last executing test programs: 1m32.700302261s ago: executing program 2 (id=2824): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000580)=@can, 0x80, 0x0}}], 0x1, 0x4) getresuid(&(0x7f0000000100), 0x0, 0x0) r2 = memfd_create(0x0, 0x2) fcntl$addseals(r2, 0x409, 0xc) write(r2, &(0x7f00000002c0)='[', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x16, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x6, 0x7, 0xffffffffffffffe0, 0x8}, @tail_call, @map_fd={0x18, 0x6}, @printk={@llx}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x3, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r9, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) 1m31.55225621s ago: executing program 2 (id=2829): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m31.435627023s ago: executing program 2 (id=2831): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000006540)=[{{&(0x7f00000007c0)={0xa, 0x4e21, 0x10, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003340)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x62, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5c}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x6c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x70}}], 0x1, 0x2000c000) 1m31.401561384s ago: executing program 2 (id=2833): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) r1 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x6, &(0x7f0000001280)=""/112) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0x800, 0xd, 0x763}) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000d689afc91a7246960843ebae46c72900"], 0x18}}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff0a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='totmaps\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000150001002bbd7000fcdbdf25fc0000000000000000000000000000017f0000010000000000000000000000004e2000004e2400000000b08029000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="b36b6e00000000000c0015005a0735000200000008001f000400000050001100fc020400000000000000000000000000fe800000000000000000000000fff0aa00000000000000000000000000000001fc000000000000000000000000000001ff0400000535000002000700"], 0xb4}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r6, &(0x7f0000000300)="e7", 0x1, 0x800, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0xfffffffffffffeda) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2) 1m30.462862855s ago: executing program 2 (id=2839): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000580)=@can, 0x80, 0x0}}], 0x1, 0x4) getresuid(&(0x7f0000000100), 0x0, 0x0) r2 = memfd_create(0x0, 0x2) fcntl$addseals(r2, 0x409, 0xc) write(r2, &(0x7f00000002c0)='[', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r9, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) 1m29.827247606s ago: executing program 2 (id=2847): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0x3, 0x2, 0x7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x50) socket(0x1a, 0x4, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002580)={0x0, 0x2, 0x4}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x82102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4008001) 1m29.722845099s ago: executing program 32 (id=2847): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0x3, 0x2, 0x7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x50) socket(0x1a, 0x4, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002580)={0x0, 0x2, 0x4}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x82102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4008001) 6.365681103s ago: executing program 3 (id=3457): io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f00009f0000/0x3000)=nil, 0x3000, 0x1000000) listen(r4, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x8, 0x2004f, 0x0, 'queue0\x00', 0x200}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc08c5332, &(0x7f0000000400)={{}, 0x0, 0x0, 0x3, {}, 0x0, 0x4008}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) 5.395104334s ago: executing program 3 (id=3464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c0001800800"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 5.293832788s ago: executing program 3 (id=3467): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) shutdown(0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket(0x1a, 0x4, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002580)={0x0, 0x2, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4008001) 5.147854543s ago: executing program 3 (id=3468): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000e000000000006000f0000000000"], 0x48}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008004) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xa0000006}) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) close(r4) finit_module(r4, &(0x7f00000002c0)='\'!}(\\)%#&+\x00', 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9d, 0x10, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xe000, 0xc7e, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x22}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd, 0x81, 0x6}}}}}}}]}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000a00), 0x8000, 0x600) ioctl$HDIO_GETGEO(r3, 0x301, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x20000080) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 3.905713423s ago: executing program 5 (id=3484): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xce, 0xe, 0x7ff}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0xfd}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 3.835570666s ago: executing program 5 (id=3485): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 3.531992755s ago: executing program 0 (id=3487): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f40), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x14, r2, 0x229, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x27148abd2b2ef3f6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) setreuid(0x0, 0xee00) setresuid(0xee01, 0xee00, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100004) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x80) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000540), 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.300218903s ago: executing program 0 (id=3491): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000b80)='\bP', 0x2}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfffffffb}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x80000001, 0x1, [0xa, 0x1, 0x80000000, 0x7, 0x4], [0x100000000, 0xffffffff00000000, 0x0, 0x58, 0xa3, 0x3, 0x9, 0xca8a, 0xfffffffffffffff9, 0x1c, 0xff, 0x7, 0x7, 0x9, 0x7, 0x1000, 0x4, 0x5, 0xe5, 0x7ff, 0x4, 0x8ac, 0xffff, 0xbd, 0x200, 0x4, 0x4, 0x4, 0x6, 0x2, 0x1, 0x4e, 0xda9, 0x1, 0x200, 0x2, 0xb, 0x3, 0x7, 0x6, 0x2, 0x0, 0xaa91, 0x1, 0x7f, 0xffff, 0x5, 0xffffffffffffffff, 0x40, 0x6, 0x8, 0x5, 0x1ff, 0x200, 0x5, 0x1, 0x79f8, 0x6, 0x8, 0xfffffffffffffffc, 0x80, 0x7, 0x2, 0x8, 0xad0f, 0x7fffffffffffffff, 0x9, 0x100000000, 0x431, 0x3, 0x8, 0x1000, 0x4, 0xe4, 0x0, 0xf9, 0xf, 0x7, 0xffffffffffffb4bb, 0x1, 0x0, 0x9, 0x1296, 0xffffffffffffff33, 0x100000000, 0xfffffffffffff0bf, 0xc000000, 0x100000000, 0x5, 0xa0, 0x9, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x9, 0x8, 0x4, 0x5, 0x4, 0x80000000, 0x5, 0x2, 0x3571dbac, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x80000001, 0x3, 0x8000, 0x4, 0x8000000000000000, 0x9, 0xc5, 0x4, 0x61441fdd, 0xfffffffffffffff3, 0x4, 0x1]}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03715a316", 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',hach\x00'/22]) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={r2, 0x9, 0xff, 0x1}) 3.212059306s ago: executing program 5 (id=3492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) flock(r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r6, 0x1000003e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)="e1", 0x1}], 0x1}, 0x81) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000300)={0x7, 0x1b, 0x1}, 0x7) splice(r7, 0x0, r0, 0x0, 0x317e, 0x4) 3.169446528s ago: executing program 4 (id=3493): r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008000400070000ff7f0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x4a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0xf, 0x1}], 0x10, 0xe}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 3.005617173s ago: executing program 1 (id=3494): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200001, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008004) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xa0000006}) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) close(r4) finit_module(r4, &(0x7f00000002c0)='\'!}(\\)%#&+\x00', 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f00009f0000/0x3000)=nil, 0x3000, 0x1000000) listen(r4, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x8, 0x2004f, 0x0, 'queue0\x00', 0x200}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc08c5332, &(0x7f0000000400)={{}, 0x0, 0x0, 0x3, {}, 0x0, 0x4008}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) 2.641313375s ago: executing program 1 (id=3497): socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(0xffffffffffffffff, 0x8000b, 0x0, 0x4) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x180, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.392490173s ago: executing program 1 (id=3498): unshare(0x60000600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffff34, 0x0}, 0x7}], 0x1, 0x60, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x81, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) timer_create(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KDDELIO(r0, 0x7040, 0x6) sync() sync() sync() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x14, r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.214570058s ago: executing program 4 (id=3499): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(0x0, 0x6000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdffffffffff7ffff, 0xffffffffffffffff, 0x3) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000240)={0x80000011}) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68984, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) 1.951060547s ago: executing program 1 (id=3500): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x1, 0x8, &(0x7f0000000900)='*'}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r2}, 0x38) dup2(r1, r0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f00000000c0)={0x0, 0x0, 0xa0000}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r8, 0x0) 1.460013053s ago: executing program 0 (id=3501): io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f00009f0000/0x3000)=nil, 0x3000, 0x1000000) listen(r4, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x8, 0x2004f, 0x0, 'queue0\x00', 0x200}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc08c5332, &(0x7f0000000400)={{}, 0x0, 0x0, 0x3, {}, 0x0, 0x4008}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) 616.794041ms ago: executing program 5 (id=3502): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 575.250592ms ago: executing program 4 (id=3503): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0x3, 0x2, 0x7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x6000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) shutdown(0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket(0x1a, 0x4, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002580)={0x0, 0x2, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4008001) 548.053263ms ago: executing program 1 (id=3504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40d0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x24000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$eJzs3U9rY1UbAPAnbdqmfd82VcfRGRAPulGEzLQLV26KzIBYUaoVVBDu2FRD0j80pZAiTl25EvwYon4DQfwC3bhxLQgi3bichXilTTo2TdupbdOC/H6bHM45zznP6bkN3HAPd+eVr5bqi83KYrYeA4VCFFeHovggRYqBGIy2rXjx3Z9/eebt995/fWZ29s5cSndn3pl6OaU08ewPH3z63XM/jkTExPcjsT05sPPH9K/b17dv7Pz1bdSaqdZMyyvrKUv3VlbWs3uNalqoNeuVlN5qVLNmNdWWm9W1rvZiRKy2Ura8MD62ulZtNlO23Er1aiutF9L6WitlH2e15VSpVNL4WHAe8988yPM8Is+HYjjyPM9HYyz+F/+P8ZiIckzGY/F4PBHX4sm4Hk/F03Fjr9dV5w0AAAAAAAAAAAAAAAAAAAD/LY84/19w/h8AAAAAAAAAAAAAAAAAAAD67/D5/2KE9/8DAAAAAAAAAAAAAAAAAADAJXvE+/8Pnf9/yfl/AAAAAAAAAAAAAAAAAAAA6IdS+2MupVLE0hcb8xvz7c92/cxi1KIR1bgd5fgz9k7/t7XLd1+bvXM77ZmMW0v3O/H3N+YHu+OnhsoxWTgyfmo0IlJK3fEjMXYwfjrKce3o+afb8x+KL8ULz+/Gf96Or0Q5fvooVqIRCxGFzur34j+bSunVN2dHu+Nv7vY71mCftwUAAAAuUiU91Hv/vtXp1G4vdbe3mzr356nTs3DC7wOH7s+LcbN4VatmX7O1Wc8ajeraGQvDx48zfL6RewqFiMjiYM3E2G9zu5Ofcpz9y+2C8jlQGDxD1NnTGDq5zzn2NIqn/mNu1kunSfX0u9NJfutwTV6OOFBz68M36vtNI8eN8/vXB2pKcdHbfVRh4OFKBzqXWdbYOvXFFlt53tcMe/4ZR1ub9ZGToo7/zij0+TuJy/PPpl91JgAAAAAAAAAAAPwbRz79NxoRPc8DftJTs/94eHd478jHz/7lJawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4mx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//CvzDZg==") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005005}, 0x40000) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x5, 0x4000, 0x7, 0x0, 0x5, 0x0}) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x9, 0x30}, &(0x7f00000002c0)=0xc) socket(0x23, 0x80805, 0x0) 467.964385ms ago: executing program 4 (id=3505): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200001, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008004) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xa0000006}) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) close(r4) finit_module(r4, &(0x7f00000002c0)='\'!