last executing test programs: 6.074048337s ago: executing program 2 (id=1498): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x41, 0x0, 0x0, 0x0, 0x7, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x2, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4b, 0x3, 0x1, 0x1, 0x3, 0xbbce, 0x2, 0xd8, 0x101}}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='&-\x00', &(0x7f0000000280)="054e0c98614954701731358fbf1e41b51953bf0d515915e676e3f8f121ae8105e3cb2e4a5510e7c79a567c8c24873263712b3d100e4c0a274eff35969aa7e890f18e64bdc8d8bf1113287614bcca720f924848ff1436c4451cd322c8b5", 0x5d) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000e00000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d200900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) 4.583259584s ago: executing program 2 (id=1514): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0xffff7fff, 0x1, 0x5}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) fsopen(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='pimreg0\x00') sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.506989217s ago: executing program 2 (id=1518): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.489675517s ago: executing program 0 (id=1519): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 3.109471731s ago: executing program 4 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 2.765475432s ago: executing program 1 (id=1524): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x1000000000002f, 0x100000000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x898, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x202, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a000000110003"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x402}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x36, 0x202c}, 0x20) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 2.603449167s ago: executing program 2 (id=1525): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000680)=""/110, 0x6e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.394980844s ago: executing program 1 (id=1526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.394067454s ago: executing program 4 (id=1528): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x6, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1d, 0x2, @perf_bp={0x0, 0xf}, 0x10020, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc010000000000000000000008000a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x6) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb4, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') lseek(r7, 0x8, 0x0) getdents(r7, 0xffffffffffffffff, 0x7a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) 2.294047997s ago: executing program 1 (id=1530): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x41, 0x0, 0x0, 0x0, 0x7, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x2, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4b, 0x3, 0x1, 0x1, 0x3, 0xbbce, 0x2, 0xd8, 0x101}}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='&-\x00', &(0x7f0000000280)="054e0c98614954701731358fbf1e41b51953bf0d515915e676e3f8f121ae8105e3cb2e4a5510e7c79a567c8c24873263712b3d100e4c0a274eff35969aa7e890f18e64bdc8d8bf1113287614bcca720f924848ff1436c4451cd322c8b5", 0x5d) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000e00000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d200900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.268560018s ago: executing program 0 (id=1531): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x8, 0x9, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x100, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0xfffffffffffffed8, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8) r1 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x2, 0x1, 0xa9, 0x0, 0x3, 0xa00e0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x9}, 0x10, 0x7fff, 0x9, 0xa, 0xfffffffffffffffc, 0x3, 0xac, 0x0, 0x400, 0x0, 0x480000000000000}, 0xffffffffffffffff, 0x9, r0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x187) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f00000003c0)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000008010300000000000000000200000404000480050003008400000006000240430500000900010073797a31000000040000000000008ab0fdccd6e13d0d96044202adf4056f4d77f8d01c6b0f0b141e832e144b7900967500edb1d8dd5d9c89473db96ccf0d8a8b40d830be929c1962330bc6b72687475f4cdd7485a6c1c6b3f5af8d3070684baa15bc02dbcaf65111e318f2d175696401bfb5152dfb4e5b8da65bf65f23df1dd575ad7a9b675f271fa8bfbd85844bfdf16fa0a881a6df6b895098f0ec85f0b5ac95324c46056848eb2aa5a14841d4ed6b6a1988f8995f5d687a43ddfcd82f2f"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f00000001c0), 0x5, 0x4c6, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="00baccc5ff28efe7e9b975878ebe8c33dd860569345bb03d32fc51d5f3350c2ef78a76fdeaf2f53911cfb8a05d2989094f5417b6deef5ef152c723ca3075301c54c5a9a342ec0921335e3d37d51c09c21b599ad52e363e4eb0a7c1fabc59042bcfb925ed2650c6969d9ebb9f8b43db18439204c075a3b43a1019b397d7b00a5f432b3159a6bde21ad915cd6ead974c4530d6379c5a98a47607eb1c05b6a8acac90a8973b49927a0039bcb15112fa370953fb4ada48822b8a830000008d157b9a57b782192b5c315743151136d07ba406718400133cbc26cd67af7d8ee94b72b9d82aef810e29118106a1669f39574fd7733da99d1165a9378c3ef6199c0ad23908cf18a70beea35b3db4d83acb923caaa672e77ff9c6a8511453c32652be898ed8e4a673d886c81f2c35b859721804fe996849dff32c3bf69c3b602a57e8d251d683239c262353563cb922ec8abac271391a2ec6dec78ab500bdf553c41898a6b1d2ca8a26656f08a9c60ced57b365465a8349a83d1326e8482e11088ef1", @ANYRES16=0x0], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000008) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 2.168253351s ago: executing program 2 (id=1533): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x6, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1d, 0x2, @perf_bp={0x0, 0xf}, 0x10020, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc010000000000000000000008000a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x6) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb4, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') lseek(r7, 0x8, 0x0) getdents(r7, 0xffffffffffffffff, 0x7a) getdents64(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) 2.084672224s ago: executing program 0 (id=1535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 2.000756776s ago: executing program 0 (id=1536): socket$inet6(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1.944332518s ago: executing program 0 (id=1537): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 1.629959498s ago: executing program 3 (id=1542): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x41, 0x0, 0x0, 0x0, 0x7, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x2, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4b, 0x3, 0x1, 0x1, 0x3, 0xbbce, 0x2, 0xd8, 0x101}}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='&-\x00', &(0x7f0000000280)="054e0c98614954701731358fbf1e41b51953bf0d515915e676e3f8f121ae8105e3cb2e4a5510e7c79a567c8c24873263712b3d100e4c0a274eff35969aa7e890f18e64bdc8d8bf1113287614bcca720f924848ff1436c4451cd322c8b5", 0x5d) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000e00000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) 1.497748292s ago: executing program 4 (id=1543): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 1.417982895s ago: executing program 1 (id=1544): flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/40, 0x28) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 737.950067ms ago: executing program 3 (id=1545): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000680)=""/110, 0x6e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 737.497447ms ago: executing program 4 (id=1546): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x8, 0x9, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x100, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0xfffffffffffffed8, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8) r1 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x2, 0x1, 0xa9, 0x0, 0x3, 0xa00e0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x9}, 0x10, 0x7fff, 0x9, 0xa, 0xfffffffffffffffc, 0x3, 0xac, 0x0, 0x400, 0x0, 0x480000000000000}, 0xffffffffffffffff, 0x9, r0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x187) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f00000003c0)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000008010300000000000000000200000404000480050003008400000006000240430500000900010073797a31000000040000000000008ab0fdccd6e13d0d96044202adf4056f4d77f8d01c6b0f0b141e832e144b7900967500edb1d8dd5d9c89473db96ccf0d8a8b40d830be929c1962330bc6b72687475f4cdd7485a6c1c6b3f5af8d3070684baa15bc02dbcaf65111e318f2d175696401bfb5152dfb4e5b8da65bf65f23df1dd575ad7a9b675f271fa8bfbd85844bfdf16fa0a881a6df6b895098f0ec85f0b5ac95324c46056848eb2aa5a14841d4ed6b6a1988f8995f5d687a43ddfcd82f2f"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f00000001c0), 0x5, 0x4c6, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000008) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x0) 735.062356ms ago: executing program 2 (id=1547): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES16, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000207010200000000000000000500000734000780080001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32, @ANYBLOB="726d69ed26028d0ab7bc5959a464fcbac010cc7249b1dc5f717814060b8d5495bd2eea445493684e02042291dc3ca0342e2158820d4614f8ac835628cbf6a1090be5ab06a9b946f7425718bd01fb81176daba1766c42bda0e0f2252482e636a0188a61ab7d443cf839"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt(r2, 0x7, 0xd5f, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) fsmount(r0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x8, 0xa, 0xfffffff5) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x3}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x20) 729.729297ms ago: executing program 1 (id=1548): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 542.435373ms ago: executing program 4 (id=1549): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000680)=""/110, 0x6e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 531.603123ms ago: executing program 1 (id=1550): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000100)="53f520c1cf505d6514ca3b19758f", &(0x7f0000000180)=""/179, &(0x7f0000000240), 0x0, 0x7}, 0x38) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="79610a000000fedbdf257e0000000c0099000700"], 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@errors_continue}, {@nolazytime}, {@block_validity}, {@lazytime}, {@errors_remount}, {@usrjquota}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 366.451748ms ago: executing program 3 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) get_robust_list(0x0, &(0x7f0000000680)=&(0x7f0000000640)={&(0x7f00000004c0)={&(0x7f0000000340)={&(0x7f0000000140)}}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000580)}}}, &(0x7f00000006c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 72.250128ms ago: executing program 3 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 56.618588ms ago: executing program 3 (id=1553): socket$inet6(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 37.450529ms ago: executing program 3 (id=1554): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x6, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1d, 0x2, @perf_bp={0x0, 0xf}, 0x10020, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc010000000000000000000008000a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x6) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb4, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') lseek(r7, 0x8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) 9.144299ms ago: executing program 4 (id=1555): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x41, 0x0, 0x0, 0x0, 0x7, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x2, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4b, 0x3, 0x1, 0x1, 0x3, 0xbbce, 0x2, 0xd8, 0x101}}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='&-\x00', &(0x7f0000000280)="054e0c98614954701731358fbf1e41b51953bf0d515915e676e3f8f121ae8105e3cb2e4a5510e7c79a567c8c24873263712b3d100e4c0a274eff35969aa7e890f18e64bdc8d8bf1113287614bcca720f924848ff1436c4451cd322c8b5", 0x5d) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d200900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) 0s ago: executing program 0 (id=1556): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) kernel console output (not intermixed with test programs): 202.508656][ T6503] loop1: detected capacity change from 0 to 512 [ 202.515557][ T6503] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.532107][ T6503] EXT4-fs (loop1): 1 truncate cleaned up [ 202.537824][ T6509] netlink: 68 bytes leftover after parsing attributes in process `syz.2.847'. [ 202.538587][ T6503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.584142][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'. [ 202.627532][ T6500] loop3: detected capacity change from 0 to 512 [ 202.646814][ T6500] EXT4-fs: Ignoring removed nobh option [ 202.652425][ T6500] EXT4-fs: Ignoring removed oldalloc option [ 202.658411][ T6500] ext4: Unknown parameter 'noacl' [ 202.805435][ T6499] loop4: detected capacity change from 0 to 4096 [ 202.823645][ T6499] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 203.164053][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.557289][ T6536] random: crng reseeded on system resumption [ 203.846102][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.846129][ T6539] netlink: 2 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.846368][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.846438][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.846458][ T6539] netlink: 2 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.846705][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 204.176031][ T6499] loop4: detected capacity change from 0 to 2048 [ 205.860648][ T6552] bridge0: port 1(macvlan2) entered blocking state [ 205.877638][ T6552] bridge0: port 1(macvlan2) entered disabled state [ 205.995978][ T6552] macvlan2: entered allmulticast mode [ 206.021172][ T6552] ip6gretap0: entered allmulticast mode [ 206.062243][ T6552] macvlan2: entered promiscuous mode [ 206.082004][ T6552] bridge0: port 1(macvlan2) entered blocking state [ 206.088646][ T6552] bridge0: port 1(macvlan2) entered forwarding state [ 206.114258][ T6567] loop2: detected capacity change from 0 to 256 [ 206.132091][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 206.132110][ T28] audit: type=1400 audit(1781460424.037:1001): avc: denied { write } for pid=6566 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.190076][ T28] audit: type=1400 audit(1781460424.047:1002): avc: denied { connect } for pid=6566 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.231275][ T28] audit: type=1400 audit(1781460424.047:1003): avc: denied { write } for pid=6566 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.252091][ T6572] random: crng reseeded on system resumption [ 206.413514][ T6582] loop1: detected capacity change from 0 to 1024 [ 206.438009][ T6574] loop0: detected capacity change from 0 to 8192 [ 206.446736][ T6582] EXT4-fs: Ignoring removed bh option [ 206.470199][ T28] audit: type=1400 audit(1781460424.394:1004): avc: denied { remount } for pid=6573 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 206.578243][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.611825][ T6579] loop4: detected capacity change from 0 to 4096 [ 206.620498][ T28] audit: type=1400 audit(1781460424.530:1005): avc: denied { write } for pid=6581 comm="syz.1.870" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.656438][ T6579] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 206.728914][ T6579] loop4: detected capacity change from 0 to 2048 [ 206.863283][ T6593] loop4: detected capacity change from 0 to 256 [ 207.152109][ T6595] xt_NFQUEUE: number of total queues is 0 [ 207.178340][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.197419][ T6597] FAULT_INJECTION: forcing a failure. [ 207.197419][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 207.223915][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.2.875 Not tainted syzkaller #0 PREEMPT(lazy) [ 207.223949][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.223967][ T6597] Call Trace: [ 207.223994][ T6597] [ 207.224004][ T6597] __dump_stack+0x1d/0x30 [ 207.224032][ T6597] dump_stack_lvl+0x95/0xd0 [ 207.224059][ T6597] dump_stack+0x15/0x1b [ 207.224084][ T6597] should_fail_ex+0x25e/0x270 [ 207.224167][ T6597] should_failslab+0x8c/0xb0 [ 207.224207][ T6597] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 207.224395][ T6597] ? sidtab_sid2str_get+0xa0/0x130 [ 207.224427][ T6597] kmemdup_noprof+0x2b/0x70 [ 207.224516][ T6597] sidtab_sid2str_get+0xa0/0x130 [ 207.224541][ T6597] security_sid_to_context_core+0x1eb/0x2e0 [ 207.224569][ T6597] security_sid_to_context+0x27/0x40 [ 207.224672][ T6597] avc_audit_post_callback+0x9d/0x520 [ 207.224742][ T6597] ? audit_log_lsm_data+0x78c/0xbb0 [ 207.224792][ T6597] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 207.224832][ T6597] common_lsm_audit+0x1ba/0x230 [ 207.224940][ T6597] ? avc_update_node+0x225/0x5a0 [ 207.224970][ T6597] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 207.225048][ T6597] slow_avc_audit+0x14c/0x190 [ 207.225155][ T6597] avc_has_extended_perms+0x617/0x890 [ 207.225208][ T6597] ioctl_has_perm+0x273/0x2c0 [ 207.225301][ T6597] selinux_file_ioctl+0x33c/0x3c0 [ 207.225332][ T6597] ? __fget_files+0x184/0x1c0 [ 207.225354][ T6597] ? mutex_lock+0x57/0x90 [ 207.225469][ T6597] security_file_ioctl+0x44/0x80 [ 207.225498][ T6597] __se_sys_ioctl+0x47/0x140 [ 207.225589][ T6597] __x64_sys_ioctl+0x43/0x50 [ 207.225624][ T6597] x64_sys_call+0x1563/0x3020 [ 207.225671][ T6597] do_syscall_64+0x136/0x3c0 [ 207.225704][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.225767][ T6597] RIP: 0033:0x7f4fec8bce59 [ 207.225788][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.225809][ T6597] RSP: 002b:00007f4feb30f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.225829][ T6597] RAX: ffffffffffffffda RBX: 00007f4fecb35fa0 RCX: 00007f4fec8bce59 [ 207.225848][ T6597] RDX: 0000200000000040 RSI: 0000000000005411 RDI: 0000000000000003 [ 207.225895][ T6597] RBP: 00007f4feb30f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.225907][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.225919][ T6597] R13: 00007f4fecb36038 R14: 00007f4fecb35fa0 R15: 00007ffde14159d8 [ 207.225946][ T6597] [ 207.227501][ T28] audit: type=1400 audit(1781460425.160:1006): avc: denied { ioctl } for pid=6596 comm="syz.2.875" path="socket:[13709]" dev="sockfs" ino=13709 ioctlcmd=0x5411 ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 207.371646][ T6600] __nla_validate_parse: 29 callbacks suppressed [ 207.371712][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 207.483237][ T6599] netlink: 144 bytes leftover after parsing attributes in process `syz.1.871'. [ 207.743064][ T28] audit: type=1400 audit(1781460425.727:1007): avc: denied { append } for pid=6613 comm="syz.1.880" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.969159][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 207.991607][ T6614] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 208.016671][ T6614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.325790][ T28] audit: type=1400 audit(1781460426.336:1008): avc: denied { accept } for pid=6608 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 208.346224][ T6624] loop2: detected capacity change from 0 to 512 [ 208.393188][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.429657][ T6618] veth0_vlan: left promiscuous mode [ 208.445948][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.497837][ T6618] veth0_vlan: entered promiscuous mode [ 208.504682][ T6634] loop0: detected capacity change from 0 to 256 [ 208.587770][ T28] audit: type=1400 audit(1781460426.609:1009): avc: denied { ioctl } for pid=6639 comm="syz.4.887" path="socket:[13785]" dev="sockfs" ino=13785 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.604012][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.699361][ T6618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.836648][ T6638] loop2: detected capacity change from 0 to 4096 [ 208.847256][ T6618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.867212][ T6618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.975936][ T49] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 209.120156][ T6638] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 209.212852][ T6653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.967850][ T6656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.892'. [ 209.989910][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 210.241759][ T6659] bridge0: port 1(macvlan2) entered blocking state [ 210.278580][ T6659] bridge0: port 1(macvlan2) entered disabled state [ 210.307190][ T6659] macvlan2: entered allmulticast mode [ 210.322858][ T6659] ip6gretap0: entered allmulticast mode [ 210.329331][ T6659] macvlan2: entered promiscuous mode [ 210.403155][ T6659] bridge0: port 1(macvlan2) entered blocking state [ 210.409834][ T6659] bridge0: port 1(macvlan2) entered forwarding state [ 210.690321][ T28] audit: type=1400 audit(1781460428.814:1010): avc: denied { bind } for pid=6673 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.118392][ T6684] loop3: detected capacity change from 0 to 256 [ 211.237524][ T6688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6688 comm=syz.1.902 [ 211.267545][ T6638] loop2: detected capacity change from 0 to 2048 [ 211.398710][ T6697] x_tables: duplicate underflow at hook 3 [ 211.518591][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 211.518608][ T28] audit: type=1400 audit(1781460429.675:1013): avc: denied { lock } for pid=6691 comm="syz.1.904" path="socket:[13930]" dev="sockfs" ino=13930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 211.726092][ T6709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.909'. [ 211.739151][ T6713] loop4: detected capacity change from 0 to 512 [ 211.753673][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 211.765738][ T6713] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.910: inode has both inline data and extents flags [ 211.903865][ T6713] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.905594][ T6713] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.910: couldn't read orphan inode 15 (err -117) [ 211.914821][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 211.914845][ C1] EXT4-fs (loop4): initial error at time 1781460430: ext4_orphan_get:1397: inode 15 [ 211.914886][ C1] EXT4-fs (loop4): last error at time 1781460430: ext4_orphan_get:1397: inode 15 [ 212.082202][ T6713] loop4: lost filesystem error report for type 5 error -117 [ 212.089324][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.143495][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.171986][ T6690] loop3: detected capacity change from 0 to 256 [ 212.192616][ T6728] loop4: detected capacity change from 0 to 256 [ 212.227295][ T6690] FAT-fs (loop3): Directory bread(block 64) failed [ 212.234484][ T6690] FAT-fs (loop3): Directory bread(block 65) failed [ 212.245542][ T6690] FAT-fs (loop3): Directory bread(block 66) failed [ 212.263284][ T6690] FAT-fs (loop3): Directory bread(block 67) failed [ 212.276446][ T6733] FAULT_INJECTION: forcing a failure. [ 212.276446][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 212.279441][ T28] audit: type=1400 audit(1781460430.442:1014): avc: denied { read } for pid=6732 comm="syz.0.919" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 212.289079][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.289116][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.289167][ T6733] Call Trace: [ 212.289194][ T6733] [ 212.289225][ T6733] __dump_stack+0x1d/0x30 [ 212.289292][ T6733] dump_stack_lvl+0x95/0xd0 [ 212.289432][ T6733] dump_stack+0x15/0x1b [ 212.289494][ T6733] should_fail_ex+0x25e/0x270 [ 212.289609][ T6733] should_failslab+0x8c/0xb0 [ 212.289743][ T6733] __kmalloc_cache_node_noprof+0x6b/0x470 [ 212.289843][ T6733] ? __get_vm_area_node+0x106/0x1d0 [ 212.289945][ T6733] ? avc_has_perm_noaudit+0xa3/0x120 [ 212.290068][ T6733] __get_vm_area_node+0x106/0x1d0 [ 212.290247][ T6733] __vmalloc_node_range_noprof+0x266/0x11e0 [ 212.290320][ T6733] ? copy_process+0x5b1/0x2400 [ 212.290425][ T6733] ? __mod_memcg_lruvec_state+0x1bd/0x2b0 [ 212.290538][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.290617][ T6733] ? __account_obj_stock+0x111/0x5d0 [ 212.290805][ T6733] ? __refill_obj_stock+0xcc/0x2c0 [ 212.290878][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.291002][ T6733] ? __memcg_slab_post_alloc_hook+0x35a/0x7e0 [ 212.291031][ T6733] __vmalloc_node_noprof+0x89/0xc0 [ 212.291118][ T6733] ? copy_process+0x5b1/0x2400 [ 212.291182][ T6733] ? copy_process+0x5b1/0x2400 [ 212.291248][ T6733] dup_task_struct+0x229/0x650 [ 212.291314][ T6733] copy_process+0x5b1/0x2400 [ 212.291455][ T6733] ? kstrtouint+0x76/0xc0 [ 212.291550][ T6733] ? kstrtouint_from_user+0xa8/0xf0 [ 212.291654][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.291801][ T6733] kernel_clone+0x1c0/0x5f0 [ 212.291872][ T6733] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.291991][ T6733] __x64_sys_clone+0x143/0x180 [ 212.292164][ T6733] x64_sys_call+0x1222/0x3020 [ 212.292240][ T6733] do_syscall_64+0x136/0x3c0 [ 212.292358][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.292436][ T6733] RIP: 0033:0x7f2ed2e3ce59 [ 212.292483][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.292531][ T6733] RSP: 002b:00007f2ed1896fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 212.292593][ T6733] RAX: ffffffffffffffda RBX: 00007f2ed30b5fa0 RCX: 00007f2ed2e3ce59 [ 212.292674][ T6733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000 [ 212.292724][ T6733] RBP: 00007f2ed1897090 R08: 0000000000000000 R09: 0000000000000000 [ 212.292825][ T6733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 212.292865][ T6733] R13: 00007f2ed30b6038 R14: 00007f2ed30b5fa0 R15: 00007ffe656c3848 [ 212.292929][ T6733] [ 212.292959][ T6733] syz.0.919: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 212.318226][ T6690] FAT-fs (loop3): Directory bread(block 68) failed [ 212.321477][ T6733] ,cpuset=/,mems_allowed=0 [ 212.347722][ T6690] FAT-fs (loop3): Directory bread(block 69) failed [ 212.371569][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.371647][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.371689][ T6733] Call Trace: [ 212.371719][ T6733] [ 212.371769][ T6733] __dump_stack+0x1d/0x30 [ 212.371816][ T6733] dump_stack_lvl+0x95/0xd0 [ 212.371971][ T6733] dump_stack+0x15/0x1b [ 212.372032][ T6733] warn_alloc+0x145/0x1c0 [ 212.372122][ T6733] ? avc_has_perm_noaudit+0xa3/0x120 [ 212.372311][ T6733] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 212.372385][ T6733] ? __mod_memcg_lruvec_state+0x1bd/0x2b0 [ 212.372502][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.372639][ T6733] ? __account_obj_stock+0x111/0x5d0 [ 212.372792][ T6733] ? __refill_obj_stock+0xcc/0x2c0 [ 212.372865][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.372998][ T6733] ? __memcg_slab_post_alloc_hook+0x35a/0x7e0 [ 212.373174][ T6733] __vmalloc_node_noprof+0x89/0xc0 [ 212.373230][ T6733] ? copy_process+0x5b1/0x2400 [ 212.373363][ T6733] ? copy_process+0x5b1/0x2400 [ 212.373443][ T6733] dup_task_struct+0x229/0x650 [ 212.373489][ T6733] copy_process+0x5b1/0x2400 [ 212.373568][ T6733] ? kstrtouint+0x76/0xc0 [ 212.373685][ T6733] ? kstrtouint_from_user+0xa8/0xf0 [ 212.373783][ T6733] ? __rcu_read_unlock+0x4e/0x70 [ 212.373838][ T6733] kernel_clone+0x1c0/0x5f0 [ 212.373914][ T6733] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.374024][ T6733] __x64_sys_clone+0x143/0x180 [ 212.374118][ T6733] x64_sys_call+0x1222/0x3020 [ 212.374234][ T6733] do_syscall_64+0x136/0x3c0 [ 212.374401][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.374523][ T6733] RIP: 0033:0x7f2ed2e3ce59 [ 212.374575][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.374637][ T6733] RSP: 002b:00007f2ed1896fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 212.374733][ T6733] RAX: ffffffffffffffda RBX: 00007f2ed30b5fa0 RCX: 00007f2ed2e3ce59 [ 212.374790][ T6733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000 [ 212.374831][ T6733] RBP: 00007f2ed1897090 R08: 0000000000000000 R09: 0000000000000000 [ 212.374932][ T6733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 212.374973][ T6733] R13: 00007f2ed30b6038 R14: 00007f2ed30b5fa0 R15: 00007ffe656c3848 [ 212.375036][ T6733] [ 212.381164][ T6733] Mem-Info: [ 212.383710][ T28] audit: type=1400 audit(1781460430.442:1015): avc: denied { open } for pid=6732 comm="syz.0.919" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 212.388779][ T6733] active_anon:13509 inactive_anon:0 isolated_anon:0 [ 212.388779][ T6733] active_file:8611 inactive_file:6926 isolated_file:0 [ 212.388779][ T6733] unevictable:0 dirty:122 writeback:0 [ 212.388779][ T6733] slab_reclaimable:3198 slab_unreclaimable:18079 [ 212.388779][ T6733] mapped:36443 shmem:5953 pagetables:1468 [ 212.388779][ T6733] sec_pagetables:0 bounce:0 [ 212.388779][ T6733] kernel_misc_reclaimable:0 [ 212.388779][ T6733] free:1882924 free_pcp:7867 free_cma:0 [ 212.393544][ T28] audit: type=1400 audit(1781460430.442:1016): avc: denied { map } for pid=6732 comm="syz.0.919" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 212.631479][ T6690] FAT-fs (loop3): Directory bread(block 70) failed [ 212.631525][ T6690] FAT-fs (loop3): Directory bread(block 71) failed [ 212.631551][ T6690] FAT-fs (loop3): Directory bread(block 72) failed [ 212.631576][ T6690] FAT-fs (loop3): Directory bread(block 73) failed [ 212.658284][ T6733] Node 0 active_anon:65520kB inactive_anon:0kB active_file:34444kB inactive_file:27704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157256kB dirty:488kB writeback:0kB shmem:35180kB kernel_stack:4000kB pagetables:5872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.697504][ T6690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.699698][ T6733] Node 0 [ 212.713071][ T6690] syz.3.903: attempt to access beyond end of device [ 212.713071][ T6690] loop3: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 212.717418][ T6733] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.726041][ T6690] syz.3.903: attempt to access beyond end of device [ 212.726041][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.727471][ T6733] lowmem_reserve[]: [ 212.731996][ T6690] syz.3.903: attempt to access beyond end of device [ 212.731996][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.737631][ T6733] 0 [ 212.742909][ T6690] syz.3.903: attempt to access beyond end of device [ 212.742909][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.746922][ T6733] 2879 7857 7857 [ 212.746965][ T6733] Node 0 DMA32 free:2944788kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948312kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 212.752857][ T6690] syz.3.903: attempt to access beyond end of device [ 212.752857][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.757632][ T6733] lowmem_reserve[]: 0 0 4978 4978 [ 212.757670][ T6733] Node 0 Normal free:4555772kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65520kB inactive_anon:0kB active_file:34444kB inactive_file:28052kB unevictable:0kB writepending:488kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:31816kB local_pcp:2420kB free_cma:0kB [ 212.806751][ T6736] loop4: detected capacity change from 0 to 4096 [ 212.815393][ T6733] lowmem_reserve[]: [ 212.823744][ T6690] syz.3.903: attempt to access beyond end of device [ 212.823744][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.830855][ T6733] 0 [ 212.834062][ T6690] syz.3.903: attempt to access beyond end of device [ 212.834062][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.836632][ T6733] 0 [ 212.860761][ T6690] syz.3.903: attempt to access beyond end of device [ 212.860761][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 212.908743][ T6733] 0 [ 212.930570][ T6736] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 212.991540][ T6733] 0 [ 213.001513][ T6690] syz.3.903: attempt to access beyond end of device [ 213.001513][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 213.022780][ T6733] [ 213.155422][ T6690] syz.3.903: attempt to access beyond end of device [ 213.155422][ T6690] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 213.278817][ T6733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.310926][ T6733] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944788kB [ 213.336939][ T6733] Node 0 Normal: 0*4kB 15*8kB (UME) 90*16kB (UE) 197*32kB (UME) 202*64kB (UME) 362*128kB (UME) 244*256kB (UM) 166*512kB (UME) 131*1024kB (UM) 102*2048kB (UME) 978*4096kB (UM) = 4563512kB [ 213.356490][ T6733] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 213.389383][ T6733] 22331 total pagecache pages [ 213.398126][ T6748] loop2: detected capacity change from 0 to 512 [ 213.404820][ T6733] 3 pages in swap cache [ 213.409370][ T6733] Free swap = 123720kB [ 213.434232][ T6733] Total swap = 124996kB [ 213.440126][ T6748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.455020][ T6733] 2097051 pages RAM [ 213.465064][ T6733] 0 pages HighMem/MovableOnly [ 213.470030][ T6733] 81574 pages reserved [ 213.508736][ T6752] loop4: detected capacity change from 0 to 256 [ 213.518400][ T6752] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 213.560769][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.574898][ T6754] FAULT_INJECTION: forcing a failure. [ 213.574898][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 213.587845][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.0.924 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.587890][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.587927][ T6754] Call Trace: [ 213.587977][ T6754] [ 213.587988][ T6754] __dump_stack+0x1d/0x30 [ 213.588018][ T6754] dump_stack_lvl+0x95/0xd0 [ 213.588045][ T6754] dump_stack+0x15/0x1b [ 213.588070][ T6754] should_fail_ex+0x25e/0x270 [ 213.588184][ T6754] should_failslab+0x8c/0xb0 [ 213.588251][ T6754] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 213.588288][ T6754] ? sidtab_sid2str_get+0xa0/0x130 [ 213.588315][ T6754] kmemdup_noprof+0x2b/0x70 [ 213.588350][ T6754] sidtab_sid2str_get+0xa0/0x130 [ 213.588400][ T6754] security_sid_to_context_core+0x1eb/0x2e0 [ 213.588425][ T6754] security_sid_to_context_force+0x2a/0x40 [ 213.588451][ T6754] selinux_inode_getsecurity+0x2c2/0x2e0 [ 213.588485][ T6754] security_inode_getsecurity+0xc7/0xe0 [ 213.588559][ T6754] vfs_getxattr+0x15b/0x230 [ 213.588584][ T6754] do_getxattr+0x129/0x2b0 [ 213.588680][ T6754] path_getxattrat+0x238/0x2b0 [ 213.588722][ T6754] __x64_sys_fgetxattr+0x59/0x70 [ 213.588751][ T6754] x64_sys_call+0x2da3/0x3020 [ 213.588780][ T6754] do_syscall_64+0x136/0x3c0 [ 213.588885][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.588913][ T6754] RIP: 0033:0x7f2ed2e3ce59 [ 213.588934][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.588957][ T6754] RSP: 002b:00007f2ed1897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 213.589064][ T6754] RAX: ffffffffffffffda RBX: 00007f2ed30b5fa0 RCX: 00007f2ed2e3ce59 [ 213.589081][ T6754] RDX: 0000200000000880 RSI: 0000200000000780 RDI: 0000000000000006 [ 213.589094][ T6754] RBP: 00007f2ed1897090 R08: 0000000000000000 R09: 0000000000000000 [ 213.589107][ T6754] R10: ffffffffffffff98 R11: 0000000000000246 R12: 0000000000000001 [ 213.589203][ T6754] R13: 00007f2ed30b6038 R14: 00007f2ed30b5fa0 R15: 00007ffe656c3848 [ 213.589224][ T6754] [ 213.839879][ T6759] netlink: 68 bytes leftover after parsing attributes in process `syz.0.927'. [ 213.855755][ T28] audit: type=1400 audit(1781460432.142:1017): avc: denied { read } for pid=6757 comm="syz.2.925" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.882633][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.927'. [ 213.896383][ T6764] loop4: detected capacity change from 0 to 256 [ 213.961854][ T28] audit: type=1400 audit(1781460432.237:1018): avc: denied { setattr } for pid=6757 comm="syz.2.925" name="NETLINK" dev="sockfs" ino=13993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.004823][ T6772] netlink: 68 bytes leftover after parsing attributes in process `syz.4.931'. [ 214.013734][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.931'. [ 214.028168][ T6770] loop3: detected capacity change from 0 to 128 [ 214.164026][ T6778] FAULT_INJECTION: forcing a failure. [ 214.164026][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 214.197921][ T6782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.242986][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.3.934 Not tainted syzkaller #0 PREEMPT(lazy) [ 214.243019][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.243035][ T6778] Call Trace: [ 214.243044][ T6778] [ 214.243054][ T6778] __dump_stack+0x1d/0x30 [ 214.243081][ T6778] dump_stack_lvl+0x95/0xd0 [ 214.243110][ T6778] dump_stack+0x15/0x1b [ 214.243131][ T6778] should_fail_ex+0x25e/0x270 [ 214.243177][ T6778] should_failslab+0x8c/0xb0 [ 214.243217][ T6778] kmem_cache_alloc_noprof+0x66/0x3f0 [ 214.243256][ T6778] ? anon_vma_clone+0xc7/0x460 [ 214.243278][ T6778] anon_vma_clone+0xc7/0x460 [ 214.243306][ T6778] __split_vma+0x2c0/0x640 [ 214.243345][ T6778] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 214.243381][ T6778] vms_gather_munmap_vmas+0x176/0x7f0 [ 214.243416][ T6778] mmap_region+0x7ca/0x20c0 [ 214.243444][ T6778] ? __rcu_read_unlock+0x33/0x70 [ 214.243465][ T6778] ? lapic_next_event+0x11/0x20 [ 214.243490][ T6778] ? clockevents_program_event+0x2fd/0x340 [ 214.243537][ T6778] ? clockevents_program_event+0x1fd/0x340 [ 214.243584][ T6778] ? tick_program_event+0x79/0xc0 [ 214.243647][ T6778] do_mmap+0x970/0xbc0 [ 214.243677][ T6778] ? selinux_mmap_file+0x5d/0x70 [ 214.243710][ T6778] vm_mmap_pgoff+0x183/0x2d0 [ 214.243752][ T6778] ksys_mmap_pgoff+0x250/0x310 [ 214.243781][ T6778] x64_sys_call+0x14df/0x3020 [ 214.243806][ T6778] do_syscall_64+0x136/0x3c0 [ 214.243836][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.243857][ T6778] RIP: 0033:0x7faf2ad7ce59 [ 214.243877][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.243902][ T6778] RSP: 002b:00007faf297d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.243922][ T6778] RAX: ffffffffffffffda RBX: 00007faf2aff5fa0 RCX: 00007faf2ad7ce59 [ 214.243941][ T6778] RDX: b635773f046bbefb RSI: 0000000000001000 RDI: 0000200000199000 [ 214.243959][ T6778] RBP: 00007faf297d7090 R08: 0000000000000003 R09: 0000000000000000 [ 214.243976][ T6778] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 214.243992][ T6778] R13: 00007faf2aff6038 R14: 00007faf2aff5fa0 R15: 00007ffecc74cbf8 [ 214.244016][ T6778] [ 214.256300][ T6785] EXT4-fs: Ignoring removed bh option [ 214.350599][ T6780] EXT4-fs: Ignoring removed bh option [ 214.357467][ T6777] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 214.533196][ T6787] netlink: 68 bytes leftover after parsing attributes in process `syz.3.938'. [ 214.543341][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.938'. [ 214.552668][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.566717][ T6780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.574482][ T6787] bridge0: port 1(macvlan2) entered blocking state [ 214.585449][ T6787] bridge0: port 1(macvlan2) entered disabled state [ 214.592190][ T6787] macvlan2: entered allmulticast mode [ 214.598041][ T6787] ip6gretap0: entered allmulticast mode [ 214.604831][ T6787] macvlan2: entered promiscuous mode [ 214.609128][ T6785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.610689][ T6787] bridge0: port 1(macvlan2) entered blocking state [ 214.628874][ T6787] bridge0: port 1(macvlan2) entered forwarding state [ 214.665631][ T28] audit: type=1400 audit(1781460432.982:1019): avc: denied { write } for pid=6779 comm="syz.0.935" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.716410][ T28] audit: type=1400 audit(1781460433.035:1020): avc: denied { write } for pid=6784 comm="syz.4.937" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.742647][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.786309][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.800843][ T6797] Illegal XDP return value 4294967274 on prog (id 234) dev N/A, expect packet loss! [ 214.910425][ T6810] netlink: 68 bytes leftover after parsing attributes in process `syz.0.946'. [ 214.923605][ T6810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.946'. [ 214.965196][ T28] audit: type=1400 audit(1781460433.308:1021): avc: denied { read } for pid=6811 comm="syz.4.947" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.996173][ T6817] bond6: option arp_validate: invalid value (18446744073709551615) [ 215.005619][ T28] audit: type=1400 audit(1781460433.308:1022): avc: denied { open } for pid=6811 comm="syz.4.947" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 215.009019][ T6814] EXT4-fs (loop2): bad geometry: first data block 4294967295 is beyond end of filesystem (256) [ 215.032081][ T6817] bond6 (unregistering): Released all slaves [ 215.056339][ T6821] tipc: Started in network mode [ 215.069905][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.094076][ T6821] tipc: Node identity 0a6066d1b1bf, cluster identity 4711 [ 215.101976][ T6821] tipc: Enabled bearer , priority 0 [ 215.111184][ T6812] syzkaller0: entered promiscuous mode [ 215.135994][ T6812] syzkaller0: entered allmulticast mode [ 215.157991][ T6828] FAULT_INJECTION: forcing a failure. [ 215.157991][ T6828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.171498][ T6821] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 215.182990][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.2.953 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.183133][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.183150][ T6828] Call Trace: [ 215.183158][ T6828] [ 215.183168][ T6828] __dump_stack+0x1d/0x30 [ 215.183198][ T6828] dump_stack_lvl+0x95/0xd0 [ 215.183254][ T6828] dump_stack+0x15/0x1b [ 215.183279][ T6828] should_fail_ex+0x25e/0x270 [ 215.183388][ T6828] should_fail_alloc_page+0xf2/0x100 [ 215.183433][ T6828] __alloc_frozen_pages_noprof+0x108/0x350 [ 215.183465][ T6828] alloc_pages_mpol+0xa9/0x1d0 [ 215.183505][ T6828] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 215.183530][ T6828] handle_mm_fault+0x1022/0x2da0 [ 215.183572][ T6828] do_user_addr_fault+0x634/0x1060 [ 215.183672][ T6828] ? ksys_mmap_pgoff+0xc1/0x310 [ 215.183696][ T6828] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 215.183834][ T6828] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 215.183865][ T6828] ? trace_page_fault_user+0x1f/0xa0 [ 215.183925][ T6828] exc_page_fault+0x62/0xa0 [ 215.183952][ T6828] asm_exc_page_fault+0x26/0x30 [ 215.183973][ T6828] RIP: 0033:0x7f4fec7741d8 [ 215.183989][ T6828] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 215.184044][ T6828] RSP: 002b:00007f4feb30e470 EFLAGS: 00010286 [ 215.184065][ T6828] RAX: 0000000000001000 RBX: 00007f4feb30e530 RCX: 0000000000000001 [ 215.184078][ T6828] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f4feb30e5d0 [ 215.184090][ T6828] RBP: 00000000000000b9 R08: 00007f4fe2eef000 R09: 00000000000000ff [ 215.184154][ T6828] R10: 0000000000000000 R11: 00007f4feb30e540 R12: 0000000000000001 [ 215.184171][ T6828] R13: 00007f4fec972980 R14: 0000000000000000 R15: 00007f4feb30e5d0 [ 215.184196][ T6828] [ 215.368148][ T6811] tipc: Resetting bearer [ 215.376427][ T6828] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 215.380851][ T6811] tipc: Disabling bearer [ 215.390467][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.406199][ T6829] EXT4-fs: Ignoring removed bh option [ 215.438517][ T6829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.456599][ T6828] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.953: corrupted in-inode xattr: e_value out of bounds [ 215.542244][ T6828] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.542468][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.953: couldn't read orphan inode 15 (err -117) [ 215.551695][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 215.551713][ C1] EXT4-fs (loop2): initial error at time 1781460433: ext4_iget_extra_inode:5128: inode 15 [ 215.551764][ C1] EXT4-fs (loop2): last error at time 1781460433: ext4_iget_extra_inode:5128: inode 15 [ 215.592030][ T68] batadv1: left promiscuous mode [ 215.597196][ T6828] loop2: lost filesystem error report for type 5 error -117 [ 215.599083][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.622771][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.639372][ T6844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.957'. [ 215.649155][ T6841] bond4: option arp_validate: invalid value (18446744073709551615) [ 215.687585][ T6844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 215.697978][ T6841] bond4 (unregistering): Released all slaves [ 215.716969][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.913194][ T6850] EXT4-fs (loop0): inodes count not valid: 8192 vs 32 [ 216.069610][ T6863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.186524][ T6859] team0: Mode changed to "activebackup" [ 216.694032][ T6858] set_capacity_and_notify: 12 callbacks suppressed [ 216.694051][ T6858] loop1: detected capacity change from 0 to 4096 [ 216.766950][ T6858] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 217.299698][ T6882] loop2: detected capacity change from 0 to 1024 [ 217.380745][ T6885] loop4: detected capacity change from 0 to 512 [ 217.400951][ T6882] EXT4-fs: Ignoring removed bh option [ 217.472619][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 217.472635][ T28] audit: type=1400 audit(1781460435.943:1035): avc: denied { connect } for pid=6886 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.521480][ T28] audit: type=1400 audit(1781460435.996:1036): avc: denied { listen } for pid=6886 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 217.572916][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.622823][ T6855] loop1: detected capacity change from 0 to 2048 [ 217.629294][ T28] audit: type=1400 audit(1781460436.101:1037): avc: denied { write } for pid=6875 comm="syz.2.966" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.694645][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.784485][ T6901] loop2: detected capacity change from 0 to 256 [ 217.953866][ T6918] loop1: detected capacity change from 0 to 256 [ 218.460601][ T6933] loop4: detected capacity change from 0 to 512 [ 218.497473][ T6933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.646611][ T6933] EXT4-fs (loop4): 1 truncate cleaned up [ 218.665553][ T6933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.690934][ T28] audit: type=1400 audit(2000000000.871:1038): avc: denied { write } for pid=6926 comm="syz.4.977" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.669286][ T3080] IPVS: starting estimator thread 0... [ 219.706910][ T28] audit: type=1400 audit(2000000001.049:1039): avc: denied { relabelfrom } for pid=6926 comm="syz.4.977" name="NETLINK" dev="sockfs" ino=14263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.741022][ T28] audit: type=1400 audit(2000000001.049:1040): avc: denied { relabelto } for pid=6926 comm="syz.4.977" name="NETLINK" dev="sockfs" ino=14263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 220.843260][ T6945] loop2: detected capacity change from 0 to 1024 [ 221.718184][ T28] audit: type=1400 audit(2000000001.060:1041): avc: denied { sqpoll } for pid=6926 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.728165][ T6942] IPVS: using max 2208 ests per chain, 110400 per kthread [ 221.743505][ T28] audit: type=1400 audit(2000000001.196:1042): avc: denied { write } for pid=6936 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.764431][ T28] audit: type=1400 audit(2000000001.910:1043): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.837149][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.899678][ T6945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.998380][ T28] audit: type=1400 audit(2000000004.335:1044): avc: denied { create } for pid=6961 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.092130][ T6960] loop4: detected capacity change from 0 to 1024 [ 222.100587][ T6971] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.111999][ T6960] EXT4-fs: Ignoring removed bh option [ 222.163159][ T6973] __nla_validate_parse: 8 callbacks suppressed [ 222.163219][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 222.348652][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.368375][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 222.368393][ T28] audit: type=1400 audit(2000000004.734:1047): avc: denied { write } for pid=6959 comm="syz.4.982" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.396394][ T6979] loop1: detected capacity change from 0 to 2048 [ 222.399571][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.445923][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.494185][ T6985] loop1: detected capacity change from 0 to 256 [ 222.504018][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.565172][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.679329][ T28] audit: type=1400 audit(2000000005.049:1048): avc: denied { read write } for pid=6986 comm="syz.4.991" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.724820][ T28] audit: type=1400 audit(2000000005.049:1049): avc: denied { open } for pid=6986 comm="syz.4.991" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.748609][ T28] audit: type=1400 audit(2000000005.081:1050): avc: denied { create } for pid=6982 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.768296][ T28] audit: type=1400 audit(2000000005.091:1051): avc: denied { setopt } for pid=6982 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.788060][ T28] audit: type=1400 audit(2000000005.102:1052): avc: denied { write } for pid=6982 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.957852][ T7002] loop3: detected capacity change from 0 to 512 [ 223.051726][ T7002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.218919][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.390530][ T7010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.998'. [ 223.399718][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.998'. [ 223.473498][ T28] audit: type=1326 audit(2000000005.899:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fec8bce59 code=0x0 [ 223.546774][ T7017] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1002'. [ 223.580106][ T7018] SELinux: policydb string length 805307400 does not match expected length 8 [ 223.589620][ T28] audit: type=1400 audit(2000000006.004:1054): avc: denied { load_policy } for pid=7011 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 223.610906][ T7018] SELinux: failed to load policy [ 223.927269][ T7015] loop1: detected capacity change from 0 to 1024 [ 223.939989][ T7015] EXT4-fs: Ignoring removed bh option [ 223.979724][ T7022] loop3: detected capacity change from 0 to 1024 [ 224.062165][ T7015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.082046][ T7022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.096522][ T7024] loop2: detected capacity change from 0 to 1024 [ 224.110993][ T28] audit: type=1400 audit(2000000006.561:1055): avc: denied { write } for pid=7014 comm="syz.1.1001" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.123872][ T7022] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.179861][ T7031] loop0: detected capacity change from 0 to 2048 [ 224.257937][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.270063][ T28] audit: type=1400 audit(2000000006.729:1056): avc: denied { write } for pid=7021 comm="syz.3.1003" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.277735][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.295531][ T7022] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1003: bg 0: block 112: padding at end of block bitmap is not set [ 224.306734][ T7024] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.331075][ T7038] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1003: bg 0: block 112: padding at end of block bitmap is not set [ 224.353520][ T7038] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 224.365953][ T7038] EXT4-fs (loop3): This should not happen!! Data will be lost [ 224.365953][ T7038] [ 224.375636][ T7038] EXT4-fs (loop3): Total free blocks count 0 [ 224.381650][ T7038] EXT4-fs (loop3): Free/Dirty block details [ 224.387628][ T7038] EXT4-fs (loop3): free_blocks=0 [ 224.392659][ T7038] EXT4-fs (loop3): dirty_blocks=32 [ 224.406954][ T7042] random: crng reseeded on system resumption [ 224.452089][ T7038] EXT4-fs (loop3): Block reservation details [ 224.487428][ T7038] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 224.498346][ T7043] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1003: lblock 0 mapped to illegal pblock 0 (length 6) [ 224.521851][ T7043] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.1003: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 224.668026][ T7052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1004: bg 0: block 112: padding at end of block bitmap is not set [ 224.685318][ T7024] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1004: Freeing blocks not in datazone - block = 0, count = 16 [ 224.942890][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.703102][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1013'. [ 225.712214][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1013'. [ 225.723046][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.768277][ T7071] loop3: detected capacity change from 0 to 1024 [ 226.989124][ T7071] EXT4-fs: Ignoring removed bh option [ 227.023797][ T7079] random: crng reseeded on system resumption [ 227.284578][ T7071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.306521][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 227.306537][ T28] audit: type=1400 audit(2000000009.910:1060): avc: denied { write } for pid=7070 comm="syz.3.1019" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.377782][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.459265][ T7096] FAULT_INJECTION: forcing a failure. [ 227.459265][ T7096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.540358][ T7094] futex_wake_op: syz.1.1023 tries to shift op by 144; fix this program [ 227.552571][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.3.1024 Not tainted syzkaller #0 PREEMPT(lazy) [ 227.552598][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.552611][ T7096] Call Trace: [ 227.552621][ T7096] [ 227.552630][ T7096] __dump_stack+0x1d/0x30 [ 227.552652][ T7096] dump_stack_lvl+0x95/0xd0 [ 227.552673][ T7096] dump_stack+0x15/0x1b [ 227.552749][ T7096] should_fail_ex+0x25e/0x270 [ 227.552797][ T7096] should_fail+0xb/0x20 [ 227.552819][ T7096] should_fail_usercopy+0x1a/0x20 [ 227.552842][ T7096] _copy_from_iter+0x20c/0xe70 [ 227.552864][ T7096] ? __alloc_skb+0x4f6/0x690 [ 227.552965][ T7096] ? __alloc_skb+0x200/0x690 [ 227.552992][ T7096] netlink_sendmsg+0x4a4/0x6f0 [ 227.553036][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.553073][ T7096] ____sys_sendmsg+0x532/0x580 [ 227.553153][ T7096] ___sys_sendmsg+0x195/0x1e0 [ 227.553188][ T7096] __x64_sys_sendmsg+0xd4/0x160 [ 227.553218][ T7096] x64_sys_call+0x194c/0x3020 [ 227.553246][ T7096] do_syscall_64+0x136/0x3c0 [ 227.553279][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.553314][ T7096] RIP: 0033:0x7faf2ad7ce59 [ 227.553332][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.553434][ T7096] RSP: 002b:00007faf297d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.553454][ T7096] RAX: ffffffffffffffda RBX: 00007faf2aff5fa0 RCX: 00007faf2ad7ce59 [ 227.553472][ T7096] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000008 [ 227.553489][ T7096] RBP: 00007faf297d7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.553506][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.553529][ T7096] R13: 00007faf2aff6038 R14: 00007faf2aff5fa0 R15: 00007ffecc74cbf8 [ 227.553574][ T7096] [ 227.785687][ T7098] loop3: detected capacity change from 0 to 512 [ 227.824045][ T7098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.850046][ T7100] loop4: detected capacity change from 0 to 4096 [ 227.919888][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.098839][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.155703][ T28] audit: type=1400 audit(2000000010.792:1061): avc: denied { bind } for pid=7087 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.183334][ T7098] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.455507][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.466493][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.512049][ T7115] random: crng reseeded on system resumption [ 228.518345][ T7112] loop2: detected capacity change from 0 to 512 [ 228.553018][ T7112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.571993][ T7112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.613570][ T28] audit: type=1326 audit(2000000011.285:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.4.1032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58acfce59 code=0x0 [ 228.650946][ T7112] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.716805][ T7125] loop4: detected capacity change from 0 to 512 [ 228.762504][ T7125] ext4: Unknown parameter 'measure' [ 228.782889][ T7109] loop0: detected capacity change from 0 to 256 [ 228.811170][ T7109] FAT-fs (loop0): Directory bread(block 64) failed [ 228.817906][ T7109] FAT-fs (loop0): Directory bread(block 65) failed [ 228.827307][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.834906][ T7109] FAT-fs (loop0): Directory bread(block 66) failed [ 228.852756][ T7109] FAT-fs (loop0): Directory bread(block 67) failed [ 228.867640][ T7109] FAT-fs (loop0): Directory bread(block 68) failed [ 228.882438][ T7109] FAT-fs (loop0): Directory bread(block 69) failed [ 228.899904][ T7109] FAT-fs (loop0): Directory bread(block 70) failed [ 228.910130][ T7109] FAT-fs (loop0): Directory bread(block 71) failed [ 228.926333][ T7109] FAT-fs (loop0): Directory bread(block 72) failed [ 228.946899][ T7109] FAT-fs (loop0): Directory bread(block 73) failed [ 228.995082][ T7109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.026324][ T7110] bio_check_eod: 1437 callbacks suppressed [ 229.026342][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.026342][ T7110] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 229.063246][ T7130] loop2: detected capacity change from 0 to 1024 [ 229.069989][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.069989][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.084585][ T7130] EXT4-fs: Ignoring removed bh option [ 229.111681][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.111681][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.130862][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.130862][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.145865][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.159567][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.159567][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.167740][ T28] audit: type=1400 audit(2000000011.862:1063): avc: denied { write } for pid=7129 comm="syz.2.1035" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.173168][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.173168][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.207845][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.207845][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.221280][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.221280][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.234587][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.234587][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.248085][ T7110] syz.0.1028: attempt to access beyond end of device [ 229.248085][ T7110] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.307603][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.516236][ T28] audit: type=1400 audit(2000000012.230:1064): avc: denied { mount } for pid=7136 comm="syz.2.1037" name="/" dev="ramfs" ino=15680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.654663][ T28] audit: type=1400 audit(2000000012.377:1065): avc: denied { setopt } for pid=7136 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 229.853020][ T7147] loop2: detected capacity change from 0 to 512 [ 229.882887][ T7147] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80000) [ 230.433853][ T28] audit: type=1400 audit(2000000013.196:1066): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 230.616196][ T7135] loop3: detected capacity change from 0 to 4096 [ 230.665815][ T7135] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 231.213830][ T7158] random: crng reseeded on system resumption [ 231.232064][ T7135] loop3: detected capacity change from 0 to 2048 [ 231.412358][ T7167] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1045'. [ 231.431936][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 231.612313][ T7170] loop0: detected capacity change from 0 to 1024 [ 231.641193][ T7170] EXT4-fs: Ignoring removed bh option [ 231.706171][ T7170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.754119][ T28] audit: type=1400 audit(2000000014.581:1067): avc: denied { write } for pid=7169 comm="syz.0.1047" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.851407][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.083274][ T7181] program syz.4.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.249934][ T7180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.311525][ T7180] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.435604][ T7188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 232.510059][ T7188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 232.543783][ T7189] bridge0: port 1(macvlan2) entered blocking state [ 232.550456][ T7189] bridge0: port 1(macvlan2) entered disabled state [ 232.557156][ T7189] macvlan2: entered allmulticast mode [ 232.562911][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.566116][ T7189] ip6gretap0: entered allmulticast mode [ 232.578319][ T7189] macvlan2: entered promiscuous mode [ 232.583832][ T7189] bridge0: port 1(macvlan2) entered blocking state [ 232.590431][ T7189] bridge0: port 1(macvlan2) entered forwarding state [ 232.702889][ T7195] set_capacity_and_notify: 1 callbacks suppressed [ 232.702908][ T7195] loop2: detected capacity change from 0 to 256 [ 232.964562][ T7198] loop4: detected capacity change from 0 to 1024 [ 232.992276][ T7201] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1057'. [ 233.019158][ T7201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1057'. [ 233.067901][ T7193] loop0: detected capacity change from 0 to 512 [ 233.077408][ T7193] EXT4-fs: quotafile must be on filesystem root [ 233.108654][ T7198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.143219][ T7198] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.260276][ T28] audit: type=1400 audit(2000000016.167:1068): avc: denied { write } for pid=7197 comm="syz.4.1055" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.261786][ T7198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1055: bg 0: block 112: padding at end of block bitmap is not set [ 233.295836][ T28] audit: type=1400 audit(2000000016.167:1069): avc: denied { write } for pid=7197 comm="syz.4.1055" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.366774][ T7215] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1055: bg 0: block 112: padding at end of block bitmap is not set [ 233.415403][ T7215] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 233.474276][ T7209] loop0: detected capacity change from 0 to 1024 [ 233.481427][ T7215] EXT4-fs (loop4): This should not happen!! Data will be lost [ 233.481427][ T7215] [ 233.494881][ T7209] EXT4-fs: Ignoring removed bh option [ 233.512157][ T7215] EXT4-fs (loop4): Total free blocks count 0 [ 233.528852][ T7209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.533667][ T7218] EXT4-fs (loop4): shut down requested (2) [ 233.542719][ T7215] EXT4-fs (loop4): Free/Dirty block details [ 233.563858][ T7202] loop1: detected capacity change from 0 to 4096 [ 233.570554][ T7202] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 233.577970][ T7220] loop2: detected capacity change from 0 to 512 [ 233.588630][ T7215] EXT4-fs (loop4): free_blocks=0 [ 233.593627][ T7215] EXT4-fs (loop4): dirty_blocks=16 [ 233.598775][ T7215] EXT4-fs (loop4): Block reservation details [ 233.604800][ T7215] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 233.628743][ T28] audit: type=1400 audit(2000000016.524:1070): avc: denied { write } for pid=7208 comm="syz.0.1059" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.686271][ T7220] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 233.697600][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.708271][ T7220] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 233.726792][ T7220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1063: corrupted inode contents [ 233.741397][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.748067][ T7220] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.1063: mark_inode_dirty error [ 233.769171][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.770637][ T7220] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1063: invalid indirect mapped block 1 (level 1) [ 233.793021][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 233.793062][ C0] EXT4-fs (loop2): initial error at time 2000000016: mb_free_blocks:2049: inode 11: block 64 [ 233.793109][ C0] EXT4-fs (loop2): last error at time 2000000016: ext4_dirty_inode:6587: inode 11 [ 233.819453][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.822443][ T7202] loop1: detected capacity change from 0 to 2048 [ 233.850097][ T7220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1063: corrupted inode contents [ 233.873042][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.873297][ T7220] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 233.926187][ T7234] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1065'. [ 233.954499][ T7220] loop2: lost filesystem error report for type 5 error -117 [ 233.954802][ T7220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1063: corrupted inode contents [ 233.985539][ T7234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 233.986471][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.995234][ T7220] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.1063: mark_inode_dirty error [ 234.026347][ T7220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.026537][ T7220] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 234.037897][ T7234] bridge0: port 1(macvlan2) entered blocking state [ 234.073946][ T7234] bridge0: port 1(macvlan2) entered disabled state [ 234.081075][ T7220] loop2: lost filesystem error report for type 5 error -117 [ 234.081269][ T7220] EXT4-fs (loop2): 1 truncate cleaned up [ 234.095182][ T7234] macvlan2: entered allmulticast mode [ 234.110711][ T7234] ip6gretap0: entered allmulticast mode [ 234.116542][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.128875][ T7234] macvlan2: entered promiscuous mode [ 234.139365][ T7234] bridge0: port 1(macvlan2) entered blocking state [ 234.146128][ T7234] bridge0: port 1(macvlan2) entered forwarding state [ 234.171430][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 234.218039][ T7233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1066'. [ 234.261337][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.284002][ T7245] loop0: detected capacity change from 0 to 256 [ 234.342142][ T28] audit: type=1400 audit(2000000017.290:1071): avc: denied { name_bind } for pid=7232 comm="syz.3.1066" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 234.380472][ T7249] loop2: detected capacity change from 0 to 2048 [ 234.406164][ T7249] msdos: Unknown parameter 'nod#ts' [ 235.044334][ T7337] loop2: detected capacity change from 0 to 512 [ 235.078358][ T7337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.136638][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.168640][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.193472][ T7334] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.392859][ T28] audit: type=1400 audit(2000000018.361:1072): avc: denied { write } for pid=7333 comm="syz.1.1074" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.403707][ T7346] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 235.414916][ T7334] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1074: bg 0: block 112: padding at end of block bitmap is not set [ 235.445654][ T7350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1074: bg 0: block 112: padding at end of block bitmap is not set [ 235.459071][ T28] audit: type=1400 audit(2000000018.434:1073): avc: denied { write } for pid=7333 comm="syz.1.1074" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.475055][ T7350] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 235.531942][ T7350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 235.531942][ T7350] [ 235.541666][ T7350] EXT4-fs (loop1): Total free blocks count 0 [ 235.547712][ T7350] EXT4-fs (loop1): Free/Dirty block details [ 235.553708][ T7350] EXT4-fs (loop1): free_blocks=0 [ 235.558728][ T7350] EXT4-fs (loop1): dirty_blocks=32 [ 235.563897][ T7350] EXT4-fs (loop1): Block reservation details [ 235.570057][ T7350] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 235.594867][ T7334] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1074: lblock 0 mapped to illegal pblock 0 (length 6) [ 235.621809][ T7334] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.1074: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 235.661035][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.852818][ T28] audit: type=1326 audit(2000000018.886:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.1.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811586ce59 code=0x7ffc0000 [ 236.133061][ T28] audit: type=1326 audit(2000000018.917:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.1.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f811586ce59 code=0x7ffc0000 [ 236.382351][ T28] audit: type=1326 audit(2000000018.917:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.1.