read-only [ 509.745694][ T3302] syz_tun (unregistering): left allmulticast mode [ 510.009287][T13470] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2807'. [ 510.053712][T13457] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.544687][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'. [ 510.550382][T13481] loop2: detected capacity change from 0 to 512 [ 510.550624][T13481] EXT4-fs: Ignoring removed orlov option [ 510.577840][T13481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.578030][T13481] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.712553][ T29] audit: type=1400 audit(1700006400.210:761): avc: denied { write } for pid=13479 comm="syz.2.2809" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 510.782011][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.782042][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.782104][T13457] bridge_slave_0: entered allmulticast mode [ 510.782652][T13457] bridge_slave_0: entered promiscuous mode [ 510.810394][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.810431][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.810593][T13457] bridge_slave_1: entered allmulticast mode [ 510.811057][T13457] bridge_slave_1: entered promiscuous mode [ 510.835490][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.839841][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.877302][T13457] team0: Port device team_slave_0 added [ 510.879736][T13457] team0: Port device team_slave_1 added [ 511.000791][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.000808][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.000841][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.001468][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.001480][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.001524][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.026711][T13457] hsr_slave_0: entered promiscuous mode [ 511.028641][T13457] hsr_slave_1: entered promiscuous mode [ 511.028918][T13457] debugfs: 'hsr0' already exists in 'hsr' [ 511.028930][T13457] Cannot create hsr debugfs directory [ 511.125822][T13499] loop0: detected capacity change from 0 to 512 [ 511.283088][T13499] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 511.329887][T13499] EXT4-fs (loop0): 1 orphan inode deleted [ 511.331089][T13499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.331612][T13499] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.454557][ T845] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 511.454624][ T845] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1 [ 511.648555][T13457] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.689289][T13457] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.159155][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.177083][T13457] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.239671][T13457] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.332803][ T29] audit: type=1400 audit(1700006401.830:762): avc: denied { create } for pid=13512 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.332836][ T29] audit: type=1400 audit(1700006401.830:763): avc: denied { read } for pid=13512 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.382200][ T29] audit: type=1400 audit(1700006401.870:764): avc: denied { write } for pid=13512 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.382523][ T29] audit: type=1400 audit(1700006401.870:765): avc: denied { getopt } for pid=13512 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.383153][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2815'. [ 512.394752][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.396502][ T29] audit: type=1400 audit(1700006401.890:766): avc: denied { create } for pid=13512 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 512.439354][T13457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.448868][T13457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.449293][T13457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.627729][T13457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.641535][T13457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.272561][T13457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.316333][T13457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.419812][T13457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.763974][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.772199][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.792083][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.792122][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.812579][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.812616][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.489199][T13457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.678461][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2826'. [ 515.347647][T13457] veth0_vlan: entered promiscuous mode [ 515.357780][T13457] veth1_vlan: entered promiscuous mode [ 515.378911][T13457] veth0_macvtap: entered promiscuous mode [ 515.382532][T13457] veth1_macvtap: entered promiscuous mode [ 515.391649][T13457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.396955][T13457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.498061][ T922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.500397][ T8537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.500703][ T8537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.513167][ T845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.665646][T13613] loop5: detected capacity change from 0 to 256 [ 516.676430][T13615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2830'. [ 516.797669][T13613] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.577734][T13625] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 517.577762][T13625] FAT-fs (loop5): Filesystem has been set read-only [ 517.820085][ T3301] syz_tun (unregistering): left allmulticast mode [ 517.860044][T13637] loop0: detected capacity change from 0 to 256 [ 517.878715][T13638] loop5: detected capacity change from 0 to 256 [ 517.880052][ T29] audit: type=1400 audit(1700006399.410:767): avc: denied { watch watch_reads } for pid=13632 comm="syz.5.2836" path="/80/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 517.880080][ T29] audit: type=1400 audit(1700006399.410:768): avc: denied { mounton } for pid=13632 comm="syz.5.2836" path="/80/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 517.941278][T13637] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.969864][T13638] FAT-fs (loop5): IO charset euc-jp not found [ 518.114219][T13646] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 518.114287][T13646] FAT-fs (loop0): Filesystem has been set read-only [ 518.448301][ T845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.549793][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 518.608685][ T845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.660761][T13663] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2842'. [ 518.675141][T13647] rxe_eth0 speed is unknown, defaulting to 1000 [ 518.733607][ T845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.769483][T13667] loop0: detected capacity change from 0 to 512 [ 518.769752][T13667] EXT4-fs: Ignoring removed orlov option [ 518.798279][T13667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.798410][T13667] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.874546][ T845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.975516][ T29] audit: type=1400 audit(1700006399.800:769): avc: denied { write } for pid=13666 comm="syz.0.2843" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 519.011822][ T845] bridge_slave_1: left allmulticast mode [ 519.011842][ T845] bridge_slave_1: left promiscuous mode [ 519.011950][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.018698][ T845] bridge_slave_0: left allmulticast mode [ 519.018719][ T845] bridge_slave_0: left promiscuous mode [ 519.018854][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.033300][ T845] dvmrp3: left allmulticast mode [ 519.055339][ T29] audit: type=1400 audit(1700006399.880:770): avc: denied { write } for pid=13666 comm="syz.0.2843" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 519.139922][ T845] team0: Port device bridge0 removed [ 519.153229][ T845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.165423][ T845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.166310][ T845] bond0 (unregistering): Released all slaves [ 519.168100][ T845] bond1 (unregistering): Released all slaves [ 519.174537][ T845] bond2 (unregistering): Released all slaves [ 519.180544][ T845] bond3 (unregistering): Released all slaves [ 519.188610][ T845] bond4 (unregistering): Released all slaves [ 519.196351][ T845] bond5 (unregistering): Released all slaves [ 519.202329][ T845] bond6 (unregistering): Released all slaves [ 519.216335][ T845] bond7 (unregistering): Released all slaves [ 519.221850][ T845] bond8 (unregistering): Released all slaves [ 519.226929][ T845] bond9 (unregistering): Released all slaves [ 519.231593][ T845] bond10 (unregistering): Released all slaves [ 519.239064][ T845] bond11 (unregistering): Released all slaves [ 519.308457][T13686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2847'. [ 519.378700][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.378736][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.378783][T13647] bridge_slave_0: entered allmulticast mode [ 519.379385][T13647] bridge_slave_0: entered promiscuous mode [ 519.380187][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.380216][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.380319][T13647] bridge_slave_1: entered allmulticast mode [ 519.380967][T13647] bridge_slave_1: entered promiscuous mode [ 519.393162][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.394428][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.406249][T13647] team0: Port device team_slave_0 added [ 519.407189][T13647] team0: Port device team_slave_1 added [ 519.417996][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.418009][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.418036][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.418558][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.418570][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.418660][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.464095][T13647] hsr_slave_0: entered promiscuous mode [ 519.464491][T13647] hsr_slave_1: entered promiscuous mode [ 519.464736][T13647] debugfs: 'hsr0' already exists in 'hsr' [ 519.464748][T13647] Cannot create hsr debugfs directory [ 519.492923][ T29] audit: type=1400 audit(1700006400.300:771): avc: denied { write } for pid=13685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.606696][ T845] hsr_slave_0: left promiscuous mode [ 519.607084][ T845] hsr_slave_1: left promiscuous mode [ 519.607494][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.607509][ T845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.613746][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.613811][ T845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.627464][ T845] veth1_macvtap: left promiscuous mode [ 519.627491][ T845] veth0_macvtap: left promiscuous mode [ 519.627533][ T845] veth1_vlan: left promiscuous mode [ 519.627567][ T845] veth0_vlan: left promiscuous mode [ 519.649574][ T29] audit: type=1400 audit(1700006400.470:772): avc: denied { write } for pid=13703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.744775][ T845] team0 (unregistering): Port device team_slave_1 removed [ 519.750280][ T845] team0 (unregistering): Port device team_slave_0 removed [ 519.779338][T13706] loop2: detected capacity change from 0 to 256 [ 519.792945][T13706] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.819788][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 519.900838][T13710] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 519.900883][T13710] FAT-fs (loop2): Filesystem has been set read-only [ 520.292347][ T845] IPVS: stop unused estimator thread 0... [ 520.388080][T13647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.444854][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.445376][T13647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.477832][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.489006][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.489602][T13647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.517149][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.519040][T13647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.539990][ T29] audit: type=1400 audit(1700006399.570:773): avc: denied { write } for pid=13711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.541181][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.579920][ T29] audit: type=1400 audit(1700006399.610:774): avc: denied { write } for pid=13724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.811194][ T29] audit: type=1400 audit(1700006399.840:775): avc: denied { allowed } for pid=13715 comm="syz.5.