}(\\)%#&+\x00', 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x14, r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) kernel console output (not intermixed with test programs): h validation failed [ 337.675489][T12825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.685804][T12814] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3048: corrupted inode contents [ 337.699689][T12825] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.703104][T12814] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.745679][T12814] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3048: mark_inode_dirty error [ 337.759611][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 337.759706][ C1] EXT4-fs (loop0): initial error at time 1780500881: ext4_do_update_inode:5690: inode 15 [ 337.759993][ C1] EXT4-fs (loop0): last error at time 1780500881: ext4_do_update_inode:5690: inode 15 [ 337.816598][T12814] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.818828][T12814] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3048: corrupted inode contents [ 337.844383][T12814] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.846783][T12814] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3048: mark_inode_dirty error [ 337.870479][T12814] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.873050][T12814] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3048: mark inode dirty (error -117) [ 337.896832][T12814] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.898340][T12814] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 337.932555][T12814] EXT4-fs (loop0): 1 orphan inode deleted [ 337.946955][T12814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 337.948382][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3051'. [ 337.980798][ T28] audit: type=1400 audit(1780500881.969:2324): avc: denied { write } for pid=12824 comm="syz.3.3050" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.060307][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.109543][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.125406][ T2981] loop4: p3 < > p4 < > [ 338.130029][ T2981] loop4: partition table partially beyond EOD, truncated [ 338.143828][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 338.151380][T12831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12831 comm=syz.5.3053 [ 338.287147][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 338.303781][ T2981] loop4: p3 < > p4 < > [ 338.309713][ T2981] loop4: partition table partially beyond EOD, truncated [ 338.333053][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 338.369031][ T2981] loop4: p3 < > p4 < > [ 338.376459][ T2981] loop4: partition table partially beyond EOD, truncated [ 338.389969][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 338.450842][ T2981] loop4: p3 < > p4 < > [ 338.455551][ T2981] loop4: partition table partially beyond EOD, truncated [ 338.462859][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 338.470064][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 338.489453][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 338.612877][ T2981] loop4: p3 < > p4 < > [ 338.617505][ T2981] loop4: partition table partially beyond EOD, truncated [ 338.625241][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 338.822058][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 338.857813][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 339.192386][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 339.825232][ T2981] loop4: p3 < > p4 < > [ 339.831096][ T2981] loop4: partition table partially beyond EOD, truncated [ 339.848686][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 339.948364][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 339.957448][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 340.014887][T12876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12876 comm=syz.3.3066 [ 340.086777][T12879] loop3: detected capacity change from 0 to 512 [ 340.096523][T12879] FAULT_INJECTION: forcing a failure. [ 340.096523][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.125572][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.3.3068 Not tainted syzkaller #0 PREEMPT(lazy) [ 340.125654][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.125668][T12879] Call Trace: [ 340.125675][T12879] [ 340.125684][T12879] __dump_stack+0x1d/0x30 [ 340.125708][T12879] dump_stack_lvl+0x95/0xd0 [ 340.125728][T12879] dump_stack+0x15/0x1b [ 340.125746][T12879] should_fail_ex+0x263/0x280 [ 340.125773][T12879] should_fail+0xb/0x20 [ 340.125787][T12879] should_fail_usercopy+0x1a/0x20 [ 340.125810][T12879] _copy_from_user+0x1c/0xb0 [ 340.125831][T12879] evdev_ioctl_handler+0x262/0x16d0 [ 340.125876][T12879] ? __pfx_evdev_ioctl+0x10/0x10 [ 340.125942][T12879] evdev_ioctl+0x24/0x30 [ 340.126009][T12879] __se_sys_ioctl+0xce/0x140 [ 340.126040][T12879] __x64_sys_ioctl+0x43/0x50 [ 340.126067][T12879] x64_sys_call+0x1563/0x3020 [ 340.126095][T12879] do_syscall_64+0x12c/0x3b0 [ 340.126130][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.126161][T12879] RIP: 0033:0x7ff5cb43ce59 [ 340.126178][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.126226][T12879] RSP: 002b:00007ff5c9e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.126247][T12879] RAX: ffffffffffffffda RBX: 00007ff5cb6b5fa0 RCX: 00007ff5cb43ce59 [ 340.126261][T12879] RDX: 0000200000000000 RSI: 0000000080084504 RDI: 0000000000000003 [ 340.126327][T12879] RBP: 00007ff5c9e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.126340][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.126380][T12879] R13: 00007ff5cb6b6038 R14: 00007ff5cb6b5fa0 R15: 00007ffccdbd94a8 [ 340.126398][T12879] [ 340.332588][T12880] loop1: detected capacity change from 0 to 512 [ 340.346704][ T2981] loop4: p3 < > p4 < > [ 340.353233][ T2981] loop4: partition table partially beyond EOD, truncated [ 340.370200][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 340.389233][T12880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 340.420386][ T2981] loop4: p3 < > p4 < > [ 340.425886][ T2981] loop4: partition table partially beyond EOD, truncated [ 340.432214][T12880] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.435451][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 340.457749][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 340.528039][T12897] FAULT_INJECTION: forcing a failure. [ 340.528039][T12897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.608688][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.5.3075 Not tainted syzkaller #0 PREEMPT(lazy) [ 340.608717][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.608730][T12897] Call Trace: [ 340.608756][T12897] [ 340.608765][T12897] __dump_stack+0x1d/0x30 [ 340.608789][T12897] dump_stack_lvl+0x95/0xd0 [ 340.608810][T12897] dump_stack+0x15/0x1b [ 340.608870][T12897] should_fail_ex+0x263/0x280 [ 340.608907][T12897] should_fail+0xb/0x20 [ 340.608924][T12897] should_fail_usercopy+0x1a/0x20 [ 340.608944][T12897] _copy_from_user+0x1c/0xb0 [ 340.609003][T12897] ___sys_sendmsg+0xc1/0x1e0 [ 340.609069][T12897] __x64_sys_sendmsg+0xd4/0x160 [ 340.609099][T12897] x64_sys_call+0x194c/0x3020 [ 340.609121][T12897] do_syscall_64+0x12c/0x3b0 [ 340.609172][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.609192][T12897] RIP: 0033:0x7fac36cace59 [ 340.609285][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.609321][T12897] RSP: 002b:00007fac356ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.609339][T12897] RAX: ffffffffffffffda RBX: 00007fac36f25fa0 RCX: 00007fac36cace59 [ 340.609351][T12897] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 340.609362][T12897] RBP: 00007fac356ff090 R08: 0000000000000000 R09: 0000000000000000 [ 340.609375][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.609417][T12897] R13: 00007fac36f26038 R14: 00007fac36f25fa0 R15: 00007ffea21ae878 [ 340.609490][T12897] [ 340.877158][ T2981] loop4: p3 < > p4 < > [ 340.885340][ T2981] loop4: partition table partially beyond EOD, truncated [ 340.892432][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 340.916089][T12914] netlink: 'syz.5.3077': attribute type 12 has an invalid length. [ 340.944772][ T28] audit: type=1400 audit(1780500884.738:2325): avc: denied { write } for pid=12877 comm="syz.1.3067" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.111684][ T360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.197723][ T360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.279552][T12914] loop5: detected capacity change from 0 to 8192 [ 341.303395][ T360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.316781][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.330693][ T2981] loop4: p3 < > p4 < > [ 341.335176][ T2981] loop4: partition table partially beyond EOD, truncated [ 341.342479][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 341.385049][T12914] loop5: p1 < > p2 p4 < p5 > [ 341.392291][T12914] loop5: partition table partially beyond EOD, truncated [ 341.399729][T12914] loop5: p1 start 134217728 is beyond EOD, truncated [ 341.407427][T12914] loop5: p2 size 591360 extends beyond EOD, truncated [ 341.415666][T12914] loop5: p5 size 591360 extends beyond EOD, truncated [ 341.463668][ T360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.473996][T12925] loop1: detected capacity change from 0 to 1756 [ 341.474328][T12925] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 341.836351][T12934] loop5: detected capacity change from 0 to 256 [ 341.960391][T10790] udevd[10790]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 341.971517][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 342.022508][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 342.043259][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 342.105404][T10790] udevd[10790]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 342.269970][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 342.303266][ T2981] loop4: p3 < > p4 < > [ 342.315908][T12898] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.324697][ T2981] loop4: partition table partially beyond EOD, truncated [ 342.350331][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.369456][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 342.384350][T12898] bridge_slave_0: entered allmulticast mode [ 342.400947][T12898] bridge_slave_0: entered promiscuous mode [ 342.403219][ T28] audit: type=1400 audit(1780500886.113:2326): avc: denied { write } for pid=12942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.415821][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.442267][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.449445][T12898] bridge_slave_1: entered allmulticast mode [ 342.463873][ T2981] loop4: p3 < > p4 < > [ 342.466145][T12898] bridge_slave_1: entered promiscuous mode [ 342.473747][ T2981] loop4: partition table partially beyond EOD, truncated [ 342.481821][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 342.500116][ T28] audit: type=1400 audit(1780500886.160:2327): avc: denied { write } for pid=12962 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.571620][ T360] gretap0: left allmulticast mode [ 342.585802][ T360] gretap0: left promiscuous mode [ 342.601963][ T360] bridge0: port 3(gretap0) entered disabled state [ 342.619140][ T360] bridge_slave_1: left allmulticast mode [ 342.638775][ T2981] loop4: p3 < > p4 < > [ 342.649542][ T2981] loop4: partition table partially beyond EOD, truncated [ 342.656797][ T360] bridge_slave_1: left promiscuous mode [ 342.657294][T12976] loop0: detected capacity change from 0 to 8192 [ 342.668889][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 342.675269][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.684654][ T360] bridge_slave_0: left allmulticast mode [ 342.730946][ T28] audit: type=1326 audit(1780500886.412:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 342.767885][T12979] FAULT_INJECTION: forcing a failure. [ 342.767885][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 342.806197][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.5.3093 Not tainted syzkaller #0 PREEMPT(lazy) [ 342.806224][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.806236][T12979] Call Trace: [ 342.806244][T12979] [ 342.806253][T12979] __dump_stack+0x1d/0x30 [ 342.806276][T12979] dump_stack_lvl+0x95/0xd0 [ 342.806347][T12979] dump_stack+0x15/0x1b [ 342.806400][T12979] should_fail_ex+0x263/0x280 [ 342.806422][T12979] should_failslab+0x8c/0xb0 [ 342.806466][T12979] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 342.806545][T12979] ? __alloc_skb+0x2d6/0x690 [ 342.806639][T12979] __alloc_skb+0x2d6/0x690 [ 342.806655][T12979] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 342.806683][T12979] ? __alloc_skb+0x200/0x690 [ 342.806715][T12979] audit_log_start+0x3aa/0x730 [ 342.806737][T12979] ? kstrtouint_from_user+0xa8/0xf0 [ 342.806764][T12979] audit_seccomp+0x47/0x100 [ 342.806788][T12979] ? __seccomp_filter+0x8db/0x1350 [ 342.806956][T12979] __seccomp_filter+0x8ec/0x1350 [ 342.807003][T12979] ? __rcu_read_unlock+0x4e/0x70 [ 342.807020][T12979] ? __fget_files+0x184/0x1c0 [ 342.807041][T12979] ? mutex_lock+0x57/0x90 [ 342.807114][T12979] ? mutex_unlock+0x4e/0x90 [ 342.807137][T12979] __secure_computing+0x81/0x150 [ 342.807162][T12979] do_syscall_64+0xce/0x3b0 [ 342.807203][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.807221][T12979] RIP: 0033:0x7fac36cace59 [ 342.807236][T12979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.807266][T12979] RSP: 002b:00007fac356ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 342.807283][T12979] RAX: ffffffffffffffda RBX: 00007fac36f25fa0 RCX: 00007fac36cace59 [ 342.807296][T12979] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.807319][T12979] RBP: 00007fac356ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 342.807331][T12979] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 342.807342][T12979] R13: 00007fac36f26038 R14: 00007fac36f25fa0 R15: 00007ffea21ae878 [ 342.807360][T12979] [ 342.807434][T12979] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 343.045207][ T28] audit: type=1326 audit(1780500886.412:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 343.046755][ T360] bridge_slave_0: left promiscuous mode [ 343.082104][T12979] audit: out of memory in audit_log_start [ 343.093946][ T28] audit: type=1326 audit(1780500886.440:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 343.094109][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.128029][ T28] audit: type=1326 audit(1780500886.440:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 343.153683][T12976] loop0: p1 < > p2 p4 < p5 > [ 343.163713][T12976] loop0: partition table partially beyond EOD, truncated [ 343.176121][T12976] loop0: p1 start 134217728 is beyond EOD, truncated [ 343.183098][ T28] audit: type=1326 audit(1780500886.440:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 343.210364][T12976] loop0: p2 size 591360 extends beyond EOD, truncated [ 343.219040][T12976] loop0: p5 size 591360 extends beyond EOD, truncated [ 343.228449][ T28] audit: type=1326 audit(1780500886.450:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.5.3093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac36cace59 code=0x7ffc0000 [ 343.327386][ T2981] loop4: p3 < > p4 < > [ 343.331772][ T2981] loop4: partition table partially beyond EOD, truncated [ 343.338945][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 343.581892][ T2981] loop4: p3 < > p4 < > [ 343.586310][ T2981] loop4: partition table partially beyond EOD, truncated [ 343.593366][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3097'. [ 343.593596][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 343.633002][ T360] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 343.641347][ T360] bridge1 (unregistering): left promiscuous mode [ 343.649345][T12995] loop1: detected capacity change from 0 to 1024 [ 343.662204][T12995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.675376][T12995] EXT4-fs (loop1): shut down requested (1) [ 343.677184][T12999] x_tables: duplicate underflow at hook 1 [ 343.682777][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.696198][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.705481][ T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.707267][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.722959][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.732611][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.736497][ T360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.742211][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.760107][ T360] bond0 (unregistering): Released all slaves [ 343.760185][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 343.776588][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 343.785661][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.786099][ T360] bond1 (unregistering): Released all slaves [ 343.794951][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.809788][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.810432][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 343.818688][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 343.831574][T12969] netlink: 'syz.0.3091': attribute type 12 has an invalid length. [ 343.837161][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 343.852161][T12995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 343.889228][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.903592][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.920887][ T360] tipc: Disabling bearer [ 343.926247][ T360] tipc: Left network mode [ 343.936730][ T2981] loop4: p3 < > p4 < > [ 343.947082][T12898] team0: Port device team_slave_0 added [ 343.953571][ T2981] loop4: partition table partially beyond EOD, truncated [ 343.958357][T12898] team0: Port device team_slave_1 added [ 343.964441][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.967251][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 343.988324][ T360] IPVS: stopping master sync thread 10704 ... [ 343.999650][ T360] IPVS: stopping backup sync thread 10703 ... [ 344.031095][ T360] hsr_slave_0: left promiscuous mode [ 344.052159][ T360] hsr_slave_1: left promiscuous mode [ 344.062534][ T2981] loop4: p3 < > p4 < > [ 344.064460][T13018] FAULT_INJECTION: forcing a failure. [ 344.064460][T13018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.069356][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.092951][ T2981] loop4: partition table partially beyond EOD, truncated [ 344.099583][T13018] CPU: 0 UID: 0 PID: 13018 Comm: syz.1.3102 Not tainted syzkaller #0 PREEMPT(lazy) [ 344.099676][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.099688][T13018] Call Trace: [ 344.099694][T13018] [ 344.099716][T13018] __dump_stack+0x1d/0x30 [ 344.099739][T13018] dump_stack_lvl+0x95/0xd0 [ 344.099786][T13018] dump_stack+0x15/0x1b [ 344.099804][T13018] should_fail_ex+0x263/0x280 [ 344.099824][T13018] should_fail+0xb/0x20 [ 344.099867][T13018] should_fail_usercopy+0x1a/0x20 [ 344.099887][T13018] _copy_from_user+0x1c/0xb0 [ 344.099909][T13018] ___sys_sendmsg+0xc1/0x1e0 [ 344.099948][T13018] __x64_sys_sendmsg+0xd4/0x160 [ 344.100048][T13018] x64_sys_call+0x194c/0x3020 [ 344.100069][T13018] do_syscall_64+0x12c/0x3b0 [ 344.100097][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.100174][T13018] RIP: 0033:0x7f44938bce59 [ 344.100191][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.100207][T13018] RSP: 002b:00007f4492317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.100227][T13018] RAX: ffffffffffffffda RBX: 00007f4493b35fa0 RCX: 00007f44938bce59 [ 344.100241][T13018] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 344.100290][T13018] RBP: 00007f4492317090 R08: 0000000000000000 R09: 0000000000000000 [ 344.100302][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.100314][T13018] R13: 00007f4493b36038 R14: 00007f4493b35fa0 R15: 00007fff82266178 [ 344.100335][T13018] [ 344.119274][T13004] loop0: detected capacity change from 0 to 512 [ 344.125247][ T360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.177400][T13004] EXT4-fs: Ignoring removed nobh option [ 344.178188][ T2981] loop4: p3 start 8568578 is beyond EOD, [ 344.194234][T13004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.208892][ T2981] truncated [ 344.310420][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.310420][T13004] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3100: EA inode hash validation failed [ 344.317956][ T360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.330889][T13004] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3100: corrupted inode contents [ 344.350241][T13004] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.350408][T13004] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3100: mark_inode_dirty error [ 344.373294][T13004] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.373523][ T360] veth1_macvtap: left promiscuous mode [ 344.373614][T13004] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3100: corrupted inode contents [ 344.383923][ T360] veth0_macvtap: left promiscuous mode [ 344.389276][T13004] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.389454][T13004] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3100: mark_inode_dirty error [ 344.401722][ T360] veth1_vlan: left promiscuous mode [ 344.406564][T13004] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.415878][ T360] veth0_vlan: left promiscuous mode [ 344.415926][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 344.416154][ C1] EXT4-fs (loop0): initial error at time 1780500889: ext4_do_update_inode:5690: inode 15 [ 344.416269][ C1] EXT4-fs (loop0): last error at time 1780500889: ext4_do_update_inode:5690: inode 15 [ 344.419668][T13030] loop1: detected capacity change from 0 to 512 [ 344.420491][T13030] EXT4-fs: Ignoring removed nobh option [ 344.439986][T13030] EXT4-fs (loop1): orphan cleanup on readonly fs [ 344.442330][T13004] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3100: mark inode dirty (error -117) [ 344.450393][T13030] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3103: EA inode hash validation failed [ 344.455436][T13004] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.461904][T13030] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.3103: corrupted inode contents [ 344.474058][T13004] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 344.482116][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.489569][T13004] EXT4-fs (loop0): 1 orphan inode deleted [ 344.494351][T13030] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.3103: mark_inode_dirty error [ 344.500133][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 344.500153][ C0] EXT4-fs (loop1): initial error at time 1780500890: ext4_do_update_inode:5690: inode 15 [ 344.500181][ C0] EXT4-fs (loop1): last error at time 1780500890: ext4_do_update_inode:5690: inode 15 [ 344.500503][T13004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 344.513205][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.622354][T13030] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.3103: corrupted inode contents [ 344.622602][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.632133][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.654598][T13030] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3103: mark_inode_dirty error [ 344.676526][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.681049][T13030] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3103: mark inode dirty (error -117) [ 344.694647][T13033] loop0: detected capacity change from 0 to 512 [ 344.703637][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.711873][T13030] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 344.731354][T13030] EXT4-fs (loop1): 1 orphan inode deleted [ 344.745285][T13030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 344.766027][T13033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 344.786515][T13033] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.798553][ T360] team0 (unregistering): Port device team_slave_1 removed [ 344.810449][ T360] team0 (unregistering): Port device team_slave_0 removed [ 344.854868][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.863006][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.892171][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.916172][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 344.942448][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.949711][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.978810][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.990156][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.059556][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 345.106289][T12898] hsr_slave_0: entered promiscuous mode [ 345.121922][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 345.137575][T12898] hsr_slave_1: entered promiscuous mode [ 345.148891][T12898] debugfs: 'hsr0' already exists in 'hsr' [ 345.160263][T12898] Cannot create hsr debugfs directory [ 345.642901][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 345.652158][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 345.664281][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 345.724583][ T2981] loop4: p3 < > p4 < > [ 345.728914][ T2981] loop4: partition table partially beyond EOD, truncated [ 345.745245][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 345.769100][ T2981] loop4: p3 < > p4 < > [ 345.777702][ T2981] loop4: partition table partially beyond EOD, truncated [ 345.791742][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 345.800369][T13076] loop1: detected capacity change from 0 to 1024 [ 345.813699][T13076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.836273][T13076] EXT4-fs (loop1): shut down requested (1) [ 345.843261][ T2981] loop4: p3 < > p4 < > [ 345.847445][ T2981] loop4: partition table partially beyond EOD, truncated [ 345.855104][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 345.862505][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.887808][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.902361][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.911471][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.920829][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.930219][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.939297][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 345.956111][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 345.968446][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.984903][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 345.994490][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 346.003575][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 346.018822][ T2981] loop4: p3 < > p4 < > [ 346.023518][ T2981] loop4: partition table partially beyond EOD, truncated [ 346.032465][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 346.050203][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 346.059815][T13076] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 346.106270][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.122417][ T2981] loop4: p3 < > p4 < > [ 346.130957][ T2981] loop4: partition table partially beyond EOD, truncated [ 346.151555][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 346.194434][T13109] loop1: detected capacity change from 0 to 512 [ 346.234485][ T2981] loop4: p3 < > p4 < > [ 346.241841][T12898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.251640][ T2981] loop4: partition table partially beyond EOD, truncated [ 346.272048][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 346.284135][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.304454][T12898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.344018][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.372579][T12898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.385643][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.396760][T13129] loop0: detected capacity change from 0 to 256 [ 346.431285][T12898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.449990][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.583993][T12898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.596376][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.606214][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.613311][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.638902][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 346.679055][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 346.698830][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.705933][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.762312][ T2981] loop4: p3 < > p4 < > [ 346.766782][ T2981] loop4: partition table partially beyond EOD, truncated [ 346.777899][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 346.866671][T13166] loop5: detected capacity change from 0 to 1024 [ 346.909512][T13166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.064660][T13179] loop0: detected capacity change from 0 to 512 [ 347.081794][T13179] EXT4-fs: Ignoring removed nobh option [ 347.131967][T13166] EXT4-fs (loop5): shut down requested (1) [ 347.141565][T13179] EXT4-fs (loop0): orphan cleanup on readonly fs [ 347.148960][T13179] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3123: EA inode hash validation failed [ 347.161929][T13179] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3123: corrupted inode contents [ 347.174171][T13179] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3123: mark_inode_dirty error [ 347.189184][T13179] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3123: corrupted inode contents [ 347.216381][T13166] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 347.240232][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 347.246698][ C1] EXT4-fs (loop0): initial error at time 1780500893: ext4_do_update_inode:5690: inode 15 [ 347.256552][ C1] EXT4-fs (loop0): last error at time 1780500893: ext4_dirty_inode:6587: inode 15 [ 347.276165][T13166] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 347.290799][T13179] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3123: mark_inode_dirty error [ 347.314021][T13193] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 347.351971][T13179] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3123: mark inode dirty (error -117) [ 347.383720][T13179] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 347.397839][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.418402][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.428450][T13179] EXT4-fs (loop0): 1 orphan inode deleted [ 347.456143][T13179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 347.544479][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.545160][T13216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 347.563802][T12898] veth0_vlan: entered promiscuous mode [ 347.569167][T13216] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.607211][T12898] veth1_vlan: entered promiscuous mode [ 347.631854][T12898] veth0_macvtap: entered promiscuous mode [ 347.640344][T12898] veth1_macvtap: entered promiscuous mode [ 347.673702][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.687715][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.698360][T12337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.707280][T12337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.715970][T12337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.752102][T12337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.782825][ T2981] loop4: p3 < > p4 < > [ 347.787243][ T2981] loop4: partition table partially beyond EOD, truncated [ 347.825370][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 347.835562][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 347.835575][ T28] audit: type=1400 audit(1780500894.192:2386): avc: denied { mount } for pid=12898 comm="syz-executor" name="/" dev="gadgetfs" ino=4748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 347.873257][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 347.899262][ T2981] loop4: p3 < > p4 < > [ 347.904623][ T2981] loop4: partition table partially beyond EOD, truncated [ 347.914754][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 347.987726][ T2981] loop4: p3 < > p4 < > [ 347.995065][ T2981] loop4: partition table partially beyond EOD, truncated [ 348.008911][ T2981] loop4: p3 start 8568578 is beyond EOD, truncated [ 348.176188][T13252] set_capacity_and_notify: 2 callbacks suppressed [ 348.176205][T13252] loop3: detected capacity change from 0 to 1756 [ 348.214657][T13252] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 348.868263][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.879832][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.904938][T13244] bridge_slave_0: entered allmulticast mode [ 348.924320][T13244] bridge_slave_0: entered promiscuous mode [ 348.938806][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.957286][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.973134][T13244] bridge_slave_1: entered allmulticast mode [ 348.988288][T13244] bridge_slave_1: entered promiscuous mode [ 349.013299][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.025307][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.063516][T13244] team0: Port device team_slave_0 added [ 349.076216][T13244] team0: Port device team_slave_1 added [ 349.104787][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.117180][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.158611][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.225707][T13279] loop3: detected capacity change from 0 to 512 [ 349.227485][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.250854][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.308725][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.327053][T13279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 349.341411][T13279] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.372859][T13244] hsr_slave_0: entered promiscuous mode [ 349.388166][T13244] hsr_slave_1: entered promiscuous mode [ 349.402123][T13244] debugfs: 'hsr0' already exists in 'hsr' [ 349.412626][T13244] Cannot create hsr debugfs directory [ 349.467051][ T28] audit: type=1400 audit(1780500896.723:2387): avc: denied { write } for pid=13278 comm="syz.3.3144" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.517656][ T2275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.529035][T13291] loop0: detected capacity change from 0 to 512 [ 349.557031][T13291] EXT4-fs: Ignoring removed nobh option [ 349.564562][T13291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 349.568718][T13281] loop5: detected capacity change from 0 to 8192 [ 349.571964][T13291] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3148: EA inode hash validation failed [ 349.592193][T13291] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3148: corrupted inode contents [ 349.606076][ T2275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.619826][T13291] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3148: mark_inode_dirty error [ 349.631356][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 349.631375][ C0] EXT4-fs (loop0): initial error at time 1780500896: ext4_do_update_inode:5690: inode 15 [ 349.631412][ C0] EXT4-fs (loop0): last error at time 1780500896: ext4_do_update_inode:5690: inode 15 [ 349.657949][T13291] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3148: corrupted inode contents [ 349.672264][T13291] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3148: mark_inode_dirty error [ 349.685962][T13291] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3148: mark inode dirty (error -117) [ 349.702111][ T2275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.715326][T13291] fserror_report: 9 callbacks suppressed [ 349.715342][T13291] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 349.722706][T13291] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 349.741946][T13291] EXT4-fs (loop0): 1 orphan inode deleted [ 349.742476][T13294] FAULT_INJECTION: forcing a failure. [ 349.742476][T13294] name failslab, interval 1, probability 0, space 0, times 0 [ 349.748589][T13291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 349.763439][T13294] CPU: 1 UID: 0 PID: 13294 Comm: syz.5.3149 Not tainted syzkaller #0 PREEMPT(lazy) [ 349.763465][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.763477][T13294] Call Trace: [ 349.763484][T13294] [ 349.763493][T13294] __dump_stack+0x1d/0x30 [ 349.763516][T13294] dump_stack_lvl+0x95/0xd0 [ 349.763580][T13294] dump_stack+0x15/0x1b [ 349.763598][T13294] should_fail_ex+0x263/0x280 [ 349.763618][T13294] should_failslab+0x8c/0xb0 [ 349.763646][T13294] __kvmalloc_node_noprof+0x155/0x640 [ 349.763725][T13294] ? file_tty_write+0x1a3/0x680 [ 349.763817][T13294] ? mutex_trylock+0x81/0xc0 [ 349.763840][T13294] file_tty_write+0x1a3/0x680 [ 349.763860][T13294] ? __pfx_tty_write+0x10/0x10 [ 349.763877][T13294] tty_write+0x25/0x30 [ 349.763948][T13294] vfs_write+0x5a6/0x9f0 [ 349.763978][T13294] ksys_write+0xdc/0x1a0 [ 349.764004][T13294] __x64_sys_write+0x40/0x50 [ 349.764082][T13294] x64_sys_call+0x27e1/0x3020 [ 349.764104][T13294] do_syscall_64+0x12c/0x3b0 [ 349.764132][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.764153][T13294] RIP: 0033:0x7fac36cace59 [ 349.764235][T13294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.764251][T13294] RSP: 002b:00007fac356ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.764271][T13294] RAX: ffffffffffffffda RBX: 00007fac36f25fa0 RCX: 00007fac36cace59 [ 349.764285][T13294] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 349.764298][T13294] RBP: 00007fac356ff090 R08: 0000000000000000 R09: 0000000000000000 [ 349.764310][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.764403][T13294] R13: 00007fac36f26038 R14: 00007fac36f25fa0 R15: 00007ffea21ae878 [ 349.764422][T13294] [ 349.965103][ T2275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.988407][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.100646][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 350.110616][ T2275] bridge_slave_1: left allmulticast mode [ 350.116607][ T2275] bridge_slave_1: left promiscuous mode [ 350.125050][ T2275] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.199146][ T2275] bridge_slave_0: left allmulticast mode [ 350.220380][ T2275] bridge_slave_0: left promiscuous mode [ 350.228530][T13308] loop3: detected capacity change from 0 to 2048 [ 350.244509][ T2275] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.609784][ T28] audit: type=1400 audit(1780500897.743:2388): avc: denied { write } for pid=13306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.754042][ T28] audit: type=1400 audit(1780500897.920:2389): avc: denied { write } for pid=13322 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.877928][T13308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.899638][ T28] audit: type=1400 audit(1780500898.061:2390): avc: denied { write } for pid=13307 comm="syz.3.3154" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.030103][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.637895][T13349] loop3: detected capacity change from 0 to 512 [ 351.740180][T13349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 351.851636][T13349] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.980411][ T2275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.007780][ T2275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.065508][ T2275] bond0 (unregistering): Released all slaves [ 352.112013][ T2275] bond1 (unregistering): Released all slaves [ 352.198037][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 352.238000][ T2275] tipc: Disabling bearer [ 352.255662][ T2275] tipc: Left network mode [ 352.275458][ T2275] IPVS: stopping master sync thread 11009 ... [ 352.291548][ T2275] IPVS: stopping backup sync thread 11008 ... [ 352.323652][ T2275] hsr_slave_0: left promiscuous mode [ 352.336890][ T2275] hsr_slave_1: left promiscuous mode [ 352.348409][ T2275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.380324][ T2275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.407818][ T2275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.422057][ T2275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.440319][ T28] audit: type=1400 audit(1780500899.501:2391): avc: denied { write } for pid=13348 comm="syz.3.3163" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.472851][ T28] audit: type=1400 audit(1780500899.501:2392): avc: denied { write } for pid=13361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.508610][ T28] audit: type=1400 audit(1780500899.501:2393): avc: denied { write } for pid=13377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.533093][ T2275] veth1_macvtap: left promiscuous mode [ 352.539084][ T2275] veth0_macvtap: left promiscuous mode [ 352.544852][ T2275] veth1_vlan: left promiscuous mode [ 352.550134][ T2275] veth0_vlan: left promiscuous mode [ 352.693086][T13379] loop0: detected capacity change from 0 to 8192 [ 352.708124][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 352.717941][ T2275] team0 (unregistering): Port device team_slave_1 removed [ 352.733388][ T2275] team0 (unregistering): Port device team_slave_0 removed [ 352.745437][T13379] loop0: p1 < > p2 p4 < p5 > [ 352.761970][T13379] loop0: partition table partially beyond EOD, truncated [ 352.836778][T13374] netlink: 'syz.0.3167': attribute type 12 has an invalid length. [ 352.848664][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 352.877212][T13379] loop0: p1 start 134217728 is beyond EOD, truncated [ 352.908080][T13379] loop0: p2 size 591360 extends beyond EOD, truncated [ 352.952282][T13379] loop0: p5 size 591360 extends beyond EOD, truncated [ 353.614562][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3170'. [ 353.746428][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3171'. [ 353.847624][T13244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.887742][ T28] audit: type=1400 audit(1780500900.848:2394): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.924366][T13244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.941265][T13244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.952895][T13244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.965273][ T28] audit: type=1400 audit(1780500900.923:2395): avc: denied { write } for pid=13407 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.023047][T13244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.046828][T13244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.061133][T13244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.072682][T13415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 354.089574][T13244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.126784][ T28] audit: type=1400 audit(1780500901.073:2396): avc: denied { write } for pid=13413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.192867][T13441] loop3: detected capacity change from 0 to 512 [ 354.215101][ T28] audit: type=1400 audit(1780500901.166:2397): avc: denied { write } for pid=13439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.252722][T13441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 354.268419][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.271361][T13441] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.283541][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.391880][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.402595][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.461355][T13244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.494627][T13244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.537824][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.545058][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.778180][ T28] audit: type=1400 audit(1780500901.681:2398): avc: denied { write } for pid=13440 comm="syz.3.3178" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.818486][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.898224][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 354.970389][T13244] veth0_vlan: entered promiscuous mode [ 354.978355][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3181'. [ 354.996250][T13244] veth1_vlan: entered promiscuous mode [ 355.013866][T13479] netlink: 'syz.0.3182': attribute type 12 has an invalid length. [ 355.063448][T13479] loop0: detected capacity change from 0 to 8192 [ 355.098540][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3185'. [ 355.114677][T13244] veth0_macvtap: entered promiscuous mode [ 355.134033][T13244] veth1_macvtap: entered promiscuous mode [ 355.150601][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.163014][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.173853][T13479] loop0: p1 < > p2 p4 < p5 > [ 355.176375][T12337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.188412][T13479] loop0: partition table partially beyond EOD, truncated [ 355.199626][T12337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.213061][T13479] loop0: p1 start 134217728 is beyond EOD, truncated [ 355.219948][T12337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.230749][T13479] loop0: p2 size 591360 extends beyond EOD, truncated [ 355.238717][T12337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.256549][T13479] loop0: p5 size 591360 extends beyond EOD, truncated [ 355.288278][ T2981] loop0: p1 < > p2 p4 < p5 > [ 355.294098][ T2981] loop0: partition table partially beyond EOD, truncated [ 355.309720][T13491] loop3: detected capacity change from 0 to 512 [ 355.312712][ T2981] loop0: p1 start 134217728 is beyond EOD, [ 355.325585][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3184'. [ 355.333879][ T2981] truncated [ 355.369354][T13491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 355.370082][ T2981] loop0: p2 size 591360 extends beyond EOD, [ 355.386491][T13491] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.411992][ T2981] truncated [ 355.553531][ T2981] loop0: p5 size 591360 extends beyond EOD, truncated [ 355.597408][T13505] loop4: detected capacity change from 0 to 1756 [ 355.605709][T13507] loop5: detected capacity change from 0 to 512 [ 355.620173][ T28] audit: type=1400 audit(1780500902.476:2399): avc: denied { write } for pid=13490 