last executing test programs: 16.719083422s ago: executing program 1 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7008000089df8a6d6d793000"/25], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x239f, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13.565689703s ago: executing program 1 (id=986): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x24008054}, 0x20000001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x100, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40011}, 0x90) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='erspan0\x00'}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)=""/218, 0x14e, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000081000000090000000900000080800000", @ANYRES32=0x1, @ANYBLOB="0500000083200000000000000000000000000000b54b8fe4402c19f738fb2a2b687b5ee3", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300000000000000050000000d00000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_emit_ethernet(0x36, 0x0, 0x0) (async) r8 = io_uring_setup(0x3b5f, &(0x7f0000000700)={0x0, 0x30a5, 0x0, 0xffffffff, 0x102}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000902, 0x0, &(0x7f00000005c0)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="9254933ce4a7ca3c322658f6085a9115ea4fd85d798879674daeecbfae5bd9ae2f27349d5c387c4884919c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0xb, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13.227883341s ago: executing program 1 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000003b80)=[{{0x0, 0xc3ff, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107c00e0000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r5) socket$inet(0x2, 0x2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11.263994705s ago: executing program 1 (id=999): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100", 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x80001001, 0x2000000}, 0x0, 0x0, 0x0) 11.006764622s ago: executing program 1 (id=1000): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x4069, 0x7df, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x4102) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 9.121051574s ago: executing program 1 (id=1004): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22ed}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x51, 0x1, 0x1, 0x0, 0xb996}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2400c844) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = memfd_secret(0x0) ioctl$KDSKBENT(r5, 0x4b47, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x271, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(0x0, 0x0) unlink(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) socketpair$unix(0x2d, 0x3, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) 4.611186866s ago: executing program 0 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.610618156s ago: executing program 2 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.570449037s ago: executing program 0 (id=1040): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x4069, 0x7df, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="f3"], 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x4102) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 4.487297939s ago: executing program 2 (id=1042): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9", 0x29, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x6f1, @private0, 0x7, 0x2}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x4000000) memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000004dc0)=0x1000) syz_open_dev$usbfs(0x0, 0x200, 0x1e1282) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=mnterleave22-5:']) 4.42212595s ago: executing program 4 (id=1043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010080000033000000ffffffff0000000000000000000000000000000000040000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000020000000000000000"], 0x104}}, 0x0) 4.383584441s ago: executing program 3 (id=1044): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000003000/0xa000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000)="ad18111de24a81ac38f446d7bf185ba35f9a18682a0fc0944d1924fbbb7ed65a37bf323c8bbc94c85c02daa73c7e691f4b78620566174fa6e0bb08aee22ed34bf39f3d32d0ccd3ddd984703fc76ace4c3efb8a15b5a7d02cf0211a0dc65dbfb42181f8ce7933fd7236ecd974c7a77997e8f0dff04fd8a025f2f6d9967a80cd05f3b90ca8130abe5dee8917b2d9aabbfc44d15d82af2fe33c200eb8999ea7302acfad15f0ec1c2f173ec60618a583", 0xae, r0}, 0x68) connect$inet(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x9f0, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xa8, 0xc8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@quota={{0x38}, {0x300, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x850, 0x890, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) read(r2, &(0x7f0000001400)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xe9, "7958a275870cbd74230fb33a386210043b7cb4dc11d2303b808061f9e45bce11e4531951f8bddd537840cae79c529a6f7ec723fb5e2d7cae9449505d4d426dee3fdea87fce00dc24efe386c752aa2a4933cdd2fec85dcbe548a9fe1013a5b9529b68dee74d02112115d002e78845d4908cad88e4be37b242aee860fe14c871dce563555025e04bf366d91efd43beb32a4ed1c685907df89a9795bf0d2b00a4e4c883f16660b9038d0f7e71c285fe0d1f8ff41c443c02831b99f9efbe68374b9b34722a51b23132aa949790a54bd657886903c2a830734538b05854ed1a84b5cc917856d0a9cf6e2589"}, &(0x7f0000000280)=0xf1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x4ca85e8e, 0x20}, &(0x7f0000000300)=0xc) 4.380337621s ago: executing program 0 (id=1045): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x20000881) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x83d00, 0x2b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 4.224633395s ago: executing program 4 (id=1046): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0x59}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r1 = semget(0x1, 0x4, 0x764) semop(r1, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r1, &(0x7f0000000380)=[{0x2, 0x1ff, 0x1000}, {0x4, 0x1, 0x1000}, {0x0, 0x40, 0x800}, {0x1, 0x7ff, 0x800}, {0x1, 0x4, 0x1000}], 0x5, &(0x7f00000003c0)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff0000ff], 'veth1_to_hsr\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 4.173662756s ago: executing program 3 (id=1047): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}], 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001002, 0xf64, 0xfffffffd}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x9, 0x4) futex(&(0x7f0000000180), 0x5, 0xfffffffd, 0x0, 0x0, 0x9a020006) 4.173170146s ago: executing program 2 (id=1048): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4581, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0b2ce000000100000000050000000000360000000000"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x32600) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf709383a00fe880000000000000000000000000300ff020000000000000000000000000001020090780000000060fd9063e1ff390000000000000000000000000000000001000000000000000000000000000008986500000000000000"], 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000b40)={{}, 0x0, 0x1c, @inherit={0x50, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000001000008000000000a1f00000000000008000000000000000e00000000000000ffffff7f0000000001000000000000009fc1000000000000fb030000000000000a00009712de43474fc474d038b3494e1c8dbfec60f48679e1324958ed54871b170eed2d7a81dfab6e05395289fe201bad20ec1000"/139]}, @devid}) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x9) 4.160334136s ago: executing program 0 (id=1049): socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x1, @local}, 0x4a, {0x2, 0x4e21, @remote}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x421a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 4.072711798s ago: executing program 4 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.071988338s ago: executing program 3 (id=1051): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000300000073907800000300e000000100000000fe9a90780200000000000000"], 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, 0x0, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x7}, 0x16, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = memfd_create(0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f00000027c0)={{0x0, 0x3ff, 0x9, 0x8, 0xfffffffffffffffd, 0x5, 0x9, 0x3, 0x3, 0x1, 0x9, 0x81, 0x1ff, 0x8, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000940)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r13}], 0x9, "201c4d94559ddf"}) r14 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000020, &(0x7f00000004c0)=0x3fa, 0x23) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) 4.042087679s ago: executing program 4 (id=1052): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) (async) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) (async) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) syz_emit_ethernet(0x1472, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) flistxattr(r3, &(0x7f0000000680)=""/204, 0xcc) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3, &(0x7f0000000280)=""/196, &(0x7f0000000380)=0xc4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4}, 0x50) 3.855035913s ago: executing program 0 (id=1053): bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x9, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}]}, 0x0, 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2a020400) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.839930584s ago: executing program 2 (id=1054): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000fe88000000000000000000000000010100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000fdff00000000000000000000400000000a00100001"], 0xc4}}, 0x4c050) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000e00000010000000000000000000000004e2000004e2300000a00100033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0xb8}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r4, 0x2, 0x0) getdents(r4, 0x0, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.756005026s ago: executing program 3 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5900, 0x4) sendto$inet(r0, &(0x7f0000000380)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefa4c", 0x25, 0x4004080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.663083597s ago: executing program 3 (id=1056): bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x9, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}]}, 0x0, 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2a020400) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.57637775s ago: executing program 2 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7008000089df8a6d6d793000"/25], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x239f, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.536331011s ago: executing program 0 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7008000089df8a6d6d793000"/25], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x239f, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.67183882s ago: executing program 4 (id=1059): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9", 0x29, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x6f1, @private0, 0x7, 0x2}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x4000000) memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000004dc0)=0x1000) syz_open_dev$usbfs(0x0, 0x200, 0x1e1282) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=mnterleave22-5:']) 616.825286ms ago: executing program 3 (id=1060): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4) socket(0x23, 0x1, 0x1) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRESHEX=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 434.01239ms ago: executing program 4 (id=1061): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x314f886295f16084, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b0700010000000000000b"], 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) 0s ago: executing program 2 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.448045][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 105.491501][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 105.689609][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 105.711488][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 105.788972][ T5393] loop0: detected capacity change from 0 to 2048 [ 105.806681][ T5393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.825486][ T5393] EXT4-fs: Ignoring removed oldalloc option [ 105.862565][ T5393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.938106][ T28] audit: type=1400 audit(1784367207.427:818): avc: denied { write } for pid=5392 comm="syz.0.546" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.184906][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.284220][ T28] audit: type=1400 audit(1784367207.777:819): avc: denied { execute } for pid=5400 comm="syz.4.547" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.424336][ T5380] kexec: Could not allocate control_code_buffer [ 106.505420][ T5411] FAULT_INJECTION: forcing a failure. [ 106.505420][ T5411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.522705][ T5411] CPU: 0 UID: 0 PID: 5411 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.522772][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.522787][ T5411] Call Trace: [ 106.522795][ T5411] [ 106.522805][ T5411] __dump_stack+0x1d/0x30 [ 106.522833][ T5411] dump_stack_lvl+0x95/0xd0 [ 106.522855][ T5411] dump_stack+0x15/0x1b [ 106.522893][ T5411] should_fail_ex+0x25e/0x270 [ 