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811586ce59 code=0x7ffc0000 [ 236.407878][ T28] audit: type=1326 audit(2000000018.917:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.1.1084" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811586ce59 code=0x7ffc0000 [ 236.627329][ T7381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.849779][ T7389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.881863][ T7389] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.960409][ T7389] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1091: bg 0: block 112: padding at end of block bitmap is not set [ 237.033358][ T7382] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 237.054848][ T7389] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1091: Freeing blocks not in datazone - block = 0, count = 16 [ 237.070692][ T7403] __nla_validate_parse: 6 callbacks suppressed [ 237.070712][ T7403] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1096'. [ 237.172050][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.266792][ T7406] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 237.633670][ T7416] set_capacity_and_notify: 7 callbacks suppressed [ 237.633693][ T7416] loop1: detected capacity change from 0 to 512 [ 238.063506][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 238.063593][ T28] audit: type=1326 audit(2000000021.185:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.1.1099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811586ce59 code=0x0 [ 238.449296][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.546015][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1102'. [ 238.565794][ T7416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1099: bg 0: block 393: padding at end of block bitmap is not set [ 238.723995][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'. [ 238.748535][ T7416] loop1: lost filesystem error report for type 5 error -117 [ 238.749495][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 238.763298][ C1] EXT4-fs (loop1): initial error at time 2000000021: ext4_validate_block_bitmap:441 [ 238.772735][ C1] EXT4-fs (loop1): last error at time 2000000021: ext4_validate_block_bitmap:441 [ 238.791752][ T7416] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 238.854791][ T7429] program syz.2.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.940133][ T7416] loop1: lost filesystem error report for type 5 error -117 [ 238.940702][ T7416] EXT4-fs (loop1): 2 truncates cleaned up [ 239.242590][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.786536][ T7433] FAULT_INJECTION: forcing a failure. [ 239.786536][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.799746][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.4.1105 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.799782][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.799795][ T7433] Call Trace: [ 239.799802][ T7433] [ 239.799810][ T7433] __dump_stack+0x1d/0x30 [ 239.799841][ T7433] dump_stack_lvl+0x95/0xd0 [ 239.799869][ T7433] dump_stack+0x15/0x1b [ 239.799941][ T7433] should_fail_ex+0x25e/0x270 [ 239.799976][ T7433] should_fail+0xb/0x20 [ 239.799992][ T7433] should_fail_usercopy+0x1a/0x20 [ 239.800066][ T7433] _copy_to_user+0x20/0xa0 [ 239.800098][ T7433] bpf_test_finish+0x157/0x4e0 [ 239.800129][ T7433] ? ktime_get+0x212/0x240 [ 239.800166][ T7433] bpf_prog_test_run_flow_dissector+0x2c9/0x360 [ 239.800229][ T7433] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 239.800261][ T7433] bpf_prog_test_run+0x208/0x340 [ 239.800294][ T7433] __sys_bpf+0x52e/0x7e0 [ 239.800405][ T7433] __x64_sys_bpf+0x41/0x50 [ 239.800433][ T7433] x64_sys_call+0x10cb/0x3020 [ 239.800544][ T7433] do_syscall_64+0x136/0x3c0 [ 239.800582][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.800603][ T7433] RIP: 0033:0x7fd58acfce59 [ 239.800620][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.800680][ T7433] RSP: 002b:00007fd589757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.800740][ T7433] RAX: ffffffffffffffda RBX: 00007fd58af75fa0 RCX: 00007fd58acfce59 [ 239.800758][ T7433] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 239.800771][ T7433] RBP: 00007fd589757090 R08: 0000000000000000 R09: 0000000000000000 [ 239.800784][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.800799][ T7433] R13: 00007fd58af76038 R14: 00007fd58af75fa0 R15: 00007ffd12951468 [ 239.800831][ T7433] [ 240.110116][ T7442] loop4: detected capacity change from 0 to 1024 [ 240.151762][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.320658][ T7442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.332997][ T7442] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.151811][ T7442] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1108: bg 0: block 112: padding at end of block bitmap is not set [ 241.166372][ T28] audit: type=1400 audit(2000000024.460:1088): avc: denied { write } for pid=7441 comm="syz.4.1108" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.188575][ T28] audit: type=1400 audit(2000000024.460:1089): avc: denied { write } for pid=7441 comm="syz.4.1108" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.190441][ T7442] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1108: Freeing blocks not in datazone - block = 0, count = 16 [ 242.154896][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.768868][ T7488] random: crng reseeded on system resumption [ 243.784161][ T7488] Unrecognized hibernate image header format! [ 243.791079][ T7488] PM: hibernation: Image mismatch: architecture specific data [ 243.858862][ T7496] loop1: detected capacity change from 0 to 512 [ 243.885934][ T7494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1121'. [ 243.913485][ T28] audit: type=1400 audit(2000000027.316:1090): avc: denied { create } for pid=7498 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.943684][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1121'. [ 243.977997][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1125'. [ 243.996720][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1125'. [ 244.070133][ T7509] loop2: detected capacity change from 0 to 512 [ 244.111828][ T7516] loop4: detected capacity change from 0 to 256 [ 244.119358][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.197897][ T7496] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.1122: Bad quota inum: 1, type: 2 [ 244.213244][ T7496] loop1: lost filesystem error report for type 5 error -117 [ 244.215972][ T7496] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 244.241277][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 244.241313][ C0] EXT4-fs (loop1): initial error at time 2000000027: ext4_quota_enable:7221 [ 244.241547][ C0] EXT4-fs (loop1): last error at time 2000000027: ext4_quota_enable:7221 [ 244.290522][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.313301][ T7496] EXT4-fs (loop1): mount failed [ 244.351855][ T7522] loop4: detected capacity change from 0 to 256 [ 244.404299][ T7528] random: crng reseeded on system resumption [ 244.570021][ T7537] loop4: detected capacity change from 0 to 256 [ 244.668914][ T7526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.067623][ T7547] loop2: detected capacity change from 0 to 512 [ 245.075151][ T7547] vfat: Unknown parameter '01777777777777777777777' [ 245.091528][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1140'. [ 245.228422][ T7552] loop1: detected capacity change from 0 to 256 [ 245.281702][ T7553] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1141'. [ 245.297829][ T7553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1141'. [ 245.786903][ T7559] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 246.011663][ T7575] FAULT_INJECTION: forcing a failure. [ 246.011663][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 246.050552][ T7579] loop4: detected capacity change from 0 to 512 [ 246.057199][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.2.1150 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.057301][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.057321][ T7575] Call Trace: [ 246.057332][ T7575] [ 246.057340][ T7575] __dump_stack+0x1d/0x30 [ 246.057366][ T7575] dump_stack_lvl+0x95/0xd0 [ 246.057401][ T7575] dump_stack+0x15/0x1b [ 246.057426][ T7575] should_fail_ex+0x25e/0x270 [ 246.057470][ T7575] ? alloc_async+0x2d/0x90 [ 246.057504][ T7575] should_failslab+0x8c/0xb0 [ 246.057543][ T7575] __kmalloc_cache_noprof+0x5f/0x400 [ 246.057608][ T7575] alloc_async+0x2d/0x90 [ 246.057639][ T7575] proc_do_submiturb+0x73c/0x1c70 [ 246.057737][ T7575] proc_submiturb+0x7b/0xa0 [ 246.057765][ T7575] usbdev_ioctl+0xc5d/0x16a0 [ 246.057796][ T7575] ? __pfx_usbdev_ioctl+0x10/0x10 [ 246.057827][ T7575] __se_sys_ioctl+0xce/0x140 [ 246.057856][ T7575] __x64_sys_ioctl+0x43/0x50 [ 246.057883][ T7575] x64_sys_call+0x1563/0x3020 [ 246.057915][ T7575] do_syscall_64+0x136/0x3c0 [ 246.057966][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.057990][ T7575] RIP: 0033:0x7f4fec8bce59 [ 246.058006][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.058024][ T7575] RSP: 002b:00007f4feb30f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.058046][ T7575] RAX: ffffffffffffffda RBX: 00007f4fecb35fa0 RCX: 00007f4fec8bce59 [ 246.058141][ T7575] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 246.058154][ T7575] RBP: 00007f4feb30f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.058221][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.058237][ T7575] R13: 00007f4fecb36038 R14: 00007f4fecb35fa0 R15: 00007ffde14159d8 [ 246.058262][ T7575] [ 246.302233][ T7579] EXT4-fs: Ignoring removed oldalloc option [ 246.476978][ T7577] loop1: detected capacity change from 0 to 512 [ 246.529583][ T7577] vfat: Unknown parameter '01777777777777777777777' [ 246.620023][ T7579] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1153: corrupted in-inode xattr: invalid ea_ino [ 246.689549][ T7579] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.689804][ T7579] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1153: couldn't read orphan inode 15 (err -117) [ 246.692992][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'. [ 246.719951][ T7579] loop4: lost filesystem error report for type 5 error -117 [ 246.720651][ T7579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.738944][ T7568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.777900][ T28] audit: type=1400 audit(2000000030.329:1091): avc: denied { write } for pid=7578 comm="syz.4.1153" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.813571][ T28] audit: type=1400 audit(2000000030.392:1092): avc: denied { write } for pid=7578 comm="syz.4.1153" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.882301][ T28] audit: type=1326 audit(2000000030.465:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 246.910651][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.920875][ T28] audit: type=1326 audit(2000000030.465:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 246.961061][ T28] audit: type=1326 audit(2000000030.465:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 246.988643][ T7591] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1157'. [ 246.998493][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1157'. [ 247.015535][ T28] audit: type=1326 audit(2000000030.465:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 247.053587][ T28] audit: type=1326 audit(2000000030.465:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 247.079211][ T28] audit: type=1326 audit(2000000030.465:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 247.104913][ T28] audit: type=1326 audit(2000000030.465:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.3.1156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x7ffc0000 [ 247.262435][ T7613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7613 comm=syz.3.1166 [ 247.264369][ T7611] loop2: detected capacity change from 0 to 256 [ 247.890413][ T7636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.097485][ T7628] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 248.256331][ T7615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.472903][ T7655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7655 comm=syz.1.1181 [ 248.590368][ T7661] EXT4-fs: Ignoring removed bh option [ 248.632674][ T7661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.757213][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 248.757242][ T28] audit: type=1400 audit(2000000032.439:1202): avc: denied { write } for pid=7660 comm="syz.0.1184" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.903224][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.264209][ T7678] set_capacity_and_notify: 3 callbacks suppressed [ 249.264228][ T7678] loop0: detected capacity change from 0 to 4096 [ 249.279176][ T7678] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 249.520238][ T7688] loop0: detected capacity change from 0 to 256 [ 249.650420][ T7696] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 249.660533][ T7696] bond6 (unregistering): Released all slaves [ 249.720644][ T7701] __nla_validate_parse: 1 callbacks suppressed [ 249.720662][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 249.744258][ T7701] loop0: detected capacity change from 0 to 1024 [ 249.751280][ T7701] EXT4-fs: Ignoring removed bh option [ 249.805263][ T7701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.833873][ T28] audit: type=1400 audit(2000000033.562:1203): avc: denied { write } for pid=7699 comm="syz.0.1197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.929005][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.002105][ T7723] loop0: detected capacity change from 0 to 256 [ 250.141478][ T7690] loop1: detected capacity change from 0 to 256 [ 250.159335][ T7690] FAT-fs (loop1): Directory bread(block 64) failed [ 250.166219][ T7690] FAT-fs (loop1): Directory bread(block 65) failed [ 250.173078][ T7690] FAT-fs (loop1): Directory bread(block 66) failed [ 250.180669][ T7690] FAT-fs (loop1): Directory bread(block 67) failed [ 250.197511][ T7690] FAT-fs (loop1): Directory bread(block 68) failed [ 250.204208][ T7690] FAT-fs (loop1): Directory bread(block 69) failed [ 250.210891][ T7690] FAT-fs (loop1): Directory bread(block 70) failed [ 250.217510][ T7690] FAT-fs (loop1): Directory bread(block 71) failed [ 250.224738][ T7690] FAT-fs (loop1): Directory bread(block 72) failed [ 250.231478][ T7690] FAT-fs (loop1): Directory bread(block 73) failed [ 250.243019][ T7690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.261369][ T7690] bio_check_eod: 4125 callbacks suppressed [ 250.261388][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.261388][ T7690] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 250.281325][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.281325][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.295974][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.295974][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.309732][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.309732][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.330419][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.330419][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.344585][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.344585][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.358235][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.358235][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.371835][ T7690] syz.1.1193: attempt to access beyond end of device [ 250.371835][ T7690] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.387503][ T7689] syz.1.1193: attempt to access beyond end of device [ 250.387503][ T7689] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.403804][ T7689] syz.1.1193: attempt to access beyond end of device [ 250.403804][ T7689] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 250.436900][ T7717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7717 comm=syz.4.1202 [ 250.503292][ T7732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7732 comm=syz.4.1202 [ 250.606991][ T7725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.850810][ T7748] loop1: detected capacity change from 0 to 256 [ 250.965816][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 251.007449][ T28] audit: type=1400 audit(2000000034.759:1204): avc: denied { connect } for pid=7757 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.070228][ T28] audit: type=1400 audit(2000000034.759:1205): avc: denied { setopt } for pid=7757 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.155115][ T7763] loop2: detected capacity change from 0 to 4096 [ 251.176609][ T7763] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 251.208978][ T7774] loop1: detected capacity change from 0 to 256 [ 251.278386][ T7763] loop2: detected capacity change from 0 to 2048 [ 251.738163][ T7790] FAULT_INJECTION: forcing a failure. [ 251.738163][ T7790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.752629][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.1.1231 Not tainted syzkaller #0 PREEMPT(lazy) [ 251.752661][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.752676][ T7790] Call Trace: [ 251.752685][ T7790] [ 251.752703][ T7790] __dump_stack+0x1d/0x30 [ 251.752784][ T7790] dump_stack_lvl+0x95/0xd0 [ 251.752804][ T7790] dump_stack+0x15/0x1b [ 251.752876][ T7790] should_fail_ex+0x25e/0x270 [ 251.752911][ T7790] should_fail_alloc_page+0xf2/0x100 [ 251.752946][ T7790] alloc_pages_bulk_noprof+0xf8/0x550 [ 251.752975][ T7790] copy_splice_read+0xf3/0x6b0 [ 251.753020][ T7790] ? __pfx_copy_splice_read+0x10/0x10 [ 251.753146][ T7790] splice_direct_to_actor+0x261/0x680 [ 251.753186][ T7790] ? kstrtouint_from_user+0xa8/0xf0 [ 251.753218][ T7790] ? __pfx_direct_splice_actor+0x10/0x10 [ 251.753325][ T7790] do_splice_direct+0x119/0x1a0 [ 251.753408][ T7790] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 251.753435][ T7790] do_sendfile+0x37d/0x640 [ 251.753463][ T7790] __x64_sys_sendfile64+0x105/0x150 [ 251.753501][ T7790] x64_sys_call+0x2dc4/0x3020 [ 251.753538][ T7790] do_syscall_64+0x136/0x3c0 [ 251.753571][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.753633][ T7790] RIP: 0033:0x7f811586ce59 [ 251.753656][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.753674][ T7790] RSP: 002b:00007f81142bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 251.753697][ T7790] RAX: ffffffffffffffda RBX: 00007f8115ae5fa0 RCX: 00007f811586ce59 [ 251.753731][ T7790] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 251.753742][ T7790] RBP: 00007f81142bf090 R08: 0000000000000000 R09: 0000000000000000 [ 251.753755][ T7790] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 251.753768][ T7790] R13: 00007f8115ae6038 R14: 00007f8115ae5fa0 R15: 00007fff965ac2e8 [ 251.753789][ T7790] [ 251.794427][ T7804] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1238'. [ 252.089395][ T7819] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1242'. [ 252.123714][ T7805] loop0: detected capacity change from 0 to 4096 [ 252.158327][ T7805] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 252.647874][ T7838] EXT4-fs: Ignoring removed bh option [ 252.707579][ T7838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.730034][ T28] audit: type=1400 audit(2000000036.607:1206): avc: denied { write } for pid=7837 comm="syz.0.1249" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.930900][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.110109][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.229328][ T7858] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 253.300981][ T28] audit: type=1400 audit(2000000037.195:1207): avc: denied { write } for pid=7850 comm="syz.4.1252" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.391541][ T7858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.511807][ T7859] bond1: (slave veth3): Enslaving as an active interface with a down link [ 253.540846][ T7861] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 253.558831][ T7861] bond1: (slave batadv1): making interface the new active one [ 253.573016][ T7861] batadv1: entered promiscuous mode [ 253.579428][ T7861] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 254.203673][ T7836] program syz.1.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.261072][ T7865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7865 comm=syz.1.1248 [ 254.432631][ T7864] netlink: 'syz.2.1255': attribute type 298 has an invalid length. [ 254.465874][ T7878] set_capacity_and_notify: 3 callbacks suppressed [ 254.465896][ T7878] loop1: detected capacity change from 0 to 4096 [ 254.517709][ T7878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.582242][ T28] audit: type=1400 audit(2000000038.559:1208): avc: denied { write } for pid=7877 comm="syz.1.1256" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.621206][ T7881] loop2: detected capacity change from 0 to 256 [ 254.773551][ T7883] syzkaller1: entered promiscuous mode [ 254.779141][ T7883] syzkaller1: entered allmulticast mode [ 254.846893][ T28] audit: type=1400 audit(2000000038.822:1209): avc: denied { mounton } for pid=7877 comm="syz.1.1256" path="/258/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 255.164196][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.441029][ T28] audit: type=1400 audit(2000000039.452:1210): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.501648][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.524520][ T7897] loop0: detected capacity change from 0 to 1024 [ 255.624088][ T28] audit: type=1400 audit(2000000039.452:1211): avc: denied { remove_name } for pid=3300 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.706055][ T7897] EXT4-fs: Ignoring removed bh option [ 255.817286][ T28] audit: type=1400 audit(2000000039.473:1212): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.861206][ T28] audit: type=1400 audit(2000000039.473:1213): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.885590][ T28] audit: type=1400 audit(2000000039.473:1214): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.908380][ T28] audit: type=1400 audit(2000000039.483:1215): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.933738][ T28] audit: type=1400 audit(2000000039.483:1216): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 255.991925][ T28] audit: type=1400 audit(2000000039.483:1217): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.052781][ T7897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.104324][ T7910] sctp: [Deprecated]: syz.2.1265 (pid 7910) Use of int in max_burst socket option. [ 256.104324][ T7910] Use struct sctp_assoc_value instead [ 256.168564][ T7913] loop4: detected capacity change from 0 to 512 [ 256.179945][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.191386][ T7914] loop2: detected capacity change from 0 to 1756 [ 256.208956][ T7914] iso9660: Unknown parameter '' [ 256.213021][ T7913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.411768][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.431362][ T7921] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 256.727872][ T7931] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 257.349253][ T7955] loop4: detected capacity change from 0 to 512 [ 257.413915][ T7955] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 258.398336][ T7971] ªªªªªª: renamed from hsr0 (while UP) [ 258.688870][ T7990] loop4: detected capacity change from 0 to 256 [ 258.750392][ T7992] loop1: detected capacity change from 0 to 512 [ 258.763209][ T7992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.880643][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.923030][ T8000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1294'. [ 258.960113][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'. [ 259.048461][ T8010] loop0: detected capacity change from 0 to 256 [ 259.094135][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 259.103232][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 259.136368][ T8011] erspan1: entered promiscuous mode [ 259.145402][ T8011] erspan1: entered allmulticast mode [ 259.335161][ T8021] loop0: detected capacity change from 0 to 256 [ 260.153392][ T11] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 260.346710][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 260.641623][ T8033] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 260.661926][ T8030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.713754][ T8038] loop0: detected capacity change from 0 to 512 [ 260.787247][ T8038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.863530][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.943719][ T8020] loop4: detected capacity change from 0 to 256 [ 260.978673][ T8020] FAT-fs (loop4): Directory bread(block 64) failed [ 260.986924][ T8020] FAT-fs (loop4): Directory bread(block 65) failed [ 260.997644][ T8054] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1309'. [ 261.013075][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1309'. [ 261.026339][ T8020] FAT-fs (loop4): Directory bread(block 66) failed [ 261.033001][ T8020] FAT-fs (loop4): Directory bread(block 67) failed [ 261.039823][ T8020] FAT-fs (loop4): Directory bread(block 68) failed [ 261.046456][ T8020] FAT-fs (loop4): Directory bread(block 69) failed [ 261.053010][ T8020] FAT-fs (loop4): Directory bread(block 70) failed [ 261.059547][ T8020] FAT-fs (loop4): Directory bread(block 71) failed [ 261.066103][ T8020] FAT-fs (loop4): Directory bread(block 72) failed [ 261.072641][ T8020] FAT-fs (loop4): Directory bread(block 73) failed [ 261.101058][ T8062] loop1: detected capacity change from 0 to 256 [ 261.103888][ T8060] loop2: detected capacity change from 0 to 256 [ 261.134307][ T8020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.153186][ T8020] bio_check_eod: 2698 callbacks suppressed [ 261.153201][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.153201][ T8020] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 261.172722][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.172722][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.194580][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.194580][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.217917][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.217917][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.231984][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.231984][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.245830][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.245830][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.289786][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.289786][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.321978][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.321978][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.350827][ T8020] syz.4.1302: attempt to access beyond end of device [ 261.350827][ T8020] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.394836][ T8018] syz.4.1302: attempt to access beyond end of device [ 261.394836][ T8018] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 261.549382][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 261.652684][ T8078] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 261.722653][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.905898][ T8096] loop1: detected capacity change from 0 to 1024 [ 261.912807][ T8096] EXT4-fs: Ignoring removed bh option [ 261.972882][ T8087] loop2: detected capacity change from 0 to 4096 [ 262.003065][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.057216][ T8087] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 262.069500][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 262.069517][ T28] audit: type=1400 audit(2000000046.412:1225): avc: denied { write } for pid=8095 comm="syz.1.1326" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.177284][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.328984][ T8118] loop1: detected capacity change from 0 to 256 [ 263.005169][ T8087] loop2: detected capacity change from 0 to 2048 [ 263.239846][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 263.414845][ T8159] loop2: detected capacity change from 0 to 1024 [ 263.415206][ T8159] EXT4-fs: Ignoring removed bh option [ 263.597195][ T8159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.622115][ T28] audit: type=1400 audit(2000000048.039:1226): avc: denied { write } for pid=8158 comm="syz.2.1348" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.658399][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.083030][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.123908][ T8200] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.139549][ T8211] set_capacity_and_notify: 2 callbacks suppressed [ 264.139569][ T8211] loop0: detected capacity change from 0 to 1024 [ 264.155296][ T8211] EXT4-fs: Ignoring removed bh option [ 264.207273][ T28] audit: type=1400 audit(2000000048.638:1227): avc: denied { write } for pid=8199 comm="syz.2.1363" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.232951][ T8200] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1363: bg 0: block 112: padding at end of block bitmap is not set [ 264.253117][ T8211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.292397][ T28] audit: type=1400 audit(2000000048.680:1228): avc: denied { write } for pid=8199 comm="syz.2.1363" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.330743][ T8219] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1363: Freeing blocks not in datazone - block = 0, count = 16 [ 264.332547][ T28] audit: type=1400 audit(2000000048.732:1229): avc: denied { write } for pid=8204 comm="syz.0.1366" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.435128][ T8224] loop4: detected capacity change from 0 to 256 [ 264.450584][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.473267][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.701686][ T8239] team0: Mode changed to "activebackup" [ 264.725537][ T8232] loop2: detected capacity change from 0 to 4096 [ 264.732266][ T8232] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 264.788034][ T8232] loop2: detected capacity change from 0 to 2048 [ 264.815482][ T8245] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1377'. [ 264.905011][ T8249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1378'. [ 264.923013][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1378'. [ 265.092195][ T8251] loop1: detected capacity change from 0 to 256 [ 266.291041][ T11] IPVS: starting estimator thread 0... [ 266.456515][ T8269] program syz.4.