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 521.286787][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.302574][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.315183][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.315221][ T8537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.317848][ T845] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.317885][ T845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.352879][ T29] audit: type=1400 audit(1700006400.380:776): avc: denied { write } for pid=13744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.609996][T13783] loop0: detected capacity change from 0 to 128 [ 521.628407][T13783] EXT4-fs: test_dummy_encryption option not supported [ 521.679543][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.904054][T13798] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 522.112586][T13647] veth0_vlan: entered promiscuous mode [ 522.141074][T13647] veth1_vlan: entered promiscuous mode [ 522.225001][T13647] veth0_macvtap: entered promiscuous mode [ 522.244186][T13647] veth1_macvtap: entered promiscuous mode [ 522.293959][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.317564][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.448293][ T8537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.448941][ T8537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.449465][ T8537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.449497][ T8537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.688583][T13811] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2859'. [ 522.737913][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2858'. [ 522.949891][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 522.949907][ T29] audit: type=1400 audit(1700006401.980:783): avc: denied { write } for pid=13820 comm="syz.0.2861" lport=40561 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 522.950277][ T29] audit: type=1400 audit(1700006401.980:784): avc: denied { getopt } for pid=13820 comm="syz.0.2861" lport=40561 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 524.097745][T13852] loop2: detected capacity change from 0 to 128 [ 524.102485][T13852] EXT4-fs: test_dummy_encryption option not supported [ 524.166436][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2869'. [ 524.383937][T13857] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 525.938319][T13875] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 526.142930][T13825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.474265][ T930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.934730][T13885] loop1: detected capacity change from 0 to 256 [ 526.975056][ T930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.980425][T13885] FAT-fs (loop1): IO charset euc-jp not found [ 527.006861][ T930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.113785][T13900] loop4: detected capacity change from 0 to 128 [ 527.116751][T13900] EXT4-fs: test_dummy_encryption option not supported [ 527.240934][ T930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.570099][ T930] bridge_slave_1: left allmulticast mode [ 527.570123][ T930] bridge_slave_1: left promiscuous mode [ 527.570220][ T930] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.572250][ T930] bridge_slave_0: left allmulticast mode [ 527.572272][ T930] bridge_slave_0: left promiscuous mode [ 527.572497][ T930] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.585214][ T930] dvmrp3: left allmulticast mode [ 527.589221][ T930] bond_slave_0: left promiscuous mode [ 527.589251][ T930] bond_slave_1: left promiscuous mode [ 527.706361][T13906] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 527.757421][ T930] team0: Port device bridge0 removed [ 527.760118][ T930] bond0 (unregistering): left allmulticast mode [ 527.760139][ T930] bond_slave_0: left allmulticast mode [ 527.760155][ T930] bond_slave_1: left allmulticast mode [ 527.760886][T13911] loop2: detected capacity change from 0 to 256 [ 528.032977][ T930] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 528.033230][ T930] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 528.034145][ T930] macvlan2 (unregistering): left allmulticast mode [ 528.085546][ T930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.107822][ T930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.124394][ T930] bond0 (unregistering): Released all slaves [ 528.150072][ T930] bond1 (unregistering): Released all slaves [ 528.177198][T13914] loop5: detected capacity change from 0 to 512 [ 528.180130][T13914] EXT4-fs: Ignoring removed orlov option [ 528.195874][ T930] bond2 (unregistering): Released all slaves [ 528.207321][T13911] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.212613][ T930] bond3 (unregistering): Released all slaves [ 528.219192][T13914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.219296][T13914] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.220514][ T930] bond4 (unregistering): Released all slaves [ 528.224046][ T930] bond5 (unregistering): Released all slaves [ 528.327021][T13920] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 528.327107][T13920] FAT-fs (loop2): Filesystem has been set read-only [ 528.522824][ T29] audit: type=1400 audit(1700006399.090:785): avc: denied { write } for pid=13913 comm="syz.5.2887" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.538017][ T29] audit: type=1400 audit(1700006399.150:786): avc: denied { write } for pid=13913 comm="syz.5.2887" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.807515][T13883] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.853541][ T930] hsr_slave_0: left promiscuous mode [ 528.859141][ T930] hsr_slave_1: left promiscuous mode [ 528.859698][ T930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.859712][ T930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.895411][ T930] veth1_macvtap: left promiscuous mode [ 528.895442][ T930] veth0_macvtap: left promiscuous mode [ 528.895482][ T930] veth1_vlan: left promiscuous mode [ 528.895564][ T930] veth0_vlan: left promiscuous mode [ 528.997095][ T29] audit: type=1400 audit(1700006399.610:787): avc: denied { write } for pid=13934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.061500][ T29] audit: type=1400 audit(1700006399.670:788): avc: denied { write } for pid=13946 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.145593][ T930] team0 (unregistering): Port device team_slave_1 removed [ 529.167143][ T930] team0 (unregistering): Port device team_slave_0 removed [ 529.250711][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 529.300600][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.398021][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2890'. [ 529.441083][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.441117][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.441168][T13883] bridge_slave_0: entered allmulticast mode [ 529.441628][T13883] bridge_slave_0: entered promiscuous mode [ 529.450126][ T930] IPVS: stop unused estimator thread 0... [ 529.471232][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.471266][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.471391][T13883] bridge_slave_1: entered allmulticast mode [ 529.471940][T13883] bridge_slave_1: entered promiscuous mode [ 529.495291][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.499184][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.511520][T13883] team0: Port device team_slave_0 added [ 529.512633][T13883] team0: Port device team_slave_1 added [ 529.524106][T13883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.524121][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.524193][T13883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.524759][T13883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.524771][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.524801][T13883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.541788][T13883] hsr_slave_0: entered promiscuous mode [ 529.542217][T13883] hsr_slave_1: entered promiscuous mode [ 530.862725][ T29] audit: type=1400 audit(1700006401.450:789): avc: denied { mount } for pid=13971 comm="syz.5.2895" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 531.528278][ T29] audit: type=1400 audit(1700006402.140:790): avc: denied { unmount } for pid=11750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 531.611233][T13979] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2897'. [ 531.741102][T13927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.753660][T13883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.761861][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.765322][T13883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.771032][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.772892][T13883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.777928][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.781087][T13883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.784309][T13883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.906477][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.939836][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.986131][T13883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.986174][T13883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.076953][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.077079][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.124177][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.124211][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.382794][ T29] audit: type=1400 audit(1700006402.990:791): avc: denied { write } for pid=13983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.418147][T14016] loop1: detected capacity change from 0 to 512 [ 532.420757][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2902'. [ 532.421575][T14016] EXT4-fs: Ignoring removed orlov option [ 532.435664][ T29] audit: type=1400 audit(1700006403.040:792): avc: denied { write } for pid=14018 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.486339][T14016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.486492][T14016] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.523987][ T29] audit: type=1400 audit(1700006403.140:793): avc: denied { write } for pid=14015 comm="syz.1.2903" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.525758][ T29] audit: type=1400 audit(1700006403.140:794): avc: denied { write } for pid=14015 comm="syz.1.2903" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.693286][T13647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.711704][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2906'. [ 532.819677][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 533.244436][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2909'. [ 533.317649][T13883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.627072][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 533.627090][ T29] audit: type=1400 audit(1700006404.170:797): avc: denied { write } for pid=14066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.627117][ T29] audit: type=1400 audit(1700006404.200:798): avc: denied { write } for pid=14086 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.872352][T13883] veth0_vlan: entered promiscuous mode [ 533.888329][T13883] veth1_vlan: entered promiscuous mode [ 533.926174][T13883] veth0_macvtap: entered promiscuous mode [ 533.931468][T13883] veth1_macvtap: entered promiscuous mode [ 533.966142][T13883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.982226][T13883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.012841][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.013013][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.013051][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.013087][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.113800][T14096] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2915'. [ 534.304024][T14102] loop4: detected capacity change from 0 to 512 [ 534.304326][T14102] EXT4-fs: Ignoring removed orlov option [ 534.340741][T14099] loop5: detected capacity change from 0 to 164 [ 534.341617][T14099] iso9660: Corrupted directory entry in block 28 of inode 1792 [ 534.341640][T14099] isofs_fill_super: get root inode failed [ 534.501523][T14102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.501616][T14102] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.005505][T14121] loop5: detected capacity change from 0 to 256 [ 535.229974][ T29] audit: type=1400 audit(1700006405.650:799): avc: denied { write } for pid=14100 comm="syz.4.2917" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.230009][ T29] audit: type=1400 audit(1700006405.650:800): avc: denied { write } for pid=14100 comm="syz.4.2917" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.243307][T14121] FAT-fs (loop5): IO charset euc-jp not found [ 535.245858][T13457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.428395][T14134] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2923'. [ 535.553405][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2926'. [ 535.571481][T14142] loop0: detected capacity change from 0 to 512 [ 535.578410][T14142] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 535.633265][T14142] EXT4-fs (loop0): 1 orphan inode deleted [ 535.633708][T14142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.634020][T14142] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.892567][ T73] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 535.892597][ T73] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 535.894483][T13883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.936315][T14162] loop0: detected capacity change from 0 to 512 [ 535.936644][T14162] EXT4-fs: Ignoring removed orlov option [ 535.956807][T14165] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 535.960489][T14162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.960608][T14162] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.077774][ T29] audit: type=1400 audit(1700006406.690:801): avc: denied { write } for pid=14161 comm="syz.0.2930" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.235942][T14169] loop2: detected capacity change from 0 to 512 [ 536.236455][T14169] EXT4-fs: Ignoring removed orlov option [ 536.255490][T14169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.255654][T14169] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.314741][ T29] audit: type=1400 audit(1700006406.930:802): avc: denied { write } for pid=14168 comm="syz.2.2931" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.341350][T14176] loop4: detected capacity change from 0 to 512 [ 536.341777][T14176] ext4: Unknown