106.522928][ T5411] should_fail+0xb/0x20 [ 106.522957][ T5411] should_fail_usercopy+0x1a/0x20 [ 106.522987][ T5411] _copy_from_user+0x1c/0xb0 [ 106.523055][ T5411] kstrtouint_from_user+0x69/0xf0 [ 106.523087][ T5411] ? avc_policy_seqno+0x15/0x30 [ 106.523155][ T5411] proc_fail_nth_write+0x50/0x160 [ 106.523181][ T5411] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 106.523211][ T5411] vfs_write+0x252/0x990 [ 106.523235][ T5411] ? __fget_files+0x184/0x1c0 [ 106.523337][ T5411] ? mutex_lock+0x57/0x90 [ 106.523373][ T5411] ksys_write+0xdc/0x1a0 [ 106.523397][ T5411] __x64_sys_write+0x40/0x50 [ 106.523419][ T5411] x64_sys_call+0x27e1/0x3020 [ 106.523516][ T5411] do_syscall_64+0x136/0x3c0 [ 106.523543][ T5411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.523568][ T5411] RIP: 0033:0x7f9b7a51e6ce [ 106.523586][ T5411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.523702][ T5411] RSP: 002b:00007f9b78fb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.523724][ T5411] RAX: ffffffffffffffda RBX: 00007f9b78fb76c0 RCX: 00007f9b7a51e6ce [ 106.523739][ T5411] RDX: 0000000000000001 RSI: 00007f9b78fb70a0 RDI: 0000000000000004 [ 106.523763][ T5411] RBP: 00007f9b78fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.523780][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.523796][ T5411] R13: 00007f9b7a7e6038 R14: 00007f9b7a7e5fa0 R15: 00007ffff7bd2d98 [ 106.523879][ T5411] [ 106.743175][ T5417] loop3: detected capacity change from 0 to 128 [ 106.757529][ T5415] loop4: detected capacity change from 0 to 512 [ 106.758945][ T5417] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.785450][ T5415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.806982][ T5417] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.837016][ T28] audit: type=1400 audit(1784367208.327:820): avc: denied { write } for pid=5416 comm="syz.3.554" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.895327][ T5415] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.910467][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.033124][ T5426] loop3: detected capacity change from 0 to 512 [ 107.081839][ T5426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.140698][ T5424] loop0: detected capacity change from 0 to 512 [ 107.163096][ T5424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.175578][ T5426] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.557: invalid indirect mapped block 4294967295 (level 0) [ 107.208311][ T5424] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.556: invalid indirect mapped block 4294967295 (level 0) [ 107.226201][ T5426] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.227046][ T5426] EXT4-fs (loop3): Remounting filesystem read-only [ 107.236438][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 107.236485][ C1] EXT4-fs (loop3): initial error at time 1784367208: ext4_free_branches:1023: inode 16 [ 107.236612][ C1] EXT4-fs (loop3): last error at time 1784367208: ext4_free_branches:1023: inode 16 [ 107.525466][ T5433] loop2: detected capacity change from 0 to 512 [ 108.141325][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.151321][ T5433] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.158931][ T5426] EXT4-fs (loop3): 1 orphan inode deleted [ 108.159553][ T5433] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.165615][ T5424] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.174427][ T5426] EXT4-fs (loop3): 1 truncate cleaned up [ 108.180415][ T5424] EXT4-fs (loop0): Remounting filesystem read-only [ 108.184465][ T5433] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 108.189755][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 108.196285][ T5433] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.201428][ T5426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.207500][ C0] EXT4-fs (loop0): initial error at time 1784367209: ext4_free_branches:1023: inode 16 [ 108.238923][ T5433] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 108.241576][ C0] [ 108.254916][ T5433] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.558: bg 0: block 15: invalid block bitmap [ 108.258107][ C0] EXT4-fs (loop0): last error at time 1784367209: ext4_free_branches:1023 [ 108.260939][ T5433] loop2: lost filesystem error report for type 5 error -117 [ 108.273076][ C0] : inode 16 [ 108.285892][ T5433] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.289098][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.289129][ C0] [ 108.289117][ C1] EXT4-fs (loop2): initial error at time 1784367209: ext4_validate_block_bitmap:432 [ 108.289156][ C1] EXT4-fs (loop2): last error at time 1784367209: ext4_validate_block_bitmap:432 [ 108.329504][ T5433] loop2: lost filesystem error report for type 5 error -117 [ 108.331686][ T5424] EXT4-fs (loop0): 1 orphan inode deleted [ 108.345617][ T5424] EXT4-fs (loop0): 1 truncate cleaned up [ 108.361699][ T5433] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.558: data will be lost [ 108.372745][ T5433] EXT4-fs (loop2): 1 truncate cleaned up [ 108.380091][ T5433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.695021][ T5424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.036020][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.110464][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.127038][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.169332][ T5438] loop4: detected capacity change from 0 to 128 [ 109.176593][ T5438] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.195723][ T5438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.213068][ T5440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5440 comm=syz.3.560 [ 109.218388][ T5442] random: crng reseeded on system resumption [ 109.225922][ T28] audit: type=1400 audit(1784367210.707:821): avc: denied { execute } for pid=5441 comm="syz.2.562" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.375423][ T28] audit: type=1400 audit(1784367210.817:822): avc: denied { read } for pid=5441 comm="syz.2.562" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.490506][ T311] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.312177][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 110.312206][ T28] audit: type=1400 audit(1784367211.807:824): avc: denied { ioctl } for pid=5462 comm="syz.2.565" path="socket:[11274]" dev="sockfs" ino=11274 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.528994][ T5469] loop4: detected capacity change from 0 to 128 [ 110.592773][ T5469] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.643119][ T5469] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.682135][ T28] audit: type=1400 audit(1784367212.177:825): avc: denied { write } for pid=5468 comm="syz.4.567" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.743096][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.824991][ T5475] loop3: detected capacity change from 0 to 512 [ 110.928571][ T5475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.956146][ T5477] syzkaller0: entered promiscuous mode [ 110.979724][ T5477] syzkaller0: entered allmulticast mode [ 110.993982][ T5475] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.569: invalid indirect mapped block 4294967295 (level 0) [ 111.065117][ T5475] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.067175][ T5475] EXT4-fs (loop3): Remounting filesystem read-only [ 111.076465][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.076530][ C1] EXT4-fs (loop3): initial error at time 1784367212: ext4_free_branches:1023: inode 16 [ 111.076614][ C1] EXT4-fs (loop3): last error at time 1784367212: ext4_free_branches:1023: inode 16 [ 111.125072][ T5480] loop2: detected capacity change from 0 to 512 [ 111.155282][ T5480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.299813][ T5475] EXT4-fs (loop3): 1 orphan inode deleted [ 111.322825][ T5475] EXT4-fs (loop3): 1 truncate cleaned up [ 111.333510][ T5480] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.571: invalid indirect mapped block 4294967295 (level 0) [ 111.362009][ T5475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.406298][ T5480] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.408253][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 111.423905][ C1] EXT4-fs (loop2): initial error at time 1784367212: ext4_free_branches:1023: inode 16 [ 111.433682][ C1] EXT4-fs (loop2): last error at time 1784367212: ext4_free_branches:1023: inode 16 [ 111.474977][ T5480] EXT4-fs (loop2): Remounting filesystem read-only [ 111.483973][ T5480] EXT4-fs (loop2): 1 orphan inode deleted [ 111.647092][ T5480] EXT4-fs (loop2): 1 truncate cleaned up [ 111.688401][ T5480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.748749][ T5489] loop0: detected capacity change from 0 to 512 [ 111.914752][ T5489] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.573: inode has both inline data and extents flags [ 112.166436][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.216928][ T5489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.217205][ T5489] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.573: couldn't read orphan inode 15 (err -117) [ 112.226437][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 112.226480][ C1] EXT4-fs (loop0): initial error at time 1784367213: ext4_orphan_get:1399: inode 15 [ 112.226514][ C1] EXT4-fs (loop0): last error at time 1784367213: ext4_orphan_get:1399: inode 15 [ 112.278530][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.505424][ T5500] futex_wake_op: syz.3.576 tries to shift op by 32; fix this program [ 113.084035][ T5489] loop0: lost filesystem error report for type 5 error -117 [ 113.085458][ T5489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.111753][ T5504] loop3: detected capacity change from 0 to 164 [ 113.163741][ T28] audit: type=1400 audit(1784367214.637:826): avc: denied { name_bind } for pid=5505 comm="syz.4.578" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 113.422121][ T5504] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 113.503171][ T5504] syzkaller0: entered promiscuous mode [ 113.532551][ T5504] syzkaller0: entered allmulticast mode [ 113.587313][ T28] audit: type=1400 audit(1784367215.057:827): avc: denied { write } for pid=5486 comm="syz.0.573" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.767628][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 113.838214][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 113.887451][ T5511] loop3: detected capacity change from 0 to 8192 [ 113.904703][ T28] audit: type=1400 audit(1784367215.397:828): avc: denied { getopt } for pid=5517 comm="syz.1.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.963993][ T5522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.583'. [ 113.977437][ T5511] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 114.024790][ T28] audit: type=1400 audit(1784367215.517:829): avc: denied { setopt } for pid=5521 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.254237][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 114.412822][ T5529] loop4: detected capacity change from 0 to 512 [ 114.456069][ T28] audit: type=1400 audit(1784367215.737:830): avc: denied { write } for pid=5486 comm="syz.0.573" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.494962][ T5529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.542690][ T5532] loop2: detected capacity change from 0 to 512 [ 114.559245][ T5529] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.585: invalid indirect mapped block 4294967295 (level 0) [ 114.578470][ T5529] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 114.579099][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 114.588455][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 114.588537][ C0] EXT4-fs (loop4): initial error at time 1784367216: ext4_free_branches:1023: inode 16 [ 114.588700][ C0] EXT4-fs (loop4): last error at time 1784367216: ext4_free_branches:1023: inode 16 [ 114.634280][ T5535] futex_wake_op: syz.1.587 tries to shift op by 32; fix this program [ 114.647706][ T5529] EXT4-fs (loop4): 1 orphan inode deleted [ 114.654666][ T5529] EXT4-fs (loop4): 1 truncate cleaned up [ 114.665061][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.671764][ T5532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.698558][ T5532] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.701496][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.829588][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.843572][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.956576][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 114.976892][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 114.991453][ T5511] loop3: p252 could not be added: -ENOMEM [ 115.021253][ T28] audit: type=1400 audit(1784367216.517:831): avc: denied { read } for pid=5562 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 115.094550][ T5571] futex_wake_op: syz.1.600 tries to shift op by 32; fix this program [ 115.095528][ T5566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.122453][ T5573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.133330][ T5566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.340535][ T5578] syzkaller0: entered promiscuous mode [ 115.353204][ T5578] syzkaller0: entered allmulticast mode [ 115.755713][ T5589] netlink: 108 bytes leftover after parsing attributes in process `syz.1.607'. [ 115.779632][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 115.781859][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 115.842050][ T5589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 