comm="syz.3.3188" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.651991][T13505] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 355.691048][T13507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 355.716419][T13507] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.775659][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 355.787791][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 355.800778][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 355.862308][ T28] audit: type=1400 audit(1780500902.691:2400): avc: denied { write } for pid=13506 comm="syz.5.3191" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.906744][T13517] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 355.929092][T13519] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 356.113879][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.293874][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.344337][T13523] loop4: detected capacity change from 0 to 1756 [ 356.433339][T13523] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 356.464325][T13529] loop5: detected capacity change from 0 to 1756 [ 356.481798][T13532] loop3: detected capacity change from 0 to 512 [ 356.489697][T13529] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 356.505815][T13532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.538835][T13532] EXT4-fs (loop3): 1 orphan inode deleted [ 356.545113][T13532] EXT4-fs (loop3): 1 truncate cleaned up [ 356.558801][T13532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.601031][ T28] audit: type=1400 audit(1780500903.383:2401): avc: denied { write } for pid=13530 comm="syz.3.3198" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.623500][ T28] audit: type=1400 audit(1780500903.383:2402): avc: denied { mounton } for pid=13530 comm="syz.3.3198" path="/15/file0/bus" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 356.654729][T13539] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 356.668779][T13540] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 356.706814][ T28] audit: type=1400 audit(1780500903.495:2403): avc: denied { write } for pid=13530 comm="syz.3.3198" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.839098][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.902708][T13554] loop4: detected capacity change from 0 to 512 [ 356.964912][T13554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 357.003299][T13554] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.208761][T13563] loop0: detected capacity change from 0 to 8192 [ 357.694101][T13563] loop0: p1 < > p2 p4 < p5 > [ 357.704286][T13563] loop0: partition table partially beyond EOD, truncated [ 357.732939][T13563] loop0: p1 start 134217728 is beyond EOD, truncated [ 357.744827][T13563] loop0: p2 size 591360 extends beyond EOD, truncated [ 357.755097][T13563] loop0: p5 size 591360 extends beyond EOD, truncated [ 357.768892][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 357.787242][ T2981] loop0: p1 < > p2 p4 < p5 > [ 357.792777][ T2981] loop0: partition table partially beyond EOD, truncated [ 357.800659][ T2981] loop0: p1 start 134217728 is beyond EOD, truncated [ 357.807897][ T2981] loop0: p2 size 591360 extends beyond EOD, truncated [ 357.817976][ T2981] loop0: p5 size 591360 extends beyond EOD, truncated [ 358.034919][T13244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 358.084424][T13576] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 358.560911][T13562] netlink: 'syz.0.3208': attribute type 12 has an invalid length. [ 358.570540][T13567] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 358.655384][T13585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.846387][T13598] set_capacity_and_notify: 2 callbacks suppressed [ 359.855158][T13598] loop3: detected capacity change from 0 to 1024 [ 359.898871][T13602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13602 comm=syz.0.3219 [ 359.920412][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 359.930259][T13602] netlink: 'syz.0.3219': attribute type 30 has an invalid length. [ 359.968925][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 359.980408][T13602] netlink: 'syz.0.3219': attribute type 30 has an invalid length. [ 360.059656][T13604] loop0: detected capacity change from 0 to 1024 [ 360.070454][ T39] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.080743][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.111836][ T39] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.156623][T13598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.170735][T13604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.210067][ T53] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.235475][T13598] EXT4-fs (loop3): shut down requested (1) [ 360.246996][T13604] EXT4-fs (loop0): shut down requested (1) [ 360.257496][ T53] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.282175][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.298683][T13610] loop4: detected capacity change from 0 to 4096 [ 360.309886][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.325483][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.337758][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.351185][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.364252][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.373680][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.391854][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 360.391870][ T28] audit: type=1400 audit(1780500906.938:2408): avc: denied { mounton } for pid=13609 comm="syz.4.3221" path="/9/bus" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 360.405107][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.435056][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.441273][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.444350][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.444459][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 360.464162][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.472202][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 360.472266][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.499921][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.503529][ T28] audit: type=1400 audit(1780500907.041:2409): avc: denied { write } for pid=13597 comm="syz.3.3217" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.531702][T13616] loop5: detected capacity change from 0 to 1756 [ 360.534138][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 360.539392][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.547332][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 360.568579][T13616] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 360.583714][ T28] audit: type=1400 audit(1780500907.069:2410): avc: denied { write } for pid=13597 comm="syz.3.3217" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.610979][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 360.621633][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 360.623303][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.636677][T13598] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 360.652210][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.661537][ T28] audit: type=1400 audit(1780500907.181:2411): avc: denied { write } for pid=13603 comm="syz.0.3220" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.682140][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.692540][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 360.696357][ T28] audit: type=1400 audit(1780500907.190:2412): avc: denied { write } for pid=13603 comm="syz.0.3220" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.701300][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 360.701322][T13604] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 360.917392][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.986910][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.175575][ T28] audit: type=1400 audit(1780500907.649:2413): avc: denied { mounton } for pid=13626 comm="syz.5.3226" path="/proc/195/task" dev="proc" ino=48161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 361.542732][T13646] loop3: detected capacity change from 0 to 512 [ 361.591397][T13646] EXT4-fs: Ignoring removed nobh option [ 361.602896][T13646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 361.616848][T13646] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3230: EA inode hash validation failed [ 361.630452][T13646] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3230: corrupted inode contents [ 361.647789][T13646] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.648173][T13646] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.3230: mark_inode_dirty error [ 361.659761][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 361.659786][ C1] EXT4-fs (loop3): initial error at time 1780500909: ext4_do_update_inode:5690: inode 15 [ 361.659817][ C1] EXT4-fs (loop3): last error at time 1780500909: ext4_do_update_inode:5690: inode 15 [ 361.818133][T13646] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.818874][T13646] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3230: corrupted inode contents [ 361.863093][T13646] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.863526][T13646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.3230: mark_inode_dirty error [ 361.887931][T13646] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.888268][T13646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.3230: mark inode dirty (error -117) [ 361.913247][T13646] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.913423][T13646] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 361.939066][T13646] EXT4-fs (loop3): 1 orphan inode deleted [ 361.951256][T13646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 362.129014][T12898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.278169][T13660] loop0: detected capacity change from 0 to 1756 [ 362.286734][T13660] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 362.327192][T13663] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 362.341358][T13665] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 362.380582][T13670] loop0: detected capacity change from 0 to 512 [ 362.489014][T13671] FAULT_INJECTION: forcing a failure. [ 362.489014][T13671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.521682][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.5.3239 Not tainted syzkaller #0 PREEMPT(lazy) [ 362.521718][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.521731][T13671] Call Trace: [ 362.521738][T13671] [ 362.521746][T13671] __dump_stack+0x1d/0x30 [ 362.521770][T13671] dump_stack_lvl+0x95/0xd0 [ 362.521812][T13671] dump_stack+0x15/0x1b [ 362.521836][T13671] should_fail_ex+0x263/0x280 [ 362.521861][T13671] should_fail+0xb/0x20 [ 362.521879][T13671] should_fail_usercopy+0x1a/0x20 [ 362.521953][T13671] _copy_to_user+0x20/0xa0 [ 362.521977][T13671] simple_read_from_buffer+0xb5/0x130 [ 362.522031][T13671] proc_fail_nth_read+0x10e/0x150 [ 362.522056][T13671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.522088][T13671] vfs_read+0x1ab/0x7f0 [ 362.522176][T13671] ? fdget_pos+0x1a5/0x1d0 [ 362.522194][T13671] ? mutex_lock+0x57/0x90 [ 362.522214][T13671] ksys_read+0xdc/0x1a0 [ 362.522260][T13671] __x64_sys_read+0x40/0x50 [ 362.522332][T13671] x64_sys_call+0x2886/0x3020 [ 362.522351][T13671] do_syscall_64+0x12c/0x3b0 [ 362.522514][T13671] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 362.522538][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.522556][T13671] RIP: 0033:0x7fac36c6d68e [ 362.522574][T13671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.522665][T13671] RSP: 002b:00007fac356fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.522706][T13671] RAX: ffffffffffffffda RBX: 00007fac356ff6c0 RCX: 00007fac36c6d68e [ 362.522718][T13671] RDX: 000000000000000f RSI: 00007fac356ff0a0 RDI: 0000000000000004 [ 362.522728][T13671] RBP: 00007fac356ff090 R08: 0000000000000000 R09: 0000000000000000 [ 362.522742][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.522756][T13671] R13: 00007fac36f26038 R14: 00007fac36f25fa0 R15: 00007ffea21ae878 [ 362.522783][T13671] [ 362.898434][T13676] loop5: detected capacity change from 0 to 1756 [ 362.937121][T13676] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 362.999286][T13680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.026028][T13670] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3238: corrupted in-inode xattr: invalid ea_ino [ 363.067739][T13670] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.074999][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 363.090612][ C0] EXT4-fs (loop0): initial error at time 1780500910: ext4_iget_extra_inode:5128: inode 15 [ 363.100549][ C0] EXT4-fs (loop0): last error at time 1780500910: ext4_iget_extra_inode:5128: inode 15 [ 363.147236][T13670] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3238: couldn't read orphan inode 15 (err -117) [ 363.159430][T13670] loop0: lost filesystem error report for type 5 error -117 [ 363.160344][T13670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.221021][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.774576][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 363.965061][T13680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.013312][T13701] loop4: detected capacity change from 0 to 1024 [ 364.040624][T13701] EXT4-fs: Ignoring removed bh option [ 364.047274][T13701] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3163!=35945) [ 364.065146][T13701] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.098248][T13680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.122006][T13701] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.3248: Invalid inode table block 0 in block_group 0 [ 364.146298][T13701] loop4: lost filesystem error report for type 5 error -117 [ 364.147929][T13701] EXT4-fs (loop4): Remounting filesystem read-only [ 364.156606][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 364.156628][ C0] EXT4-fs (loop4): initial error at time 1780500911: __ext4_get_inode_loc:4885 [ 364.156647][ C0] EXT4-fs (loop4): last error at time 1780500911: __ext4_get_inode_loc:4885 [ 364.194988][T13701] EXT4-fs (loop4): get root inode failed [ 364.210565][T13701] EXT4-fs (loop4): mount failed [ 364.348792][T13709] loop0: detected capacity change from 0 to 1756 [ 364.370011][T13680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.078204][T13709] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 365.265675][T13718] netlink: 'syz.5.3252': attribute type 12 has an invalid length. [ 365.276048][ T2275] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.314777][ T2275] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.375261][ T2275] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.399552][ T2275] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.452528][T13732] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 365.452655][ T28] audit: type=1400 audit(1780500912.671:2414): avc: denied { load_policy } for pid=13731 comm="syz.4.3258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 365.484317][T13718] loop5: detected capacity change from 0 to 8192 [ 365.487658][T13732] SELinux: failed to load policy [ 365.577372][T13732] loop4: detected capacity change from 0 to 512 [ 365.609915][T13732] EXT4-fs: Mount option(s) incompatible with ext2 [ 365.641043][ T28] audit: type=1400 audit(1780500912.755:2415): avc: denied { write } for pid=13731 comm="syz.4.