parameter 'audit' [ 536.463383][ T29] audit: type=1400 audit(1700006407.080:803): avc: denied { write } for pid=14168 comm="syz.2.2931" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.505488][T14180] loop1: detected capacity change from 0 to 512 [ 536.505817][T14180] EXT4-fs: Ignoring removed orlov option [ 536.535680][T14180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.535759][T14180] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.622372][ T29] audit: type=1400 audit(1700006407.230:804): avc: denied { write } for pid=14178 comm="syz.1.2934" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.847779][T13883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.848308][ T29] audit: type=1400 audit(1700006407.290:805): avc: denied { write } for pid=14178 comm="syz.1.2934" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.297967][T14197] UDC core: g1: couldn't find an available UDC or it's busy [ 537.318160][T13647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.331250][T14198] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 537.657740][T14215] loop1: detected capacity change from 0 to 512 [ 537.662599][T14215] EXT4-fs: Ignoring removed orlov option [ 537.691075][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.713480][T14215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.713798][T14215] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.858681][T14234] loop0: detected capacity change from 0 to 512 [ 539.042341][T14234] EXT4-fs: Ignoring removed orlov option [ 539.086608][T14234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.086793][T14234] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.168050][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 539.168066][ T29] audit: type=1400 audit(1700006409.780:812): avc: denied { write } for pid=14232 comm="syz.0.2950" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.222757][ T29] audit: type=1400 audit(1700006409.830:813): avc: denied { write } for pid=14232 comm="syz.0.2950" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.197199][T13883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.859425][T13647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.320272][T14278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2962'. [ 541.607928][T14304] FAULT_INJECTION: forcing a failure. [ 541.607928][T14304] name failslab, interval 1, probability 0, space 0, times 98 [ 541.608014][T14304] CPU: 1 UID: 0 PID: 14304 Comm: syz.1.2974 Not tainted syzkaller #0 PREEMPT(lazy) [ 541.608044][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 541.608094][T14304] Call Trace: [ 541.608101][T14304] [ 541.608111][T14304] __dump_stack+0x1d/0x30 [ 541.608137][T14304] dump_stack_lvl+0x95/0xd0 [ 541.608160][T14304] dump_stack+0x15/0x1b [ 541.608180][T14304] should_fail_ex+0x259/0x270 [ 541.608275][T14304] should_failslab+0x8c/0xb0 [ 541.608340][T14304] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 541.608372][T14304] ? proc_alloc_inode+0x34/0x90 [ 541.608400][T14304] ? proc_alloc_inode+0x34/0x90 [ 541.608445][T14304] ? __pfx_proc_alloc_inode+0x10/0x10 [ 541.608478][T14304] proc_alloc_inode+0x34/0x90 [ 541.608543][T14304] alloc_inode+0x40/0x170 [ 541.608565][T14304] new_inode+0x1d/0xe0 [ 541.608589][T14304] proc_pid_make_inode+0x24/0x200 [ 541.608680][T14304] proc_pident_instantiate+0x44/0x180 [ 541.608717][T14304] proc_pident_lookup+0x115/0x1a0 [ 541.608757][T14304] proc_tid_base_lookup+0x2b/0x40 [ 541.608811][T14304] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 541.608875][T14304] lookup_open+0x6aa/0x1050 [ 541.608913][T14304] ? __d_lookup+0x30c/0x340 [ 541.609016][T14304] path_openat+0x492/0x11c0 [ 541.609121][T14304] do_file_open+0x16c/0x290 [ 541.609161][T14304] ? __pfx_kfree_link+0x10/0x10 [ 541.609227][T14304] do_sys_openat2+0xa1/0x140 [ 541.609316][T14304] __x64_sys_openat+0xf2/0x120 [ 541.609343][T14304] x64_sys_call+0x1f72/0x2550 [ 541.609371][T14304] do_syscall_64+0x112/0x360 [ 541.609452][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.609475][T14304] RIP: 0033:0x7fee489f034e [ 541.609492][T14304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.609511][T14304] RSP: 002b:00007fee4747eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.609579][T14304] RAX: ffffffffffffffda RBX: 00007fee4747f6c0 RCX: 00007fee489f034e [ 541.609634][T14304] RDX: 0000000000000002 RSI: 00007fee4747ef90 RDI: ffffffffffffff9c [ 541.609648][T14304] RBP: 00007fee48ac7b70 R08: 0000000000000000 R09: 0000000000000000 [ 541.609664][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.609677][T14304] R13: 00007fee48cb6038 R14: 00007fee48cb5fa0 R15: 00007ffc8fa3d0e8 [ 541.609696][T14304] [ 541.655843][T14307] loop7: detected capacity change from 0 to 16384 [ 541.743499][T14313] loop0: detected capacity change from 0 to 512 [ 541.744182][T14313] EXT4-fs: Ignoring removed orlov option [ 541.770057][T14313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.770170][T14313] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.843481][ T29] audit: type=1400 audit(1700006412.450:814): avc: denied { write } for pid=14312 comm="syz.0.2978" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.907054][ T29] audit: type=1400 audit(1700006412.510:815): avc: denied { write } for pid=14312 comm="syz.0.2978" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.995666][T14323] loop4: detected capacity change from 0 to 256 [ 542.019319][T14314] loop7: detected capacity change from 16384 to 16376 [ 542.255053][T14323] FAT-fs (loop4): IO charset euc-jp not found [ 543.588034][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2987'. [ 544.429187][T13883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.990093][T14392] loop4: detected capacity change from 0 to 512 [ 544.991449][T14392] EXT4-fs: Ignoring removed orlov option [ 545.047576][T14392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.047843][T14392] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.104797][ T29] audit: type=1400 audit(1700006415.710:816): avc: denied { write } for pid=14391 comm="syz.4.3004" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.104902][ T29] audit: type=1400 audit(1700006415.720:817): avc: denied { write } for pid=14391 comm="syz.4.3004" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.173483][T13457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.142858][ T29] audit: type=1400 audit(1700006417.710:818): avc: denied { append } for pid=14439 comm="syz.2.3021" name="uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 548.103585][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3031'. [ 548.131583][T14473] syzkaller0: entered promiscuous mode [ 548.131607][T14473] syzkaller0: entered allmulticast mode [ 549.041534][T14494] loop4: detected capacity change from 0 to 512 [ 550.578412][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3042'. [ 551.656888][ T29] audit: type=1400 audit(1700006422.270:819): avc: denied { unmount } for pid=11750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 552.308191][T14547] loop0: detected capacity change from 0 to 128 [ 552.726231][T14547] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 552.726407][T14547] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 552.766825][T13883] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.818075][T14551] loop4: detected capacity change from 0 to 128 [ 552.838926][T14551] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 552.840072][T14551] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.427621][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3060'. [ 553.620293][T13457] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.524660][T14592] loop0: detected capacity change from 0 to 512 [ 554.845573][T14606] netlink: 'syz.1.3071': attribute type 21 has an invalid length. [ 555.310635][T14612] loop1: detected capacity change from 0 to 512 [ 555.855639][T14619] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 555.878283][T14619] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3074'. [ 555.878321][T14619] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3074'. [ 555.878342][T14619] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 556.938943][T14631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3076'. [ 557.076234][T14632] loop5: detected capacity change from 0 to 512 [ 558.385547][T14648] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 558.387806][T14648] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3081'. [ 558.387828][T14648] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3081'. [ 558.387902][T14648] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 559.328069][T14656] loop5: detected capacity change from 0 to 512 [ 560.206716][ T29] audit: type=1400 audit(1700006430.820:820): avc: denied { write } for pid=14664 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.235906][ T29] audit: type=1400 audit(1700006430.850:821): avc: denied { getopt } for pid=14669 comm="syz.5.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 560.301428][T14670] loop5: detected capacity change from 0 to 128 [ 560.352258][T14670] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 560.480506][T14670] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 560.611516][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3089'. [ 560.776227][ T29] audit: type=1400 audit(1700006431.380:822): avc: denied { write } for pid=14669 comm="syz.5.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 560.828477][T14680] pim6reg: entered allmulticast mode [ 560.927025][T14682] 9p: Bad value for 'rfdno' [ 561.683897][T14698] netlink: 'syz.2.3096': attribute type 21 has an invalid length. [ 561.700336][T14698] loop2: detected capacity change from 0 to 512 [ 562.668855][ T29] audit: type=1400 audit(1700006433.280:823): avc: denied { create } for pid=14712 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 562.930843][T14716] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 562.941700][T14716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3100'. [ 562.941716][T14716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3100'. [ 562.941763][T14716] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 563.018093][ T29] audit: type=1400 audit(1700006433.550:824): avc: denied { write } for pid=14712 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 564.398370][T14733] loop1: detected capacity change from 0 to 512 [ 564.400088][T14733] EXT4-fs: Ignoring removed orlov option [ 564.404906][T14733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.405069][T14733] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.408421][T14729] netlink: 'syz.4.3103': attribute type 21 has an invalid length. [ 564.410724][ T29] audit: type=1400 audit(1700006435.020:825): avc: denied { write } for pid=14732 comm="syz.1.3105" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.482302][ T29] audit: type=1400 audit(1700006435.090:826): avc: denied { write } for pid=14732 comm="syz.1.3105" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.545938][T14731] loop4: detected capacity change from 0 to 512 [ 564.809842][T14739] loop2: detected capacity change from 0 to 128 [ 564.828702][T14739] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 564.832796][T14739] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 565.024485][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3106'. [ 565.237451][T13647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.893103][ T29] audit: type=1400 audit(1700006436.470:827): avc: denied { append } for pid=14762 comm="syz.1.3112" name="uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 565.893195][ T29] audit: type=1400 audit(1700006436.470:828): avc: denied { open } for pid=14762 comm="syz.1.3112" path="/51/tracing/uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 565.893218][ T29] audit: type=1400 audit(1700006436.470:829): avc: denied { write } for pid=14762 comm="syz.1.3112" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 566.024307][T14768] loop0: detected capacity change from 0 to 256 [ 566.051448][T14768] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 566.171627][T14770] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 566.171684][T14770] FAT-fs (loop0): Filesystem has been set read-only [ 566.708365][T14775] loop5: detected capacity change from 0 to 512 [ 567.274285][T14780] loop0: detected capacity change from 0 to 512 [ 567.819363][T14796] loop0: detected capacity change from 0 to 128 [ 567.856122][T14796] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.856334][T14796] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.988507][T13883] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.110365][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3123'. [ 568.148175][T14807] loop0: detected capacity change from 0 to 128 [ 568.149363][T14807] EXT4-fs: test_dummy_encryption option not supported [ 568.300395][T14809] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 568.313930][T14809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3120'. [ 568.314004][T14809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3120'. [ 568.314094][T14809] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 568.376146][T14811] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 569.064722][T14821] loop0: detected capacity change from 0 to 512 [ 569.726257][T14829] loop0: detected capacity change from 0 to 256 [ 569.735416][T14829] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 570.291234][T14782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.435988][T14835] pim6reg: entered allmulticast mode [ 570.529023][T14847] loop4: detected capacity change from 0 to 512 [ 570.530644][T14847] EXT4-fs: Ignoring removed orlov option [ 570.554419][T14847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.554488][T14847] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.635054][T14853] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 