116.052452][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.082891][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.123138][ T5566] loop2: detected capacity change from 0 to 512 [ 116.467000][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 116.472033][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory [ 116.484795][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop3p36, 10) failed: No such file or directory [ 116.498103][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 116.518427][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 116.521970][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory [ 116.531400][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 116.538780][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop3p34, 10) failed: No such file or directory [ 116.549665][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory [ 116.559693][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 116.705317][ T5621] futex_wake_op: syz.3.611 tries to shift op by 32; fix this program [ 116.744101][ T5625] FAULT_INJECTION: forcing a failure. [ 116.744101][ T5625] name failslab, interval 1, probability 0, space 0, times 0 [ 116.783336][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz.0.613 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.783370][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.783393][ T5625] Call Trace: [ 116.783401][ T5625] [ 116.783410][ T5625] __dump_stack+0x1d/0x30 [ 116.783449][ T5625] dump_stack_lvl+0x95/0xd0 [ 116.783478][ T5625] dump_stack+0x15/0x1b [ 116.783504][ T5625] should_fail_ex+0x25e/0x270 [ 116.783538][ T5625] should_failslab+0x8c/0xb0 [ 116.783567][ T5625] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 116.783680][ T5625] ? __alloc_skb+0x2db/0x6f0 [ 116.783723][ T5625] ? __alloc_skb+0x2db/0x6f0 [ 116.783761][ T5625] __alloc_skb+0x2db/0x6f0 [ 116.783820][ T5625] ? __alloc_skb+0x205/0x6f0 [ 116.783891][ T5625] netlink_alloc_large_skb+0xbf/0xf0 [ 116.783913][ T5625] netlink_sendmsg+0x40c/0x6f0 [ 116.784002][ T5625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.784031][ T5625] ____sys_sendmsg+0x532/0x580 [ 116.784095][ T5625] ___sys_sendmsg+0x195/0x1e0 [ 116.784142][ T5625] __x64_sys_sendmsg+0xd4/0x160 [ 116.784191][ T5625] x64_sys_call+0x194c/0x3020 [ 116.784274][ T5625] do_syscall_64+0x136/0x3c0 [ 116.784300][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.784325][ T5625] RIP: 0033:0x7f50971dde99 [ 116.784341][ T5625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.784382][ T5625] RSP: 002b:00007f5095c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.784408][ T5625] RAX: ffffffffffffffda RBX: 00007f5097465fa0 RCX: 00007f50971dde99 [ 116.784425][ T5625] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 116.784491][ T5625] RBP: 00007f5095c37090 R08: 0000000000000000 R09: 0000000000000000 [ 116.784506][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.784521][ T5625] R13: 00007f5097466038 R14: 00007f5097465fa0 R15: 00007ffeff6350c8 [ 116.784543][ T5625] [ 117.037214][ T5628] loop0: detected capacity change from 0 to 164 [ 117.054847][ T5628] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 117.087483][ T5628] syzkaller0: entered promiscuous mode [ 117.107086][ T5628] syzkaller0: entered allmulticast mode [ 117.292709][ T5637] loop3: detected capacity change from 0 to 512 [ 117.303166][ T5636] loop2: detected capacity change from 0 to 4096 [ 117.319240][ T5636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.338768][ T5637] EXT4-fs: Invalid want_extra_isize 4 [ 117.518527][ T28] audit: type=1400 audit(1784367219.007:832): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 117.521964][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.826504][ T28] audit: type=1326 audit(1784367219.317:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a55de99 code=0x7ffc0000 [ 117.913976][ T5649] loop0: detected capacity change from 0 to 512 [ 117.932477][ T5655] futex_wake_op: syz.1.625 tries to shift op by 32; fix this program [ 118.008867][ T28] audit: type=1326 audit(1784367219.317:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a55de99 code=0x7ffc0000 [ 118.039403][ T5649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.081513][ T5668] loop4: detected capacity change from 0 to 128 [ 118.097770][ T5649] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.622: invalid indirect mapped block 4294967295 (level 0) [ 118.123050][ T5668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.138607][ T5649] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.140777][ T5649] EXT4-fs (loop0): Remounting filesystem read-only [ 118.150247][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 118.150313][ C0] EXT4-fs (loop0): initial error at time 1784367219: ext4_free_branches:1023: inode 16 [ 118.150380][ C0] EXT4-fs (loop0): last error at time 1784367219: ext4_free_branches:1023: inode 16 [ 118.185304][ T28] audit: type=1326 audit(1784367219.317:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a55de99 code=0x7ffc0000 [ 118.186124][ T5668] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.257147][ T28] audit: type=1326 audit(1784367219.317:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9b7a55de99 code=0x7ffc0000 [ 118.272029][ T5649] EXT4-fs (loop0): 1 orphan inode deleted [ 118.313066][ T5649] EXT4-fs (loop0): 1 truncate cleaned up [ 118.323175][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.323895][ T5649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.355046][ T28] audit: type=1326 audit(1784367219.367:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b7a51e6ce code=0x7ffc0000 [ 118.395347][ T5681] loop2: detected capacity change from 0 to 256 [ 118.407167][ T5683] loop4: detected capacity change from 0 to 164 [ 118.415205][ T28] audit: type=1326 audit(1784367219.387:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b7a51e6ce code=0x7ffc0000 [ 118.457134][ T5683] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 118.470354][ T28] audit: type=1326 audit(1784367219.397:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b7a51e6ce code=0x7ffc0000 [ 118.504388][ T5683] syzkaller0: entered promiscuous mode [ 118.513505][ T5681] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.519900][ T5683] syzkaller0: entered allmulticast mode [ 118.576778][ T28] audit: type=1326 audit(1784367219.397:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b7a51e6ce code=0x7ffc0000 [ 118.640535][ T28] audit: type=1326 audit(1784367219.397:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.3.627" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b7a51e6ce code=0x7ffc0000 [ 118.808883][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.961626][ T5704] loop4: detected capacity change from 0 to 128 [ 118.993479][ T5704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.024858][ T5704] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.061603][ T5700] bridge0: port 3(team0) entered blocking state [ 119.067940][ T5700] bridge0: port 3(team0) entered forwarding state [ 119.081946][ T5710] futex_wake_op: syz.0.641 tries to shift op by 32; fix this program [ 119.120640][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.205648][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.270071][ T5715] loop4: detected capacity change from 0 to 512 [ 119.341535][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.365020][ T5715] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.486328][ T5723] syzkaller0: entered promiscuous mode [ 119.506266][ T5723] syzkaller0: entered allmulticast mode [ 119.512950][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.735629][ T5742] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.750540][ T5742] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.785881][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.865649][ T5748] __nla_validate_parse: 4 callbacks suppressed [ 119.865669][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 119.980910][ T5757] futex_wake_op: syz.3.654 tries to shift op by 32; fix this program [ 120.227455][ T5768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.287890][ T5772] syzkaller0: entered promiscuous mode [ 120.327478][ T5772] syzkaller0: entered allmulticast mode [ 120.725421][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 121.203644][ T5780] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.216414][ T5768] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 121.237036][ T5768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.267084][ T5780] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.371381][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.524643][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.760345][ T5803] syzkaller0: entered promiscuous mode [ 121.780824][ T5803] syzkaller0: entered allmulticast mode [ 121.808159][ T5803] tipc: Started in network mode [ 121.823829][ T5803] tipc: Node identity a2e6ecaa3cea, cluster identity 4711 [ 121.850524][ T5803] tipc: Enabled bearer , priority 0 [ 121.866741][ T5807] futex_wake_op: syz.1.671 tries to shift op by 32; fix this program [ 121.880702][ T5803] tipc: Resetting bearer [ 121.915672][ T5802] tipc: Resetting bearer [ 121.967862][ T5802] tipc: Disabling bearer [ 122.072231][ T5815] syzkaller0: entered promiscuous mode [ 122.086496][ T5815] syzkaller0: entered allmulticast mode [ 122.104997][ T5820] set_capacity_and_notify: 3 callbacks suppressed [ 122.105015][ T5820] loop0: detected capacity change from 0 to 128 [ 122.159764][ T5820] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.198622][ T5820] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.328294][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.403918][ T5827] loop3: detected capacity change from 0 to 8192 [ 122.445659][ T5832] netlink: 108 bytes leftover after parsing attributes in process `syz.1.680'. [ 122.470094][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 122.494231][ T5827] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 122.516519][ T5837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.680'. [ 122.744057][ T5844] futex_wake_op: syz.0.682 tries to shift op by 32; fix this program [ 122.744803][ T5843] macsec1: entered promiscuous mode [ 122.786444][ T5843] macsec1: entered allmulticast mode [ 122.883918][ T5846] loop2: detected capacity change from 0 to 512 [ 122.936186][ T5846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.964267][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 122.976415][ T5846] EXT4-fs (loop2): 1 truncate cleaned up [ 122.988671][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.133050][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 123.133068][ T28] audit: type=1400 audit(1784367225.615:856): avc: denied { write } for pid=5845 comm="syz.2.683" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.256391][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.882952][ T5876] loop0: detected capacity change from 0 to 256 [ 123.908194][ T5876] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.946086][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop3p35, 10) failed: No such file or directory [ 123.948830][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 123.965021][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory [ 123.979246][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop3p36, 10) failed: No such file or directory [ 123.992485][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop3p37, 10) failed: No such file or directory [ 124.004292][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop3p28, 10) failed: No such file or directory [ 124.015557][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 124.025792][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory [ 124.038024][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 124.049370][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p34, 10) failed: No such file or directory [ 124.241678][ T5880] loop2: detected capacity change from 0 to 256 [ 124.326623][ T5880] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.858911][ T5882] netlink: 'syz.0.694': attribute type 4 has an invalid length. [ 124.906632][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 125.124480][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 125.205198][ T5889] loop3: detected capacity change from 0 to 8192 [ 125.244825][ T5889] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 126.071307][ T5920] netlink: 108 bytes leftover after parsing attributes in process `syz.0.705'. [ 126.181600][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 126.213563][ T5921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.705'. [ 126.392231][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 126.772606][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 127.171154][ T28] audit: type=1400 audit(1784367229.655:857): avc: denied { name_bind } for pid=5937 comm="syz.4.712" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.395525][ T5941] loop4: detected capacity change from 0 to 8192 [ 127.413859][ T5917] loop0: detected capacity change from 0 to 4096 [ 127.443282][ T5917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.501795][ T5941] loop4: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 127.516391][ T5917] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 127.592714][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 127.715461][ T28] audit: type=1400 audit(1784367230.205:858): avc: denied { write } for pid=5916 comm="syz.0.705" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.867357][ T5946] bpf: Bad value for 