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 365.869310][T13739] loop0: detected capacity change from 0 to 1756 [ 365.894528][T13739] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 366.485432][T13718] loop5: p1 < > p2 p4 < p5 > [ 366.490168][T13718] loop5: partition table partially beyond EOD, truncated [ 366.497370][T13718] loop5: p1 start 134217728 is beyond EOD, truncated [ 366.504137][T13718] loop5: p2 size 591360 extends beyond EOD, truncated [ 366.574989][T13718] loop5: p5 size 591360 extends beyond EOD, truncated [ 366.690006][T13746] loop5: detected capacity change from 0 to 512 [ 366.724815][T13746] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.742513][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 366.755564][T10790] udevd[10790]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 366.768739][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 366.790538][T13746] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3263: bad orphan inode 131083 [ 366.824502][T13746] loop5: lost filesystem error report for type 5 error -117 [ 366.825187][T13746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.884421][ T28] audit: type=1400 audit(1780500913.999:2416): avc: denied { write } for pid=13745 comm="syz.5.3263" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.076085][T13755] loop0: detected capacity change from 0 to 1756 [ 367.288368][T13755] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 367.349737][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 367.525621][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.719088][T13780] loop1: detected capacity change from 0 to 256 [ 367.729775][T13775] netlink: 'syz.3.3273': attribute type 12 has an invalid length. [ 367.770491][T13782] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 367.789728][T13782] SELinux: failed to load policy [ 367.851519][T13775] loop3: detected capacity change from 0 to 8192 [ 367.950875][T13775] loop3: p1 < > p2 p4 < p5 > [ 367.982977][T13775] loop3: partition table partially beyond EOD, truncated [ 368.044566][T13775] loop3: p1 start 134217728 is beyond EOD, truncated [ 368.058859][ T28] audit: type=1400 audit(1780500915.065:2417): avc: denied { mount } for pid=13792 comm="syz.5.3278" name="/" dev="autofs" ino=48614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 368.124121][T13797] loop4: detected capacity change from 0 to 1756 [ 368.177727][T13775] loop3: p2 size 591360 extends beyond EOD, truncated [ 368.190294][T13797] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 368.428657][T13775] loop3: p5 size 591360 extends beyond EOD, truncated [ 368.724469][T13812] loop4: detected capacity change from 0 to 128 [ 368.758788][T13812] FAT-fs (loop4): Directory bread(block 32) failed [ 368.773748][T13812] FAT-fs (loop4): Directory bread(block 33) failed [ 368.783382][T13812] FAT-fs (loop4): Directory bread(block 34) failed [ 368.790664][T13812] FAT-fs (loop4): Directory bread(block 35) failed [ 368.797400][T13812] FAT-fs (loop4): Directory bread(block 36) failed [ 368.805871][T13812] FAT-fs (loop4): Directory bread(block 37) failed [ 368.814548][T13812] FAT-fs (loop4): Directory bread(block 38) failed [ 368.823445][T13812] FAT-fs (loop4): Directory bread(block 39) failed [ 368.832100][T13812] FAT-fs (loop4): Directory bread(block 40) failed [ 368.841554][T13812] FAT-fs (loop4): Directory bread(block 41) failed [ 368.866767][T13812] syz.4.3283: attempt to access beyond end of device [ 368.866767][T13812] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 368.891948][T13812] syz.4.3283: attempt to access beyond end of device [ 368.891948][T13812] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 369.122084][T13821] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 369.202921][T13821] SELinux: failed to load policy [ 369.337046][T13823] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3288'. [ 369.728468][T13834] loop3: detected capacity change from 0 to 256 [ 369.884960][ T28] audit: type=1326 audit(1780500916.815:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 369.967067][ T28] audit: type=1326 audit(1780500916.852:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 369.996224][ T28] audit: type=1326 audit(1780500916.852:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.022102][ T28] audit: type=1326 audit(1780500916.852:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.051972][ T28] audit: type=1326 audit(1780500916.852:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.085629][ T28] audit: type=1326 audit(1780500916.852:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.109537][T13842] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 370.124298][ T28] audit: type=1326 audit(1780500916.852:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.184286][ T28] audit: type=1326 audit(1780500916.852:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.3.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2b9bce59 code=0x7ffc0000 [ 370.337890][T13849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=13849 comm=syz.1.3296 [ 370.418497][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3299'. [ 370.890528][T13861] set_capacity_and_notify: 1 callbacks suppressed [ 370.891068][T13861] loop0: detected capacity change from 0 to 8192 [ 371.334312][T13877] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 371.424697][T13873] loop3: detected capacity change from 0 to 512 [ 371.485480][T13873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 371.526942][T13877] SELinux: failed to load policy [ 371.560949][T13873] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.742165][T13873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 372.666190][T13900] loop5: detected capacity change from 0 to 1756 [ 372.674683][T13900] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 372.753728][T13904] loop1: detected capacity change from 0 to 1024 [ 372.806544][T13904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.977180][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 372.977196][ T28] audit: type=1400 audit(1780500919.649:2500): avc: denied { sqpoll } for pid=13903 comm="syz.1.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.059250][ T28] audit: type=1400 audit(1780500919.705:2501): avc: denied { mount } for pid=13907 comm="syz.4.3314" name="/" dev="ramfs" ino=47844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 373.135038][ T28] audit: type=1400 audit(1780500919.836:2502): avc: denied { setopt } for pid=13909 comm="syz.3.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.168007][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 373.705088][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3314'. [ 373.876606][T13910] netlink: 'syz.4.3314': attribute type 2 has an invalid length. [ 373.898876][T13910] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3314'. [ 374.051231][T13929] loop5: detected capacity change from 0 to 512 [ 374.052314][T13929] EXT4-fs: Ignoring removed nobh option [ 374.159686][T13929] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.175733][T13929] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3321: EA inode hash validation failed [ 374.190631][T13929] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3321: corrupted inode contents [ 374.203736][T13929] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.204235][T13929] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.3321: mark_inode_dirty error [ 374.227532][T13929] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.227975][T13929] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3321: corrupted inode contents [ 374.257274][T13929] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.258257][T13929] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.3321: mark_inode_dirty error [ 374.285651][ C1] EXT4-fs (loop5): error count since last fsck: 3 [ 374.285801][ C1] EXT4-fs (loop5): initial error at time 1780500921: ext4_do_update_inode:5690: inode 15 [ 374.285984][ C1] EXT4-fs (loop5): last error at time 1780500921: ext4_do_update_inode:5690: inode 15 [ 374.396904][T13929] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.398275][T13929] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.3321: mark inode dirty (error -117) [ 374.422168][T13929] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.423906][T13929] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 374.448119][T13929] EXT4-fs (loop5): 1 orphan inode deleted [ 374.455188][T13929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 374.938990][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.162416][T13939] netlink: 'syz.3.3325': attribute type 4 has an invalid length. [ 375.190561][T13943] tipc: Enabling of bearer rejected, already enabled [ 375.283898][T13950] loop4: detected capacity change from 0 to 1756 [ 375.310425][T13950] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 375.323735][ T28] audit: type=1400 audit(1780500922.900:2503): avc: denied { mounton } for pid=13942 comm="syz.5.3327" path=2F39372FE91F7189591E9233614B dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 375.459646][T13959] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 375.462726][T13955] IPVS: Unknown mcast interface: syz_tun [ 376.197296][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.244214][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3339'. [ 376.492265][T14001] loop0: detected capacity change from 0 to 512 [ 376.516465][T14001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 376.531736][T14001] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.557425][T13999] loop1: detected capacity change from 0 to 1756 [ 376.589603][T13999] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 376.630236][T14015] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 376.640906][T14017] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 376.680523][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3352'. [ 376.885844][ T28] audit: type=1400 audit(1780500924.359:2504): avc: denied { write } for pid=14000 comm="syz.0.3348" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.922045][ T28] audit: type=1400 audit(1780500924.359:2505): avc: denied { create } for pid=14000 comm="syz.0.3348" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 377.402310][ T28] audit: type=1400 audit(1780500924.855:2506): avc: denied { create } for pid=14038 comm="syz.4.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 377.424648][T14041] loop5: detected capacity change from 0 to 1024 [ 377.479888][T14047] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 377.493108][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 377.495074][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'. [ 377.505745][T14041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.537687][T14047] SELinux: failed to load policy [ 377.552404][T14047] loop1: detected capacity change from 0 to 512 [ 377.562524][T14047] EXT4-fs: Mount option(s) incompatible with ext2 [ 377.572882][T14041] EXT4-fs (loop5): shut down requested (1) [ 377.582568][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.595664][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.605043][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.613977][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.624821][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.634805][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.646669][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 377.664506][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 377.674019][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.683279][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.692574][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.718831][ T28] audit: type=1400 audit(1780500925.117:2507): avc: denied { write } for pid=14040 comm="syz.5.3360" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.741431][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 377.750569][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 377.760591][T14041] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 377.780742][ T28] audit: type=1400 audit(1780500925.126:2508): avc: denied { write } for pid=14040 comm="syz.5.3360" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.808501][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3369'. [ 377.819935][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.865048][T14066] loop4: detected capacity change from 0 to 1756 [ 377.873456][T14066] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 377.880890][T14059] IPVS: Unknown mcast interface: syz_tun [ 377.991774][T14072] loop5: detected capacity change from 0 to 1764 [ 378.844926][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 378.919725][T14090] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 378.939776][T14090] SELinux: failed to load policy [ 378.950343][T14093] loop1: detected capacity change from 0 to 1024 [ 378.978834][T14090] loop0: detected capacity change from 0 to 512 [ 379.004985][T14090] EXT4-fs: Mount option(s) incompatible with ext2 [ 379.026574][T14093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.040065][T14093] EXT4-fs (loop1): shut down requested (1) [ 379.048115][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.058377][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.079434][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.095798][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.104987][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.114263][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.133827][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 379.142790][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 379.152145][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.161746][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.170916][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.180289][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 379.190965][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 379.200649][T14093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 379.205715][ T28] audit: type=1400 audit(1780500926.501:2509): avc: denied { write } for pid=14092 comm="syz.1.3381" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.235368][ T28] audit: type=1400 audit(1780500926.511:2510): avc: denied { write } for pid=14092 