570.647857][T14853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3134'. [ 570.647890][T14853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3134'. [ 570.647979][T14853] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 570.783158][ T29] audit: type=1400 audit(1700006399.870:830): avc: denied { write } for pid=14846 comm="syz.4.3135" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 570.990989][T14859] loop5: detected capacity change from 0 to 512 [ 571.086409][T14859] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 571.111239][T14859] EXT4-fs (loop5): 1 orphan inode deleted [ 571.111678][T14859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.112247][T14859] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.142939][ T41] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 571.142973][ T41] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 571.187216][T14865] 9p: Bad value for 'wfdno' [ 574.126925][T13457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.179398][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.324913][T14900] loop2: detected capacity change from 0 to 128 [ 574.337465][T14900] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 574.337996][T14900] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.686465][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.708950][T14930] netlink: 'syz.2.3154': attribute type 21 has an invalid length. [ 575.729014][T14930] loop2: detected capacity change from 0 to 512 [ 575.981743][T14932] loop5: detected capacity change from 0 to 512 [ 575.985357][T14932] EXT4-fs: Ignoring removed orlov option [ 576.005714][T14932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.005777][T14932] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.102247][ T29] audit: type=1400 audit(1700006405.200:831): avc: denied { write } for pid=14931 comm="syz.5.3156" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 576.130916][T14940] loop1: detected capacity change from 0 to 128 [ 576.149927][T14940] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 576.168337][T14940] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 577.184470][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.311000][T14960] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 577.313358][T14960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3160'. [ 577.313444][T14960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3160'. [ 577.313455][T14960] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 578.109137][T14970] loop1: detected capacity change from 0 to 128 [ 578.127638][T14970] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 578.129073][T14970] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 579.004357][T14937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.061068][T14981] loop1: detected capacity change from 0 to 128 [ 579.063126][T14981] EXT4-fs: test_dummy_encryption option not supported [ 579.250153][T14986] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 579.689699][T14990] FAULT_INJECTION: forcing a failure. [ 579.689699][T14990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 579.689732][T14990] CPU: 0 UID: 0 PID: 14990 Comm: syz.5.3167 Not tainted syzkaller #0 PREEMPT(lazy) [ 579.689762][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 579.689778][T14990] Call Trace: [ 579.689785][T14990] [ 579.689794][T14990] __dump_stack+0x1d/0x30 [ 579.689896][T14990] dump_stack_lvl+0x95/0xd0 [ 579.689920][T14990] dump_stack+0x15/0x1b [ 579.689946][T14990] should_fail_ex+0x259/0x270 [ 579.689976][T14990] should_fail+0xb/0x20 [ 579.690052][T14990] should_fail_usercopy+0x1a/0x20 [ 579.690088][T14990] _copy_to_user+0x20/0xa0 [ 579.690127][T14990] put_timespec64+0x70/0xc0 [ 579.690180][T14990] poll_select_finish+0x34f/0x470 [ 579.690212][T14990] __se_sys_pselect6+0x253/0x2a0 [ 579.690286][T14990] __x64_sys_pselect6+0x78/0x90 [ 579.690313][T14990] x64_sys_call+0x1dfc/0x2550 [ 579.690466][T14990] do_syscall_64+0x112/0x360 [ 579.690572][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.690600][T14990] RIP: 0033:0x7fe4d9e1fb19 [ 579.690617][T14990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.690699][T14990] RSP: 002b:00007fe4d886f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 579.690723][T14990] RAX: ffffffffffffffda RBX: 00007fe4da0a5fa0 RCX: 00007fe4d9e1fb19 [ 579.690738][T14990] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000040 [ 579.690795][T14990] RBP: 00007fe4d9eb7b70 R08: 0000200000000380 R09: 0000000000000000 [ 579.690812][T14990] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 579.690827][T14990] R13: 00007fe4da0a6038 R14: 00007fe4da0a5fa0 R15: 00007fffdf2b8f98 [ 579.690850][T14990] [ 579.846527][T14993] loop5: detected capacity change from 0 to 128 [ 579.848305][T14993] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 579.848526][T14993] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 581.418997][T15010] loop0: detected capacity change from 0 to 256 [ 581.436114][T15010] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 581.572932][T15014] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 581.572957][T15014] FAT-fs (loop0): Filesystem has been set read-only [ 581.775498][T15018] loop4: detected capacity change from 0 to 512 [ 581.786354][T15018] EXT4-fs: Ignoring removed orlov option [ 581.898398][T15018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.900459][T15018] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.065174][ T29] audit: type=1400 audit(1700006399.430:832): avc: denied { write } for pid=15015 comm="syz.4.3177" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 583.030510][T15029] loop0: detected capacity change from 0 to 128 [ 583.077504][T15029] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 583.082148][T15029] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 583.127170][T13457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.303618][T15074] loop1: detected capacity change from 0 to 512 [ 585.576665][T15092] loop5: detected capacity change from 0 to 256 [ 585.610189][T15093] loop2: detected capacity change from 0 to 512 [ 585.653929][T15095] loop0: detected capacity change from 0 to 512 [ 585.708612][T15092] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 585.938961][T15100] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 585.939044][T15100] FAT-fs (loop5): Filesystem has been set read-only [ 586.478336][T15107] loop4: detected capacity change from 0 to 256 [ 586.489139][T15107] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.643696][T15109] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 586.643719][T15109] FAT-fs (loop4): Filesystem has been set read-only [ 586.964769][T15114] loop5: detected capacity change from 0 to 512 [ 587.146473][T15124] loop2: detected capacity change from 0 to 512 [ 588.203703][T15143] loop2: detected capacity