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.560981][ T8272] IPVS: using max 2208 ests per chain, 110400 per kthread [ 267.093268][ T8297] loop0: detected capacity change from 0 to 1024 [ 267.130779][ T8297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.143598][ T8297] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.169777][ T8297] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1404: bg 0: block 112: padding at end of block bitmap is not set [ 267.185115][ T8297] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1404: Freeing blocks not in datazone - block = 0, count = 16 [ 267.212890][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 267.288149][ T28] audit: type=1400 audit(2000000051.756:1230): avc: denied { write } for pid=8296 comm="syz.0.1404" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.447978][ T28] audit: type=1400 audit(2000000051.756:1231): avc: denied { write } for pid=8296 comm="syz.0.1404" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.681210][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1405'. [ 267.747065][ T8327] loop2: detected capacity change from 0 to 1024 [ 267.808845][ T8327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.828182][ T8327] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.831294][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1405'. [ 267.876761][ T28] audit: type=1326 audit(2000000000.440:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.3.1410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf2ad7ce59 code=0x0 [ 267.898836][ T8327] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1407: bg 0: block 112: padding at end of block bitmap is not set [ 267.901637][ T28] audit: type=1400 audit(2000000000.440:1233): avc: denied { write } for pid=8326 comm="syz.2.1407" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.901670][ T28] audit: type=1400 audit(2000000000.440:1234): avc: denied { write } for pid=8326 comm="syz.2.1407" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.962575][ T8345] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 267.975253][ T8345] EXT4-fs (loop2): This should not happen!! Data will be lost [ 267.975253][ T8345] [ 267.984987][ T8345] EXT4-fs (loop2): Total free blocks count 0 [ 267.991028][ T8345] EXT4-fs (loop2): Free/Dirty block details [ 267.997013][ T8345] EXT4-fs (loop2): free_blocks=0 [ 268.002020][ T8345] EXT4-fs (loop2): dirty_blocks=16 [ 268.007180][ T8345] EXT4-fs (loop2): Block reservation details [ 268.013968][ T8345] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 268.021217][ T8327] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1407: lblock 0 mapped to illegal pblock 0 (length 6) [ 268.036181][ T8327] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.1407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 268.051923][ T28] audit: type=1400 audit(2000000000.598:1235): avc: denied { accept } for pid=8342 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.074006][ T28] audit: type=1400 audit(2000000000.598:1236): avc: denied { shutdown } for pid=8342 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.107103][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.128304][ T8349] loop4: detected capacity change from 0 to 256 [ 268.143672][ T8351] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1412'. [ 268.167530][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1412'. [ 268.214986][ T8355] loop4: detected capacity change from 0 to 512 [ 268.227542][ T8355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.257431][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.274622][ T8358] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1426'. [ 268.283873][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1426'. [ 268.648873][ T3080] IPVS: starting estimator thread 0... [ 268.773700][ T8367] IPVS: using max 2208 ests per chain, 110400 per kthread [ 268.789171][ T7293] batadv1: left promiscuous mode [ 269.470700][ T8373] team0: No ports can be present during mode change [ 270.758114][ T8390] loop0: detected capacity change from 0 to 512 [ 270.800961][ T8390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.028616][ T8400] program syz.4.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.466215][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.559983][ T8407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1432'. [ 271.572321][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 271.648923][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 271.696466][ T8423] loop0: detected capacity change from 0 to 512 [ 271.724722][ T8423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.744380][ T8427] loop4: detected capacity change from 0 to 256 [ 271.868908][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.883880][ T8432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1445'. [ 271.897945][ T8430] loop1: detected capacity change from 0 to 4096 [ 271.931153][ T8430] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 272.036583][ T8445] random: crng reseeded on system resumption [ 272.073794][ T8450] loop1: detected capacity change from 0 to 2048 [ 272.092349][ T28] audit: type=1326 audit(2000000004.808:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.4.1449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58acfce59 code=0x0 [ 272.167047][ T8454] loop2: detected capacity change from 0 to 4096 [ 272.173974][ T8454] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 272.402870][ T28] audit: type=1326 audit(2000000005.186:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed2e3ce59 code=0x7ffc0000 [ 272.430559][ T28] audit: type=1326 audit(2000000005.196:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed2e3ce59 code=0x7ffc0000 [ 272.466493][ T28] audit: type=1326 audit(2000000005.196:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed2e3ce59 code=0x7ffc0000 [ 272.492373][ T28] audit: type=1326 audit(2000000005.196:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f2ed2e3ce59 code=0x7ffc0000 [ 272.527576][ T28] audit: type=1326 audit(2000000005.196:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed2e3ce59 code=0x7ffc0000 [ 272.553647][ T28] audit: type=1326 audit(2000000005.196:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ed2e3cbc2 code=0x7ffc0000 [ 272.572645][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 272.582130][ T28] audit: type=1326 audit(2000000005.196:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2ed2e3cc57 code=0x7ffc0000 [ 272.613211][ T28] audit: type=1326 audit(2000000005.196:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2ed2df9b51 code=0x7ffc0000 [ 272.639734][ T28] audit: type=1326 audit(2000000005.196:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.1456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2ed2e3dc49 code=0x7ffc0000 [ 273.171045][ T8487] loop4: detected capacity change from 0 to 4096 [ 273.180136][ T8487] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 273.294047][ T8493] loop1: detected capacity change from 0 to 512 [ 273.300650][ T8487] loop4: detected capacity change from 0 to 2048 [ 273.331106][ T8493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.388317][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.606361][ T8517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1476'. [ 273.606398][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1476'. [ 273.693760][ T8524] loop0: detected capacity change from 0 to 512 [ 273.728213][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.753432][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1480'. [ 273.767660][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.018689][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 274.080755][ T8536] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 274.090834][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 274.137184][ T3080] IPVS: starting estimator thread 0... [ 274.242463][ T8555] IPVS: using max 2208 ests per chain, 110400 per kthread [ 274.365576][ T8556] EXT4-fs: Ignoring removed bh option [ 274.403306][ T8556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.957193][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.210613][ T8585] set_capacity_and_notify: 3 callbacks suppressed [ 276.210633][ T8585] loop4: detected capacity change from 0 to 256 [ 276.338697][ T8591] random: crng reseeded on system resumption [ 276.416230][ T8596] __nla_validate_parse: 4 callbacks suppressed [ 276.416249][ T8596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1506'. [ 276.450424][ T8598] loop4: detected capacity change from 0 to 256 [ 276.491876][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'. [ 276.806859][ T8607] loop1: detected capacity change from 0 to 1024 [ 276.817868][ T8607] EXT4-fs: Ignoring removed bh option [ 276.841000][ T8607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.857163][ T28] kauditd_printk_skb: 300 callbacks suppressed [ 276.857180][ T28] audit: type=1400 audit(2000000009.868:1547): avc: denied { write } for pid=8606 comm="syz.1.1510" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.507981][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.583707][ T8617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1513'. [ 277.608046][ T8622] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1516'. [ 277.624582][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1513'. [ 277.997534][ T8639] loop1: detected capacity change from 0 to 256 [ 279.819314][ T8659] random: crng reseeded on system resumption [ 279.832090][ T8664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1529'. [ 279.914787][ T28] audit: type=1326 audit(2000000013.059:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.4.1528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58acfce59 code=0x0 [ 279.942735][ T8671] loop0: detected capacity change from 0 to 512 [ 279.956379][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 279.991479][ T8671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.037447][ T8678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1534'. [ 280.046474][ T8678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'. [ 280.063229][ T28] audit: type=1326 audit(2000000013.185:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.2.1533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fec8bce59 code=0x0 [ 280.089305][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.113554][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1535'. [ 280.152068][ T8682] loop0: detected capacity change from 0 to 256 [ 281.389758][ T8707] loop4: detected capacity change from 0 to 512 [ 281.438486][ T8710] __nla_validate_parse: 1 callbacks suppressed [ 281.438500][ T8710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1547'. [ 281.454274][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'. [ 281.482018][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.551939][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1547'. [ 281.589944][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.038200][ T8718] loop1: detected capacity change from 0 to 1024 [ 282.053090][ T8718] EXT4-fs: Ignoring removed bh option [ 282.144344][ T8718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.157351][ T2982] ================================================================== [ 282.165502][ T2982] BUG: KCSAN: data-race in d_delete / path_lookupat [ 282.172144][ T2982] [ 282.174508][ T2982] read-write to 0xffff888108565c00 of 4 bytes by task 3293 on cpu 1: [ 282.182628][ T2982] d_delete+0xbe/0xe0 [ 282.186655][ T2982] d_delete_notify+0x32/0x100 [ 282.191375][ T2982] vfs_unlink+0x285/0x490 [ 282.195734][ T2982] filename_unlinkat+0x1dc/0x410 [ 282.200701][ T2982] __se_sys_unlink+0x2b/0xe0 [ 282.205322][ T2982] __x64_sys_unlink+0x1f/0x30 [ 282.210039][ T2982] x64_sys_call+0x2eb6/0x3020 [ 282.214760][ T2982] do_syscall_64+0x136/0x3c0 [ 282.219383][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.225294][ T2982] [ 282.227631][ T2982] read to 0xffff888108565c00 of 4 bytes by task 2982 on cpu 0: [ 282.235184][ T2982] path_lookupat+0x19b/0x4c0 [ 282.239796][ T2982] filename_lookup+0x18f/0x390 [ 282.244589][ T2982] do_readlinkat+0x74/0x2f0 [ 282.249111][ T2982] __x64_sys_readlink+0x47/0x60 [ 282.253981][ T2982] x64_sys_call+0x2b51/0x3020 [ 282.258685][ T2982] do_syscall_64+0x136/0x3c0 [ 282.263302][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.269264][ T2982] [ 282.271608][ T2982] value changed: 0x00300180 -> 0x00004080 [ 282.277337][ T2982] [ 282.279681][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 282.285848][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 282.294715][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.304786][ T2982] ================================================================== [ 282.313136][ T28] audit: type=1326 audit(2000000015.442:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.3.1554" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2ad7ce59 code=0x0 [ 282.338293][ T28] audit: type=1400 audit(2000000015.442:1551): avc: denied { write } for pid=8717 comm="syz.1.1550" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.397488][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 282.525479][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.