'gid' [ 127.881393][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.903235][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.280006][ T5962] loop4: detected capacity change from 0 to 128 [ 129.321225][ T5962] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.364242][ T28] audit: type=1400 audit(1784367231.855:859): avc: denied { write } for pid=5961 comm="syz.4.719" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.387809][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 129.387969][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 129.411442][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 129.462123][ T3305] EXT4-fs unmount: 3 callbacks suppressed [ 129.462144][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.501948][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 129.513887][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 129.528680][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 129.543216][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop4p28, 10) failed: No such file or directory [ 129.562499][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory [ 129.572813][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 129.583059][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 130.019062][ T5969] Cannot find del_set index 1 as target [ 130.041760][ T3379] bridge0: entered promiscuous mode [ 130.087837][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 130.200250][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.3.724'. [ 130.281689][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 130.301975][ T5985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.724'. [ 131.184745][ T5981] loop3: detected capacity change from 0 to 4096 [ 131.202397][ T5981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.206683][ T5981] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 131.228774][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.239226][ T28] audit: type=1400 audit(1784367233.725:860): avc: denied { write } for pid=5974 comm="syz.3.724" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.244606][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 131.274694][ T28] audit: type=1400 audit(1784367233.765:861): avc: denied { setopt } for pid=5995 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.480788][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.824359][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 131.969317][ T6010] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 132.015583][ T6010] team0: Port device dummy0 added [ 132.038104][ T5996] loop0: detected capacity change from 0 to 256 [ 132.154011][ T28] audit: type=1326 audit(1784367234.645:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.735" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751a60de99 code=0x0 [ 132.265420][ T6017] futex_wake_op: syz.1.735 tries to shift op by 32; fix this program [ 132.298161][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.307485][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.320337][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.329608][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.347990][ T6021] loop4: detected capacity change from 0 to 1764 [ 132.361539][ T6021] netlink: 'syz.4.737': attribute type 21 has an invalid length. [ 132.467238][ T6021] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 132.523492][ T6021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.737'. [ 132.719422][ T6026] loop0: detected capacity change from 0 to 512 [ 132.738175][ T6026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.753455][ T6026] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.739: invalid indirect mapped block 4294967295 (level 0) [ 132.767978][ T6026] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.768747][ T6026] EXT4-fs (loop0): Remounting filesystem read-only [ 132.784751][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 132.784788][ C0] EXT4-fs (loop0): initial error at time 1784367235: ext4_free_branches:1023: inode 16 [ 132.784998][ C0] EXT4-fs (loop0): last error at time 1784367235: ext4_free_branches:1023: inode 16 [ 132.797345][ T6034] netlink: 108 bytes leftover after parsing attributes in process `syz.3.741'. [ 132.803348][ T6026] EXT4-fs (loop0): 1 orphan inode deleted [ 132.826987][ T6026] EXT4-fs (loop0): 1 truncate cleaned up [ 132.834600][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.845118][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 132.896460][ T6030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.741'. [ 133.069714][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.279090][ T6046] loop0: detected capacity change from 0 to 8192 [ 133.432815][ T6046] loop0: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 133.610892][ T6054] loop2: detected capacity change from 0 to 512 [ 133.807017][ T6054] EXT4-fs (loop2): fragment/cluster size (4096) != block size (1024) [ 134.459716][ T28] audit: type=1400 audit(1784367236.955:863): avc: denied { read } for pid=6049 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.884774][ T6030] loop3: detected capacity change from 0 to 4096 [ 134.960618][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.063860][ T6068] loop4: detected capacity change from 0 to 164 [ 135.116046][ T6068] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 135.213991][ T6030] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 135.235615][ T6068] syzkaller0: entered promiscuous mode [ 135.254824][ T6068] syzkaller0: entered allmulticast mode [ 135.337360][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.410686][ T28] audit: type=1400 audit(1784367237.895:864): avc: denied { write } for pid=6029 comm="syz.3.741" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.515805][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop0p12, 10) failed: No such file or directory [ 135.520049][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 135.525934][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 135.536682][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 135.549498][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 135.556848][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 135.576429][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory [ 135.592056][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 135.605659][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 135.606419][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 135.755945][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.920086][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6109 comm=syz.4.767 [ 135.957384][ T6109] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 136.046423][ T6114] FAULT_INJECTION: forcing a failure. [ 136.046423][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.068532][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.0.768 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.068594][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.068609][ T6114] Call Trace: [ 136.068618][ T6114] [ 136.068627][ T6114] __dump_stack+0x1d/0x30 [ 136.068698][ T6114] dump_stack_lvl+0x95/0xd0 [ 136.068722][ T6114] dump_stack+0x15/0x1b [ 136.068744][ T6114] should_fail_ex+0x25e/0x270 [ 136.068778][ T6114] should_fail+0xb/0x20 [ 136.068819][ T6114] should_fail_usercopy+0x1a/0x20 [ 136.068983][ T6114] _copy_from_user+0x1c/0xb0 [ 136.069033][ T6114] input_event_from_user+0x5e/0x190 [ 136.069057][ T6114] ? input_inject_event+0xd5/0xf0 [ 136.069086][ T6114] evdev_write+0x1b0/0x2b0 [ 136.069179][ T6114] ? __pfx_evdev_write+0x10/0x10 [ 136.069240][ T6114] vfs_write+0x252/0x990 [ 136.069263][ T6114] ? __fget_files+0x184/0x1c0 [ 136.069295][ T6114] ksys_write+0xdc/0x1a0 [ 136.069319][ T6114] __x64_sys_write+0x40/0x50 [ 136.069341][ T6114] x64_sys_call+0x27e1/0x3020 [ 136.069390][ T6114] do_syscall_64+0x136/0x3c0 [ 136.069492][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.069518][ T6114] RIP: 0033:0x7f50971dde99 [ 136.069537][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.069560][ T6114] RSP: 002b:00007f5095c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.069650][ T6114] RAX: ffffffffffffffda RBX: 00007f5097465fa0 RCX: 00007f50971dde99 [ 136.069667][ T6114] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 136.069683][ T6114] RBP: 00007f5095c37090 R08: 0000000000000000 R09: 0000000000000000 [ 136.069698][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.069713][ T6114] R13: 00007f5097466038 R14: 00007f5097465fa0 R15: 00007ffeff6350c8 [ 136.069807][ T6114] [ 136.267455][ T6116] FAULT_INJECTION: forcing a failure. [ 136.267455][ T6116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.281972][ T6116] CPU: 1 UID: 0 PID: 6116 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.282011][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.282055][ T6116] Call Trace: [ 136.282088][ T6116] [ 136.282097][ T6116] __dump_stack+0x1d/0x30 [ 136.282233][ T6116] dump_stack_lvl+0x95/0xd0 [ 136.282259][ T6116] dump_stack+0x15/0x1b [ 136.282283][ T6116] should_fail_ex+0x25e/0x270 [ 136.282317][ T6116] should_fail+0xb/0x20 [ 136.282346][ T6116] should_fail_usercopy+0x1a/0x20 [ 136.282385][ T6116] _copy_from_user+0x1c/0xb0 [ 136.282409][ T6116] do_semtimedop+0x152/0x220 [ 136.282448][ T6116] __x64_sys_semop+0x41/0x50 [ 136.282486][ T6116] x64_sys_call+0x2b04/0x3020 [ 136.282512][ T6116] do_syscall_64+0x136/0x3c0 [ 136.282534][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.282621][ T6116] RIP: 0033:0x7f9b7a55de99 [ 136.282639][ T6116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.282663][ T6116] RSP: 002b:00007f9b78f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 136.282689][ T6116] RAX: ffffffffffffffda RBX: 00007f9b7a7e6090 RCX: 00007f9b7a55de99 [ 136.282705][ T6116] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000000 [ 136.282799][ T6116] RBP: 00007f9b78f96090 R08: 0000000000000000 R09: 0000000000000000 [ 136.282814][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.282829][ T6116] R13: 00007f9b7a7e6128 R14: 00007f9b7a7e6090 R15: 00007ffff7bd2d98 [ 136.282852][ T6116] [ 136.673970][ T6110] vlan3: entered allmulticast mode [ 136.683776][ T6110] bond1: entered allmulticast mode [ 136.774195][ T6136] __nla_validate_parse: 3 callbacks suppressed [ 136.774214][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 136.792495][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 136.881534][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'. [ 137.002285][ T6148] tmpfs: Bad value for 'mpol' [ 138.194681][ T28] audit: type=1400 audit(1784367240.685:865): avc: denied { setopt } for pid=6157 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.797881][ T6144] loop4: detected capacity change from 0 to 512 [ 138.808149][ T28] audit: type=1400 audit(1784367241.285:866): avc: denied { accept } for pid=6157 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.869556][ T6144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.936324][ T6144] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.778: invalid indirect mapped block 4294967295 (level 0) [ 138.950633][ T6144] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 138.951176][ T6144] EXT4-fs (loop4): Remounting filesystem read-only [ 138.960679][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 138.960727][ C0] EXT4-fs (loop4): initial error at time 1784367241: ext4_free_branches:1023: inode 16 [ 138.960876][ C0] EXT4-fs (loop4): last error at time 1784367241: ext4_free_branches:1023: inode 16 [ 139.036260][ T6144] EXT4-fs (loop4): 1 orphan inode deleted [ 139.042868][ T6144] EXT4-fs (loop4): 1 truncate cleaned up [ 139.054025][ T6144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.080211][ T6152] syz.1.782 (6152) used greatest stack depth: 9360 bytes left [ 139.169842][ T6177] loop2: detected capacity change from 0 to 1024 [ 139.199481][ T6156] syz.1.782 (6156) used greatest stack depth: 8896 bytes left [ 139.218554][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.248949][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.271715][ T6177] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.320779][ T28] audit: type=1400 audit(1784367241.805:867): avc: denied { write } for pid=6175 comm="syz.2.789" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.369930][ T6188] FAULT_INJECTION: forcing a failure. [ 139.369930][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.410332][ T28] audit: type=1400 audit(1784367241.845:868): avc: denied { read } for pid=6166 comm="syz.0.787" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.447555][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.4.793 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.447586][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.447601][ T6188] Call Trace: [ 139.447609][ T6188] [ 139.447618][ T6188] __dump_stack+0x1d/0x30 [ 139.447648][ T6188] dump_stack_lvl+0x95/0xd0 [ 139.447733][ T6188] dump_stack+0x15/0x1b [ 139.447757][ T6188] should_fail_ex+0x25e/0x270 [ 139.447838][ T6188] should_fail+0xb/0x20 [ 139.447868][ T6188] should_fail_usercopy+0x1a/0x20 [ 139.447911][ T6188] _copy_from_user+0x1c/0xb0 [ 139.447936][ T6188] arp_ioctl+0xac/0x2d0 [ 139.447978][ T6188] inet_ioctl+0x2ad/0x3a0 [ 139.448012][ T6188] sock_do_ioctl+0x73/0x230 [ 139.448041][ T6188] sock_ioctl+0x439/0x610 [ 139.448063][ T6188] ? mutex_lock+0x57/0x90 [ 139.448166][ T6188] ? __pfx_sock_ioctl+0x10/0x10 [ 139.448188][ T6188] __se_sys_ioctl+0xce/0x140 [ 139.448216][ T6188] __x64_sys_ioctl+0x43/0x50 [ 139.448239][ T6188] x64_sys_call+0x1563/0x3020 [ 139.448415][ T6188] do_syscall_64+0x136/0x3c0 [ 139.448504][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.448531][ T6188] RIP: 0033:0x7f7ac072de99 [ 139.448564][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.448585][ T6188] RSP: 002b:00007f7abf187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.448650][ T6188] RAX: ffffffffffffffda RBX: 00007f7ac09b5fa0 RCX: 00007f7ac072de99 [ 139.448665][ T6188] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 139.448687][ T6188] RBP: 00007f7abf187090 R08: 0000000000000000 R09: 0000000000000000 [ 139.448702][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.448718][ T6188] R13: 00007f7ac09b6038 R14: 00007f7ac09b5fa0 R15: 00007ffd9a1d27d8 [ 139.448741][ T6188] [ 139.453370][ T6185] netlink: 108 bytes leftover after parsing attributes in process `syz.3.794'. [ 139.554314][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.797'. [ 139.557353][ T6199] loop4: detected capacity change from 0 to 512 [ 139.584017][ T6203] loop3: detected capacity change from 0 to 4096 [ 139.586206][ T6203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.607796][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 139.627411][ T6177] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.789: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.641218][ T6186] loop0: detected capacity change from 0 to 512 [ 139.641763][ T6186] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 139.689005][ T6203] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 139.770113][ T6177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.792532][ T6203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.830146][ T28] audit: type=1400 audit(1784367242.315:869): avc: denied { write } for pid=6184 comm="syz.3.794" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.841727][ T6177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.841727][ T6177] [ 139.898019][ T6199] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 139.898142][ T6199] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.898162][ T6199] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.797: Failed to acquire dquot type 1 [ 139.898186][ T6199] loop4: lost filesystem error report for type 5 error -117 [ 139.898567][ T6199] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 139.898596][ T6199] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.898674][ T6199] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.797: Failed to acquire dquot type 1 [ 139.898698][ T6199] loop4: lost filesystem error report for type 5 error -117 [ 139.898980][ T6199] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.797: bg 0: block 248: padding at end of block bitmap is not set [ 139.899024][ T6199] loop4: lost filesystem error report for type 5 error -117 [ 139.899185][ T6199] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 139.899215][ T6199] loop4: lost filesystem error report for type 5 error -117 [ 139.899381][ T6199] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 139.899476][ T6199] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.899537][ T6199] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.797: Failed to acquire dquot type 1 [ 139.899561][ T6199] loop4: lost filesystem error report for type 5 error -117 [ 139.899693][ T6199] EXT4-fs (loop4): 1 orphan inode deleted [ 139.900087][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.900191][ T6199] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.003054][ T6211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'. [ 140.117514][ T28] audit: type=1400 audit(1784367242.605:870): avc: denied { ioctl } for pid=6221 comm="syz.1.802" path="socket:[14356]" dev="sockfs" ino=14356 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.326859][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.346427][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 140.358927][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.359161][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.428721][ T28] audit: type=1400 audit(1784367242.925:871): avc: denied { append } for pid=6229 comm="syz.4.806" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.572421][ T6228] loop2: detected capacity change from 0 to 512 [ 140.591302][ T6228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.615298][ T28] audit: type=1400 audit(1784367243.105:872): avc: denied { ioctl } for pid=6229 comm="syz.4.806" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.710251][ T6228] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.803: invalid indirect mapped block 4294967295 (level 0) [ 140.725416][ T6228] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 140.725960][ T6228] EXT4-fs (loop2): Remounting filesystem read-only [ 140.726405][ T6247] loop4: detected capacity change from 0 to 1024 [ 140.735300][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 140.735349][ C0] EXT4-fs (loop2): initial error at time 1784367243: ext4_free_branches:1023: inode 16 [ 140.764780][ C0] EXT4-fs (loop2): last error at time 1784367243: ext4_free_branches:1023: inode 16 [ 140.767675][ T6247] EXT4-fs: Ignoring removed bh option [ 140.781336][ T6247] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 140.788917][ T6228] EXT4-fs (loop2): 1 orphan inode deleted [ 140.800528][ T6228] EXT4-fs (loop2): 1 truncate cleaned up [ 140.810410][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.834309][ T6247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.927486][ T6258] netlink: 104 bytes leftover after parsing attributes in process `syz.3.814'. [ 140.966121][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.096238][ T6262] netlink: 108 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.160000][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.170023][ T6275] loop2: detected capacity change from 0 to 4096 [ 141.181560][ T6275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.198608][ T6275] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 141.242000][ T6275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.326810][ T6288] loop3: detected capacity change from 0 to 512 [ 141.341262][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.351394][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.355224][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.364508][ T6288] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.402345][ T6290] loop0: detected capacity change from 0 to 128 [ 141.435571][ T6290] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.616570][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.628338][ T6290] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.782989][ T6299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.795598][ T6299] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.829024][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 142.174430][ T6301] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 142.185375][ T6301] FAT-fs (loop0): Filesystem has been set read-only [ 142.458754][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.495457][ T6315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6315 comm=syz.2.827 [ 142.510350][ T6315] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 142.546793][ T6315] vlan2: entered allmulticast mode [ 142.553480][ T6315] bond4: entered allmulticast mode [ 142.562367][ T6311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.585912][ T6311] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.825: invalid indirect mapped block 4294967295 (level 0) [ 142.617587][ T6311] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 142.618160][ T6311] EXT4-fs (loop4): Remounting filesystem read-only [ 142.618241][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 142.640912][ C0] EXT4-fs (loop4): initial error at time 1784367245: ext4_free_branches:1023: inode 16 [ 142.650906][ C0] EXT4-fs (loop4): last error at time 1784367245: ext4_free_branches:1023: inode 16 [ 142.725614][ T6307] netlink: 80 bytes leftover after parsing attributes in process `syz.3.824'. [ 142.736435][ T6311] EXT4-fs (loop4): 1 orphan inode deleted [ 142.745969][ T6311] EXT4-fs (loop4): 1 truncate cleaned up [ 142.754474][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.870233][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.033256][ T6335] futex_wake_op: syz.2.832 tries to shift op by 32; fix this program [ 143.075180][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 143.139938][ T6342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.172181][ T6342] EXT4-fs (loop2): 1 truncate cleaned up [ 143.182541][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.386827][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.399956][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'. [ 143.452818][ T6353] tmpfs: Bad value for 'mpol' [ 143.473761][ T6355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.514288][ T6355] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.841: invalid indirect mapped block 4294967295 (level 0) [ 143.538563][ T6355] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 143.539074][ T6355] EXT4-fs (loop2): Remounting filesystem read-only [ 143.548499][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 143.548547][ C0] EXT4-fs (loop2): initial error at time 1784367246: ext4_free_branches:1023: inode 16 [ 143.548677][ C0] EXT4-fs (loop2): last error at time 1784367246: ext4_free_branches:1023: inode 16 [ 143.604267][ T6355] EXT4-fs (loop2): 1 orphan inode deleted [ 143.622189][ T6355] EXT4-fs (loop2): 1 truncate cleaned up [ 143.634060][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.709784][ T6365] futex_wake_op: syz.3.845 tries to shift op by 32; fix this program [ 143.828907][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.883043][ T6379] FAULT_INJECTION: forcing a failure. [ 143.883043][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.890454][ T6375] syzkaller0: entered promiscuous mode [ 143.896396][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.896445][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.896539][ T6379] Call Trace: [ 143.896547][ T6379] [ 143.896557][ T6379] __dump_stack+0x1d/0x30 [ 143.896662][ T6379] dump_stack_lvl+0x95/0xd0 [ 143.896685][ T6379] dump_stack+0x15/0x1b [ 143.896705][ T6379] should_fail_ex+0x25e/0x270 [ 143.896737][ T6379] should_fail+0xb/0x20 [ 143.896808][ T6379] should_fail_usercopy+0x1a/0x20 [ 143.896850][ T6379] _copy_from_user+0x1c/0xb0 [ 143.896883][ T6379] map_update_elem+0x3fa/0x6d0 [ 143.896919][ T6379] __sys_bpf+0x9b5/0xc30 [ 143.896953][ T6379] ? vfs_write+0x800/0x990 [ 143.896978][ T6379] __x64_sys_bpf+0x69/0x80 [ 143.897065][ T6379] x64_sys_call+0x10cb/0x3020 [ 143.897146][ T6379] do_syscall_64+0x136/0x3c0 [ 143.897170][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.897246][ T6379] RIP: 0033:0x7f89a387de99 [ 143.897264][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.897284][ T6379] RSP: 002b:00007f89a22d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.897308][ T6379] RAX: ffffffffffffffda RBX: 00007f89a3b05fa0 RCX: 00007f89a387de99 [ 143.897324][ T6379] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 143.897339][ T6379] RBP: 00007f89a22d7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.897372][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.897386][ T6379] R13: 00007f89a3b06038 R14: 00007f89a3b05fa0 R15: 00007ffd0142e9e8 [ 143.897407][ T6379] [ 143.996006][ T6383] set_capacity_and_notify: 4 callbacks suppressed [ 143.996077][ T6383] loop2: detected capacity change from 0 to 256 [ 143.998923][ T6375] syzkaller0: entered allmulticast mode [ 144.027839][ T6383] vfat: Unknown parameter './file0' [ 144.035151][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 144.154310][ T6388] tmpfs: Bad value for 'mpol' [ 144.197933][ T6395] netlink: 'syz.1.856': attribute type 11 has an invalid length. [ 144.214208][ T6395] netlink: 140 bytes leftover after parsing attributes in process `syz.1.856'. [ 144.329508][ T6411] futex_wake_op: syz.3.858 tries to shift op by 32; fix this program [ 144.364864][ T6414] 9p: Unknown Cache mode or invalid value mmap [ 144.423444][ T6402] loop4: detected capacity change from 0 to 512 [ 144.458823][ T6402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.493772][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'. [ 144.510622][ T6402] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.859: invalid indirect mapped block 4294967295 (level 0) [ 144.538403][ T6402] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.539045][ T6402] EXT4-fs (loop4): Remounting filesystem read-only [ 144.548672][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.548708][ C0] EXT4-fs (loop4): initial error at time 1784367247: ext4_free_branches:1023: inode 16 [ 144.548824][ C0] EXT4-fs (loop4): last error at time 1784367247: ext4_free_branches:1023: inode 16 [ 144.586902][ T6436] loop0: detected capacity change from 0 to 8192 [ 144.594102][ T6402] EXT4-fs (loop4): 1 orphan inode deleted [ 144.600291][ T6402] EXT4-fs (loop4): 1 truncate cleaned up [ 144.613397][ T6402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.652547][ T6436] loop0: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 144.676610][ T6428] tmpfs: Bad value for 'mpol' [ 144.677799][ T6440] loop2: detected capacity change from 0 to 512 [ 144.679536][ T6440] EXT4-fs: Ignoring removed nobh option [ 144.854685][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.869726][ T6440] ------------[ cut here ]------------ [ 144.875264][ T6440] EA inode 11 i_nlink=1026 [ 144.875283][ T6440] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.2.875/6440 [ 144.891043][ T6440] Modules linked in: [ 144.894989][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.2.875 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.904364][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.914518][ T6440] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 144.921883][ T6440] Code: f6 c1 96 ff 49 8d 7e 40 4c 8d 2d 5b a0 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 71 d9 d9 03 90 90 90 90 90 90 90 [ 144.941564][ T6440] RSP: 0018:ffffc900015a7648 EFLAGS: 00010246 [ 144.947633][ T6440] RAX: ffff888104b68b30 RBX: ffff88810049c5a8 RCX: ffffffff81c295d6 [ 144.956106][ T6440] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3620 [ 144.964145][ T6440] RBP: 000000000000000b R08: 000188810049c55b R09: 0000000000000000 [ 144.972166][ T6440] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88810049c558 [ 144.980554][ T6440] R13: ffffffff871d3620 R14: ffff88810049c510 R15: 0000000000000001 [ 144.988592][ T6440] FS: 00007f89a22d76c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 144.997598][ T6440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.004285][ T6440] CR2: 00007f751a65b580 CR3: 000000013000c000 CR4: 00000000003506f0 [ 145.013741][ T6440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.021875][ T6440] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 145.029992][ T6440] Call Trace: [ 145.033306][ T6440] [ 145.036239][ T6440] ext4_xattr_set_entry+0x78a/0x1050 [ 145.042310][ T6440] ext4_xattr_ibody_set+0x156/0x390 [ 145.047565][ T6440] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 145.053665][ T6440] __ext4_expand_extra_isize+0x246/0x280 [ 145.059458][ T6440] __ext4_mark_inode_dirty+0x290/0x3d0 [ 145.065017][ T6440] ext4_evict_inode+0x8b6/0xdf0 [ 145.070495][ T6440] ? __pfx_ext4_evict_inode+0x10/0x10 [ 145.075901][ T6440] evict+0x2a5/0x510 [ 145.076006][ T6446] futex_wake_op: syz.3.877 tries to shift op by 32; fix this program [ 145.079960][ T6440] iput+0x430/0x5a0 [ 145.079997][ T6440] ext4_process_orphan+0x1a4/0x1c0 [ 145.080039][ T6440] ext4_orphan_cleanup+0x6a6/0xa10 [ 145.080149][ T6440] ? ext4_register_li_request+0x14c/0x440 [ 145.080187][ T6440] ext4_fill_super+0x33ab/0x3760 [ 145.080225][ T6440] ? set_blocksize+0x14c/0x270 [ 145.080262][ T6440] ? __pfx_ext4_fill_super+0x10/0x10 [ 145.080347][ T6440] get_tree_bdev_flags+0x291/0x300 [ 145.080374][ T6440] ? __pfx_ext4_fill_super+0x10/0x10 [ 145.080418][ T6440] get_tree_bdev+0x1f/0x30 [ 145.080442][ T6440] ext4_get_tree+0x1c/0x30 [ 145.080530][ T6440] vfs_get_tree+0x57/0x1d0 [ 145.080555][ T6440] do_new_mount+0x288/0x8d0 [ 145.080631][ T6440] path_mount+0x4ad/0xb90 [ 145.080661][ T6440] __se_sys_mount+0x28c/0x2e0 [ 145.080737][ T6440] __x64_sys_mount+0x67/0x80 [ 145.080768][ T6440] x64_sys_call+0x2d61/0x3020 [ 145.080840][ T6440] do_syscall_64+0x136/0x3c0 [ 145.080869][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.080905][ T6440] RIP: 0033:0x7f89a387f10a [ 145.080926][ T6440] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.080950][ T6440] RSP: 002b:00007f89a22d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.080977][ T6440] RAX: ffffffffffffffda RBX: 00007f89a22d6ee0 RCX: 00007f89a387f10a [ 145.080994][ T6440] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f89a22d6ea0 [ 145.081011][ T6440] RBP: 0000200000000180 R08: 00007f89a22d6ee0 R09: 0000000000800718 [ 145.081067][ T6440] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 145.081084][ T6440] R13: 00007f89a22d6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 145.081107][ T6440] [ 145.081116][ T6440] ---[ end trace 0000000000000000 ]--- [ 145.084135][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 145.179299][ T6440] EXT4-fs (loop2): 1 orphan inode deleted [ 145.224502][ T6457] syz_tun: entered allmulticast mode [ 145.357840][ T6457] x_tables: unsorted entry at hook 1 [ 145.369183][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.412751][ T6462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.883'. [ 145.413433][ T6457] dvmrp1: entered allmulticast mode [ 145.468896][ T6464] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 145.477511][ T6464] mroute: pending queue full, dropping entries [ 145.491195][ T6465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.883'. [ 145.814574][ T6456] syz_tun: left allmulticast mode [ 145.831375][ T6456] dvmrp1: left allmulticast mode [ 145.894349][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.059674][ T6492] futex_wake_op: syz.3.891 tries to shift op by 32; fix this program [ 146.150901][ T6489] loop2: detected capacity change from 0 to 512 [ 146.174592][ T6489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.484962][ T6505] loop4: detected capacity change from 0 to 512 [ 147.144934][ T6489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.888: invalid indirect mapped block 4294967295 (level 0) [ 147.162559][ T6505] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.171089][ T6505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.179024][ T6505] __quota_error: 19 callbacks suppressed [ 147.179051][ T6505] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 147.195992][ T6505] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.213040][ T6505] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 147.220703][ T6505] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.893: bg 0: block 15: invalid block bitmap [ 147.229677][ T6489] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.233101][ T6505] loop4: lost filesystem error report for type 5 error -117 [ 147.233543][ T6505] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 147.249781][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 147.249806][ C0] EXT4-fs (loop4): initial error at time 1784367249: ext4_validate_block_bitmap:432 [ 147.249833][ C0] EXT4-fs (loop4): last error at time 1784367249: ext4_validate_block_bitmap:432 [ 147.266996][ T6511] netlink: 9 bytes leftover after parsing attributes in process `syz.1.897'. [ 147.274420][ T6505] loop4: lost filesystem error report for type 5 error -117 [ 147.308229][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 147.322011][ C0] EXT4-fs (loop2): initial error at time 1784367249: ext4_free_branches:1023: inode 16 [ 147.331709][ C0] EXT4-fs (loop2): last error at time 1784367249: ext4_free_branches:1023: inode 16 [ 147.378092][ T6505] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.893: data will be lost [ 147.389226][ T6505] EXT4-fs (loop4): 1 truncate cleaned up [ 147.395648][ T6505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.498810][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop0p50, 10) failed: No such file or directory [ 147.509303][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p41, 10) failed: No such file or directory [ 147.530534][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop0p52, 10) failed: No such file or directory [ 147.546416][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p49, 10) failed: No such file or directory [ 147.562561][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop0p47, 10) failed: No such file or directory [ 147.578552][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop0p45, 10) failed: No such file or directory [ 147.623216][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop0p44, 10) failed: No such file or directory [ 147.634385][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p42, 10) failed: No such file or directory [ 147.645993][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop0p43, 10) failed: No such file or directory [ 147.656004][ T6489] EXT4-fs (loop2): Remounting filesystem read-only [ 147.665775][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop0p51, 10) failed: No such file or directory [ 147.698504][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.897'. [ 147.717633][ T6489] EXT4-fs (loop2): 1 orphan inode deleted [ 147.755248][ T6489] EXT4-fs (loop2): 1 truncate cleaned up [ 147.780392][ T6515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=6515 comm=syz.1.897 [ 147.809675][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.847657][ T6511] 0{X功: entered promiscuous mode [ 147.869171][ T6508] netlink: 5 bytes leftover after parsing attributes in process `syz.1.897'. [ 147.928681][ T6511] 0{X功: left allmulticast mode [ 147.949171][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.106946][ T6529] syzkaller0: entered promiscuous mode [ 148.117834][ T6529] syzkaller0: entered allmulticast mode [ 148.126019][ T6508] 1{X功: renamed from 30{X功 [ 148.135170][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.145470][ T6539] loop3: detected capacity change from 0 to 512 [ 148.146794][ T6508] 1{X功: left promiscuous mode [ 148.165261][ T6508] 1{X功: entered allmulticast mode [ 148.200943][ T6508] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 148.232418][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.246097][ T6539] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.344484][ T6537] futex_wake_op: syz.4.906 tries to shift op by 32; fix this program [ 148.427329][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.745409][ T6552] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 148.808930][ T6566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.916'. [ 148.860688][ T6570] loop0: detected capacity change from 0 to 128 [ 148.890927][ T28] audit: type=1400 audit(1784367251.385:892): avc: denied { setopt } for pid=6571 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.911192][ T6573] netlink: 'syz.4.912': attribute type 10 has an invalid length. [ 148.919080][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'. [ 148.939262][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 148.942240][ T28] audit: type=1326 audit(1784367251.425:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 148.991540][ T28] audit: type=1326 audit(1784367251.425:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.033488][ T28] audit: type=1326 audit(1784367251.425:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.061800][ T28] audit: type=1326 audit(1784367251.425:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.104044][ T28] audit: type=1326 audit(1784367251.425:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.130901][ T28] audit: type=1326 audit(1784367251.425:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.157556][ T28] audit: type=1326 audit(1784367251.425:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a387de99 code=0x7ffc0000 [ 149.189096][ T28] audit: type=1326 audit(1784367251.425:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89a383e6ce code=0x7ffc0000 [ 149.454711][ T6564] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 149.470629][ T6552] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.473830][ T6569] team0: Port device dummy0 removed [ 149.509321][ T6573] dummy0: entered promiscuous mode [ 149.535947][ T6594] netlink: 'syz.1.923': attribute type 2 has an invalid length. [ 149.551945][ T6594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.923'. [ 149.575494][ T6581] syzkaller0: entered promiscuous mode [ 149.587233][ T6581] syzkaller0: entered allmulticast mode [ 149.706751][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 149.769601][ T6604] loop3: detected capacity change from 0 to 8192 [ 149.773230][ T6615] loop0: detected capacity change from 0 to 512 [ 149.888975][ T6609] loop4: detected capacity change from 0 to 8192 [ 149.945003][ T6615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.946221][ T6604] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 149.982894][ T6609] loop4: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 150.049506][ T6615] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.231713][ T6621] loop2: detected capacity change from 0 to 512 [ 150.242280][ T6621] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 150.250536][ T6621] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.257198][ T6621] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.272409][ T6621] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 150.280294][ T6621] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.932: bg 0: block 15: invalid block bitmap [ 150.292642][ T6621] loop2: lost filesystem error report for type 5 error -117 [ 150.293325][ T6621] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 150.300658][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 150.300682][ C0] EXT4-fs (loop2): initial error at time 1784367252: ext4_validate_block_bitmap:432 [ 150.300715][ C0] EXT4-fs (loop2): last error at time 1784367252: ext4_validate_block_bitmap:432 [ 150.334751][ T6621] loop2: lost filesystem error report for type 5 error -117 [ 150.336026][ T6621] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.932: data will be lost [ 150.354423][ T6621] EXT4-fs (loop2): 1 truncate cleaned up [ 150.360803][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.378268][ T6621] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.932: corrupted xattr block 31: invalid header [ 150.392026][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 150.401051][ T6621] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.932: corrupted xattr block 31: invalid header [ 150.414378][ T6621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 150.423563][ T6621] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.932: bad symlink. [ 150.482201][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.667569][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.720603][ T6639] loop0: detected capacity change from 0 to 1764 [ 150.792719][ T6645] syzkaller0: entered promiscuous mode [ 150.798347][ T6645] syzkaller0: entered allmulticast mode [ 150.951162][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 151.026886][ T6650] loop0: detected capacity change from 0 to 764 [ 151.036494][ T6650] rock: directory entry would overflow storage [ 151.043290][ T6650] rock: sig=0x5245, size=8, remaining=5 [ 151.054575][ T6650] tmpfs: Bad value for 'mpol' [ 151.137807][ T6652] tmpfs: Bad value for 'mpol' [ 151.553130][ T6661] netlink: 6 bytes leftover after parsing attributes in process `syz.2.945'. [ 151.571876][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.025214][ T6686] loop3: detected capacity change from 0 to 512 [ 152.065843][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.119787][ T6686] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.134848][ T6690] loop2: detected capacity change from 0 to 512 [ 152.189646][ T6690] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 152.212477][ T6690] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.264398][ T6690] __quota_error: 45 callbacks suppressed [ 152.264415][ T6690] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 152.281723][ T6680] loop4: detected capacity change from 0 to 512 [ 152.301308][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.345126][ T6680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.358330][ T6690] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 152.381092][ T6690] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.955: Failed to acquire dquot type 1 [ 152.397769][ T6680] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.944: invalid indirect mapped block 4294967295 (level 0) [ 152.413569][ T6690] loop2: lost filesystem error report for type 5 error -5 [ 152.414054][ T6690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.955: bg 0: block 40: padding at end of block bitmap is not set [ 152.421268][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 152.421291][ C0] EXT4-fs (loop2): initial error at time 1784367254: ext4_acquire_dquot:7041 [ 152.421326][ C0] EXT4-fs (loop2): last error at time 1784367254: ext4_acquire_dquot:7041 [ 152.462422][ T6680] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 152.468278][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 152.483901][ C0] EXT4-fs (loop4): initial error at time 1784367254: ext4_free_branches:1023: inode 16 [ 152.493613][ C0] EXT4-fs (loop4): last error at time 1784367254: ext4_free_branches:1023: inode 16 [ 152.508428][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p69, 10) failed: No such file or directory [ 152.543993][ T6680] EXT4-fs (loop4): Remounting filesystem read-only [ 152.550789][ T6690] loop2: lost filesystem error report for type 5 error -117 [ 152.551006][ T6690] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 152.551269][ T6680] EXT4-fs (loop4): 1 orphan inode deleted [ 152.560425][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop4p54, 10) failed: No such file or directory [ 152.567491][ T6680] EXT4-fs (loop4): 1 truncate cleaned up [ 152.592208][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.599357][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop4p62, 10) failed: No such file or directory [ 152.618279][ T6690] loop2: lost filesystem error report for type 5 error -117 [ 152.618652][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop4p58, 10) failed: No such file or directory [ 152.619052][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p60, 10) failed: No such file or directory [ 152.639191][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop4p80, 10) failed: No such file or directory [ 152.664259][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p79, 10) failed: No such file or directory [ 152.664473][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop4p56, 10) failed: No such file or directory [ 152.677057][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p78, 10) failed: No such file or directory [ 152.684395][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop4p55, 10) failed: No such file or directory [ 152.704475][ T6690] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.955: data will be lost [ 152.785354][ T6698] loop3: detected capacity change from 0 to 8192 [ 152.794122][ T6690] EXT4-fs (loop2): 1 truncate cleaned up [ 152.817251][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.881834][ T6698] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 152.886324][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.944923][ T6671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.017685][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.121609][ T6671] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 153.179083][ T6671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.237272][ T28] audit: type=1400 audit(1784367255.715:945): avc: denied { write } for pid=6670 comm="syz.0.951" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.318400][ T28] audit: type=1400 audit(1784367255.755:946): avc: denied { write } for pid=6706 comm="syz.2.961" path="socket:[15338]" dev="sockfs" ino=15338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.361674][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.372673][ T28] audit: type=1400 audit(1784367255.835:947): avc: denied { append } for pid=6706 comm="syz.2.961" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.409666][ T6705] futex_wake_op: syz.4.959 tries to shift op by 32; fix this program [ 153.489989][ T28] audit: type=1326 audit(1784367255.935:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.0.962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50971dde99 code=0x0 [ 153.539353][ T6720] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.550677][ T2983] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 153.553239][ T6720] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.714367][ T28] audit: type=1400 audit(1784367256.205:949): avc: denied { write } for pid=6719 comm="syz.0.964" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.931023][ T6735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.949927][ T6735] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.969: invalid indirect mapped block 4294967295 (level 0) [ 153.965799][ T6735] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.966432][ T6735] EXT4-fs (loop4): Remounting filesystem read-only [ 153.975983][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 153.976034][ C1] EXT4-fs (loop4): initial error at time 1784367256: ext4_free_branches:1023: inode 16 [ 153.976167][ C1] EXT4-fs (loop4): last error at time 1784367256: ext4_free_branches:1023: inode 16 [ 154.022513][ T6735] EXT4-fs (loop4): 1 orphan inode deleted [ 154.032943][ T6735] EXT4-fs (loop4): 1 truncate cleaned up [ 154.110029][ T6735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.394261][ T6742] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.402821][ T6742] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.409922][ T6742] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 154.421047][ T6742] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.436407][ T6742] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 154.444005][ T6742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.968: bg 0: block 15: invalid block bitmap [ 154.456376][ T6742] loop3: lost filesystem error report for type 5 error -117 [ 154.456988][ T6742] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 154.464332][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 154.464348][ C0] EXT4-fs (loop3): initial error at time 1784367256: ext4_validate_block_bitmap:432 [ 154.464383][ C0] EXT4-fs (loop3): last error at time 1784367256: ext4_validate_block_bitmap:432 [ 154.498086][ T6742] loop3: lost filesystem error report for type 5 error -117 [ 154.502334][ T6742] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.968: data will be lost [ 154.520846][ T6742] EXT4-fs (loop3): 1 truncate cleaned up [ 154.527528][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.545808][ T6742] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.968: corrupted xattr block 31: invalid header [ 154.560050][ T6742] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 154.569076][ T6742] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.968: corrupted xattr block 31: invalid header [ 154.583225][ T6742] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 154.592577][ T6742] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.968: bad symlink. [ 156.145592][ T6707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.245993][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.259056][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.279263][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.330568][ T28] audit: type=1400 audit(1784367258.825:950): avc: denied { bind } for pid=6754 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.430016][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop3p171, 10) failed: No such file or directory [ 158.433753][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop3p184, 10) failed: No such file or directory [ 158.450187][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop3p170, 10) failed: No such file or directory [ 158.476266][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p183, 10) failed: No such file or directory [ 158.527839][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p185, 10) failed: No such file or directory [ 158.548585][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p186, 10) failed: No such file or directory [ 158.581359][ T6783] set_capacity_and_notify: 4 callbacks suppressed [ 158.581458][ T6783] loop4: detected capacity change from 0 to 128 [ 158.610645][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p188, 10) failed: No such file or directory [ 158.639848][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p189, 10) failed: No such file or directory [ 158.649858][ T28] audit: type=1400 audit(1784367261.115:951): avc: denied { bind } for pid=6777 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.704397][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p190, 10) failed: No such file or directory [ 158.732384][ T6783] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.732797][ T6783] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.739955][ T3582] udevd[3582]: inotify_add_watch(7, /dev/loop3p192, 10) failed: No such file or directory [ 158.774859][ T28] audit: type=1400 audit(1784367261.245:952): avc: denied { write } for pid=6778 comm="syz.4.983" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.774891][ T28] audit: type=1400 audit(1784367261.265:953): avc: denied { bind } for pid=6781 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.813093][ T6784] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.816391][ T6763] syz.1.974 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 158.816431][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.1.974 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 158.816461][ T6763] Tainted: [W]=WARN [ 158.816468][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.816480][ T6763] Call Trace: [ 158.816487][ T6763] [ 158.816517][ T6763] __dump_stack+0x1d/0x30 [ 158.816545][ T6763] dump_stack_lvl+0x95/0xd0 [ 158.816656][ T6763] dump_stack+0x15/0x1b [ 158.816725][ T6763] dump_header+0x80/0x240 [ 158.816752][ T6763] oom_kill_process+0x295/0x350 [ 158.816820][ T6763] out_of_memory+0x981/0xbc0 [ 158.816868][ T6763] try_charge_memcg+0x621/0xa00 [ 158.816898][ T6763] __memcg_kmem_charge_page+0x199/0x3a0 [ 158.816976][ T6763] __alloc_frozen_pages_noprof+0x18a/0x350 [ 158.817011][ T6763] alloc_pages_mpol+0xa9/0x1d0 [ 158.817046][ T6763] alloc_pages_noprof+0x8f/0x140 [ 158.817081][ T6763] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 158.817126][ T6763] __kvmalloc_node_noprof+0x3a0/0x590 [ 158.817157][ T6763] ? futex_hash_allocate+0x192/0x920 [ 158.817252][ T6763] ? futex_hash_allocate+0x192/0x920 [ 158.817275][ T6763] ? futex_hash_allocate+0x192/0x920 [ 158.817302][ T6763] futex_hash_allocate+0x192/0x920 [ 158.817329][ T6763] ? cap_task_prctl+0x13f/0x6b0 [ 158.817369][ T6763] futex_hash_prctl+0xd8/0xf0 [ 158.817464][ T6763] __se_sys_prctl+0x4f4/0x13b0 [ 158.817498][ T6763] __x64_sys_prctl+0x67/0x80 [ 158.817529][ T6763] x64_sys_call+0x2533/0x3020 [ 158.817625][ T6763] do_syscall_64+0x136/0x3c0 [ 158.817715][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.817738][ T6763] RIP: 0033:0x7f751a60de99 [ 158.817759][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.817783][ T6763] RSP: 002b:00007f7519046028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 158.817812][ T6763] RAX: ffffffffffffffda RBX: 00007f751a896090 RCX: 00007f751a60de99 [ 158.817906][ T6763] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 158.817982][ T6763] RBP: 00007f751a6a3eaf R08: 0000000000000000 R09: 0000000000000000 [ 158.817998][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.818015][ T6763] R13: 00007f751a896128 R14: 00007f751a896090 R15: 00007ffd2f4c3f88 [ 158.818038][ T6763] [ 158.818047][ T6763] memory: usage 307200kB, limit 307200kB, failcnt 4064 [ 158.818064][ T6763] memory+swap: usage 313084kB, limit 9007199254740988kB, failcnt 0 [ 158.818155][ T6763] kmem: usage 306628kB, limit 9007199254740988kB, failcnt 0 [ 158.818170][ T6763] Memory cgroup stats for /syz1: [ 158.818520][ T6763] cache 585728 [ 158.818532][ T6763] rss 0 [ 158.818541][ T6763] shmem 0 [ 158.818550][ T6763] mapped_file 