change from 0 to 512 [ 588.258274][T15142] loop4: detected capacity change from 0 to 512 [ 589.848069][T15160] loop4: detected capacity change from 0 to 128 [ 590.001188][T15160] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 590.045246][T15160] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.930395][T15182] netlink: 'syz.5.3227': attribute type 21 has an invalid length. [ 590.932646][T13457] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.052148][T15184] netlink: 'syz.4.3228': attribute type 21 has an invalid length. [ 591.095087][T15185] loop5: detected capacity change from 0 to 512 [ 591.276880][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3231'. [ 592.185653][T15206] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 592.226462][T15206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.231904][T15202] loop0: detected capacity change from 0 to 128 [ 592.246740][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'. [ 592.296126][T15202] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 592.300943][T15202] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.339937][T15211] x_tables: unsorted underflow at hook 2 [ 592.558450][ T29] audit: type=1400 audit(1700006405.560:833): avc: denied { setopt } for pid=15209 comm="syz.5.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 592.644462][T15184] loop4: detected capacity change from 0 to 512 [ 593.938288][T15237] loop1: detected capacity change from 0 to 512 [ 593.938647][T15237] ext4: Unknown parameter 'audit' [ 594.083806][T13883] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.488878][T15262] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 596.491111][T15262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3250'. [ 596.491132][T15262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3250'. [ 596.491145][T15262] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 598.907129][T15291] netlink: 'syz.1.3258': attribute type 21 has an invalid length. [ 599.016179][T15298] loop1: detected capacity change from 0 to 512 [ 599.055796][T15295] loop0: detected capacity change from 0 to 512 [ 599.279080][T15306] loop0: detected capacity change from 0 to 256 [ 599.288972][T15306] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 599.310845][T15304] netlink: 'syz.4.3257': attribute type 21 has an invalid length. [ 599.405750][T15310] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 599.405788][T15310] FAT-fs (loop0): Filesystem has been set read-only [ 599.805712][T15312] loop5: detected capacity change from 0 to 512 [ 599.824200][T15312] EXT4-fs: Ignoring removed orlov option [ 599.844941][T15312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.845132][T15312] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.910807][T15304] loop4: detected capacity change from 0 to 512 [ 599.941315][ T29] audit: type=1400 audit(1700006412.940:834): avc: denied { write } for pid=15311 comm="syz.5.3265" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.993930][ T29] audit: type=1400 audit(1700006413.000:835): avc: denied { write } for pid=15311 comm="syz.5.3265" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.275885][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.435195][T15321] pim6reg: entered allmulticast mode [ 601.489901][T15343] netlink: 'syz.0.3273': attribute type 21 has an invalid length. [ 601.591976][T15343] loop0: detected capacity change from 0 to 512 [ 601.784252][T15340] loop5: detected capacity change from 0 to 128 [ 601.897394][T15340] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 601.899873][T15340] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.281876][T15355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3276'. [ 602.281896][T15355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3276'. [ 602.281967][T15355] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 603.087784][T11750] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.998504][T15394] loop5: detected capacity change from 0 to 512 [ 605.926726][T15408] loop5: detected capacity change from 0 to 512 [ 605.946216][T15408] EXT4-fs: Ignoring removed orlov option [ 605.970190][T15408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.970273][T15408] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.971122][T15400] loop4: detected capacity change from 0 to 128 [ 606.084860][T15400] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 606.118193][T15400] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.134534][ T29] audit: type=1400 audit(1700006419.140:836): avc: denied { write } for pid=15406 comm="syz.5.3292" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 606.814464][T11750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.158058][T15425] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 607.203481][T15425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3290'. [ 607.203503][T15425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3290'. [ 607.203528][T15425] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 608.057526][T13457] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.347698][T15452] netlink: 'syz.0.3302': attribute type 21 has an invalid length. [ 609.384844][T15452] loop0: detected capacity change from 0 to 512 [ 609.492044][ T2983] ================================================================== [ 609.492083][ T2983] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 609.492127][ T2983] [ 609.492133][ T2983] write to 0xffff888105d97330 of 8 bytes by task 15300 on cpu 0: [ 609.492150][ T2983] dentry_unlink_inode+0x65/0x290 [ 609.492184][ T2983] d_delete+0x164/0x180 [ 609.492209][ T2983] d_delete_notify+0x32/0x100 [ 609.492226][ T2983] vfs_unlink+0x287/0x4a0 [ 609.492244][ T2983] filename_unlinkat+0x1db/0x400 [ 609.492265][ T2983] __se_sys_unlink+0x2b/0xe0 [ 609.492285][ T2983] __x64_sys_unlink+0x1f/0x30 [ 609.492302][ T2983] x64_sys_call+0x18ee/0x2550 [ 609.492331][ T2983] do_syscall_64+0x112/0x360 [ 609.492361][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.492384][ T2983] [ 609.492390][ T2983] read to 0xffff888105d97330 of 8 bytes by task 2983 on cpu 1: [ 609.492407][ T2983] step_into_slowpath+0x12c/0x4c0 [ 609.492434][ T2983] path_lookupat+0x2eb/0x4c0 [ 609.492465][ T2983] filename_lookup+0x18f/0x390 [ 609.492491][ T2983] do_readlinkat+0x74/0x2f0 [ 609.492516][ T2983] __x64_sys_readlink+0x47/0x60 [ 609.492538][ T2983] x64_sys_call+0x1d41/0x2550 [ 609.492561][ T2983] do_syscall_64+0x112/0x360 [ 609.492591][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.492614][ T2983] [ 609.492618][ T2983] value changed: 0xffff88812b077998 -> 0x0000000000000000 [ 609.492632][ T2983] [ 609.492637][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 609.492649][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 609.492672][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 609.492685][ T2983] ==================================================================