comm="syz.1.3381" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.313577][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.440968][T14107] loop5: detected capacity change from 0 to 256 [ 379.772186][T14115] loop5: detected capacity change from 0 to 1756 [ 379.782679][T14115] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 379.891588][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3389'. [ 380.614843][T14139] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 380.626671][T14139] SELinux: failed to load policy [ 380.649044][T14139] EXT4-fs: Mount option(s) incompatible with ext2 [ 380.650546][T14135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.675650][ T28] audit: type=1400 audit(1780500927.914:2511): avc: denied { write } for pid=14134 comm="syz.0.3395" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.719293][ T28] audit: type=1400 audit(1780500927.914:2512): avc: denied { write } for pid=14134 comm="syz.0.3395" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.828320][ T28] audit: type=1400 audit(1780500927.914:2513): avc: denied { rename } for pid=14134 comm="syz.0.3395" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.857376][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.980773][ T28] audit: type=1400 audit(1780500928.194:2514): avc: denied { read write } for pid=14143 comm="syz.5.3398" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.024495][ T28] audit: type=1400 audit(1780500928.222:2515): avc: denied { open } for pid=14143 comm="syz.5.3398" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.053171][ T28] audit: type=1400 audit(1780500928.222:2516): avc: denied { ioctl } for pid=14143 comm="syz.5.3398" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.151474][T14147] netlink: 'syz.0.3397': attribute type 12 has an invalid length. [ 381.222732][T14151] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 381.242397][T14153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.292479][T14147] loop0: p1 < > p2 p4 < p5 > [ 381.299511][T14147] loop0: partition table partially beyond EOD, truncated [ 381.323634][T14147] loop0: p1 start 134217728 is beyond EOD, truncated [ 381.333836][T14147] loop0: p2 size 591360 extends beyond EOD, truncated [ 381.348181][T14147] loop0: p5 size 591360 extends beyond EOD, truncated [ 381.649981][T10790] udevd[10790]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 381.650246][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 381.675183][T10960] udevd[10960]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 382.243499][T14153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.306176][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 382.324487][T14153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.364820][T14173] set_capacity_and_notify: 4 callbacks suppressed [ 382.364839][T14173] loop0: detected capacity change from 0 to 1024 [ 382.397540][T14173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.415606][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.423905][ T28] audit: type=1400 audit(1780500929.541:2517): avc: denied { write } for pid=14172 comm="syz.0.3407" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.423997][ T28] audit: type=1400 audit(1780500929.541:2518): avc: denied { write } for pid=14172 comm="syz.0.3407" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.450684][T14175] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.482181][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.531040][T14175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.542899][T14175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.576186][T14153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.588380][T14180] tipc: Started in network mode [ 382.593684][T14180] tipc: Node identity ac14140f, cluster identity 4711 [ 382.601130][T14180] tipc: New replicast peer: 255.255.255.255 [ 382.617692][T14180] tipc: Enabled bearer , priority 10 [ 382.625230][ T360] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.635654][ T360] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.645013][ T360] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.665347][ T360] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.689004][ T164] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.697323][ T164] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.710234][ T164] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.718671][ T164] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.745383][T14188] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 382.755423][T14188] SELinux: failed to load policy [ 382.768608][T14188] loop5: detected capacity change from 0 to 512 [ 382.782179][T14188] EXT4-fs: Mount option(s) incompatible with ext2 [ 382.894400][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3413'. [ 383.644236][T14212] loop0: detected capacity change from 0 to 512 [ 383.654643][T14212] EXT4-fs: Ignoring removed nobh option [ 383.703857][T14212] EXT4-fs (loop0): orphan cleanup on readonly fs [ 383.722165][T14212] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3420: EA inode hash validation failed [ 383.746312][T14212] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3420: corrupted inode contents [ 383.759743][T14212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.761828][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 383.780672][T14217] loop1: detected capacity change from 0 to 512 [ 383.789847][ C0] EXT4-fs (loop0): initial error at time 1780500931: ext4_do_update_inode:5690: inode 15 [ 383.802893][ C0] EXT4-fs (loop0): last error at time 1780500931: ext4_do_update_inode:5690: inode 15 [ 383.817163][ T9] tipc: Node number set to 2886997007 [ 383.819245][T14217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 383.845612][T14217] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.894955][T14212] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3420: mark_inode_dirty error [ 383.963641][T14212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.965053][T14212] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3420: corrupted inode contents [ 383.991894][T14212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.992108][T14212] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3420: mark_inode_dirty error [ 384.022295][T14216] loop5: detected capacity change from 0 to 512 [ 384.033061][T14216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 384.059157][T14216] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 384.077343][T14212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.079159][T14212] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3420: mark inode dirty (error -117) [ 384.087546][T14216] EXT4-fs (loop5): 1 truncate cleaned up [ 384.117376][T14212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.119250][T14216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.127302][T14212] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 384.155125][T14212] EXT4-fs (loop0): 1 orphan inode deleted [ 384.161331][T14212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.194580][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.249540][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.249606][T14230] loop0: detected capacity change from 0 to 512 [ 384.311610][T14230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.450782][T14230] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.662843][T14228] loop4: detected capacity change from 0 to 512 [ 384.669485][T14228] EXT4-fs: Ignoring removed bh option [ 384.675695][T14228] EXT4-fs: inline encryption not supported [ 384.684768][T14238] tipc: Started in network mode [ 384.689721][T14238] tipc: Node identity ac14140f, cluster identity 4711 [ 384.709742][T14228] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.738110][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 384.758684][T14238] tipc: New replicast peer: 255.255.255.255 [ 384.776298][T14228] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 384.796767][T14228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3424: bg 0: block 248: padding at end of block bitmap is not set [ 384.811182][T14228] loop4: lost filesystem error report for type 5 error -117 [ 384.811799][T14228] __quota_error: 7 callbacks suppressed [ 384.811863][T14228] Quota error (device loop4): write_blk: dquota write failed [ 384.832038][T14228] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 384.842055][T14228] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3424: Failed to acquire dquot type 1 [ 384.853257][T14228] loop4: lost filesystem error report for type 5 error -28 [ 384.853924][T14228] EXT4-fs (loop4): 1 truncate cleaned up [ 384.867034][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 384.867064][ C1] EXT4-fs (loop4): last error at time 1780500932: ext4_acquire_dquot:7034 [ 384.885396][T14228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 384.923212][T14238] tipc: Enabled bearer , priority 10 [ 384.989622][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.144617][T14257] loop0: detected capacity change from 0 to 1756 [ 385.151577][T14257] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 385.179838][T13244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 385.903095][T14272] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.919678][T14272] bond1: (slave lo): Enslaving as an active interface with an up link [ 385.931996][T14272] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 386.000499][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3440'. [ 386.051720][T14275] Driver unsupported XDP return value 0 on prog (id 728) dev N/A, expect packet loss! [ 386.114373][ T11] tipc: Node number set to 2886997007 [ 386.143011][T14279] loop5: detected capacity change from 0 to 512 [ 386.160776][T14279] EXT4-fs: Ignoring removed nobh option [ 386.219192][T14279] EXT4-fs (loop5): orphan cleanup on readonly fs [ 386.299222][T14279] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3441: EA inode hash validation failed [ 386.337171][T14279] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 386.382923][T14279] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3441: corrupted inode contents [ 386.403670][T14279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.412599][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 386.428174][ C0] EXT4-fs (loop5): initial error at time 1780500935: ext4_do_update_inode:5690: inode 15 [ 386.438026][ C0] EXT4-fs (loop5): last error at time 1780500935: ext4_do_update_inode:5690: inode 15 [ 386.455028][T14279] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.3441: mark_inode_dirty error [ 386.467701][T14279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.469185][T14279] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3441: corrupted inode contents [ 386.502099][T14279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.503517][T14279] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.3441: mark_inode_dirty error [ 386.530415][T14279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.532157][T14279] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.3441: mark inode dirty (error -117) [ 386.561285][T14279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.562709][T14279] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 386.594957][T14279] EXT4-fs (loop5): 1 orphan inode deleted [ 386.611847][T14279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.697392][T14282] loop4: detected capacity change from 0 to 512 [ 386.707322][T14282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 386.725242][T14282] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 386.739553][T14282] EXT4-fs (loop4): 1 truncate cleaned up [ 386.745819][T14282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.761934][ T28] audit: type=1400 audit(1780500935.603:2526): avc: denied { write } for pid=14274 comm="syz.4.3440" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.784094][ T28] audit: type=1400 audit(1780500935.603:2527): avc: denied { write } for pid=14274 comm="syz.4.3440" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.207907][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.410494][T13244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.425657][ T28] audit: type=1400 audit(1780500938.091:2528): avc: denied { create } for pid=14299 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 389.464542][T14300] ip6t_rpfilter: unknown options [ 389.506151][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'. [ 389.557878][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 389.663137][T14310] loop4: detected capacity change from 0 to 512 [ 389.704632][T14310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 389.738113][T14310] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.810702][T14326] netlink: 'syz.5.3458': attribute type 12 has an invalid length. [ 389.854637][T14326] loop5: detected capacity change from 0 to 8192 [ 389.907032][T14326] loop5: p1 < > p2 p4 < p5 > [ 389.912724][T14326] loop5: partition table partially beyond EOD, truncated [ 389.927079][T13244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 389.936348][T14326] loop5: p1 start 134217728 is beyond EOD, truncated [ 389.943534][T14326] loop5: p2 size 591360 extends beyond EOD, truncated [ 389.962603][T14326] loop5: p5 size 591360 extends beyond EOD, truncated [ 389.973283][T14330] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 390.128858][T14330] SELinux: failed to load policy [ 390.435322][T14332] loop4: detected capacity change from 0 to 512 [ 390.461019][T14332] EXT4-fs: Mount option(s) incompatible with ext2 [ 390.463129][T14335] loop0: detected capacity change from 0 to 512 [ 390.542894][T14335] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3460: corrupted in-inode xattr: invalid ea_ino [ 390.588967][T14335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.592629][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 390.600855][T14335] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3460: couldn't read orphan inode 15 (err -117) [ 390.603383][ C1] EXT4-fs (loop0): initial error at time 1780500939: ext4_iget_extra_inode:5128: inode 15 [ 390.603416][ C1] EXT4-fs (loop0): last error at time 1780500939: ext4_iget_extra_inode:5128: inode 15 [ 390.645715][T14335] loop0: lost filesystem error report for type 5 error -117 [ 390.646738][T14335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.785459][ T28] audit: type=1400 audit(1780500939.363:2529): avc: denied { setattr } for pid=14334 comm="syz.0.3460" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.812283][ T28] audit: type=1400 audit(1780500939.363:2530): avc: denied { write } for pid=14334 comm="syz.0.3460" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.823260][T14344] loop4: detected capacity change from 0 to 1024 [ 390.853378][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.908612][T14344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.933554][T14344] EXT4-fs (loop4): shut down requested (1) [ 390.952892][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 390.975846][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 390.988229][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.022084][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.056890][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.088329][T14352] loop0: detected capacity change from 0 to 128 [ 391.104006][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.132662][T14352] loop0: detected capacity change from 0 to 128 [ 391.137970][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 391.156039][T14358] tipc: Enabling of bearer rejected, already enabled [ 391.157920][T14352] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.185499][T14352] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.187810][T14361] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 391.204553][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 391.216421][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.227176][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.231588][ T28] audit: type=1400 audit(1780500939.784:2531): avc: denied { write } for pid=14343 comm="syz.4.3465" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.237321][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.269443][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 391.278910][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 391.290080][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 391.300348][T14361] SELinux: failed to load policy [ 391.314851][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 391.325070][T14361] loop5: detected capacity change from 0 to 512 [ 391.336453][T14352] tc_dump_action: action bad kind [ 391.342716][ T28] audit: type=1400 audit(1780500939.793:2532): avc: denied { write } for pid=14343 comm="syz.4.3465" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.370139][T14361] EXT4-fs: Mount option(s) incompatible with ext2 [ 391.406652][T13244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.417734][T12051] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.656086][T14372] loop5: detected capacity change from 0 to 8192 [ 392.342274][T14397] loop1: detected capacity change from 0 to 256 [ 392.389047][ T28] audit: type=1400 audit(1780500940.860:2533): avc: denied { mount } for pid=14385 comm="syz.3.3482" name="/" dev="rpc_pipefs" ino=50093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 392.473482][T14400] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 392.509726][T14396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.549778][T14400] SELinux: failed to load policy [ 392.562104][T14396] EXT4-fs (loop5): shut down requested (1) [ 392.586347][T14400] EXT4-fs: Mount option(s) incompatible with ext2 [ 392.602658][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.633458][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.653254][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.662161][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.671370][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.680205][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.709915][ T28] audit: type=1400 audit(1780500941.168:2534): avc: denied { mount } for pid=14404 comm="syz.0.3487" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 392.712604][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 392.741236][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 392.750063][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.792737][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.801606][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.803970][ T28] audit: type=1400 audit(1780500941.243:2535): avc: denied { write } for pid=14395 comm="syz.5.3485" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.810370][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 392.810406][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 392.810425][T14396] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 392.871235][ T28] audit: type=1400 audit(1780500941.253:2536): avc: denied { write } for pid=14395 comm="syz.5.3485" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.948449][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.043477][T14418] tipc: Started in network mode [ 393.048565][T14418] tipc: Node identity ac14140f, cluster identity 4711 [ 393.061926][T14418] tipc: New replicast peer: 255.255.255.255 [ 393.069219][T14418] tipc: Enabled bearer , priority 10 [ 393.076819][T14417] syzkaller0: entered promiscuous mode [ 393.082531][T14417] syzkaller0: entered allmulticast mode [ 394.042343][T14436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.123026][T14436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.177135][T14436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.234749][T14436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.259913][ T11] tipc: Node number set to 2886997007 [ 394.776069][T14439] EXT4-fs: Ignoring removed bh option [ 394.782332][T14439] EXT4-fs: inline encryption not supported [ 394.791181][T14439] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 394.824706][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.833328][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.842175][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.850477][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.002994][T14439] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 395.021247][T14439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3500: bg 0: block 248: padding at end of block bitmap is not set [ 395.037305][T14439] loop1: lost filesystem error report for type 5 error -117 [ 395.039003][T14439] Quota error (device loop1): write_blk: dquota write failed [ 395.047244][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 395.047277][ C1] EXT4-fs (loop1): last error at time 1780500943: ext4_validate_block_bitmap:441 [ 395.072153][T14439] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 395.082697][T14439] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.3500: Failed to acquire dquot type 1 [ 395.094339][T14439] loop1: lost filesystem error report for type 5 error -28 [ 395.137273][T14439] EXT4-fs (loop1): 1 truncate cleaned up [ 395.153712][T14439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 395.554299][T14448] set_capacity_and_notify: 5 callbacks suppressed [ 395.554317][T14448] loop5: detected capacity change from 0 to 1024 [ 395.576881][T14448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.602594][T14439] syz.1.3500 (14439) used greatest stack depth: 8904 bytes left [ 395.613892][T12326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 395.620686][T14448] EXT4-fs (loop5): shut down requested (1) [ 395.652512][T14448] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.680812][T14448] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.717106][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.746147][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.804311][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.821964][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.839878][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 395.885157][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 395.913172][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.948921][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 395.993686][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 396.025480][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 396.055666][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 396.064529][T14455] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 396.133725][T14463] tipc: Enabling of bearer rejected, already enabled [ 396.151696][T11784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.177510][T11784] ================================================================== [ 396.185620][T11784] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 396.194493][T11784] [ 396.196808][T11784] read-write to 0xffff888237d266e8 of 1 bytes by task 14386 on cpu 1: [ 396.205430][T11784] folio_add_lru+0xaa/0x1f0 [ 396.209946][T11784] folio_add_lru_vma+0x49/0x70 [ 396.214723][T11784] do_wp_page+0x13b1/0x2040 [ 396.219223][T11784] handle_mm_fault+0x8bb/0x2e70 [ 396.224081][T11784] do_user_addr_fault+0x3fd/0x1050 [ 396.229193][T11784] exc_page_fault+0x62/0xa0 [ 396.233687][T11784] asm_exc_page_fault+0x26/0x30 [ 396.238538][T11784] __put_user_nocheck_4+0x3/0x10 [ 396.243485][T11784] ____sys_recvmsg+0x1a1/0x280 [ 396.248255][T11784] ___sys_recvmsg+0x11f/0x3b0 [ 396.252929][T11784] do_recvmmsg+0x1ef/0x560 [ 396.257352][T11784] __x64_sys_recvmmsg+0xe5/0x170 [ 396.262296][T11784] x64_sys_call+0x80f/0x3020 [ 396.266893][T11784] do_syscall_64+0x12c/0x3b0 [ 396.271491][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.277375][T11784] [ 396.279688][T11784] read to 0xffff888237d266e8 of 1 bytes by task 11784 on cpu 0: [ 396.287313][T11784] __lru_add_drain_all+0x17e/0x450 [ 396.292514][T11784] lru_add_drain_all+0x10/0x20 [ 396.297276][T11784] invalidate_bdev+0x47/0x70 [ 396.301861][T11784] ext4_put_super+0x610/0x7b0 [ 396.306876][T11784] generic_shutdown_super+0xee/0x220 [ 396.312158][T11784] kill_block_super+0x2a/0x70 [ 396.316827][T11784] ext4_kill_sb+0x42/0x80 [ 396.321143][T11784] deactivate_locked_super+0x75/0x1c0 [ 396.326513][T11784] deactivate_super+0x97/0xa0 [ 396.331241][T11784] cleanup_mnt+0x2bb/0x330 [ 396.335657][T11784] __cleanup_mnt+0x19/0x20 [ 396.340066][T11784] task_work_run+0x130/0x1a0 [ 396.344741][T11784] exit_to_user_mode_loop+0x211/0x820 [ 396.350305][T11784] do_syscall_64+0x232/0x3b0 [ 396.355532][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.361453][T11784] [ 396.363774][T11784] value changed: 0x03 -> 0x04 [ 396.368539][T11784] [ 396.371034][T11784] Reported by Kernel Concurrency Sanitizer on: [ 396.377621][T11784] CPU: 0 UID: 0 PID: 11784 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 396.387254][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.397402][T11784] ================================================================== [ 396.485094][T14471] loop5: detected capacity change from 0 to 256 [ 396.641401][T14466] loop4: detected capacity change from 0 to 512 [ 396.648174][T14466] EXT4-fs: Ignoring removed bh option [ 396.653570][T14466] EXT4-fs: inline encryption not supported [ 396.660839][T14466] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.683237][T14466] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 396.698038][T14466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3508: bg 0: block 248: padding at end of block bitmap is not set [ 396.712326][T14466] loop4: lost filesystem error report for type 5 error -117 [ 396.712658][T14466] __quota_error: 2 callbacks suppressed [ 396.712732][T14466] Quota error (device loop4): write_blk: dquota write failed [ 396.720098][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 396.720115][ C0] EXT4-fs (loop4): last error at time 1780500944: ext4_validate_block_bitmap:441 [ 396.749076][T14466] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 396.759093][T14466] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3508: Failed to acquire dquot type 1 [ 396.770324][T14466] loop4: lost filesystem error report for type 5 error -28 [ 396.771452][T14466] EXT4-fs (loop4): 1 truncate cleaned up [ 396.785551][T14466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 397.475688][ T28] audit: type=1400 audit(1780500945.621:2539): avc: denied { write } for pid=13244 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.501981][ T28] audit: type=1400 audit(1780500945.621:2540): avc: denied { rmdir } for pid=13244 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.511097][T13244] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.543488][T13244] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 397.551650][ T28] audit: type=1400 audit(1780500945.621:2541): avc: denied { write } for pid=13244 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.595027][T13244] audit: backlog limit exceeded [ 397.602005][ T28] audit: type=1400 audit(1780500945.621:2542): avc: denied { write } for pid=13244 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.627096][T13244] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.730878][T14469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 397.741588][T12337] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 397.753970][T12337] loop4: lost filesystem error report for type 5 error -117 [ 397.811448][T14465] loop1: detected capacity change from 0 to 8192 [ 399.852677][T10882] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.948857][T10882] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.023398][T10882] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.087535][T10882] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.189094][T10882] bridge_slave_1: left allmulticast mode [ 400.203561][T10882] bridge_slave_1: left promiscuous mode [ 400.217645][T10882] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.237848][T10882] bridge_slave_0: left allmulticast mode [ 400.257030][T10882] bridge_slave_0: left promiscuous mode [ 400.267986][T10882] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.525564][T10882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.535297][T10882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.545299][T10882] bond0 (unregistering): Released all slaves [ 400.553856][T10882] bond1 (unregistering): (slave lo): Releasing backup interface [ 400.562782][T10882] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 400.579501][T10882] bond1 (unregistering): Released all slaves [ 400.590523][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 400.636154][T10882] tipc: Disabling bearer [ 400.652525][T10882] tipc: Left network mode [ 400.659171][T10882] IPVS: stopping master sync thread 13519 ... [ 400.675259][T10882] IPVS: stopping backup sync thread 13517 ... [ 400.688157][T10882] hsr_slave_0: left promiscuous mode [ 400.695531][T10882] hsr_slave_1: left promiscuous mode [ 400.707837][T10882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.715328][T10882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.723266][T10882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.731254][T10882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.742122][T10882] veth1_macvtap: left promiscuous mode [ 400.747621][T10882] veth0_macvtap: left promiscuous mode [ 400.753485][T10882] veth1_vlan: left promiscuous mode [ 400.758710][T10882] veth0_vlan: left promiscuous mode [ 400.829702][T10882] team0 (unregistering): Port device team_slave_1 removed [ 400.839729][T10882] team0 (unregistering): Port device team_slave_0 removed [ 400.878969][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 400.991314][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 401.104773][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8