0 [ 158.818558][ T6763] dirty 0 [ 158.818601][ T6763] writeback 0 [ 158.818610][ T6763] workingset_refault_anon 150 [ 158.818620][ T6763] workingset_refault_file 1374 [ 158.818631][ T6763] swap 6025216 [ 158.818639][ T6763] swapcached 35295232 [ 158.818646][ T6763] pgpgin 97787 [ 158.818653][ T6763] pgpgout 97644 [ 158.818661][ T6763] pgfault 101457 [ 158.818669][ T6763] pgmajfault 102 [ 158.818678][ T6763] inactive_anon 0 [ 158.818687][ T6763] active_anon 0 [ 158.818696][ T6763] inactive_file 294912 [ 158.818753][ T6763] active_file 28672 [ 158.818764][ T6763] unevictable 0 [ 158.818772][ T6763] hierarchical_memory_limit 314572800 [ 158.818782][ T6763] hierarchical_memsw_limit 9223372036854771712 [ 158.818792][ T6763] total_cache 585728 [ 158.818801][ T6763] total_rss 0 [ 158.818809][ T6763] total_shmem 0 [ 158.818817][ T6763] total_mapped_file 0 [ 158.818825][ T6763] total_dirty 0 [ 158.818953][ T6763] total_writeback 0 [ 158.818963][ T6763] total_workingset_refault_anon 150 [ 158.818974][ T6763] total_workingset_refault_file 1374 [ 158.818985][ T6763] total_swap 6025216 [ 158.818995][ T6763] total_swapcached 35295232 [ 158.819005][ T6763] total_pgpgin 97787 [ 158.819086][ T6763] total_pgpgout 97644 [ 158.819116][ T6763] total_pgfault 101457 [ 158.819178][ T6763] total_pgmajfault 102 [ 158.819188][ T6763] total_inactive_anon 0 [ 158.819198][ T6763] total_active_anon 0 [ 158.819207][ T6763] total_inactive_file 294912 [ 158.819217][ T6763] total_active_file 28672 [ 158.819227][ T6763] total_unevictable 0 [ 158.819237][ T6763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.974,pid=6752,uid=0 [ 158.819457][ T6763] Memory cgroup out of memory: Killed process 6752 (syz.1.974) total-vm:99120kB, anon-rss:1240kB, file-rss:26520kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 159.209287][ T6784] __nla_validate_parse: 2 callbacks suppressed [ 159.209306][ T6784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.981'. [ 159.262742][ T6789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.981'. [ 159.268155][ T6786] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 159.317457][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.454026][ T6804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6804 comm=syz.1.986 [ 159.612372][ T6786] team0: Port device dummy0 added [ 160.620446][ T6838] loop3: detected capacity change from 0 to 128 [ 160.643295][ T6838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.646687][ T6838] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.670922][ T28] audit: type=1400 audit(1784367263.155:954): avc: denied { write } for pid=6837 comm="syz.3.995" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.767391][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.970584][ T6847] loop4: detected capacity change from 0 to 512 [ 161.691533][ T6847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.691769][ T6847] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.535590][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.545143][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p47, 10) failed: No such file or directory [ 163.644914][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 163.678099][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 163.703678][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop3p50, 10) failed: No such file or directory [ 163.722662][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p49, 10) failed: No such file or directory [ 163.844879][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p51, 10) failed: No such file or directory [ 163.858929][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop3p52, 10) failed: No such file or directory [ 163.883780][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 163.904229][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p53, 10) failed: No such file or directory [ 163.925062][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 164.790472][ T6896] loop0: detected capacity change from 0 to 512 [ 164.839512][ T6896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.872261][ T6896] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.263105][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 165.401535][ T6920] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1017'. [ 165.418270][ T6917] tmpfs: Bad value for 'mpol' [ 165.436025][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'. [ 165.512917][ T28] audit: type=1400 audit(1784367268.005:955): avc: denied { write } for pid=6921 comm="syz.2.1020" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 165.583560][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.595836][ T28] audit: type=1400 audit(1784367268.005:956): avc: denied { open } for pid=6921 comm="syz.2.1020" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 165.679379][ T6912] loop3: detected capacity change from 0 to 4096 [ 165.700772][ T6912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.770424][ T6912] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 165.803246][ T6912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.807085][ T28] audit: type=1400 audit(1784367268.295:957): avc: denied { ioctl } for pid=6927 comm="syz.2.1022" path="socket:[16766]" dev="sockfs" ino=16766 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.010013][ T28] audit: type=1400 audit(1784367268.385:958): avc: denied { write } for pid=6911 comm="syz.3.1017" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.274070][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.706990][ T6898] loop4: detected capacity change from 0 to 512 [ 167.304025][ T6947] FAULT_INJECTION: forcing a failure. [ 167.304025][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.361850][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.3.1028 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 167.361892][ T6947] Tainted: [W]=WARN [ 167.361921][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.361936][ T6947] Call Trace: [ 167.361944][ T6947] [ 167.361953][ T6947] __dump_stack+0x1d/0x30 [ 167.361978][ T6947] dump_stack_lvl+0x95/0xd0 [ 167.362002][ T6947] dump_stack+0x15/0x1b [ 167.362025][ T6947] should_fail_ex+0x25e/0x270 [ 167.362059][ T6947] should_fail+0xb/0x20 [ 167.362148][ T6947] should_fail_usercopy+0x1a/0x20 [ 167.362184][ T6947] _copy_from_iter+0xcc/0xe70 [ 167.362297][ T6947] ? __alloc_skb+0x511/0x6f0 [ 167.362324][ T6947] ? __alloc_skb+0x205/0x6f0 [ 167.362356][ T6947] netlink_sendmsg+0x4a4/0x6f0 [ 167.362444][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.362469][ T6947] ____sys_sendmsg+0x532/0x580 [ 167.362532][ T6947] ___sys_sendmsg+0x195/0x1e0 [ 167.362582][ T6947] __x64_sys_sendmsg+0xd4/0x160 [ 167.362647][ T6947] x64_sys_call+0x194c/0x3020 [ 167.362681][ T6947] do_syscall_64+0x136/0x3c0 [ 167.362706][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.362729][ T6947] RIP: 0033:0x7f9b7a55de99 [ 167.362745][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.362765][ T6947] RSP: 002b:00007f9b78fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.362843][ T6947] RAX: ffffffffffffffda RBX: 00007f9b7a7e5fa0 RCX: 00007f9b7a55de99 [ 167.362864][ T6947] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 167.362881][ T6947] RBP: 00007f9b78fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.362931][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.362947][ T6947] R13: 00007f9b7a7e6038 R14: 00007f9b7a7e5fa0 R15: 00007ffff7bd2d98 [ 167.362969][ T6947] [ 167.621317][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1029'. [ 167.805501][ T6898] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 167.808994][ T6898] EXT4-fs: failed to create workqueue [ 167.856632][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 167.913565][ T6955] loop3: detected capacity change from 0 to 512 [ 167.922055][ T6898] EXT4-fs (loop4): mount failed [ 167.968272][ T6953] tmpfs: Bad value for 'mpol' [ 167.982141][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.996205][ T6955] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.031691][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6959 comm=syz.2.1032 [ 168.091003][ T6959] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 168.101512][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.208361][ T6959] vlan2: entered allmulticast mode [ 168.214370][ T6959] bond5: entered allmulticast mode [ 168.402404][ T6982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6982 comm=syz.4.1039 [ 168.444570][ T6982] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 168.461310][ T6984] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1041'. [ 168.478505][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 168.488991][ T6982] bond2: (slave gretap1): making interface the new active one [ 168.496868][ T6982] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 168.540802][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'. [ 168.597890][ T28] audit: type=1400 audit(1784367271.085:959): avc: denied { ioctl } for pid=6994 comm="syz.0.1045" path="socket:[16897]" dev="sockfs" ino=16897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.604178][ T6987] tmpfs: Bad value for 'mpol' [ 168.653137][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 168.802285][ T7000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.990205][ T7007] bridge0: entered allmulticast mode [ 169.001739][ T7007] bridge0: entered promiscuous mode [ 169.016747][ T7007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.035642][ T7007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.054755][ T7007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.146326][ T7021] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1054'. [ 169.156475][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7022 comm=syz.0.1053 [ 169.265104][ T7022] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 169.313334][ T7022] bond1: (slave gretap1): making interface the new active one [ 169.321338][ T7022] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 169.333576][ T7029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7029 comm=syz.3.1056 [ 169.348986][ T7029] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 169.435587][ T7032] vlan0: entered allmulticast mode [ 170.141993][ T7032] bond3: entered allmulticast mode [ 170.484200][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1059'. [ 171.494896][ T7038] tmpfs: Bad value for 'mpol' [ 172.544721][ T7044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1060'. [ 172.570886][ T7034] syz.2.1057 (7034) used greatest stack depth: 8848 bytes left [ 172.594294][ T7044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1060'. [ 172.744892][ T7047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7047 comm=syz.4.1061 [ 173.076439][ T7035] ================================================================== [ 173.084579][ T7035] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 173.092388][ T7035] [ 173.094725][ T7035] write to 0xffffea000547e2d8 of 8 bytes by task 7046 on cpu 0: [ 173.102347][ T7035] __filemap_remove_folio+0x201/0x2e0 [ 173.107718][ T7035] filemap_remove_folio+0x6d/0x1d0 [ 173.112836][ T7035] truncate_inode_folio+0x42/0x50 [ 173.117856][ T7035] shmem_undo_range+0x27f/0xb60 [ 173.122702][ T7035] shmem_evict_inode+0x132/0x520 [ 173.127640][ T7035] evict+0x2a5/0x510 [ 173.131543][ T7035] iput+0x430/0x5a0 [ 173.135350][ T7035] dentry_unlink_inode+0x24a/0x260 [ 173.140476][ T7035] dentry_kill+0x184/0x500 [ 173.144896][ T7035] finish_dput+0x16/0x1d0 [ 173.149225][ T7035] dput+0x48/0x50 [ 173.152870][ T7035] __fput+0x43e/0x630 [ 173.156852][ T7035] ____fput+0x1c/0x30 [ 173.160833][ T7035] task_work_run+0x130/0x1a0 [ 173.165467][ T7035] exit_to_user_mode_loop+0x1e4/0x8c0 [ 173.170874][ T7035] do_syscall_64+0x23c/0x3c0 [ 173.175483][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.181483][ T7035] [ 173.183962][ T7035] read to 0xffffea000547e2d8 of 8 bytes by task 7035 on cpu 1: [ 173.191595][ T7035] folio_mapping+0xa1/0xe0 [ 173.196027][ T7035] evict_folios+0xdc7/0x2d80 [ 173.200623][ T7035] try_to_shrink_lruvec+0x7c5/0xb10 [ 173.205822][ T7035] shrink_lruvec+0x25e/0x1b60 [ 173.210498][ T7035] shrink_node+0x69d/0x20f0 [ 173.215024][ T7035] do_try_to_free_pages+0x408/0xc90 [ 173.220240][ T7035] try_to_free_mem_cgroup_pages+0x201/0x420 [ 173.226160][ T7035] try_charge_memcg+0x375/0xa00 [ 173.231016][ T7035] __memcg_kmem_charge_page+0x199/0x3a0 [ 173.236748][ T7035] __alloc_frozen_pages_noprof+0x18a/0x350 [ 173.242569][ T7035] alloc_pages_mpol+0xa9/0x1d0 [ 173.247344][ T7035] alloc_pages_noprof+0x8f/0x140 [ 173.253449][ T7035] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 173.259351][ T7035] __kvmalloc_node_noprof+0x3a0/0x590 [ 173.264718][ T7035] futex_hash_allocate+0x192/0x920 [ 173.269821][ T7035] futex_hash_prctl+0xd8/0xf0 [ 173.274507][ T7035] __se_sys_prctl+0x4f4/0x13b0 [ 173.279273][ T7035] __x64_sys_prctl+0x67/0x80 [ 173.283872][ T7035] x64_sys_call+0x2533/0x3020 [ 173.288553][ T7035] do_syscall_64+0x136/0x3c0 [ 173.293153][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.299041][ T7035] [ 173.301356][ T7035] value changed: 0xffff88811bcd04a0 -> 0x0000000000000000 [ 173.308464][ T7035] [ 173.310785][ T7035] Reported by Kernel Concurrency Sanitizer on: [ 173.316927][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.0.1058 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 173.327775][ T7035] Tainted: [W]=WARN [ 173.331566][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.341614][ T7035] ==================================================================